Users are each day more aware of their privacy and data protection. Although this problem is transversal to every digital service, it is especially relevant when critical and personal information is managed, as in eHealth and well-being services. During the last years, many different innovative services in this area have been proposed. However, data management challenges are still in need of a solution. In general, data are directly sent to services but no trustworthy instruments to recover these data or remove them from services are available. In this scheme, services become the users’ data owners although users keep the rights to access, modify, and be forgotten. Nevertheless, the adequate implementation of these rights is not guaranteed, as services use the received data with commercial purposes. In order to address and solve this situation, we propose a new trustworthy personal data protection mechanism for well-being services, based on privacy-by-design technologies. This new mechanism is based on Blockchain networks and indirection functions and tokens. Blockchain networks execute transparent smart contracts, where users’ rights are codified, and store the users’ personal data which are never sent or given to external services. Besides, permissions and privacy restrictions designed by users to be applied to their data and services consuming them are also implemented in these smart contracts. Finally, an experimental validation is also described to evaluate the Quality of Experience (in terms of user satisfaction) and Quality of Service (in terms of processing delay) compared to traditional service provision solutions.

中文翻译：

---

通过隐私设计实现电子健康和福利服务中值得信赖的个人数据保护

用户每天都更加了解他们的隐私和数据保护。尽管这个问题贯穿于每一项数字服务，但在管理关键和个人信息时尤其重要，例如在电子医疗和福利服务中。在过去几年中，该领域提出了许多不同的创新服务。然而，数据管理挑战仍然需要解决方案。通常，数据直接发送到服务，但没有可信赖的工具来恢复这些数据或从服务中删除它们。在该方案中，服务成为用户的数据所有者，但用户保留访问、修改和被遗忘的权利。然而，不能保证这些权利的充分实施，因为服务将接收到的数据用于商业目的。为了应对和解决这种情况，我们基于隐私设计技术提出了一种新的可信赖的个人数据保护机制，用于福利服务。这种新机制基于区块链网络和间接功能和代币。区块链网络执行透明的智能合约，其中用户的权利被编码，并存储用户的个人数据，这些数据永远不会发送或提供给外部服务。此外，用户设计的权限和隐私限制也适用于使用他们的数据和服务。最后，还描述了实验验证，以评估与传统服务提供解决方案相比的体验质量（就用户满意度而言）和服务质量（就处理延迟而言）。