An electronic medical record management system and method based on cloud computing

Abstract

The present invention discloses an electronic medical record management system and method based on cloud computing, which relates to the technical field of medical informatics, and includes a front-end module, a management gateway, a cloud account server, a cloud encryption server, a cloud storage server, etc. The random characteristics of the account login time are used to construct an account login time matrix, and the values ​​of two data among five login time data are randomly extracted to construct a random key matrix; based on the operation of Unicode encoding values, the text information to be encrypted is encrypted through the random key matrix to achieve the first layer of privacy protection; through the superposition of two-level account passwords, the random key matrix is ​​encrypted to obtain an encryption key matrix to achieve the second layer of privacy protection; based on cloud computing, real-time storage and synchronization of cloud data are realized, and the storage load is balanced through scientific and dynamic regulation of data storage volume; by setting primary accounts and secondary accounts, information sharing requests and authorization mechanisms, cross-institutional data sharing is supported.

Description

Technical Field

[0001] The present invention relates to the technical field of medical informatics, and in particular to an electronic medical record management system and method based on cloud computing. Background Art

[0002] With the advancement of digital medicine, electronic medical records, as an important carrier of patient health information, have become a core tool for medical services. However, traditional electronic medical record management methods cannot adapt to the growing data processing needs and cross-institutional collaboration needs of medical institutions. It is necessary to use cloud computing technology to build an efficient, intelligent and secure electronic medical record management system.

[0003] The following are the main problems with electronic medical record management in the current medical system: (1) Data storage and access restrictions. Traditional electronic medical records are mostly stored on local servers, which are easily affected by space limitations, hardware failures, and access delays. (2) Information island phenomenon. There is a lack of medical record data sharing mechanism between different medical institutions, which affects the efficiency and effectiveness of cross-institutional diagnosis and treatment of patients. (3) Insufficient real-time and security. The existing system has defects in real-time data synchronization, privacy protection, and network security, making it difficult to meet the needs of complex medical scenarios.

[0004] There is an urgent need to develop an electronic medical record management system based on cloud computing, which can realize the centralized management, dynamic updating and cross-institutional sharing of medical record data through cloud storage and computing, and improve the information level of the medical system and the quality of patient services. Summary of the invention

[0005] The purpose of the present invention is to provide an electronic medical record management system based on cloud computing that can realize cloud data storage and synchronization, support cross-institutional data sharing, and have strong patient privacy protection, as well as a management method based on the management system.

[0006] In view of the above technical problems, the technical solution adopted by the present invention is: an electronic medical record management system based on cloud computing, including a front-end module, a management gateway, a cloud account server, a cloud encryption server, and a cloud storage server; data interaction is performed between the front-end module and the management gateway; data interaction is performed between the management gateway and the cloud account server; the cloud encryption server is used to receive and encrypt data output by the cloud account server; the cloud storage server is used to receive and store data output by the cloud encryption server; data interaction is performed between the cloud account server and the cloud storage server; a primary account module and a secondary account module are provided in the cloud account server; data interaction can be performed between any two of the cloud account server, the primary account module and the secondary account module; the primary account module and the secondary account module are used to create, modify or store user account information; the cloud The encryption server includes an encryption matrix module and an encryption text module; the encryption matrix module is used to receive data output by the cloud encryption server and generate a random key matrix; the encryption text module is used to receive data output by the encryption matrix module and encrypt the received data through the random key matrix; the random key matrix generates an encryption key matrix by encrypting the password of the corresponding data account; the encryption text module imports account information data, encrypted information data and encryption key matrix into the cloud storage server and stores them; the cloud storage server is provided with a decryption module, multiple active nodes and multiple backup nodes; the cloud storage server exchanges data with the active nodes and backup nodes respectively; the active nodes and backup nodes are used to store information; the decryption module is used to call the information output by the cloud storage server, decrypt the information and then import it into the primary account module or the secondary account module.

[0007] Preferably, the front-end module includes three operating terminals: mobile terminal, PC terminal, and medical device terminal, which are matched with operating software, APP or mini program.

[0008] Preferably, the account users of the primary account module are medical institutions, scientific research institutions and medical personnel; the account users of the secondary account module are medical personnel, scientific researchers and third-party personnel.

