Three-dimensional physical examination system sharing system patient information privacy protection method

Abstract

The invention provides a patient information privacy protection method for a sharing system of a three-dimensional physical examination system, belongs to the technical field of data processing, and is used for effectively balancing the requirements of privacy protection and data sharing. The method comprises the steps that the electronic equipment obtains physical examination information of a patient, the physical examination information comprises a first type of target physical examination information, a second type of target physical examination information and a third type of target physical examination information, and the privacy protection priority of the first type of target physical examination information is higher than that of the second type of target physical examination information; the electronic equipment executes first security processing on the first type of target physical examination information to obtain first type of target hidden information, and the electronic equipment executes second security processing on the second type of target physical examination information to obtain second type of target hidden information; and the electronic equipment stores the first type of target hidden information, the second type of target hidden information and the third type of target physical examination information into a three-dimensional physical examination system sharing system.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data processing, and in particular to a patient information privacy protection method for a three-dimensional physical examination system sharing system. BACKGROUND

[0002] With the rapid development of medical informatization, three-dimensional physical examination system sharing systems have been widely used in medical institutions to store and share patient physical examination information, so as to promote the collaborative analysis and diagnosis of medical data. However, such data sharing also poses a serious risk of patient privacy leakage. Existing privacy protection methods usually use uniform encryption or desensitization technology, and fail to differentiate the information according to the sensitivity of the information. For example, identity identification, medical history records and other high-sensitive information have different privacy protection requirements from general physical examination indicators (such as height, weight), but existing methods often apply the same level of protection to all information, resulting in either over-protection affecting the practicability and sharing efficiency of the data, or insufficient protection making sensitive information vulnerable to malicious access. SUMMARY

[0003] The present application provides a patient information privacy protection method for a three-dimensional physical examination system sharing system, which improves the security and flexibility of the three-dimensional physical examination system sharing system, and effectively balances the needs of privacy protection and data sharing.

[0004] To achieve the above-mentioned purpose, the present application adopts the following technical solutions: In a first aspect, a patient information privacy protection method for a three-dimensional physical examination system sharing system is provided, applied to an electronic device, and the method comprises: the electronic device acquires physical examination information of a patient, the physical examination information comprising target physical examination information of a first type, target physical examination information of a second type, and target physical examination information of a third type, the privacy protection priority of the target physical examination information of the first type being higher than the privacy protection priority of the target physical examination information of the second type, and the privacy protection priority of the target physical examination information of the second type being higher than the privacy protection priority of the target physical examination information of the third type; the electronic device performs first security processing on the target physical examination information of the first type to obtain target hidden information of the first type, and performs second security processing on the target physical examination information of the second type to obtain target hidden information of the second type, the information security of the first security processing being higher than the information security of the second security processing; and the electronic device stores the target hidden information of the first type, the target hidden information of the second type, and the target physical examination information of the third type into the three-dimensional physical examination system sharing system, in which the target hidden information of the first type and the target hidden information of the second type are associated, and the target hidden information of the second type and the target physical examination information of the third type are associated.

[0005] Therefore, by classifying the physical examination information into three categories according to the privacy protection priority, and performing higher level security processing on high priority information, hierarchical privacy protection is achieved. This ensures that highly sensitive information (such as the first category) is protected the most, moderately sensitive information (such as the second category) is appropriately protected, and low sensitive information (such as the third category) remains in its original state, thereby optimizing data utility while ensuring privacy. When storing, the hidden information of the first and second categories is associated with the third category information, so that authorized users can trace the data relationship for medical analysis, but unauthorized users cannot access the original sensitive content. This method improves the security and flexibility of the three-dimensional physical examination system sharing system, effectively balancing the needs of privacy protection and data sharing.

[0006] Optionally, the target physical examination information of the first category is information that is not shared by default, and the electronic device performs first security processing on the target physical examination information of the first category to obtain target hidden information of the first category, including: the electronic device performs shielding processing on the target physical examination information of the first category to obtain shielded physical examination information, shielding processing refers to filtering out internal parameters of information; the electronic device performs encryption processing on the shielded physical examination information to obtain the target hidden information of the first category. As can be seen, by performing shielding processing (filtering out internal parameters) on the first category target physical examination information and then performing encryption processing, double security protection is achieved. Shielding processing eliminates detailed parameters of information, reducing the risk of direct leakage, while encryption processing ensures that even if the data is accessed illegally, the original content cannot be interpreted. This combination of measures significantly enhances the security of high sensitive information, while maintaining the storage format of the data in the sharing system, so that authorized users can only restore the information through a specific key, thereby preventing privacy leakage in extreme scenarios (such as system intrusion).

[0007] Optionally, the electronic device performs second security processing on the target physical examination information of the second category to obtain target hidden information of the second category, including: the electronic device performs desensitization and fuzzing processing on the target physical examination information of the second category to obtain the target hidden information of the second category, fuzzing processing refers to blurring the range of information.

[0008] As can be seen, by performing desensitization and fuzzing processing on the second category target physical examination information, the data is partially preserved while protecting privacy. Desensitization processing removes direct identifiers (such as name), and fuzzing processing converts specific values to ranges (such as age to age range), so that the information cannot be directly associated with individuals, but can still be used for statistical analysis and macro research. This method reduces the risk of leakage of moderately sensitive information, while ensuring the usability of the sharing system in medical research, avoiding data waste caused by excessive protection.

