How the HHS is using blockchain technology to secure COVID-19 data

How blockchain is being used and why I think they need to lean into public blockchains

Hi everyone,

Every week I write about blockchain technology, healthcare, and related topics. On Sundays I analyze the latest updates and ideas from that week and every few weeks I publish additional essays on related topics.

If you find this newsletter valuable please share it with someone else who would also find it valuable.

Blockchain and healthcare updates

How the HHS is using blockchain technology for data security in their new COVID-19 data platform

A screenshot of HHS Protect that I took. This is, in part, powered by blockchain technology!

A little over two weeks ago the way that the US federal government reported COVID-19 data was suddenly changed. With the new changes hospitals would report directly data to the HHS instead of the CDC. The move was met with alarm and skepticism as lawmakers, pundits, and the public worried about politicization of critical data.

That is the context in which HHS Protect, the HHS’ new system for COVID-19 data, is being announced. It is also why the HHS has turned to blockchain technology to try and bolster trust in their data. To quote HHS Chief Information Officer José Arrieta:

At HHS Protect, every day, every data element we receive is hashed with a time-stamped record of the parcing and curation and sharing of that data element.

As a result of using blockchain technology with HHS Protect, the U.S. government can now, as Arrieta explained, “share with the general public how the results were generated because you have a record that is immutable.” Exactly how this would be accessed is unclear.

First let’s acknowledge how big of a deal this is. The HHS is using blockchain technology to underpin the single data system that is under the most scrutiny in the entire US federal government. That gives a new level of legitimacy to blockchain technology in general, and in healthcare specifically. Further, this happened at an incredible speed for the federal government and frankly it was bold for the project’s leader, who I assume is José Arrieta, to even try. Our industry is indebted to him for doing so!

It is a little unclear, but with multiple readings of the interview and HHS Protect’s FAQ I think that this system creates immutable records in three contexts:

  1. Parse: when data is sent to the HHS a hash of the data is recorded on a blockchain

  2. Curate: when someone accesses, changes, or manipulates data in HHS Protect a record of their action is recorded on a blockchain

  3. Share: when data from HHS Protect is shared externally a hash of that data is recorded on a blockchain

The end result is that data stored on this blockchain creates a sort of audit trail that could be used by third parties to authenticate data on HHS Protect’s systems. They hope that this audit trail will give wary people assurances that data has not been improperly manipulated.

In this interview Arrieta confirmed that they are using a blockchain which is, in the words of the reporter, “similar to those supported by the Hyperledger organization and companies such as IBM as opposed to the bitcoin or ethereum blockchains.” I would think that if it was a Hyperledger project he would just say so, as they have done with HHS Accelerate, which is Arrieta’s other blockchain project. So we can rule out Hyperledger projects too, but that leaves me confused and really not sure what they are using.

These details are very important. I assume that more details are to come, along with the public facing functionality Arrieta referenced, but until then it is impossible to truly evaluate this solution without knowing what kind of technology they are using and who the nodes on their network are. The nodes of a network are integral to the integrity of the solution. For example if their nodes were the HHS, CDC, and the White House then these three parties could collude to change the ledger easily. I doubt any detractor’s concerns would be alleviated in that case.

In order to do what this solution intends to, which is inspire trust from deeply skeptical audiences, then the federal government truly cannot have control over the blockchain they use. If they do then it defeats the whole purpose of using a blockchain. There is a relatively straightforward technical solution here: the HHS could post their audit logs to a public blockchain like Bitcoin or Ethereum. These are extremely resistant to change, relatively cheap to use, anyone can access or verify them, and no one could reasonably claim the White House controls them.

Unfortunately there is very little chance of that happening soon. It was probably very difficult to make this happen as is, and using a public blockchain would likely be too much for the government to swallow right now. Moreover, Arrieta dismissed public blockchains by saying “The blockchain HHS uses is not the blockchain of the anarchists and disruptors.” That is the wrong way to think about public blockchains in general, but in most enterprise or government contexts, like that of HHS Accelerate, this attitude largely makes sense.