[0009] Preferably, the cloud encryption server identifies and classifies the electronic medical record information data output by the cloud account server, and selects four types of text character information that need to be encrypted, namely Chinese character text, Arabic numeral character text, uppercase English alphabet character text and lowercase English alphabet character text, wherein the Unicode encoding value of the Chinese character text ranges from 19968 to 40959, the Unicode encoding value of the Arabic numeral character text (0-9) ranges from 48 to 57, the Unicode encoding value of the uppercase English alphabet character text (AZ) ranges from 65 to 90, and the Unicode encoding value of the lowercase English alphabet character text (az) ranges from 97 to 122; the cloud encryption server uploads the identified and classified text information data, account information data, and account login time data to the encryption matrix module; the encryption matrix module sorts the characters in the text information that currently needs to be encrypted in order to determine the current random key matrix The number of elements in k ; Build the account login time matrix of the text that needs to be encrypted , where T 11 Represents the logged month information, the value range is an integer from 1 to 12; T 12 Represents the login day information, the value range is an integer from 1 to 31; T 13 Represents the login time information, the value range is an integer from 1 to 24; T 14 Represents the login information, the value range is an integer from 1 to 60; T 15 Represents the second information of login, the value range is an integer from 1 to 60; constructs the random number matrix of the text that needs to be encrypted ( i =1,2,…, k ; j =1,2), the value of any element in the random number matrix is ​​a random number taken from 1, 2, 3, 4, 5, then

[0010] .

[0011] Preferably, the encryption matrix module uploads the text information currently to be encrypted, the account information data and the currently calculated random key matrix to the encryption text module; after the encryption text module receives the text information currently to be encrypted, the first i The Unicode code point of the character to be encrypted is U i , let U i The encrypted value is , let U i The corresponding character type's Unicode code value range is S i , let the value set S iThe values ​​in the table increase from left to right. i In the numerical set S i Starting from the position in the middle, move right The value of the corresponding position after the bit is If the value of is shifted to the right, the number of bits reaches the value set S i The highest bit in the value set S i Starting from the lowest bit in the right, we finally get The user passwords of various accounts are composed of uppercase English letters, lowercase English letters, Arabic numerals and special symbols, and the passwords are at least 8 characters; the current account information data includes the account name and account password; for the uploader account of the current encrypted text information, the Unicode encoding value of each character of its account password is summed and averaged to obtain ; For the medical personnel account with the currently encrypted text information, the Unicode encoding value of each character of the account password is summed up and the average value is obtained. ; Let the encryption key matrix be , then

[0012] .

[0013] Preferably, when the user modifies the account password, the cloud account server uploads the new password to the cloud storage server and overwrites the old password; when the uploader account of the encrypted text message modifies the password or the corresponding medical staff account modifies the password, the difference between the average value of the Unicode code value of each character in the new password and the average value of the Unicode code value of each character in the old password is or , in the old encryption key matrix Based on this, the new encryption key matrix is ​​calculated and stored, denoted as , then

[0014] .

[0015] Preferably, when the user of the secondary account module calls the encrypted text information data in the cloud storage server, it must be authorized by the user of the primary account module, and the encrypted text information data in the cloud storage server must be called through the user of the primary account module; when the user of the primary account module calls the encrypted text information data in the cloud storage server, the calling instruction is sent to the cloud storage server through the cloud account server, and the cloud storage server transmits the corresponding encrypted text information data, the latest encryption key matrix data and the latest account password data to the decryption module, and the decryption module solves the original random key matrix through the latest encryption key matrix data and the latest account password data , assuming encrypted text information data The corresponding Unicode code value range of the character type is , let the value set The values ​​in the table increase from left to right. In the value set Starting from the position in the middle, move to the left The value of the corresponding position after the bit is U i If the value of , in the process of shifting to the left, reaches the value set The lowest bit in the value set The highest bit in the byte is shifted to the left, and finally U i The value of U i The value of i The encrypted characters are read to complete the decryption.

[0016] Preferably, the active node is used to store the electronic medical records of the last three examinations or the electronic medical records of the examinations within one year; the backup node is used to store the electronic medical records of the examinations beyond the last three examinations or the electronic medical records of the examinations beyond one year.

[0017] Preferably, for all active nodes, data migration adjustment is performed once every 3-7 days so that the deviation of the data storage capacity of any active node relative to the average data storage capacity of all active nodes does not exceed 5%; for all backup nodes, data migration adjustment is performed once every 1-3 weeks so that the deviation of the data storage capacity of any backup node relative to the average data storage capacity of all backup nodes does not exceed 5%.

