Data security transmission method and system for hemodialysis equipment

Abstract

The invention discloses a data security transmission method and system for hemodialysis equipment, and belongs to the technical field of data transmission. The method solves the problems that an existing method lacks fine management on data sensitivity, high-sensitivity data is prone to being leaked in the data transmission process, and the data transmission efficiency is affected, sensitivity classification standards are established, and the weight and the weight value of each class of standards are defined in multiple dimensions according to privacy, importance and the influence degree; the data is divided into high-sensitivity data, medium-sensitivity data and low-sensitivity data by performing scoring and sensitivity score calculation on various types of data. Various data are encrypted in different modes according to different sensitivity levels, and data transmission is carried out through different transmission channels and security protocols; the safety and confidentiality of the hemodialysis data in the transmission process can be effectively improved, and high-sensitivity data leakage is prevented; meanwhile, the transmission efficiency of the hemodialysis data is improved, and the flexibility of data transmission is enhanced.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and particularly to a data security transmission method and system for hemodialysis equipment. Background Art

[0002] In the medical field, hemodialysis machines are important equipment for treating patients with renal failure and are one of the important renal replacement therapies for acute and chronic renal failure patients. A large amount of data is generated during the dialysis process, including patient personal information, dialysis parameters, etc. These data are of great significance for the treatment and health management of patients.

[0003] However, in the existing technology, there is a lack of a scientific classification method for data sensitivity levels, resulting in insufficiently refined security measures during data transmission. This may cause a risk of leakage of highly sensitive data and also waste security resources on low-sensitive data, reducing the efficiency of data transmission. Therefore, it does not meet the existing requirements, and for this reason, we propose a data security transmission method and system for hemodialysis equipment. Summary of the Invention

[0004] The purpose of the present invention is to provide a data security transmission method and system for hemodialysis equipment. By establishing a sensitivity classification standard and defining the weights and weight values of each type of standard in multiple dimensions of privacy, importance, and impact degree; by scoring various types of data and calculating the sensitivity scores, the data is divided into high, medium, and low sensitivity data. And encrypt various types of data in different ways according to different sensitivity levels, and perform data transmission through different transmission channels and security protocols; it can not only effectively improve the security and confidentiality of hemodialysis data during transmission, prevent the leakage of highly sensitive data; at the same time, improve the transmission efficiency of hemodialysis data, enhance the flexibility of data transmission, and solve the problems raised in the above background art.

[0005] To achieve the above purpose, the present invention provides the following technical solutions: A data security transmission method for hemodialysis equipment, the method comprising the following steps: Based on the hemodialysis equipment, various types of data are collected in real time during dialysis, including: patient personal information, dialysis parameters, and equipment operation data; Establish a sensitivity classification standard, including: high-sensitivity data, medium-sensitivity data, and low-sensitivity data, and use a decision tree model to associate the sensitivity classification standard with various types of data; According to the data requirements, different weights and weight values are defined for each type of sensitivity standard, including: privacy weight, importance weight, and impact degree weight; Score various types of data based on privacy, importance, and impact; calculate the sensitivity scores for each data type based on the scoring results. Classify the collected data into highly sensitive data, moderately sensitive data, and low-sensitive data according to the sensitivity scores of the data. Encrypt various types of data and set access permissions according to the sensitivity levels, and select different transmission channels and security protocols to send the encrypted data to the receiving end.

[0006] Furthermore, define different weights and weight values for each type of sensitivity criterion, specifically: Obtain the historical data of the hemodialysis equipment and analyze the historical data based on the medical data characteristic analysis method. Define the weights of highly sensitive data, moderately sensitive data, and low-sensitive data based on the analysis results as: privacy, importance, and impact. Adopt a 4-4-2 distribution method to allocate weight values to privacy, importance, and impact, so that privacy and importance each account for 40% of the weight value, and impact accounts for 20% of the weight value. Based on the weight values of privacy, importance, and impact, combined with clinical experience, set the classification thresholds for each type of sensitivity classification criterion.

[0007] Furthermore, score various types of data based on privacy, importance, and impact, specifically: Establish a risk matrix to evaluate whether the classification thresholds of each type of sensitivity classification criterion are accurate. Based on the evaluation results, generate the scoring criteria and specific score values for privacy, importance, and impact. Calculate the sensitivity score according to the scoring results, and the calculation formula is as follows: Among them, Represents the classification threshold; Represents the privacy score; Represents the importance score; Represents the impact score.

[0008] Furthermore, establish a sensitivity classification criterion, specifically: Based on the analysis results of the historical data by the medical data characteristic analysis method, classify the information with personal identification information or related to patient privacy and treatment core parameters as highly sensitive data, including: patient identity information, real-time vital signs, blood biochemical indicators, abnormal alarm data, and treatment prescription parameters. Classify the information that reflects the treatment process but does not directly determine life safety - related information as moderately sensitive data, including: device operation logs, regular treatment parameter records, consumable usage data, and de - identified treatment data; Classify the anonymized statistical data or device basic information that has nothing to do with individual patients as low - sensitive data, including: device maintenance records, environmental monitoring data, anonymized aggregated statistical reports, and non - clinical device data; Use a decision - tree model to cluster and associate high - sensitive data, moderately sensitive data, low - sensitive data, and their corresponding historical data; Input various types of real - time collected data into the decision - tree model to match the corresponding sensitivity classification criteria.

