Medical information security interaction system and method

Abstract

The invention discloses a method of a medical information safety interaction system, and the system comprises a business platform and a mobile terminal. The mobile terminal includes a certificate issuing module, a rule engine module, an electronic signature module and a signature authentication module. The system ensures the security of the medical information such as prescriptions in the interaction process by optimizing the storage mode and the signature process of a digital certificate. The content of the digital signature is the complete content of a prescription. The content is first verified by the rule engine module for data accuracy. After passing through the rule engine module, the content is compressed together with a time stamp and the like, and then the compressed content is electronically signed. The whole electronic signature process is reversible and allows a user to see what is right. An electronic certificate is stored on a mobile phone side, and a password provided bya doctor at the time of application is used for secondary encryption storage to ensure the security of the certificate file when the certificate is used and the mobile phone is cracked.

Description

technical field [0001] The invention relates to a system and method for safe interaction of medical information. Background technique [0002] After the prescription is informatized, it is necessary to verify the content of the prescription and the doctor who issued the prescription during the interaction between the systems. The existing technology relies on the cooperation with the CA certification organization, and the CA organization issues a certificate to the doctor (ukey or mobile phone certificate. ), the summary of the content provided by the business system is sent to the CA server for signature. During verification, the business system calculates the digest again and sends it to the CA authentication server for verification. In this way, it is confirmed that the contents of the prescription have not been tampered with, and the identity of the doctor is true and valid. [0003] A prescription is a special information element with timeliness and state. Just passin...

AI Technical Summary

Problems solved by technology

If it is necessary to extend the validity period under special circumstances, the physician who issued the prescription shall indicate the validity period, but the validity period shall not exceed 3 days at most, and the content of the CA signature is only a summary of the information, which cannot be confirmed when the doctor's signature or pharmacist reviews the prescription signature Whether the content of the signature is what he saw, so the pharmacist cannot guarantee the validity of the prescription only relying on the CA verification results when reviewing the prescription

In addition, after the doctor issues the prescription, he will modify the prescription, invalidate and other state operations, and the pharmacist needs to sign the prescription twice during the review process, etc. The CA signing process has no state mechanism, and the signature in the prescription management method cannot be achieved. Confirmation and prescription modification, invalidation and other state control, so only through the CA system can not solve the situation of such time limit and state change

Images