[0018] The present invention also proposes a management method for an electronic medical record management system based on cloud computing, comprising the following steps:

[0019] Step 1: Users register an account through the front-end module. Medical institutions, scientific research institutions and medical personnel are first-level account users, and medical personnel, scientific researchers and third-party personnel are second-level account users. When registering an account, users must set a user name and an account password of at least 8 characters consisting of uppercase English letters, lowercase English letters, Arabic numerals and special symbols, and bind their mobile phone number through a text message verification code. After successful registration and login, real-name information authentication is required. All account information is stored in the cloud account server through the management gateway.

[0020] Step 2: The cloud account server stores the user information of the primary account into the primary account module and the user information of the secondary account into the secondary account module; the unified social code or ID number entered in the user real-name information authentication is unique, and the cloud account server establishes a distributed database in the cloud storage server according to the unified social code or ID number of the user account to store different account information;

[0021] Step 3: The distributed database is established on the active node and the backup node. The database information in the active node is migrated and adjusted every 3-7 days and every 1-3 weeks.

[0022] Step 4: After the medical institution user or scientific research institution user completes the electronic medical record production, the electronic medical record data is transmitted to the management gateway through the front-end module. The management gateway transmits the electronic medical record data and the corresponding account information data to the cloud account server. The cloud account server uploads the electronic medical record information, the login time information of the corresponding account, the password of the corresponding account, and the password of the medical personnel account corresponding to the electronic medical record information to the cloud encryption server. After the cloud encryption server calculates and encrypts it, the cloud encryption server uploads the encrypted information to the corresponding database of the cloud storage server;

[0023] Step 5: When a user of a primary account accesses the electronic medical record under his own account name, a access instruction is generated through the front-end module, and the access instruction is sent to the cloud account server through the management gateway. The cloud account server sends the access instruction to the cloud storage server. The cloud storage server retrieves the encrypted information from the corresponding database according to the account information of the access instruction. The cloud storage server sends the accessed account information and the corresponding encrypted information to the decryption module. After decryption calculation, the decryption module sends the decrypted electronic medical record information to the primary account module. The primary account module sends the decrypted electronic medical record information to the operation interface of the corresponding account of the front-end module through the cloud account server and the management gateway;

[0024] Step 6: When a user of a secondary account accesses any electronic medical record, he or she must first be authorized by the primary account user corresponding to the electronic medical record, and then follow Step 5. After the decrypted electronic medical record information is sent to the primary account module, the primary account module will send the decrypted electronic medical record information to the secondary account module. The secondary account module will send the decrypted electronic medical record information to the operation interface of the corresponding account of the front-end module through the cloud account server and management gateway.

[0025] Compared with the prior art, the present invention has the following beneficial effects: (1) the random characteristics of the account login time are used to construct an account login time matrix, which records the month, day, hour, minute and second data of the login time. By randomly extracting the values ​​of two of the five data, a random key matrix is ​​constructed, which has significant uncertainty; (2) the text information to be encrypted is encrypted by the random key matrix, and highly confidential encrypted text information is obtained by calculating the Unicode encoding value, thereby obtaining the first layer of privacy protection; (3) the random key matrix is ​​encrypted by superimposing the two-level account passwords to obtain the encrypted key matrix, thereby obtaining the second layer of privacy protection; (4) the double-layer privacy protection mechanism has strong privacy protection for patients; (5) the real-time storage and synchronization of cloud data and the scientific and dynamic regulation of the data storage volume are realized, and the load of each active node and backup node is balanced; (6) by setting the first-level account and the second-level account, and the information sharing request mechanism, cross-institutional data sharing is supported. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 It is a schematic diagram of the overall structure of the electronic medical record management system of the present invention.

[0027] Figure 2 It is a schematic diagram of the cloud construction structure of the electronic medical record management system of the present invention.

[0028] Figure 3 This is a schematic diagram of the encryption process principle of the text information that needs to be encrypted in the present invention.