[0009] In one possible design, the electronic device stores the first type of target hidden information, the second type of target hidden information, and the third type of target health examination information into a three-dimensional health examination system sharing system, including: the electronic device converts the third type of target health examination information into third type of third point cloud data in a two-dimensional space corresponding to an xy coordinate system according to a third rule, and the third type of point cloud data is all converted from the third type of health examination information; the electronic device converts the second type of target hidden information into second type of second point cloud data in the two-dimensional space according to the third rule and a region in the two-dimensional space where the third point cloud data is located, and the region in the two-dimensional space where the second point cloud data is located overlaps with the region in the two-dimensional space where the third point cloud data is located, and the second type of point cloud data is all converted from the second type of hidden information; and the electronic device converts the first type of target hidden information into first type of first point cloud data in the two-dimensional space according to the third rule and a region in the two-dimensional space where the second point cloud data is located, the region in the two-dimensional space where the first point cloud data is located overlaps with the region in the two-dimensional space where the second point cloud data is located, and the region in the two-dimensional space where the first point cloud data is located does not overlap with the region in the two-dimensional space where the third point cloud data is located, and the first type of point cloud data is all converted from the first type of hidden information.

[0010] As can be seen, by converting various types of information into point cloud data in a two-dimensional space and ensuring the overlap between point cloud regions, the visualization storage of information correlation is realized. The third type of information is directly converted into point cloud data, the second type of hidden information overlaps with the third type of point cloud region, and the first type of hidden information overlaps with the second type of point cloud region but does not overlap with the third type. This hierarchical structure enables the data to maintain inherent correlation when stored, but unauthorized users cannot directly interpret the hidden content. Point cloud conversion improves the efficiency and security of data storage, while providing authorized users with a spatial relationship-based retrieval and restoration approach, enhancing the overall reliability of the sharing system.

[0011] Optionally, the electronic device converts the target hidden information of the second type into the second point cloud data of the second type in the two-dimensional space according to the third rule and the area in which the third point cloud data is located in the two-dimensional space, including: the electronic device converts the target hidden information of the second type into initial point cloud data of the second type in the two-dimensional space according to the third rule; the electronic device determines whether the initial point cloud data of the second type is the point cloud data with the largest overlapping area with the area in which the third point cloud data is located in the two-dimensional space among the point cloud data of the second type according to the area in which the third point cloud data is located in the two-dimensional space; if yes, the electronic device determines the initial point cloud data of the second type as the second point cloud data, and determines the third rule as the second rule; if no, the electronic device translates the initial point cloud data of the second type by a second distance to obtain translated point cloud data of the second type, determines the translated point cloud data of the second type as the second point cloud data, and updates the preset rule to include the second distance to obtain the second rule, wherein the translated point cloud data of the second type is the point cloud data with the largest overlapping area with the area in which the third point cloud data is located in the two-dimensional space among the point cloud data of the second type.

[0012] It can be seen that by dynamically adjusting the position of the second type of point cloud data to ensure that it has the largest overlapping area with the third type of point cloud data, the accuracy of information association is optimized. If the initial point cloud data does not meet the maximum overlapping condition, it is adjusted by translation and the rule is updated, which improves the flexibility and accuracy of data storage. This method makes the association of the second type of hidden information and the third type of information in the two-dimensional space more closely, which facilitates subsequent authorized users to quickly locate and restore data, while reducing storage redundancy and improving the performance of the sharing system.

[0013] Optionally, the electronic device converts the target hidden information of the second type into the second point cloud data of the second type in the two-dimensional space according to the third rule and the area in which the third point cloud data is located in the two-dimensional space, including: the electronic device converts the target hidden information of the second type into initial point cloud data of the second type in the two-dimensional space according to the third rule; the electronic device determines whether the initial point cloud data of the second type is the point cloud data with the largest overlapping area with the area in which the third point cloud data is located in the two-dimensional space among the point cloud data of the second type according to the area in which the third point cloud data is located in the two-dimensional space; if yes, the electronic device determines the initial point cloud data of the second type as the second point cloud data, and determines the third rule as the second rule; if no, the electronic device translates the initial point cloud data of the second type by a second distance to obtain translated point cloud data of the second type, determines the translated point cloud data of the second type as the second point cloud data, and updates the preset rule to include the second distance to obtain the second rule, wherein the translated point cloud data of the second type is the point cloud data with the largest overlapping area with the area in which the third point cloud data is located in the two-dimensional space among the point cloud data of the second type.

[0014] It can be seen that by adjusting the first type of point cloud data in a similar manner as described above, ensuring that it has the maximum overlapping area with the second type of point cloud data, the association between high-sensitive information and medium-sensitive information is strengthened. The determination and updating of the first rule ensure the consistency of the conversion process, enabling authorized users to accurately trace the data chain when restoring. This enhances the coherence and reliability of the overall privacy protection system, while avoiding data loss or incorrect access due to unclear association.

[0015] Optionally, the electronic device stores the first type of target hidden information, the second type of target hidden information, and the third type of target medical information into a three-dimensional medical system sharing system, including: the electronic device stores the coordinates of the first point cloud data in a two-dimensional space, the coordinates of the second point cloud data in a two-dimensional space, and the coordinates of the third point cloud data in a two-dimensional space into the three-dimensional medical system sharing system.

[0016] It can be seen that by storing the coordinates of the point cloud data instead of the original information, the risk of privacy leakage is further reduced. The coordinate data occupies a small storage space in the three-dimensional medical system sharing system and cannot be directly read as sensitive content, but it can be converted back to the original information through rules. This method improves the security and efficiency of data storage, while supporting spatial queries and association analysis based on coordinates, enabling the sharing system to maintain high-performance data processing capabilities while protecting privacy.

[0017] Optionally, the method further includes: the electronic device stores the first rule into a first secure storage area, and then configures the reading key of the first secure storage area as the key information in the second type of target medical information; and the electronic device also stores the second rule into a second secure storage area, and then configures the reading key of the second secure storage area as the key information in the third type of target medical information.