[0009] Furthermore, select different transmission channels and security protocols to send the encrypted data to the receiving end. Specifically: Based on the sensitivity classification criteria, construct different levels of transmission channels and security protocols to form multi - channel transmission; Use an encrypted dedicated network channel to transmit high - sensitive data separately and use the TLS / SSL protocol; Use an encrypted public network channel to transmit moderately sensitive data separately and use the TLS / SSL protocol; Use an ordinary public network channel to transmit low - sensitive data separately and use basic network protocols; Add a sensitivity classification identifier to each data packet. When the receiving end receives various types of data, according to the sensitivity classification identifier in each data packet, use the corresponding decryption algorithm and verification method to perform decryption processing and integrity verification to obtain various types of data.

[0010] Furthermore, perform encryption processing and set access permissions for various types of data according to the sensitivity level. Specifically: High - sensitive data: Use a high - strength AES - 256 symmetric encryption algorithm and hash value to encrypt high - sensitive data. After generating the key, distribute the key to the authorized receiving end through a secure key distribution mechanism and authorize the identity of the object with access to high - sensitive data; Moderately sensitive data: Use a medium - strength AES - 128 symmetric encryption algorithm and CRC check method to encrypt moderately sensitive data. After generating the key, distribute the key to the authorized receiving end through a secure key distribution mechanism and allow device maintenance personnel and some medical staff to access; Low - sensitive data: Use the CRC check method to perform data integrity verification on low - sensitive data, but do not perform encryption processing, and allow medical staff and device maintenance personnel to access freely.

[0011] Data security transmission system for hemodialysis equipment, the system includes: sensitivity classification module, sensitivity evaluation module, data partitioning module and security transmission module; Sensitivity classification module, configured to build sensitivity classification criteria and classify data standards into high-sensitivity data, medium-sensitivity data and low-sensitivity data; Sensitivity evaluation module, configured to use medical data characteristic analysis method, and define weights and weight values for data of different sensitivity levels with privacy, importance and impact degree of data as multi-dimensional characteristics; Data partitioning module, configured to score the multi-dimensional characteristics of various types of data, calculate the sensitivity score, and partition various types of data into the corresponding sensitivity classification criteria based on the score results; Security transmission module, configured to formulate different security policies according to the sensitivity levels of various types of data; enable various types of data to be securely transmitted according to the specified encryption method and transmission channel.

[0012] Furthermore, the system further includes: data acquisition module and data association module; Data acquisition module, configured to be installed on the hemodialysis machine and used to collect various types of data during the dialysis process in real time; Data association module, configured to use a decision tree model to perform clustering association on high-sensitivity data, medium-sensitivity data and low-sensitivity data and their corresponding various types of data.

[0013] Furthermore, the sensitivity evaluation module further includes: Data risk setting sub-module, which respectively sets abnormally high-risk data, abnormally medium-risk data and abnormally low-risk data, corresponding to the three levels of the risk matrix of sensitive data, namely: high risk, medium risk and low risk; according to the risk matrix, evaluate whether the classification threshold of each type of sensitivity classification standard is accurate, and obtain the final scoring standard and specific score value; Data impact risk analysis sub-module, which intelligently calculates the final sensitivity scores of high-sensitivity data, medium-sensitivity data and low-sensitivity data according to the final scoring standard and specific score value; Data risk intelligent warning sub-module, which determines the final high-sensitivity data, medium-sensitivity data and low-sensitivity data according to the final sensitivity scores; corresponds the final high-sensitivity data, medium-sensitivity data and low-sensitivity data to the three levels of high risk, medium risk and low risk respectively; according to the three levels of high risk, medium risk and low risk, when data anomalies occur, perform abnormally high-risk warning, abnormally medium-risk warning and abnormally low-risk warning respectively.

[0014] Furthermore, the security transmission module further includes: The system includes an encryption and secure transmission sub-module, a cloud encryption information transmission sub-module, a patient information decryption sub-module, and a patient information security response sub-module; The encryption and secure transmission sub-module of the system takes the highly sensitive data during the dialysis process of the hemodialysis device, selects a random number through the encryption operation unit of the system, performs system encryption to obtain the system-encrypted highly sensitive data; through data security transmission communication, transmits the system-encrypted highly sensitive data and the second encryption key to the cloud data interface unit; generates a first encryption private key and a first encryption public key through the key generation unit; through the re-encryption unit, generates a first re-encryption key from the first encryption private key and the first encryption public key; The cloud encryption information transmission sub-module receives the system-encrypted highly sensitive data and the second encryption key through the cloud data interface unit; performs cloud re-encryption on the system-encrypted highly sensitive data through the cloud encryption unit to obtain multi-encrypted highly sensitive data; The patient information decryption sub-module, when the patient-side APP sends a request to view highly sensitive data, the cloud encryption information transmission sub-module transmits the multi-encrypted highly sensitive data to the patient-side APP; the patient-side APP inputs the decryption key to decrypt the multi-encrypted highly sensitive data; if the input decryption key is correct, the data can be decrypted and obtained; if the decryption key of the patient-side APP is incorrect or no decryption key is input, the decryption function outputs invalid characters; The patient information security response sub-module, if it receives an error message of the decryption key of the patient-side APP, verifies whether the patient-side APP is operated by the patient himself or the authorized person of the patient through the patient-side APP associated verification information end; the associated verification information end includes a verification information email and a social software end; if it is verified that it is operated by the patient himself or the authorized person of the patient, sends the first encryption public key to the patient-side APP associated verification information end.

