Balancing patient control and practical access policy for electronic health records via blockchain technology