[0018] It can be seen that by storing the first rule and the second rule into secure storage areas and using key information as the reading key, the authorized control of rule access is increased. Only users who have the corresponding key information (such as specific data in the second type of hidden information or the third type of information) can open the secure area and obtain the rules, preventing unauthorized restoration of hidden information. This provides an additional security layer, ensuring the integrity and confidentiality of the entire privacy protection system, and reducing the risk of malicious use of rules.

[0019] Optionally, the method further comprises: the electronic device reading third point cloud data from the three-dimensional physical examination system sharing system, and inversely converting the third point cloud data into target physical examination information of a third type according to a third rule; the electronic device obtaining the second rule according to key information in the target physical examination information of the third type; the electronic device reading point cloud data of a second type from the three-dimensional physical examination system sharing system, which has the largest overlapping area with the region in the two-dimensional space where the third point cloud data is located, and determining the point cloud data of the second type with the largest overlapping area as second point cloud data, and inversely converting the second point cloud data into target hidden information of the second type according to the second rule; the electronic device obtaining the third rule according to the key information in the target physical examination information of the second type; the electronic device reading point cloud data of a first type from the three-dimensional physical examination system sharing system, which has the largest overlapping area with the region in the two-dimensional space where the second point cloud data is located, and determining the point cloud data of the first type with the largest overlapping area as first point cloud data, and inversely converting the first point cloud data into target hidden information of the first type according to the first rule.

[0020] It can be seen that the above-mentioned scheme describes a process of gradually restoring information from the sharing system. By inversely converting point cloud data and using key information to obtain rules, it is ensured that only legitimate users can access complete information. Starting from the third type of information, the second type and the first type of hidden information are gradually restored. This method maintains the hierarchy of data association while strictly controlling access rights. This improves the usability and security of the sharing system in practical applications, enabling medical professionals to efficiently access data when needed without exposing sensitive information to unauthorized parties.

[0021] Optionally, the electronic device obtains the second rule according to the key information in the target physical examination information of the third type, comprising: the electronic device uses the key information in the target physical examination information of the third type as a reading key to open a second secure storage area; in the state that the second secure storage area is opened, the second rule is obtained from the second secure storage area; the electronic device obtains the first rule according to the key information in the target physical examination information of the second type, comprising: the electronic device uses the key information in the target physical examination information of the second type as a reading key to open a first secure storage area; in the state that the first secure storage area is opened, the first rule is obtained from the first secure storage area.

[0022] It can be seen that by using key information to open a secure storage area, strict authorization of rule access is ensured. Using the key information in the target physical examination information of the third type to open the second secure storage area, and using the key information in the target physical examination information of the second type to open the first secure storage area, forms a multi-layer access control to prevent rule leakage. This design enhances the defense depth of the system, so that even if part of the information is accessed, it is not easy to restore high-sensitive content, thereby comprehensively improving the privacy protection level.

[0023] In a second aspect, an electronic device configured to perform the method of the first aspect is provided.

[0024] In a third aspect, a computer-readable storage medium is provided, comprising: a computer program or instructions; when the computer program or instructions are run on a computer, the computer is caused to perform the method of the first aspect. BRIEF DESCRIPTION OF DRAWINGS

[0025] Figure 1 A flowchart of a patient information privacy protection method of a three-dimensional physical examination system sharing system provided in an embodiment of the present application is shown. Figure 2 A structural diagram of an electronic device provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0026] The technical solutions in the present application will be described below with reference to the accompanying drawings.

[0027] The present application will present various aspects, embodiments or features around a system which can include multiple devices, components, modules, etc. It should be understood and appreciated that each system can include additional devices, components, modules, etc., and / or can not include all the devices, components, modules, etc. discussed in connection with the accompanying drawings. In addition, combinations of these solutions can also be used.

[0028] In addition, in the embodiments of the present application, the words "example", "for example", etc. are used to mean serving as an example, instance or illustration. Any embodiment or design solution described as "example" in the present application should not be interpreted as more preferred or more advantageous than other embodiments or design solutions. Rather, the word "example" is used to present the concept in a specific manner.

[0029] In the embodiments of the present application, "information", "signal", "message", "channel" and "signaling" can be used interchangeably at times. It should be pointed out that when the distinction is not emphasized, the meanings expressed are matched. "Of", "corresponding" and "relevant" can be used interchangeably at times. It should be pointed out that when the distinction is not emphasized, the meanings expressed are matched. In addition, the " / " mentioned in the present application can be used to represent the relationship of "or".

[0030] The network architecture and service scenarios described in the embodiments of the present application are used to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided by the embodiments of the present application. Those skilled in the art can know that, with the evolution of network architecture and the appearance of new service scenarios, the technical solutions provided by the embodiments of the present application are also applicable to similar technical problems.

[0031] Exemplarily, Figure 1 The flowchart of the patient information privacy protection method of the three-dimensional physical examination system sharing system provided by the embodiments of the present application. The method can be applied to an electronic device.

[0032] As Figure 1 The flow of the patient information privacy protection method of the three-dimensional physical examination system sharing system is as follows: S101, the electronic device obtains the physical examination information of the patient, and the physical examination information includes first target physical examination information, second target physical examination information and third target physical examination information.

[0033] The privacy protection priority of the first target physical examination information is higher than that of the second target physical examination information, and the privacy protection priority of the second target physical examination information is higher than that of the third target physical examination information.

[0034] Among them, the first target physical examination information (i.e. core privacy) is information that is not shared by default, for example, the first target physical examination information can include at least one of the following information of the patient: ID number, mobile phone number, face three-dimensional model, or medical history (such as infectious disease, genetic disease) and the like. The second target physical examination information is sensitive privacy, for example, the second target physical examination information can include at least one of the following information of the patient: name, age, three-dimensional organ model (such as liver, heart), or key physical examination index (such as blood sugar, tumor marker) and the like, which needs to be conditionally shared. The third target physical examination information is general privacy, for example, the third target physical examination information can include at least one of the following information of the patient: physical examination date, institution name, or routine index (such as height, weight, non-biometric feature associated item) and the like, which can be limitedly publicly shared.