[0029] In the figure: 1-front-end module; 2-management gateway; 3-cloud account server; 31-primary account module; 32-secondary account module; 4-cloud encryption server; 41-encryption matrix module; 42-encrypted text module; 5-cloud storage server; 51-active node; 52-backup node; 53-decryption module. DETAILED DESCRIPTION

[0030] The technical solution of the present invention will be further described below in conjunction with the accompanying drawings and through specific implementation methods, wherein the accompanying drawings are only used for exemplary descriptions and represent only schematic diagrams rather than actual drawings, and should not be understood as limiting the present invention; in order to better illustrate the embodiments of the present invention, some parts of the accompanying drawings may be omitted, enlarged or reduced, and do not represent the size of the actual product; for those skilled in the art, it is understandable that some well-known structures and their descriptions in the accompanying drawings may be omitted.

[0031] Figure 1 and Figure 2 Preferred embodiments of the present invention are presented.

[0032] like Figure 1 and Figure 2As shown, data is exchanged between the front-end module 1 and the management gateway 2; data is exchanged between the management gateway 2 and the cloud account server 3; the cloud encryption server 4 is used to receive and encrypt data output by the cloud account server 3; the cloud storage server 5 is used to receive and store data output by the cloud encryption server 4; data is exchanged between the cloud account server 3 and the cloud storage server 5; a primary account module 31 and a secondary account module 32 are provided in the cloud account server 3; data can be exchanged between any two of the cloud account server 3, the primary account module 31 and the secondary account module 32; the primary account module 31 and the secondary account module 32 are used to create, modify or store user account information; the cloud encryption server 4 includes an encryption matrix module 41 and an encryption text module 42; the encryption matrix module 41 is used to receive cloud encryption The server 4 outputs the data and generates a random key matrix; the encrypted text module 42 is used to receive the data output by the encryption matrix module 41 and encrypt the received data through the random key matrix; the random key matrix generates an encryption key matrix by encrypting the password of the corresponding data account; the encrypted text module 42 imports the account information data, encrypted information data and encryption key matrix into the cloud storage server 5 and stores them; the cloud storage server 5 is provided with a decryption module 53, multiple active nodes 51 and multiple backup nodes 52; the cloud storage server 5 exchanges data with the active node 51 and the backup node 52 respectively; the active node 51 and the backup node 52 are used to store information; the decryption module 53 is used to call the information output by the cloud storage server 5, decrypt the information and then import it into the primary account module 31 or the secondary account module 32.

[0033] The working principle of the present invention is as follows: the front-end module 1 includes three operating terminals: mobile terminal, PC terminal, and medical device terminal, which are matched with operating software, APP or mini-program; the account users of the first-level account module 31 are medical institutions, scientific research institutions and medical personnel; the account users of the second-level account module 32 are medical personnel, scientific researchers and third-party personnel.

[0034] The cloud encryption server 4 identifies and classifies the electronic medical record information data output by the cloud account server 3, and selects four types of text character information that need to be encrypted, namely Chinese character text, Arabic numeral character text, uppercase English alphabet character text and lowercase English alphabet character text, wherein the Unicode encoding value of the Chinese character text ranges from 19968 to 40959, the Unicode encoding value of the Arabic numeral character text (0-9) ranges from 48 to 57, the Unicode encoding value of the uppercase English alphabet character text (AZ) ranges from 65 to 90, and the Unicode encoding value of the lowercase English alphabet character text (az) ranges from 97 to 122; the cloud encryption server 4 uploads the identified and classified text information data, account information data, and account login time data to the encryption matrix module 41; the encryption matrix module 41 sorts the characters in the text information that currently needs to be encrypted in order to determine the current random key matrix The number of elements in k ; Build the account login time matrix of the text that needs to be encrypted , where T 11 Represents the logged month information, the value range is an integer from 1 to 12; T 12 Represents the login day information, the value range is an integer from 1 to 31; T 13 Represents the login time information, the value range is an integer from 1 to 24; T 14 Represents the login information, the value range is an integer from 1 to 60; T 15 Represents the second information of login, the value range is an integer from 1 to 60; constructs the random number matrix of the text that needs to be encrypted ( i =1,2,…, k ; j =1,2), the value of any element in the random number matrix is ​​a random number taken from 1, 2, 3, 4, 5, then

[0035] .