[0015] Compared with the prior art, the beneficial effects of the present invention are: In the present invention, by establishing a sensitivity classification standard, and defining the weight and weight value of each class of standard in multiple dimensions of privacy, importance, and impact degree; by scoring and calculating the sensitivity score of various data, the data is divided into high, medium, and low sensitive data. And encrypt various data in different ways according to different sensitivity levels, and transmit the data through different transmission channels and security protocols; it can not only effectively improve the security and confidentiality of hemodialysis data during the transmission process, prevent the leakage of highly sensitive data; at the same time, improve the transmission efficiency of hemodialysis data and enhance the flexibility of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 It is a flowchart of the data security transmission method for the hemodialysis device of the present invention; Figure 2 Composition diagram of the data security transmission system for hemodialysis equipment of the present invention; Figure 3 Security transmission architecture diagram of the data security transmission system for hemodialysis equipment of the present invention. Specific implementation manners

[0017] The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the protection scope of the present invention.

[0018] To solve the technical problems in the prior art that there is a lack of a scientific classification method for data sensitivity levels, resulting in insufficiently refined security measures during data transmission, which may cause the risk of leakage of highly sensitive data, and at the same time waste security resources on low-sensitive data, reducing the efficiency of data transmission, please refer to Figures 1 - 3 , the following technical solutions are provided in this embodiment: A data security transmission method for hemodialysis equipment, the method comprising the following steps: Based on the hemodialysis equipment, various types of data are collected in real time during dialysis, including: patient personal information, dialysis parameters, and equipment operation data; for example, patient personal information: patient ID, dialysis parameters: dialysis time, blood flow rate, dialysis fluid composition, etc., equipment operation data: equipment temperature, pressure, alarm information, etc.

[0019] Establish a sensitivity classification standard, including: highly sensitive data, moderately sensitive data, and low-sensitive data, and use a decision tree model to associate the sensitivity classification standard with various types of data. Specifically: Based on the analysis results of historical data by the medical data characteristic analysis method, information with personal identification information or related to patient privacy and core treatment parameters is classified as highly sensitive data, including: patient identity information, real-time vital signs, blood biochemical indicators, abnormal alarm data, and treatment prescription parameters; for example, patient identity information: name, ID number, medical insurance number; real-time vital signs: blood oxygen saturation, blood pressure, heart rate; blood biochemical indicators: potassium, sodium, urea nitrogen; abnormal alarm data: air embolism warning, coagulation alarm; treatment prescription parameters: anticoagulant dose, ultrafiltration rate setting.

[0020] Information that reflects the treatment process but does not directly determine life - safety - related information is classified as moderately sensitive data, including: device operation logs, routine treatment parameter records, consumable usage data, and de - identified treatment data; for example, device operation logs: dialysis machine pressure and flow records; routine treatment parameter records: dialysis fluid temperature and conductivity; consumable usage data: dialyzer model and usage duration; de - identified treatment data: KT / V value, URR, without patient ID.

[0021] Anonymized statistical data or device basic information that is not related to individual patients is classified as low - sensitive data, including: device maintenance records, environmental monitoring data, anonymized aggregated statistical reports, and non - clinical device data; for example, device maintenance records: filter replacement records; environmental monitoring data: room temperature and humidity; anonymized aggregated statistical reports: total number of hemodialysis treatments in the hospital; non - clinical device data: power supply voltage and network status.

[0022] Use a decision - tree model to cluster and associate high - sensitive data, moderately sensitive data, low - sensitive data, and their corresponding historical data; and input various types of real - time collected data into the decision - tree model to match the corresponding sensitivity classification criteria.

[0023] According to data requirements, define different weights and weight values for each type of sensitivity criterion, including: privacy weight, importance weight, and impact degree weight; for example: privacy weight W1 = 0.4, importance weight W2 = 0.3, impact degree weight W3 = 0.3, specifically: Obtain the historical data of hemodialysis equipment, analyze the historical data based on the medical data characteristic analysis method to determine the privacy, importance, and impact degree of various types of data; define the weights of high - sensitive data, moderately sensitive data, and low - sensitive data based on the analysis results as: privacy, importance, and impact degree.

[0024] Use a 40 - 40 - 20 distribution method to allocate weight values to privacy, importance, and impact degree, so that privacy and importance each account for 40% of the weight value, and the impact degree accounts for 20% of the weight value; that is: privacy weight = 0.4, importance weight = 0.4, impact degree weight = 0.2.

[0025] Based on the weight values of privacy, importance, and impact degree, combined with clinical experience, set the classification thresholds for each type of sensitivity classification criterion.