[0035] The electronic device can automatically scan the three-dimensional physical examination data of the patient, and label the information level according to the classification rule, that is, obtain the first target physical examination information, the second target physical examination information and the third target physical examination information.

[0036] S102, the electronic device performs first security processing on the first target physical examination information to obtain first target hidden information, and performs second security processing on the second target physical examination information to obtain second target hidden information.

[0037] The information security of the first security processing is higher than that of the second security processing.

[0038] For the first type of target physical examination information: The electronic device can perform shielding processing on the first type of target physical examination information to obtain shielded physical examination information. Shielding processing refers to filtering out internal parameters of information, such as directly replacing a three-dimensional face model with a two-dimensional face contour. The electronic device performs encryption processing on the shielded physical examination information to obtain the first type of target hidden information, such as using the SM4 national encryption algorithm for encryption, and only authorized administrators can decrypt.

[0039] It can be seen that by performing shielding processing (filtering out internal parameters) on the first type of target physical examination information and then performing encryption processing, double security protection is achieved. Shielding processing eliminates detailed parameters of information, reducing the risk of direct leakage, while encryption processing ensures that even if data is accessed illegally, the original content cannot be read. This combination of measures significantly enhances the security of high-sensitive information, while maintaining the storage format of data in the sharing system, so that authorized users can only restore information through a specific key, thereby preventing privacy leakage in extreme scenarios (such as system intrusion).

[0040] For the second type of target physical examination information: The electronic device can perform desensitization and fuzzing processing on the second type of target physical examination information to obtain the second type of target hidden information. Fuzzing processing refers to blurring the range of information, such as removing individualized features from a three-dimensional organ model (such as a tumor location only labeled as "liver area abnormality" without showing specific coordinates), and retaining range values for key indicators (such as blood sugar "6.1-7.0mmol / L" without showing the exact value 6.5mmol / L).

[0041] It can be seen that by performing desensitization and fuzzing processing on the second type of target physical examination information, privacy is protected while retaining part of the utility of the data. Desensitization processing removes direct identifiers (such as names), such as desensitizing the name to "Zhang San", while fuzzing processing converts specific values to ranges (such as age to age range), making it impossible to directly associate the information to an individual, but still useful for statistical analysis and macro research. This method reduces the risk of leakage of moderately sensitive information, while ensuring the usability of the sharing system in medical research, avoiding data waste caused by excessive protection.

[0042] The desensitization and fuzzing processing is real-time reversible (only authorized users can restore part of the information according to permissions), and the restoration operation requires two-factor authentication (such as face recognition + dynamic password).

[0043] S103, the electronic device stores the first type of target hidden information, the second type of target hidden information, and the third type of target physical examination information into the three-dimensional physical examination system sharing system.

[0044] In the three-dimensional physical examination system sharing system, the first type of target hidden information is associated with the second type of target hidden information, and the second type of target hidden information is associated with the third type of target physical examination information.

[0045] For example, the electronic device can convert the third type of target physical examination information into the third type of third point cloud data in the two-dimensional space corresponding to the xy coordinate system according to the third rule. The third type of third point cloud data includes a plurality of point cloud points in the two-dimensional space. The third type of point cloud data is converted from the third type of physical examination information. The third rule can be a conversion algorithm, such as linear transformation (using an invertible matrix for transformation), or hash-based reversible coding (such as using an invertible hash function, such as a hash based on Feistel structure), and the like, as described below, and will not be repeated.

[0046] Then, the electronic device can convert the second type of target hidden information into the second type of second point cloud data in the two-dimensional space according to the third rule and the area in the two-dimensional space where the third point cloud data is located. The second type of second point cloud data includes a plurality of point cloud points in the two-dimensional space. The area in the two-dimensional space where the second point cloud data is located overlaps with the area in the two-dimensional space where the third point cloud data is located. The second type of point cloud data is converted from the second type of hidden information.

[0047] Specifically, the electronic device can convert the second type of target hidden information into the second type of initial point cloud data in the two-dimensional space according to the third rule. The electronic device can determine whether the second type of initial point cloud data is the point cloud data in the second type of point cloud data that has the largest overlapping area with the area in the two-dimensional space where the third point cloud data is located according to the area in the two-dimensional space where the third point cloud data is located. The overlapping area can be the area of the intersection region between the circumscribed circle of the third point cloud data in the two-dimensional space and the circumscribed circle of the second type of initial point cloud data in the two-dimensional space. If so, the electronic device determines the second type of initial point cloud data as the second point cloud data, and determines the third rule as the second rule; if not, the electronic device translates the second type of initial point cloud data by a second distance to obtain the second type of translated point cloud data, determines the second type of translated point cloud data as the second point cloud data, and updates the second rule to include the second distance. The second type of translated point cloud data is the point cloud data in the second type of point cloud data that has the largest overlapping area with the area in the two-dimensional space where the third point cloud data is located, so that the second point cloud data can be uniquely indexed by the overlapping area when reading data subsequently.

[0048] It can be seen that by dynamically adjusting the position of the second type of point cloud data to ensure that it has the maximum overlapping area with the third type of point cloud data, the accuracy of information association is optimized. If the initial point cloud data does not meet the maximum overlapping condition, it is adjusted by translation, and the rule is updated, which improves the flexibility and accuracy of data storage. This method makes the association of the second type of hidden information and the third type of information in the two-dimensional space more closely, which facilitates the subsequent authorized user to quickly locate and restore the data, while reducing the storage redundancy and improving the performance of the sharing system.