[0036] The encryption matrix module 41 uploads the text information currently to be encrypted, the account information data and the currently calculated random key matrix to the encryption text module 42; after the encryption text module 42 receives the text information currently to be encrypted, it sets the first i The Unicode code point of the character to be encrypted is U i , let U i The encrypted value is , let U i The corresponding character type's Unicode code value range is S i , let the value set Si The values ​​in the table increase from left to right. i In the numerical set S i Starting from the position in the middle, shift right The value of the corresponding position is If the value of is shifted to the right, the number of bits reaches the value set S i The highest bit in the value set S i Starting from the lowest bit in the right, we finally get The value of .

[0037] like Figure 3 As shown in the figure, assuming that the text information that needs to be encrypted is "Name: Zhang San, Age: 26, ...", the login time of the account that uploaded this information is 15:02:05 on April 28, i =8, the corresponding character is "6", the character type is Arabic numerals, and the two random numbers obtained are 4 and 1 respectively, then

[0038] ;

[0039] See also Figure 3 , the Unicode code point of the character "6" is 54, which is in the corresponding value set S i The 7th bit in the table is shifted 8 bits to the right from the 7th bit. When the number is shifted 3 bits to the right, the current value set S is reached. i The highest bit, that is, the 10th bit, is shifted 1 bit to the lowest bit on the left, that is, the 1st bit, and then continues to shift 4 bits to the right from the 1st bit to the final stop position, that is, the current value set S i The 5th bit of , the corresponding Unicode code value, that is, the value of is 52. When the Unicode code value is 52, the corresponding character is "4". The character "4" is used to replace the original character "6" to complete the encryption process of the current character.

[0040] The user passwords of various accounts are composed of uppercase English letters, lowercase English letters, Arabic numerals and special symbols, and the passwords are at least 8 characters; the current account information data includes the account name and account password; for the uploader account of the current encrypted text information, the Unicode encoding value of each character of its account password is summed and the average value is obtained. ; For the medical personnel account with the currently encrypted text information, the Unicode encoding value of each character of the account password is summed up and the average value is obtained. ; Let the encryption key matrix be , then

[0041] .

[0042] When the user modifies the account password, the cloud account server 3 uploads the new password to the cloud storage server 5 and overwrites the old password; when the uploader account of the encrypted text information modifies the password or the corresponding medical personnel account modifies the password, the difference between the average value of the Unicode encoding value of each character in the new password and the average value of the Unicode encoding value of each character in the old password is or , in the old encryption key matrix Based on this, the new encryption key matrix is ​​calculated and stored, denoted as , then

[0043] .

[0044] When the user of the secondary account module 32 calls the encrypted text information data in the cloud storage server 5, it must be authorized by the user of the primary account module 31, and call the encrypted text information data in the cloud storage server 5 through the user of the primary account module 31; when the user of the primary account module 31 calls the encrypted text information data in the cloud storage server 5, the calling instruction is sent to the cloud storage server 5 through the cloud account server 3, and the cloud storage server 5 transmits the corresponding encrypted text information data, the latest encryption key matrix data and the latest account password data to the decryption module 53, and the decryption module 53 solves the original random key matrix through the latest encryption key matrix data and the latest account password data ; Due to the new encryption key matrix The content overwrites the original encryption key matrix Therefore, the latest encryption key matrix stored in the cloud storage server 5 is still represented by the symbol Similarly, the average value of the Unicode encoding of each character of the latest account password stored in the cloud storage server 5 is still represented by the symbol and symbol Represents, then, the solution formula of the original random key matrix is

[0045] .

[0046] The original random key matrix is ​​obtained by solving the latest passwords of the two accounts After that, let the encrypted text information data The corresponding Unicode code value range of the character type is , let the value set The values ​​in the table increase from left to right. In the value set Starting from the position in the middle, move to the left The value of the corresponding position after the bit is U i If the value of , in the process of shifting to the left, reaches the value set The lowest bit in the value set The highest bit in the byte is shifted to the left, and finally U i The value of U i The value of i The encrypted characters are decrypted. Figure 3 For example, the decryption process is the reverse process of the encryption process, that is, the original character information "6" is obtained from the encrypted character information "4".

[0047] The active node 51 is used to store the electronic medical records of the last three examinations or the electronic medical records of the examinations within one year; the backup node 52 is used to store the electronic medical records of the examinations beyond the last three examinations or the electronic medical records of the examinations beyond one year.