[0026] Taking privacy, importance, and impact degree as the benchmarks, score various types of data, for example, the scoring standard is: 1 - 10 points; based on the scoring results, calculate the sensitivity scores of each data type, specifically: Establish a risk matrix to evaluate whether the classification thresholds of each type of sensitivity classification criteria are accurate; specifically, divide the risk matrix into three levels, namely: high risk, medium risk, and low risk; for each type of data, determine the likelihood and impact level of its data leakage or tampering based on the analysis results of historical data; for example, the likelihood of patient ID is high (10 points), and the impact level is high (10 points); the likelihood of equipment temperature is low (1 point), and the impact level is low (1 point); according to the scores of likelihood and impact level, classify each type of data into the three levels of the risk matrix; for example, patient ID belongs to the high-risk level, and equipment temperature belongs to the low-risk level; if the classification result of the data is consistent with the evaluation result of the risk matrix, it is considered that the initial scoring criteria and initial scores are accurate; otherwise, the initial scoring criteria and initial scores need to be adjusted to generate the final scoring criteria and specific scores; Based on the evaluation results, generate the scoring criteria and specific scores for privacy, importance, and impact level; for example: mark the classification threshold of high-sensitive data as: 7 - 10 points, the classification threshold of medium-sensitive data as: 4 - 6 points, and the classification threshold of low-sensitive data as: 1 - 3 points.

[0027] According to the scoring results, calculate the sensitivity score, and the calculation formula is as follows: Among them, represents the classification threshold; represents the privacy score; represents the importance score; represents the impact level score; According to the sensitivity score of the data, classify the collected data into high-sensitive data, medium-sensitive data, and low-sensitive data.

[0028] In one embodiment, assume that the privacy score of patient ID is 9, the importance score is 8, and the impact level score is 7. Calculated through the above formula: Since the classification threshold of this data is relatively high (8.2), it is classified as high-sensitive data; Assume that the privacy score of dialysis machine pressure data is 5, the importance score is 6, and the impact level score is 4. Calculated through the above formula: Since the classification threshold of this data is at a medium level (5.2), it is classified as medium-sensitive data; Assume that the privacy score of room temperature data is 2, the importance score is 3, and the impact level score is 1.

[0029] Calculate the classification threshold according to the formula: Since the classification threshold of this data is low (2.2), it is classified as low-sensitivity data; Through the above method, the data collected by hemodialysis equipment can be scientifically classified into high-, medium-, and low-sensitivity data, which not only improves the accuracy of data classification, but also provides a basis for subsequent data encryption, access permission setting, and transmission channel selection, thereby effectively enhancing the security of data classification and transmission.

[0030] Encrypt and set access permissions for each type of data according to the sensitivity level, specifically: High-sensitivity data: Use a high-strength AES-256 symmetric encryption algorithm and hash value to encrypt high-sensitivity data. After generating the key, through a secure key distribution mechanism, such as: KMS distributes the key to the authorized receiving end, and authorizes the identity of the object with access to high-sensitivity data; The AES-256 symmetric encryption algorithm and hash value have a high encryption strength, which can effectively prevent data from being cracked, ensure that the data is not tampered with during transmission, and further improve the security of the data; High-sensitivity data contains personal identification information and key treatment parameters, which have a direct impact on patient privacy and treatment effects. Therefore, access permissions need to be strictly restricted to ensure that only authorized personnel can access, usually specific medical staff and equipment maintenance personnel.

[0031] Medium-sensitivity data: Use a medium-strength AES-128 symmetric encryption algorithm and CRC check method to encrypt medium-sensitivity data. After generating the key, distribute the key to the authorized receiving end through a secure key distribution mechanism, and allow equipment maintenance personnel and some medical staff to access; The AES-128 symmetric encryption algorithm and CRC check technology can provide sufficient security for medium-sensitivity data; Although medium-sensitivity data does not contain personal identification information, it still has a certain impact on patient treatment and equipment operation status, and it is necessary to ensure that only relevant maintenance personnel and medical staff can access.

[0032] Low-sensitivity data: Use the CRC check method to perform data integrity verification on low-sensitivity data, but do not perform encryption processing, and allow medical staff and equipment maintenance personnel to access freely; Low-sensitivity data has little impact on patient privacy and treatment effects. Therefore, encryption processing is not required, but in order to ensure that the data is not tampered with during transmission, data integrity verification is still required; At the same time, access permissions can be relaxed to allow more people to access, so as to facilitate equipment maintenance and data management and improve the efficiency of data management and transmission work.

[0033] Through the above method, encrypting various types of data and setting access permissions according to the sensitivity levels of various types of data can effectively protect the privacy and security of highly sensitive data, while optimizing resource utilization and ensuring the overall security of the data collected by hemodialysis equipment during transmission and storage.

[0034] According to different sensitivity levels, select different transmission channels and security protocols, and send the encrypted data to the receiving end. Specifically: Based on the sensitivity classification criteria, construct transmission channels and security protocols of different levels to form multi-channel transmission; Adopt an encrypted dedicated network channel, such as VPN, to transmit highly sensitive data separately, and use the TLS / SSL protocol, which can effectively prevent highly sensitive data from being stolen or tampered with during transmission.

[0035] Adopt an encrypted public network channel to transmit medium-sensitive data separately, and use the TLS / SSL protocol. On the premise of ensuring the secure transmission of medium-sensitive data in the public network, avoid transmitting it through the same channel as highly sensitive data, which may affect its efficiency.

[0036] Adopt a general public network channel to transmit low-sensitive data separately, and use basic network protocols such as TCP / IP. Since low-sensitive data has less impact on patient privacy and treatment effects, it can be transmitted using ordinary network protocols to save resources and improve transmission efficiency.