[0049] Finally, the electronic device can convert the target hidden information of the first type into the first type of first point cloud data in the two-dimensional space according to the third rule and the region in which the second point cloud data is located in the two-dimensional space. The first type of first point cloud data includes a plurality of point cloud points in the two-dimensional space. The region in which the first point cloud data is located in the two-dimensional space overlaps with the region in which the second point cloud data is located in the two-dimensional space, and the region in which the first point cloud data is located in the two-dimensional space does not overlap with the region in which the third point cloud data is located in the two-dimensional space. The first type of point cloud data is all converted from the hidden information of the first type.

[0050] Specifically, the electronic device can convert the target hidden information of the first type into the first type of initial point cloud data in the two-dimensional space according to the third rule. The electronic device can determine whether the first type of initial point cloud data is the point cloud data in the first type of point cloud data that has the maximum overlapping area with the region in which the second point cloud data is located in the two-dimensional space according to the region in which the second point cloud data is located in the two-dimensional space, wherein the overlapping area can be the area of the overlapping region between the circumscribed circle of the second point cloud data in the two-dimensional space and the circumscribed circle of the first type of initial point cloud data in the two-dimensional space. If yes, the electronic device determines the first type of initial point cloud data as the first point cloud data, and determines the third rule as the first rule; if no, the electronic device translates the first type of initial point cloud data by a first distance to obtain the first type of translated point cloud data, determines the first type of translated point cloud data as the first point cloud data, and updates the preset rule to include the first distance to obtain the first rule, wherein the first type of translated point cloud data is the point cloud data in the first type of point cloud data that has the maximum overlapping area with the region in which the second point cloud data is located in the two-dimensional space, so that when reading the data subsequently, the first point cloud data can be uniquely indexed through the overlapping area.

[0051] It can be seen that by adjusting the first type of point cloud data in a similar manner, the maximum overlapping area with the second type of point cloud data is ensured, thereby strengthening the association between high-sensitive information and medium-sensitive information. The determination and update of the first rule ensure the consistency of the conversion process, enabling authorized users to accurately trace the data chain when restoring. This enhances the coherence and reliability of the overall privacy protection system, while avoiding data loss or incorrect access due to unclear association.

[0052] It can also be seen that by converting various types of information into point cloud data in two-dimensional space and ensuring the overlap between point cloud regions, visual storage of information association is achieved. The third type of information is directly converted into point cloud data, the second type of hidden information overlaps with the third type of point cloud region, and the first type of hidden information overlaps with the second type of point cloud region but does not overlap with the third type. This hierarchical structure allows data to maintain inherent association during storage, but unauthorized users cannot directly interpret the hidden content. Point cloud conversion improves the efficiency and security of data storage, while providing authorized users with a spatial relationship-based retrieval and restoration approach, enhancing the overall reliability of the sharing system.

[0053] Thus, the electronic device can store the coordinates of the first point cloud data in two-dimensional space (i.e., the coordinates of each point cloud point in the first point cloud data in two-dimensional space), the coordinates of the second point cloud data in two-dimensional space (i.e., the coordinates of each point cloud point in the second point cloud data in two-dimensional space), and the coordinates of the third point cloud data in two-dimensional space (i.e., the coordinates of each point cloud point in the third point cloud data in two-dimensional space) to the three-dimensional medical system sharing system.

[0054] It can be seen that by storing the coordinates of the point cloud data instead of the original information, the risk of privacy leakage is further reduced. The coordinate data occupies a small storage space in the three-dimensional medical system sharing system and cannot be directly read as sensitive content, but it can be converted back to the original information through rules. This method improves the security and efficiency of data storage, while supporting spatial queries and association analysis based on coordinates, enabling the sharing system to maintain high-performance data processing capabilities while protecting privacy.

[0055] In addition, the electronic device also stores the first rule into the first secure storage area, and then configures the reading key of the first secure storage area as the key information in the target physical examination information of the second type (which can be a field at a specified position in the target physical examination information of the second type, and can be preset by an administrator); and the electronic device also stores the second rule into the second secure storage area, and then configures the reading key of the second secure storage area as the key information in the target physical examination information of the third type (which can be a field at a specified position in the target physical examination information of the third type, and can be preset by an administrator). The first secure storage area and the second secure storage area are independent privacy storage areas, that is, the storage addresses are discontinuous. In addition, the third rule can be stored in a public storage area.

[0056] It can be seen that, by storing the first rule and the second rule into the secure storage area and using the key information as the reading key, the authorization control of rule access is increased. Only the user who has the corresponding key information (such as the specific data in the second type of hidden information or the third type of information) can open the secure area and obtain the rule, preventing unauthorized restoration of hidden information. This provides an additional security layer, ensuring the integrity and confidentiality of the entire privacy protection system, and reducing the risk of malicious use of rules.

[0057] In combination with the above S101-S103, after S103, the method further includes the following steps: Step S1: The electronic device reads the third point cloud data from the three-dimensional physical examination system sharing system, and inversely converts the third point cloud data into the target physical examination information of the third type according to the third rule.

[0058] Step S2: The electronic device obtains the second rule according to the key information in the target physical examination information of the third type.

[0059] The electronic device uses the key information in the target physical examination information of the third type (that is, the target physical examination information of the third type has been obtained through inverse conversion) as the reading key to open the second secure storage area; and obtains the second rule from the second secure storage area in the state that the second secure storage area is opened.

[0060] Step S3: The electronic device reads the second type of point cloud data with the largest overlapping area with the area in the two-dimensional space where the third point cloud data is located from the three-dimensional physical examination system sharing system, determines the second type of point cloud data with the largest overlapping area as the second point cloud data, and inversely converts the second point cloud data into the target hidden information of the second type according to the second rule; Step S4: The electronic device obtains the third rule according to the key information in the target physical examination information of the second type.

