In the course of digitization in healthcare, personal health records (PHRs) are handled as a key solution. Despite the indisputable benefits, the adoption of PHRs is hampered by data security and data privacy concerns. Blockchain technology offers promising potential to address these issues by enabling secure transactions of sensitive data. With regards to PHRs, the blockchain can be used to manage the access to health-related data. Besides existing generic PHR architectures, we systematically identified issues for the healthcare sector that need to be considered for the development of a PHR. We subsequently derived eight meta-requirements that were consolidated into three design principles. Within a 1-year design science research project, we developed the blockchain-secured PHR prototype, OSHealthRec, and evaluated the system in four evaluation cycles. The findings of our research are twofold. On the one hand, we contribute to the design knowledge base by presenting three design principles. On the other hand, we present the development of a real, operational blockchain-secured PHR and the findings from its continuous evaluation, which may serve as useful advice for further solutions.

在医疗保健的数字化过程中，个人健康记录（PHR）被视为关键解决方案。尽管有无可争辩的好处，但是PHR的采用仍然受到数据安全性和数据隐私问题的阻碍。区块链技术通过实现敏感数据的安全交易，具有解决这些问题的潜力。关于PHR，区块链可用于管理对健康相关数据的访问。除了现有的通用PHR体系结构外，我们系统地确定了医疗保健部门在开发PHR时需要考虑的问题。随后，我们得出了8个元需求，这些需求被合并为3个设计原则。在为期1年的设计科学研究项目中，我们开发了受区块链保护的PHR原型OSHealthRec，并在四个评估周期中对系统进行了评估。我们研究的结果是双重的。一方面，我们通过提出三种设计原则为设计知识库做出了贡献。另一方面，我们介绍了一个实际的，可操作的，由区块链保护的PHR及其持续评估的结果，这可能为进一步的解决方案提供有用的建议。