[0048] For all active nodes 51, data migration adjustment is performed every 3-7 days, so that the deviation of the data storage capacity of any active node 51 from the average data storage capacity of all active nodes 51 does not exceed 5%; for all backup nodes 52, data migration adjustment is performed every 1-3 weeks, so that the deviation of the data storage capacity of any backup node 52 from the average data storage capacity of all backup nodes 52 does not exceed 5%.

[0049] In this embodiment, the management method of the electronic medical record management system based on cloud computing includes the following steps:

[0050] Step 1: Users register an account through the front-end module 1. Medical institutions, scientific research institutions and medical personnel are first-level account users, and medical personnel, scientific researchers and third-party personnel are second-level account users. When registering an account, users must set a user name and an account password of at least 8 characters consisting of uppercase English letters, lowercase English letters, Arabic numerals and special symbols, and bind their mobile phone number through a text message verification code. After successful registration and login, real-name information authentication must be performed; all account information is stored in the cloud account server 3 through the management gateway 2;

[0051] Step 2: The cloud account server 3 stores the user information of the primary account into the primary account module 31 and the user information of the secondary account into the secondary account module 32; the unified social code or ID number input in the user real-name information authentication is unique, and the cloud account server 3 establishes a distributed database in the cloud storage server 5 according to the unified social code or ID number of the user account for storing different account information;

[0052] Step 3: The distributed database is established on the active node 51 and the backup node 52. The database information in the active node 51 is migrated and adjusted every 3-7 days and every 1-3 weeks.

[0053] Step 4: After the medical institution user or scientific research institution user completes the electronic medical record production, the electronic medical record data is transmitted to the management gateway 2 through the front-end module 1. The management gateway 2 transmits the electronic medical record data and the corresponding account information data to the cloud account server 3. The cloud account server 3 uploads the electronic medical record information, the login time information of the corresponding account, the password of the corresponding account, and the password of the medical personnel account corresponding to the electronic medical record information to the cloud encryption server 4. After the cloud encryption server 4 calculates and encrypts, the cloud encryption server 4 uploads the encrypted information to the corresponding database of the cloud storage server 5;

[0054] Step 5: When a user of a primary account accesses the electronic medical record under his own account name, a access instruction is generated through the front-end module 1, and the access instruction is sent to the cloud account server 3 through the management gateway 2. The cloud account server 3 sends the access instruction to the cloud storage server 5. The cloud storage server 5 retrieves the encrypted information from the corresponding database according to the account information of the access instruction. The cloud storage server 5 sends the accessed account information and the corresponding encrypted information to the decryption module 53. After decryption calculation, the decryption module 53 sends the decrypted electronic medical record information to the primary account module 31. The primary account module 31 sends the decrypted electronic medical record information to the operation interface of the corresponding account of the front-end module 1 through the cloud account server 3 and the management gateway 2;

[0055] Step 6: When a user of a secondary account accesses any electronic medical record, he must first be authorized by the primary account user corresponding to the electronic medical record, and then follow step Step 5. After the decrypted electronic medical record information is sent to the primary account module 31, the primary account module 31 sends the decrypted electronic medical record information to the secondary account module 32, and the secondary account module 32 sends the decrypted electronic medical record information to the operation interface of the corresponding account of the front-end module 1 through the cloud account server 3 and the management gateway 2.