[0037] Add a sensitivity classification identifier to each data packet. When the receiving end receives various types of data, according to the sensitivity classification identifiers in various data packets, use the corresponding decryption algorithm and verification method to perform decryption processing and integrity verification to obtain various types of data.

[0038] A data security transmission system for hemodialysis equipment, the system includes: a data acquisition module, a sensitivity classification module, a sensitivity assessment module, a data division module, a data association module, and a security transmission module.

[0039] The data acquisition module is configured to be installed on a hemodialysis machine and is used to collect various types of data during dialysis in real time, such as: patient ID, blood flow rate, dialysate composition, dialysis pressure, equipment temperature, pressure, etc., to provide raw data for subsequent data processing and transmission.

[0040] The sensitivity classification module is configured to construct sensitivity classification criteria, and classify the data standards into highly sensitive data, medium-sensitive data, and low-sensitive data; provide a basic classification standard for subsequent data division to ensure that data can be reasonably classified according to its sensitivity.

[0041] A sensitivity assessment module, configured to use the medical data characteristic analysis method. For multi-dimensional characteristics such as the privacy, importance, and impact degree of data, define weights and weight values for data with different sensitivity levels. By assigning weight values to different dimensional characteristics, it ensures that the privacy, importance, and impact degree can be comprehensively analyzed when evaluating data sensitivity, so as to more accurately evaluate the sensitivity of data.

[0042] A data partitioning module, configured to score the multi-dimensional characteristics of various types of data, calculate the sensitivity scores, and classify various types of data into the corresponding sensitivity classification criteria based on the score results, providing a basis for subsequent secure transmission.

[0043] A data association module, configured to use a decision tree model to cluster and associate high-sensitivity data, medium-sensitivity data, low-sensitivity data, and their corresponding various types of data. Through the decision tree model, scientific classification and clustering association of data are carried out to ensure the accuracy and reliability of data classification, so that when real-time data is obtained subsequently, the sensitivity level can be known in a timely manner.

[0044] A secure transmission module, configured to formulate different security policies according to the sensitivity levels of various types of data, enable various types of data to be securely transmitted according to the specified encryption methods and transmission channels, and select appropriate encryption methods, transmission channels, and security protocols according to the sensitivity levels of the data to ensure the security and integrity of the data during the transmission process.

[0045] The beneficial effects achieved by the above content: By establishing a sensitivity classification standard, and defining the weights and weight values of each type of standard in multiple dimensions of privacy, importance, and impact degree; by scoring various types of data and calculating the sensitivity scores, the data is divided into high, medium, and low sensitivity data. And different types of data are encrypted in different ways according to different sensitivity levels, and the data is transmitted through different transmission channels and security protocols. It can not only effectively improve the security and confidentiality of hemodialysis data during the transmission process, prevent the leakage of high-sensitivity data, but also improve the transmission efficiency of hemodialysis data and enhance the flexibility of data transmission.

[0046] Working principle: The patient's personal information, dialysis parameters, and device operation data collected in real time are used to establish three sensitivity classification standards of high, medium, and low. Define the privacy weight, importance weight, and impact degree weight for each type of sensitivity standard, and score various types of data based on these three, thereby calculating the sensitivity scores of each data type. According to the sensitivity scores, the collected data is divided into high, medium, and low sensitivity data, and then different encryption processes are performed on various types of data according to different sensitivity levels. Based on different transmission channels and security protocols, the encrypted data is securely transmitted to the receiving end respectively.

[0047] In one embodiment, the sensitivity assessment module further includes: The data risk setting sub-module sets abnormally high-risk data, abnormally medium-risk data, and abnormally low-risk data respectively, corresponding to the three levels of the risk matrix for sensitive data, namely: high risk, medium risk, and low risk; according to the risk matrix, evaluate whether the classification thresholds of each type of sensitivity classification standard are accurate, and obtain the final scoring standard and specific scores. The data impact risk analysis sub-module intelligently calculates the final sensitivity scores of highly sensitive data, medium-sensitive data, and low-sensitive data according to the final scoring standard and specific scores. The data risk intelligent warning sub-module determines the final highly sensitive data, medium-sensitive data, and low-sensitive data according to the final sensitivity scores; corresponds the final highly sensitive data, medium-sensitive data, and low-sensitive data to the three levels of high risk, medium risk, and low risk respectively; according to the three levels of high risk, medium risk, and low risk, when data anomalies occur, issue abnormally high-risk warnings, abnormally medium-risk warnings, and abnormally low-risk warnings respectively.