[0061] The electronic device takes the key information in the second type of target physical examination information (i.e., the case where the second type of target physical examination information has been obtained through reverse conversion) as a reading key to open the first secure storage area; and obtains the first rule from the first secure storage area in a state where the first secure storage area is opened.

[0062] Step S4: The electronic device reads the first type of point cloud data with the largest overlapping area with the area in the two-dimensional space where the second point cloud data is located from the three-dimensional physical examination system sharing system, determines the first type of point cloud data with the largest overlapping area as the first point cloud data, and reversely converts the first point cloud data into the first type of target hidden information according to the first rule.

[0063] It can be seen that the above scheme describes a process of gradually restoring information from the sharing system. By reverse-converting point cloud data and using key information to obtain rules, it is ensured that only legitimate users can access complete information. Starting from the third type of information, the second type and the first type of hidden information are gradually restored. This method maintains the hierarchy of data correlation and strictly controls access permissions. This improves the usability and security of the sharing system in practical applications, enabling medical professionals to efficiently access data when needed without exposing sensitive information to unauthorized parties. In addition, by using key information to open secure storage areas, strict authorization of rule access is ensured. Using key information in the third type of target physical examination information to open the second secure storage area, and using key information in the second type of target physical examination information to open the first secure storage area, forms a multi-layer access control to prevent rule leakage. This design enhances the defense depth of the system, making it difficult to restore highly sensitive content even if part of the information is accessed, thereby improving the level of privacy protection.

[0064] In summary: By dividing physical examination information into three categories according to privacy protection priority and performing higher-level security processing on high-priority information, hierarchical privacy protection is achieved. This ensures that highly sensitive information (such as the first type) is protected the most, moderately sensitive information (such as the second type) is appropriately protected, and low-sensitive information (such as the third type) remains in its original state, thereby optimizing data usability while protecting privacy. When storing, the hidden information of the first and second types is associated with the third type of information, allowing authorized users to trace data relationships for medical analysis, but unauthorized users cannot access the original sensitive content. This method improves the security and flexibility of the three-dimensional physical examination system sharing system, effectively balancing the needs of privacy protection and data sharing.

[0065] Figure 2 The structure of the electronic device provided in the embodiments of the present application is shown in the figure. The electronic device can be a terminal device, a chip (system) or other components or assemblies that can be provided in the terminal device. As shown in the figure, the electronic device can include a processor 1001, a bus 1002, a memory 1003, a communication interface 1004, and a communication antenna 1005. Figure 2As shown, the electronic device 400 can include a processor 401. Optionally, the electronic device 400 can also include a memory 402 and / or a transceiver 403. The processor 401 is coupled with the memory 402 and the transceiver 403, for example, through a communication bus. In addition, the electronic device 400 can also be a chip, for example, including the processor 401, in which case the transceiver can be an input / output interface of the chip.

[0066] The following will be described in detail Figure 2 The various components of the electronic device 400 will be described in detail: The processor 401 is the control center of the electronic device 400, and can be one processor or a collective term of multiple processing elements. For example, the processor 401 can be one or more central processing units (CPUs), application specific integrated circuits (ASICs), or one or more integrated circuits configured to implement the embodiments of the present application, such as one or more microprocessors (digital signal processors, DSPs), or one or more field programmable gate arrays (FPGAs).

[0067] Optionally, the processor 401 can execute various functions of the electronic device 400 by running or executing software programs stored in the memory 402 and calling scientific data stored in the memory 402, such as executing the above-mentioned Figure 1 The three-dimensional medical examination system sharing system patient information privacy protection method.

[0068] In a specific implementation, as an embodiment, the processor 401 can include one or more CPUs, for example Figure 2 The CPUs 0 and 1 shown in the above.

[0069] In a specific implementation, as an embodiment, the electronic device 400 can also include multiple processors. Each of these processors can be a single-CPU or a multi-CPU. The processor here can refer to one or more devices, circuits, and / or processing cores for processing scientific data (such as computer programs or instructions).

[0070] The memory 402 is used to store software programs for implementing the schemes of the present application, and is controlled by the processor 401 to execute, and the specific implementation manner can refer to the above-mentioned method embodiments, which will not be described here.

[0071] Optionally, the memory 402 can be a read-only memory (ROM) or other type of static storage device that can store static information and instructions, a random access memory (RAM) or other type of dynamic storage device that can store information and instructions, an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disk storage, a magnetic disk storage or other magnetic storage devices, or any other medium capable of storing desired program code in the form of instructions or scientific data structures and that can be accessed by a computer, but the present application is not limited thereto. The memory 402 can be integrated with the processor 401 or exist independently and be coupled to the processor 401 through an interface circuit (not shown in the figure) of the electronic device 400, and the embodiments of the present application do not make a specific limitation thereon. Figure 2

[0072] The transceiver 403 is configured to communicate with other electronic devices. For example, the electronic device 400 is a terminal device, and the transceiver 403 can be configured to communicate with a network device or another terminal device. For another example, the electronic device 400 is a network device, and the transceiver 403 can be configured to communicate with a terminal device or another network device.

[0073] Optionally, the transceiver 403 can include a receiver and a transmitter (not shown in the figure separately). The receiver is configured to implement the receiving function, and the transmitter is configured to implement the transmitting function. Figure 2

[0074] Optionally, the transceiver 403 can be integrated with the processor 401 or exist independently and be coupled to the processor 401 through an interface circuit (not shown in the figure) of the electronic device 400, and the embodiments of the present application do not make a specific limitation thereon. Figure 2

[0075] It can be understood that the structure of the electronic device 400 shown in the figure does not constitute a limitation on the electronic device, and an actual electronic device can include more or fewer components than those shown in the figure, or combine certain components, or different component arrangements. Figure 2

[0076] In addition, the technical effects of the electronic device 400 can refer to the technical effects of the methods described in the above method embodiments, which will not be described here again. ​​​​

[0077] It should be understood that the processor in the embodiments of the present application can be a central processing unit (CPU), and can also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic components, discrete hardware components, etc. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor.