Claims

1. An electronic medical record management system based on cloud computing, comprising a front-end module (1), a management gateway (2), a cloud account server (3), a cloud encryption server (4), and a cloud storage server (5), characterized in that: The front-end module (1) and the management gateway (2) perform data interaction; the management gateway (2) and the cloud account server (3) perform data interaction; the cloud encryption server (4) is used to receive and encrypt data output by the cloud account server (3); The cloud storage server (5) is used to receive and store data output by the cloud encryption server (4); the cloud account server (3) and the cloud storage server (5) perform data exchange; the cloud account server (3) is provided with a primary account module (31) and a secondary account module (32); any two of the cloud account server (3), the primary account module (31) and the secondary account module (32) can perform data exchange; the primary account module (31) and the secondary account module (32) are used to create, modify or store user account information; the cloud encryption server (4) includes an encryption matrix module (41) and an encryption text module (42); the encryption matrix module (41) is used to receive The data outputted by the cloud encryption server (4) is received and a random key matrix is ​​generated; the encryption text module (42) is used to receive the data outputted by the encryption matrix module (41) and encrypt the received data by means of the random key matrix; the random key matrix is ​​encrypted by means of the password of the corresponding data account to generate an encryption key matrix; the encryption text module (42) imports the account information data, the encryption information data and the encryption key matrix into the cloud storage server (5) and stores them; the cloud storage server (5) is provided with a decryption module (53), a plurality of active nodes (51) and a plurality of backup nodes (52); the cloud storage server (5) respectively exchanges data with the active nodes (51) and the backup nodes (52); The active node (51) and the backup node (52) are used to store information; the decryption module (53) is used to call the information output by the cloud storage server (5), decrypt the information and then import it into the primary account module (31) or the secondary account module (32); the front-end module (1) includes three operating terminals: a mobile terminal, a PC terminal, and a medical device terminal, which are matched with operating software, an APP or a small program; the account users of the primary account module (31) are medical institutions, scientific research institutions and medical personnel; the account users of the secondary account module (32) are medical personnel, scientific researchers and third-party personnel; the cloud encryption server (4) identifies and classifies the electronic medical record information data output by the cloud account server (3), and selects four types of text character information that need to be encrypted, namely Chinese character text, Arabic numeral character text, uppercase English alphabetic character text and lowercase English alphabetic character text, wherein the Unicode encoding value of Chinese character text ranges from 19968 to 40959, the Unicode encoding value of Arabic numeral character text (0-9) ranges from 48 to 57, the Unicode encoding value of uppercase English alphabetic character text (AZ) ranges from 65 to 90, and the Unicode encoding value of lowercase English alphabetic character text (az) ranges from 97 to 122; the cloud encryption server (4) uploads the identified and classified text information data, account information data, and account login time data to the encryption matrix module (41); the encryption matrix module (41) sorts the characters in the text information currently to be encrypted in order to determine the current random key matrix The number of elements in k ; Build the account login time matrix of the text that needs to be encrypted , where T 11 Represents the logged month information, the value range is an integer from 1 to 12; T 12 Represents the login day information, the value range is an integer from 1 to 31; T 13 Represents the login time information, the value range is an integer from 1 to 24; T 14 Represents the login information, the value range is an integer from 1 to 60; T 15 Represents the second information of login, the value range is an integer from 1 to 60; constructs the random number matrix of the text that needs to be encrypted ( i =1,2,…, k ; j =1,2), the value of any element in the random number matrix is ​​a random number taken from 1, 2, 3, 4, 5, then ； The encryption matrix module (41) uploads the text information currently to be encrypted, the account information data and the currently calculated random key matrix to the encryption text module (42); after the encryption text module (42) receives the text information currently to be encrypted, it sets the first i The Unicode encoding value of the character to be encrypted is U i , let U i The encrypted value is , let U i The corresponding character type's Unicode code value range is S i , let the value set S i The values ​​in the table increase from left to right. i In the numerical set S i Starting from the position in the middle, shift right The value of the corresponding position is If the value of is shifted to the right, the number of bits reaches the value set S i The highest bit in the value set S i Starting from the lowest bit in the right, we finally get The user passwords of various accounts are composed of uppercase English letters, lowercase English letters, Arabic numerals and special symbols, and the passwords are at least 8 characters; the current account information data includes the account name and account password; for the uploader account of the current encrypted text information, the Unicode encoding value of each character of its account password is summed and averaged to obtain ; For the medical personnel account with the currently encrypted text information, the Unicode encoding value of each character of the account password is summed up and the average value is obtained. ; Let the encryption key matrix be , then 。 2. The cloud computing-based electronic medical record management system according to claim 1, characterized in that: When the user modifies the account password, the cloud account server (3) uploads the new password to the cloud storage server (5) and overwrites the old password; when the uploader account of the encrypted text information modifies the password or the corresponding medical staff account modifies the password, the difference between the average value of the Unicode code value of each character in the new password and the average value of the Unicode code value of each character in the old password is or , in the old encryption key matrix Based on this, the new encryption key matrix is ​​calculated and stored, denoted as , then 。 3. The electronic medical record management system based on cloud computing as claimed in claim 2, characterized in that: When the user of the secondary account module (32) calls the encrypted text information data in the cloud storage server (5), it must be authorized by the user of the primary account module (31), and the encrypted text information data in the cloud storage server (5) is called by the user of the primary account module (31); when the user of the primary account module (31) calls the encrypted text information data in the cloud storage server (5), the calling instruction is sent to the cloud storage server (5) through the cloud account server (3), and the cloud storage server (5) transmits the corresponding encrypted text information data, the latest encryption key matrix data and the latest account password data to the decryption module (53), and the decryption module (53) solves the original random key matrix through the latest encryption key matrix data and the latest account password data. , assuming encrypted text information data The corresponding Unicode code value range of the character type is , let the value set The values ​​in the table increase from left to right. In the value set Starting from the position in the middle, shift left The value of the corresponding position is U i If the value of , in the process of shifting to the left, reaches the value set The lowest bit in the value set The highest bit in the byte is shifted to the left, and finally U i The value of U i The value of i The encrypted characters are read to complete the decryption.