[0048] Principle and beneficial effects: The sensitivity assessment module, through the data risk setting sub-module, sets abnormally high-risk data, abnormally medium-risk data, and abnormally low-risk data respectively; abnormally high-risk data includes high-sensitive data anomalies; abnormally medium-risk data includes medium-sensitive data anomalies; abnormally low-risk data includes low-sensitive data anomalies; data anomalies include: data leakage anomalies, being tampered with anomalies, or the number of incorrect key inputs exceeding 5 times; data being tampered with includes being inconsistent with the system backup data; the data impact risk analysis sub-module intelligently calculates the final sensitivity scores of highly sensitive data, medium-sensitive data, and low-sensitive data, and correspondingly compares with the risk matrix scores of abnormally high-risk data, abnormally medium-risk data, and abnormally low-risk data; the data risk intelligent warning sub-module conducts intelligent data risk warnings according to the correspondence between highly sensitive data, medium-sensitive data, and low-sensitive data and abnormally high-risk data, abnormally medium-risk data, and abnormally low-risk data; avoid risks, reduce the incidence of various risks, and reduce the degree of risk harm; enhance the security of dialysis data, and stabilize the data transmission state; increase the stability of secure dialysis data transmission. The data risk intelligent warning includes: when the room temperature or humidity in the environmental monitoring data exceeds the defined safe range of room temperature or exceeds the defined safe range of humidity, issue an environmental anomaly risk warning; the defined safe range of room temperature includes: 10°C - 35°C; the defined safe range of humidity includes: humidity RH ≥ 60%; conduct intelligent automatic warnings through sensitivity levels and risk assessment predictions, timely warnings to reduce risk harm, reduce the incidence of various risks and reduce the degree of risk harm; enhance the security of dialysis data, and stabilize the data transmission state; increase the stability of secure dialysis data transmission; be able to timely warn to reduce risk harm, and greatly reduce the incidence of various risks and the degree of risk harm.

[0049] In one embodiment, the secure transmission module further includes: The system encryption secure transmission sub-module, the cloud encryption information transmission sub-module, the patient information decryption sub-module, and the patient information security response sub-module; The system encryption secure transmission sub-module encrypts the highly sensitive data during the dialysis process of the hemodialysis device through the system encryption operation unit, selects a random number, performs system encryption, and obtains the system-encrypted highly sensitive data; through data security transmission communication, the system-encrypted highly sensitive data and The second encryption key are transmitted to the cloud data interface unit; the first encryption private key and the first encryption public key are generated through the key generation unit; through the re-encryption unit, the first encryption private key and the first encryption public key are used to generate the first re-encryption key; The cloud encryption information transmission sub-module receives the system-encrypted highly sensitive data and The second encryption key through the cloud data interface unit; through the cloud encryption unit, the system-encrypted highly sensitive data is re-encrypted in the cloud to obtain the multi-encrypted highly sensitive data; The patient information decryption sub-module, when the patient-side APP sends a request to view highly sensitive data, the cloud encryption information transmission sub-module transmits the multi-encrypted highly sensitive data to the patient-side APP; the patient-side APP inputs the decryption key to decrypt the multi-encrypted highly sensitive data; if the input decryption key is correct, the data can be decrypted and obtained; if the decryption key of the patient-side APP is incorrect or no decryption key is input, the decryption function outputs invalid characters; The patient information security response sub-module, if it receives the information that the decryption key of the patient-side APP is incorrect, verifies whether the patient-side APP is operated by the patient himself or the authorized person of the patient through the patient-side APP associated verification information terminal; the associated verification information terminal includes the verification information email and the social software terminal; if it is verified that the operation is by the patient himself or the authorized person of the patient, the first encryption public key is sent to the patient-side APP associated verification information terminal.

[0050] The principle and effect are as follows: The system encryption secure transmission sub-module 1001, the cloud encryption information transmission sub-module 1002, the patient information decryption sub-module 1003, and the patient information security response sub-module 1004; through multi-encryption cross-terminal secure transmission, multi-platform data sharing and secure data transmission are carried out; the operation formula for the multi-encryption cross-terminal secure transmission process of the secure transmission module is as follows: Among them, kijA represents the system key generation data; represents the key generation function; respectively represent the first encryption private key and the first encryption public key, ; respectively represent the second encryption private key and the second encryption public key, ; represents the highly sensitive data encrypted by this system; kijB represents the key generation data of the patient-side APP; represents the data after being encrypted by the encryption operation function of this system; represents the encryption operation function of this system; represents the second re-encryption key generated by the re-encryption key generation function according to the second encryption public key; represents the re-encryption operation function; Mind represents the highly sensitive data encryption information <ind, M> at the storage location of the corresponding encrypted plaintext of the highly sensitive data; set the index space I of the corresponding encrypted plaintext storage location ind; set the function (K×I)->{0, 1}; ∈K; ind∈I; i represents the i-th type of highly sensitive data; j represents the j-th information in the i-th type of highly sensitive data; for example, i = 1 represents the patient identity information; j = 1 represents the age information in the patient identity information; r represents the first random number; rk represents the first re-encryption key; represents the hash function; represents the ciphertext binary tuple; represents the data after the highly sensitive data is encrypted with the public key; represents the second random number; represents all the encrypted data; f represents the decryption function corresponding to the verification private key; if , the decryption function outputs . If , the decryption function outputs invalid characters; The encryption and secure transmission sub-module of this system encrypts the highly sensitive data during the dialysis process of the hemodialysis device through the encryption operation unit of this system, selects a random number, performs the encryption of this system, and obtains the highly sensitive data encrypted by this system; through the secure data transmission communication, transmits the highly sensitive data encrypted by this system and the second re-encryption key to the cloud data interface unit; generates the first encryption private key and the first encryption public key through the key generation unit; through the re-encryption unit, generates the first re-encryption key from the first encryption private key and the first encryption public key; The cloud encryption information transmission sub-module receives the highly sensitive data encrypted by this system and the second re-encryption key through the cloud data interface unit; performs cloud re-encryption on the highly sensitive data encrypted by this system through the cloud encryption unit to obtain the multi-encrypted highly sensitive data; Patient information decryption sub-module. When the patient-side APP sends a request to view highly sensitive data, the cloud encrypted information transmission sub-module transmits the multi-encrypted highly sensitive data to the patient-side APP. The patient-side APP inputs the decryption key to decrypt the multi-encrypted highly sensitive data. If the input decryption key is correct, verify the decryption function corresponding to the private key, verify , and the decryption function outputs . If , then the decryption key of the patient-side APP is incorrect or the decryption key is not input, and the decryption function outputs invalid characters; Patient information security response sub-module. If it receives the error information of the decryption key of the patient-side APP, it verifies whether the patient-side APP is operated by the patient himself or the authorized person of the patient through the associated verification information end of the patient-side APP. The associated verification information end includes the verification information email and the social software end. If it is verified that it is operated by the patient himself or the authorized person of the patient, send the first encryption public key to the associated verification information end of the patient-side APP; Through multi-encrypted cross-terminal secure transmission, the highly sensitive data during the dialysis process of the hemodialysis device is encrypted and transmitted to the cloud platform for multi-cloud encryption and encrypted cloud storage, and multi-platform data sharing and secure data transmission are carried out among the hemodialysis device system end, the cloud platform and the patient-side APP; significantly improve the efficiency of multi-platform data sharing and the security of dialysis data transmission; significantly reduce the risks of information theft and information loss.

