System Overview
Ever Decentralized Health (EDH) is an open platform for patient health systems, designed to operate on decentralized technologies including EVM-compatible Blockchain, Decentralized Storage (IPFS, Arweave, S3-compatible), and End-to-End Encryption. It provides secure storage and sharing of patient health data without vendor lock-in.
Ever Medical Technologies (Ever) is the first service provider to connect its various services to bring patient data into the EDH platform, and is the driving force behind document standards and future capabilities on the EDH platform.
Objectives
- Store and facilitate data exchange in the FHIR standard format using decentralized storage with secure and privacy-preserving processes.
- Filter shared patient data to prevent access to unrelated private information.
- Health data access rights are managed by the patients themselves. There is no centralized data or access control authority, and the system is trust-free.
- User data is stored in compliance with data protection regulations of each country, including HIPAA, GDPR, and PDPA (Thailand's Personal Data Protection Act).
- Support Biological Identity Attestation (BIA) to securely bind digital identities to genomic data and prevent Sybil attacks.
- Users can install and run their own EDH nodes on their own devices to contribute capacity to the data storage network.
- Users can access their data through a user-friendly interface.
- In case of emergency, users can designate guardians or emergency data custodians who can authorize backup data access when the data owner is unable to access their data.
Core Platform Features
EDH has the following features that distinguish it from conventional centralized health data storage systems:
- Decentralized Architecture
- Self-Hosted Nodes
- Peer-to-Peer Network
- Trust-Free Data Storage
- Multi-Device Support
- Ease of Use
- Health Social Network Support
- Biological Identity Attestation (BIA)
Decentralized Architecture
The core architecture of EDH is built on decentralized technologies across all critical components:
- Decentralized member data management using Crypto Wallets, making user accounts independent from service provider control.
- Public Key Infrastructure stored using Smart Contracts on an EVM-compatible blockchain.
- File storage and referencing on IPFS or via S3-compatible storage (filebase.com), so file URIs can be stored independently of server location.
- A Decentralized Identifier system (
did:bio) that binds digital identities to user genomic data, eliminating the need for a central authority to issue certificates.
Self-Hosted Nodes
EDH nodes can be installed anywhere, whether in a user's home or in a hospital. Users in the EDH system can participate in file storage by setting up their own nodes to help store data files. Data is stored with secure and private encryption. EDH nodes can also be installed and operated on cloud platforms such as GCP and AWS.
Peer-to-Peer Network
The peer-to-peer architecture helps enhance data security and privacy. Through decentralization, no single entity is responsible for managing public keys and digital certificates. End-to-end encryption ensures that users can trust the security of their data.
Trust-Free Data Storage
By using End-to-End Encryption for file sharing, shared and stored data cannot be read by intermediaries during transit. This allows data to be stored on servers without concern for data leaks. Client-side data integrity verification can be performed to prevent data tampering or modification on the server.
Multi-Device Support
Users can register and manage devices associated with their account on their own. They can register and use multiple devices by connecting through an Ethereum wallet. No private data is stored in any centralized system, allowing users to manage their devices independently.
Ease of Use
Ever comprises a team of experts in the medical field along with numerous healthcare professionals. We have analyzed and gathered requirements from domain experts to design a system that is convenient and beneficial for both healthcare professionals and the general public. While we support application development by other organizations, Ever has also developed reference applications to demonstrate the full potential of the EDH system.
Health Social Network Support
With a globally used platform, Ever has integrated social networking features with the health data system in a secure manner. Users can share their health data with family members or close friends, just as they would share data with doctors. The system assists users in sharing data securely and allows them to selectively choose which data to share.
Biological Identity Attestation (BIA)
The Biological Identity Attestation (BIA) system allows users to bind their digital identity to their own genomic data through the did:bio Decentralized Identifier, using the Poseidon hash function to create a commitment that does not reveal raw genomic data. The system supports 4 assurance levels (0-3), ranging from self-attested to multi-source lab verification, to prevent Sybil attacks and provide rigorous biological identity verification.
For more details, see BIA Developer Quickstart and BIA Architecture.
Comparison with Centralized EHR Systems
| Feature | Centralized EHR Systems | EDH |
|---|---|---|
| Data Control | Controlled by provider | Controlled by patient |
| Storage | Centralized servers | IPFS + S3 (filebase.com) decentralized |
| Identity | Username/password | Crypto wallet + did:bio |
| Encryption | Server-side | End-to-end (client-side) |
| Interoperability | Vendor lock-in | Open platform, FHIR native |
| Data Recovery | Provider-managed | Patient-controlled via SeedVault |
| Sybil Resistance | None | Poseidon commitment + BioAnchorRegistry |
System Architecture
EDH consists of 6 main components:
Smart Contracts on EVM Blockchain — Services running on an EVM-compatible blockchain (e.g., Polygon, Ethereum, Base) in the form of smart contracts that maintain system state:
- EDHAccountRegistry: Manages Public Key Infrastructure and creates EDHAccount user accounts.
- EDHAccount: A smart contract that acts as the user's central account, functioning similarly to a multi-owner wallet.
- SeedVault: Manages Per Account Keys, enabling devices within the same account to work together in the End-to-End Encryption process.
- BioAnchorRegistry: Stores Poseidon commitments for Biological Identity Attestation.
Decentralized Storage — Binary file content is stored on decentralized storage systems such as IPFS, Arweave, or via S3-compatible APIs. Service providers or users can choose the appropriate storage protocol.
Client Applications — Client-side applications for interacting with the system, including the mobile app (Health Wallet), web application, and File Viewer developed by Ever, as well as applications from other service providers using the
ever-edh-coreSDK.BIA (Biological Identity Attestation) — A biological identity verification system that uses genomic data to create a
did:bioDecentralized Identifier with Poseidon commitment for Sybil resistance. See BIA Docs for details.Bio-OIDC Provider — An OpenID Connect identity provider that uses wallet-based authentication instead of passwords, issuing id_tokens with bio claims such as assurance level and liveness status. See Ever Services for details.
EDH Services — Supplementary services by Ever, including EDH Account Service, Gas Payer Wallet (ERC-2771), PHR Adaptor for hospital system integration, and Accounts Worker for asynchronous transaction processing. See Ever Services for details.