4. The electronic medical record management system based on cloud computing as claimed in claim 3, characterized in that: The active node (51) is used to store the electronic medical records of the last three examinations or the electronic medical records of examinations within one year; The backup node (52) is used to store electronic medical records of more than the last three examinations or more than the electronic medical records of examinations within one year.

5. The electronic medical record management system based on cloud computing as claimed in claim 4, characterized in that: For all active nodes (51), data migration adjustment is performed every 3-7 days, so that the deviation of the data storage capacity of any active node (51) relative to the average data storage capacity of all active nodes (51) does not exceed 5%; for all backup nodes (52), data migration adjustment is performed every 1-3 weeks, so that the deviation of the data storage capacity of any backup node (52) relative to the average data storage capacity of all backup nodes (52) does not exceed 5%.

6. A management method for an electronic medical record management system based on cloud computing as claimed in claim 5, characterized in that: The following steps are involved: Step 1: The user registers an account through the front-end module (1). Medical institutions, scientific research institutions and medical personnel are first-level account users, and medical personnel, scientific researchers and third-party personnel are second-level account users. When registering an account, the user must set a user name and an account password of at least 8 characters consisting of uppercase English letters, lowercase English letters, Arabic numerals and special symbols, and bind the mobile phone number through a text message verification code. After successful registration and login, real-name information authentication must be performed; all account information is stored in the cloud account server (3) through the management gateway (2); Step 2: The cloud account server (3) stores the user information of the primary account in the primary account module (31) and stores the user information of the secondary account in the secondary account module (32); the unified social code or ID number input in the user real-name information authentication is unique, and the cloud account server (3) establishes a distributed database in the cloud storage server (5) according to the unified social code or ID number of the user account, for storing different account information; Step 3: The distributed database is established on the active node (51) and the backup node (52). The database information in the active node (51) is migrated and adjusted once every 3-7 days, and once every 1-3 weeks; Step 4: After the medical institution user or scientific research institution user completes the electronic medical record production, the electronic medical record data is transmitted to the management gateway (2) through the front-end module (1). The management gateway (2) transmits the electronic medical record data and the corresponding account information data to the cloud account server (3). The cloud account server (3) uploads the electronic medical record information, the login time information of the corresponding account, the password of the corresponding account, and the password of the medical personnel account corresponding to the electronic medical record information to the cloud encryption server (4). After the cloud encryption server (4) calculates and encrypts the information, the cloud encryption server (4) uploads the encrypted information to the corresponding database of the cloud storage server (5); Step 5: When a user of a primary account accesses the electronic medical record under his own account name, a access instruction is generated through the front-end module (1), and the access instruction is sent to the cloud account server (3) through the management gateway (2). The cloud account server (3) sends the access instruction to the cloud storage server (5). The cloud storage server (5) retrieves the encrypted information from the corresponding database according to the account information of the access instruction. The cloud storage server (5) sends the accessed account information and the corresponding encrypted information to the decryption module (53). After decryption calculation, the decryption module (53) sends the decrypted electronic medical record information to the primary account module (31). The primary account module (31) sends the decrypted electronic medical record information to the operation interface of the corresponding account of the front-end module (1) through the cloud account server (3) and the management gateway (2); Step 6: When a user of a secondary account accesses any electronic medical record, he must first obtain authorization from the user of the primary account corresponding to the electronic medical record, and then follow Step 5. After the decrypted electronic medical record information is sent to the primary account module (31), the primary account module (31) sends the decrypted electronic medical record information to the secondary account module (32). The secondary account module (32) sends the decrypted electronic medical record information to the operation interface of the corresponding account of the front-end module (1) through the cloud account server (3) and the management gateway (2).

Images