[0051] It should be noted that in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the term "comprising", "including" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements not only includes those elements, but also includes other elements not expressly listed, or further includes elements inherent to such process, method, article or device.

[0052] Although the embodiments of the present invention have been shown and described, for those of ordinary skill in the art, it can be understood that various changes, modifications, substitutions and variations can be made to these embodiments without departing from the principles and spirit of the present invention, and the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A data security transmission method for hemodialysis equipment, characterized in that, The method includes the following steps: Collect various types of data in real time during hemodialysis based on a hemodialysis device, including: patient personal information, dialysis parameters, and device operation data; Establish a sensitivity classification standard, including: highly sensitive data, moderately sensitive data, and low-sensitive data, and use a decision tree model to associate the sensitivity classification standard with various types of data; Define different weights and weight values for each type of sensitivity standard according to data requirements, including: privacy weight, importance weight, and impact degree weight; Score various types of data based on privacy, importance, and impact degree; based on the scoring results, calculate the sensitivity score for each data type; Classify the collected data into highly sensitive data, moderately sensitive data, and low-sensitive data according to the sensitivity score of the data; Perform encryption processing and set access permissions for various types of data according to the sensitivity level, and select different transmission channels and security protocols to send the encrypted data to the receiving end.

2. The data security transmission method for a hemodialysis device according to claim 1, characterized in that, Define different weights and weight values for each type of sensitivity standard, specifically: Obtain the historical data of the hemodialysis device and analyze the historical data based on the medical data characteristic analysis method; Define the weights of highly sensitive data, moderately sensitive data, and low-sensitive data based on the analysis results as: privacy, importance, and impact degree; Use the 4-4-2 distribution method to allocate weight values to privacy, importance, and impact degree, so that privacy and importance each account for 40% of the weight value, and the impact degree accounts for 20% of the weight value; Based on the weight values of privacy, importance, and impact degree, combined with clinical experience, set the classification threshold for each type of sensitivity classification standard.

3. The data security transmission method for a hemodialysis device according to claim 2, wherein Score various types of data based on privacy, importance, and impact degree, specifically: Establish a risk matrix to evaluate whether the classification threshold of each type of sensitivity classification standard is accurate; Generate a scoring standard and specific score values for privacy, importance, and impact degree based on the evaluation results; Calculate the sensitivity score according to the scoring results, and the calculation formula is as follows: Among them, is denoted as the classification threshold; is denoted as the privacy score; is denoted as the importance score; is denoted as the impact degree score.

4. The data security transmission method for a hemodialysis device according to claim 2, characterized in that, Establish a sensitivity classification standard, specifically: Based on the analysis results of the historical data by the medical data characteristic analysis method, classify the information with personal identification information or related to patient privacy and core treatment parameters as highly sensitive data, including: patient identity information, real-time vital signs, blood biochemical indicators, abnormal alarm data, and treatment prescription parameters; Classify the information that reflects the treatment process but does not directly determine life safety-related information as moderately sensitive data, including: device operation logs, routine treatment parameter records, consumable usage data, and de-identified treatment data; Classify the anonymized statistical data or device basic information that is not related to individual patients as low-sensitive data, including: device maintenance records, environmental monitoring data, anonymized aggregated statistical reports, and non-clinical device data; Use a decision tree model to cluster and associate highly sensitive data, moderately sensitive data, low-sensitive data, and their corresponding historical data; Input various types of data collected in real time into the decision tree model to match the corresponding sensitivity classification standard.

5. The data security transmission method for a hemodialysis device according to claim 1, wherein Select different transmission channels and security protocols to send the encrypted data to the receiving end, specifically: Based on the sensitivity classification criteria, different levels of transmission channels and security protocols are constructed to form multi-channel transmission; Separate transmission of highly sensitive data is carried out using an encrypted dedicated network channel and the TLS / SSL protocol; Separate transmission of moderately sensitive data is carried out using an encrypted public network channel and the TLS / SSL protocol; Separate transmission of low-sensitive data is carried out using a normal public network channel, and basic network protocols are used; A sensitivity classification identifier is added to each data packet. When the receiving end receives various types of data, according to the sensitivity classification identifier in each type of data packet, the corresponding decryption algorithm and verification method are used for decryption processing and integrity verification to obtain various types of data.