[0078] It should also be understood that the memory in the embodiments of the present application can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically EPROM (EEPROM) or a flash memory. The volatile memory can be a random access memory (RAM) used as an external cache. By way of example but not limitation, many forms of random access memory (RAM) are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchlink DRAM (SLDRAM) and direct rambus RAM (DR RAM).

[0079] The above-described embodiments can be implemented in whole or in part by software, hardware (e.g., circuitry), firmware, or any combination thereof. When implemented in software, the above-described embodiments can be implemented in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded and executed on a computer, the processes or functions described in the embodiments of the present application are wholly or partially generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer programs or instructions can be stored in a computer-readable storage medium or transferred from one computer-readable storage medium to another computer-readable storage medium, for example, the computer programs or instructions can be transferred from one website, computer, server, or scientific data center to another website, computer, server, or scientific data center through a wired (e.g., infrared, wireless, microwave, etc.) manner. The computer-readable storage medium can be any available medium accessible by a computer or a scientific data storage device such as a server, scientific data center, etc. containing one or more available medium collections. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium. The semiconductor medium can be a solid-state disk.

[0080] It should be understood that the term "and / or" herein merely describes an association relationship of associated objects, which means that there can be three relationships, for example, A and / or B can represent three cases of A alone, A and B together, and B alone, where A and B can be singular or plural. In addition, the character " / " herein generally represents an "or" relationship between the associated objects before and after it, but it can also represent an "and / or" relationship. The specific meaning can be understood according to the context before and after it.

[0081] In this application, "at least one" means one or more, and "multiple" means two or more. "At least one of the following" or similar expressions means any combination of these items, including any combination of single or multiple items. For example, at least one of a, b, or c can represent a, b, c, a-b, a-c, b-c, or a-b-c, where a, b, and c can be single or multiple.

[0082] It should be understood that in various embodiments of the present application, the size of the sequence number of the above-described processes does not mean the order of execution, and the execution order of the processes should be determined according to their functions and inherent logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0083] Those skilled in the art can clearly understand that the units and algorithm steps of each example described in combination with the embodiments disclosed herein can be realized by electronic hardware or a combination of computer software and electronic hardware. Whether the functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the present application.

[0084] Those skilled in the art can clearly understand that, for the convenience and brevity of the description, the specific working processes of the above-described system, device and unit can refer to the corresponding processes in the foregoing method embodiments, which will not be repeated here.

[0085] In several embodiments provided in the present application, it should be understood that the disclosed system, device and method can be implemented in other ways. For example, the above-described device embodiments are only schematic, for example, the division of the units is only a logical function division, and actual implementation can have another division manner, for example, a plurality of units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the units shown or discussed can be indirect coupling or communication connection through some interface, device or unit, and can be electrical, mechanical or other forms.

[0086] The units described as separate components can or can not be physically separated, and the components shown as units can or can not be physical units, that is, they can be located in one place, or can be distributed on a plurality of network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the embodiment.

[0087] In addition, each functional unit in each embodiment of the present application can be integrated into a processing unit, or each unit can exist physically independently, or two or more units can be integrated into one unit.

[0088] If the functions are implemented in the form of software function units and sold or used as independent products, they can be stored in a computer readable storage medium. Based on this understanding, the technical solutions of the present application essentially or the parts that contribute to the prior art or parts of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a plurality of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and various media that can store program codes.

[0089] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of changes or replacements within the technical scope disclosed in the present application, which should be covered within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A method for protecting privacy of patient information shared by a three-dimensional physical examination system sharing system, characterized by, The method is applied to an electronic device, and the method comprises: The electronic device acquires physical examination information of a patient, the physical examination information comprising target physical examination information of a first type, target physical examination information of a second type, and target physical examination information of a third type, the privacy protection priority of the target physical examination information of the first type being higher than the privacy protection priority of the target physical examination information of the second type, and the privacy protection priority of the target physical examination information of the second type being higher than the privacy protection priority of the target physical examination information of the third type; The electronic device performs first security processing on the target physical examination information of the first type to obtain target hidden information of the first type, and performs second security processing on the target physical examination information of the second type to obtain target hidden information of the second type, the information security of the first security processing being higher than the information security of the second security processing; The electronic device stores the target hidden information of the first type, the target hidden information of the second type, and the target physical examination information of the third type into a three-dimensional physical examination system sharing system, in the three-dimensional physical examination system sharing system, the target hidden information of the first type is associated with the target hidden information of the second type, and the target hidden information of the second type is associated with the target physical examination information of the third type.

2. The method of claim 1, wherein, The target physical examination information of the first type is information that is not shared by default, and the electronic device performs first security processing on the target physical examination information of the first type to obtain target hidden information of the first type, comprising: The electronic device performs shielding processing on the target physical examination information of the first type to obtain shielded physical examination information, the shielding processing referring to filtering internal parameters of information; The electronic device performs encryption processing on the shielded physical examination information to obtain the target hidden information of the first type.

3. The method of claim 1, wherein, The electronic device performs second security processing on the target physical examination information of the second type to obtain target hidden information of the second type, comprising: The electronic device performs desensitization and blurring processing on the target physical examination information of the second type to obtain the target hidden information of the second type, the blurring processing referring to blurring the range of information.