Ironically the reason I think the HHS should adopt a public blockchain is the same reason why “anarchists and disruptors” are attracted to them: no one controls public blockchains. The public can be absolutely sure that data put on a public blockchain has not been tampered with. Right now that kind of infrastructure is exactly what the HHS needs to garner more trust in their data, and for use cases where trust is paramount nothing beats public blockchains.

In closing I will offer a middle ground. The HHS could create a private blockchain network and ask a dozen or so hospitals and universities (e.g. Johns Hopkins) to run nodes. That would decentralize control out of the hands of the federal government and avoid public blockchains while still helping to establish trust with in their data.

What I’m reading this weekend

Beijing unveils expansive plans for blockchain-based government

In a 145-page document China’s capital city laid out their plans to implement blockchain technology in a variety of services. More than just implement blockchains to create value, Beijing has ambitions to become a global hub for blockchain technology following President Xi’s announcement last year that blockchain technology was a strategic priority for China.

With the announcement of HHS Protect also happening this week it is hard not to think about the geopolitics at play here. Xi’s full throated endorsement of blockchain tech was deeply important and spurred a lot of activity and investment - Beijing’s plans being the latest manifestation of that. On the other hand, the US has mostly not done anything to support the industry sans a few state legislatures passing a helpful bill here or there (and this week’s announcement, if you want to count that).

It is quite hard to accurately gauge how the US and China measure up to each other on their sophistication with blockchain technology. That being said, my rough feeling is that China has a relative edge in most enterprise deployments, but the US is ahead for all things related to public blockchains. The city government of Washington DC certainly won’t be blockchain-based any time soon, but the US has a remarkable amount of world class talent in the Bay Area, NYC, and elsewhere working on Bitcoin, Ethereum, Decentralized Finance, digital currencies, DAOs, zero-knowledge proofs, new smart contract platforms, etc.

DARPA Contracts with Duality Technologies to Develop Privacy-Preserving Machine Learning for COVID-19 Research

Duality also partnered with Harvard Medical School and Two Six Labs. Instead of using federated learning for privacy preserving machine learning this team is trying to use homomorphic encryption. A promising space to watch.

Descriptive vs prescriptive optimism

Descriptive optimism is the expectation that good things will happen, that an outcome will be positive, that the trend is in the right direction. It is a belief about the world.

Prescriptive optimism is the decision to work to make good outcomes happen. Whether lighthearted or desperate, cheerful or grim, it is a commitment to action and effort.

Descriptive optimism on its own can lead to complacency, Panglossianism, and other cavalier attitudes—progress as coasting. Prescriptive optimism calls for boldness, courage, and vigorous effort. When the two are combined, they call for expansive, ambitious plans. When prescriptive optimism is combined with descriptive pessimism, they together call for grit, determination, and fighting spirit.

I thought this was a useful framing. Another dimension to think of optimism on is Thiel’s determinate vs indeterminate optimism.

India, Jio, and the Four Internets
A clear and perceptive analysis of how the Internet is splintering into four distinct parts: the US, the EU, India, and China. The long term consequences are massive.

Elon is interviewed by Maureen Dowd - A fun read

An introduction into the latest trend in crypto “yield farming” - Interesting trend, I’m not sure it will be applicable in any way to healthcare / enterprise use cases.

Visa on their approach to digital currency


If you found this newsletter valuable then you can click the button below to sign up for free.

If you’re an existing reader I would deeply appreciate it if you share this with people who would find it a valuable resource. You can also “like” this newsletter by clicking the heart just below this, which helps me get visibility on SubStack.

My content is free, but if you would like to support me, you can do so on Patron here.

Feel free to reply to this email with comments, questions, or feedback. I host a blockchain and healthcare Telegram group that you can join. You can also find me on Twitter here.