6. The data security transmission method for a hemodialysis device according to claim 5, wherein Encrypt various types of data and set access permissions according to the sensitivity level, specifically: Highly sensitive data: Use a high-strength AES-256 symmetric encryption algorithm and hash value to encrypt highly sensitive data. After generating the key, the key is distributed to authorized receiving ends through a secure key distribution mechanism, and the identity of the object authorized to access highly sensitive data is authorized; Moderately sensitive data: Use a medium-strength AES-128 symmetric encryption algorithm and CRC verification method to encrypt moderately sensitive data. After generating the key, the key is distributed to authorized receiving ends through a secure key distribution mechanism, and device maintenance personnel and some medical staff are allowed to access; Low-sensitive data: Use the CRC verification method to perform data integrity verification on low-sensitive data, but no encryption processing is performed, and medical staff and device maintenance personnel are allowed to access freely.

7. A data security transmission system for a hemodialysis device, which is applied to the data security transmission method for a hemodialysis device according to any one of claims 1-6, characterized in that The system includes: a sensitivity classification module, a sensitivity evaluation module, a data partitioning module, and a secure transmission module; The sensitivity classification module is configured to construct sensitivity classification criteria and classify data standards into highly sensitive data, moderately sensitive data, and low-sensitive data; The sensitivity evaluation module is configured to use the medical data characteristic analysis method, and define weights and weight values for data of different sensitivity levels with multi-dimensional characteristics such as data privacy, importance, and impact degree; The data partitioning module is configured to score the multi-dimensional characteristics of various types of data, calculate the sensitivity score, and based on the score results, partition various types of data into the corresponding sensitivity classification criteria; The secure transmission module is configured to formulate different security policies according to the sensitivity levels of various types of data; enable various types of data to be securely transmitted according to the specified encryption method and transmission channel.

8. The data security transmission system for a hemodialysis device according to claim 7, wherein The system further includes: a data acquisition module and a data association module; The data acquisition module is configured to be installed on a hemodialysis machine and is used to collect various types of data during the dialysis process in real time; The data association module is configured to use a decision tree model to perform clustering association on highly sensitive data, moderately sensitive data, low-sensitive data, and their corresponding various types of data.

9. The data security transmission system for a hemodialysis device according to claim 7, wherein The sensitivity evaluation module further includes: The data risk setting sub-module, which respectively sets abnormally high-risk data, abnormally medium-risk data, and abnormally low-risk data, corresponding to the three levels of the risk matrix of sensitive data, namely: high risk, medium risk, and low risk; according to the risk matrix, evaluate whether the classification threshold of each type of sensitivity classification criteria is accurate, and obtain the final scoring criteria and specific scores; The data impact risk analysis sub-module intelligently calculates the final sensitivity scores of highly sensitive data, medium-sensitive data, and low-sensitive data according to the final scoring criteria and specific scores. The data risk intelligent warning sub-module determines the final highly sensitive data, medium-sensitive data, and low-sensitive data according to the final sensitivity scores; corresponds the final highly sensitive data, medium-sensitive data, and low-sensitive data to the three levels of high risk, medium risk, and low risk respectively; according to the three levels of high risk, medium risk, and low risk, when data anomalies occur, abnormal high-risk warnings, abnormal medium-risk warnings, and abnormal low-risk warnings are issued respectively.

10. The data security transmission system for a hemodialysis device according to claim 7, characterized in that, The said security transmission module further includes: The system encryption security transmission sub-module, the cloud encryption information transmission sub-module, the patient information decryption sub-module, and the patient information security response sub-module; The encryption and secure transmission sub-module of this system encrypts the highly sensitive data during the dialysis process of the hemodialysis device through the encryption operation unit of this system, selects a random number, performs encryption of this system, and obtains the highly sensitive data encrypted by this system; through data secure transmission communication, transmits the highly sensitive data encrypted by this system and the second encryption key to the cloud data interface unit; generates the first encryption private key and the first encryption public key through the key generation unit; through the re-encryption unit, generates the first re-encryption key from the first encryption private key and the first encryption public key; Cloud encryption information transmission sub-module, which receives the highly sensitive data encrypted by this system and the second encryption key through the cloud data interface unit; through the cloud encryption unit, re-encrypts the highly sensitive data encrypted by this system in the cloud to obtain multi-encrypted highly sensitive data; The patient information decryption sub-module, when the patient-side APP sends a request to view highly sensitive data, the cloud encryption information transmission sub-module transmits the multi-encrypted highly sensitive data to the patient-side APP; the patient-side APP inputs the decryption key to decrypt the multi-encrypted highly sensitive data; if the input decryption key is correct, the data can be decrypted and obtained; if the decryption key of the patient-side APP is incorrect or no decryption key is input, the decryption function outputs invalid characters. The patient information security response sub-module, if it receives the error information of the decryption key of the patient-side APP, verifies whether the patient-side APP is operated by the patient himself or the authorized person of the patient through the associated verification information end of the patient-side APP; the associated verification information end includes the verification information email and the social software end; if it is verified that the operation is by the patient himself or the authorized person of the patient, the first encryption public key is sent to the associated verification information end of the patient-side APP.

Images