4. The method according to any one of claims 1 to 3, characterized in that, The electronic device stores the target hidden information of the first type, the target hidden information of the second type, and the target physical examination information of the third type into a three-dimensional physical examination system sharing system, comprising: The electronic device converts the target physical examination information of the third type into third type third point cloud data in a two-dimensional space corresponding to an xy coordinate system according to a third rule, the third type point cloud data all being obtained by converting the third type physical examination information; The electronic device converts the target hidden information of the second type into second type second point cloud data in the two-dimensional space according to the third rule and the region in the two-dimensional space where the third point cloud data is located, the region in the two-dimensional space where the second point cloud data is located and the region in the two-dimensional space where the third point cloud data is located overlapping, the second type point cloud data all being obtained by converting the second type hidden information; and The electronic device converts the target hidden information of the first type into first point cloud data of a first type in the two-dimensional space according to the third rule and a region in which the second point cloud data is located in the two-dimensional space, the region in which the first point cloud data is located in the two-dimensional space overlaps with the region in which the second point cloud data is located in the two-dimensional space, and the region in which the first point cloud data is located in the two-dimensional space does not overlap with the region in which the third point cloud data is located in the two-dimensional space, and the first point cloud data of the first type is obtained by conversion of the hidden information of the first type.

5. The method of claim 4, wherein, The electronic device converts the target hidden information of the second type into second point cloud data of a second type in the two-dimensional space according to the third rule and a region in which the third point cloud data is located in the two-dimensional space, and the conversion includes: The electronic device converts the target hidden information of the second type into initial point cloud data of the second type in the two-dimensional space according to the third rule; The electronic device determines, according to the region in which the third point cloud data is located in the two-dimensional space, whether the initial point cloud data of the second type is point cloud data that has the largest overlapping area with the region in which the third point cloud data is located in the two-dimensional space among the point cloud data of the second type; If yes, the electronic device determines the initial point cloud data of the second type as the second point cloud data and determines the third rule as a second rule; If no, the electronic device translates the initial point cloud data of the second type by a second distance to obtain translated point cloud data of the second type, determines the translated point cloud data of the second type as the second point cloud data, and updates the preset rule to a second rule including the translation by the second distance, wherein the translated point cloud data of the second type is point cloud data that has the largest overlapping area with the region in which the third point cloud data is located in the two-dimensional space among the point cloud data of the second type.

6. The method of claim 5, wherein, The electronic device converts the target hidden information of the first type into first point cloud data of a first type in the two-dimensional space according to the third rule and a region in which the second point cloud data is located in the two-dimensional space, the region in which the first point cloud data is located in the two-dimensional space overlaps with the region in which the second point cloud data is located in the two-dimensional space, and the region in which the first point cloud data is located in the two-dimensional space does not overlap with the region in which the third point cloud data is located in the two-dimensional space, and the first point cloud data of the first type is obtained by conversion of the hidden information of the first type. The electronic device converts the target hidden information of the first type into initial point cloud data of the first type in the two-dimensional space according to the third rule; The electronic device determines, according to the region in which the second point cloud data is located in the two-dimensional space, whether the initial point cloud data of the first type is point cloud data that has the largest overlapping area with the region in which the second point cloud data is located in the two-dimensional space among the point cloud data of the first type; If yes, the electronic device determines the initial point cloud data of the first type as the first point cloud data and determines the third rule as a first rule; If not, the electronic device translates the initial point cloud data of the first type by a first distance to obtain translated point cloud data of the first type, determines the translated point cloud data of the first type as the first point cloud data, and updates the preset rule to include translation by the first distance to obtain a first rule, wherein the translated point cloud data of the first type is the point cloud data in the point cloud data of the first type that has the largest overlapping area with the region in the two-dimensional space where the second point cloud data is located.

7. The method of claim 6, wherein, The electronic device stores the first type of target hidden information, the second type of target hidden information, and the third type of target physical examination information to a three-dimensional physical examination system sharing system, including: The electronic device stores the coordinates of the first point cloud data in the two-dimensional space, the coordinates of the second point cloud data in the two-dimensional space, and the coordinates of the third point cloud data in the two-dimensional space to the three-dimensional physical examination system sharing system.

8. The method of claim 7, wherein, The method further includes: The electronic device stores the first rule in a first secure storage area, and then configures a reading key of the first secure storage area as key information in the second type of target physical examination information; and the electronic device also stores the second rule in a second secure storage area, and then configures a reading key of the second secure storage area as key information in the third type of target physical examination information.

9. The method of claim 7, wherein, The method further includes: The electronic device reads the third point cloud data from the three-dimensional physical examination system sharing system, and inversely converts the third point cloud data into the third type of target physical examination information according to the third rule; The electronic device acquires the third rule according to key information in the third type of target physical examination information; The electronic device reads the second type of point cloud data with the largest overlapping area with the region in the two-dimensional space where the third point cloud data is located from the three-dimensional physical examination system sharing system, determines the second type of point cloud data with the largest overlapping area as the second point cloud data, and inversely converts the second point cloud data into the second type of target hidden information according to the second rule; The electronic device acquires the third rule according to key information in the third type of target physical examination information; The electronic device reads the first type of point cloud data with the largest overlapping area with the region in the two-dimensional space where the second point cloud data is located from the three-dimensional physical examination system sharing system, determines the first type of point cloud data with the largest overlapping area as the first point cloud data, and inversely converts the first point cloud data into the first type of target hidden information according to the first rule.

10. The method of claim 9, wherein, The electronic device acquires the third rule according to key information in the third type of target physical examination information, including: The electronic device opens the second secure storage area with the key information in the third type of target physical examination information as a reading key; In the state that the second secure storage area is opened, the second rule is acquired from the second secure storage area; In the state that the second secure storage area is opened, the second rule is acquired from the second secure storage area; The electronic device acquires the first rule according to key information in the second type of target physical examination information, and the method comprises the following steps: The electronic device opens the first secure storage area by taking the key information in the second type of target physical examination information as a reading key. In the state that the first secure storage area is opened, the first rule is acquired from the first secure storage area.

Images