Hospital operation management system based on storage encryption processing

Abstract

The invention relates to the technical field of data security management, and relates to a hospital operation system based on storage encryption processing. Hospital operation data of all departments in a hospital are collected through a collection assembly, the operation data of all the departments are stored in a storage assembly, before storage, multiple pieces of operation data need to be encrypted through an operation assembly, and before encryption is executed, the multiple pieces of operation data need to be encrypted through an operation assembly. According to the method, encryption grade division is performed on each department in a hospital based on multiple hospital operation data through an operation component, so that a hospital storage encryption standard is created, and the storage encryption grade of each department in the hospital is updated in real time based on the hospital storage encryption standard. According to the method and the device, on the one hand, storage encryption of different means is carried out based on different department confidentiality levels, encryption means for operation data of low-level department confidentiality levels are reduced, encryption efficiency is improved, and on the other hand, safety of operation data of high-level department confidentiality levels is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data security management, in particular to a hospital management system with storage encryption processing. BACKGROUND

[0002] Hospital management refers to the management behavior of optimizing social and economic benefits by following the laws of market economy, reasonably allocating medical resources and formulating effective strategies. Its core lies in responding to medical market changes, establishing development strategies, covering external environment analysis, internal evaluation and strategy design, and emphasizing dynamic adjustment and risk response.

[0003] Because a large amount of data will be generated in the process of hospital management, some of the data are important, so encryption processing is needed. Storage encryption can be used in encryption, which refers to encrypting the data stored in devices, media or systems to protect the security of data in a static state (i.e. not in use, transmission) and prevent unauthorized access, theft or leakage.

[0004] Chinese patent with publication number CN115859322A discloses a hospital transaction data encryption management system, which includes HS (public key module), card tube (private key module) and MD5 encryption module. The MD5 encryption module includes two parts of initial encryption and secondary MD5 salt encryption. RSA encryption and decryption are performed through public and private keys, and MD5 salt encryption is performed using different information of each hospital. Then data comparison is performed to verify legality and charge. The hospital transaction data encryption management system has high safety factor, and even if the package is caught, it is difficult to crack the data. However, in the prior art, each department in the hospital is not managed separately, leading to confusion in the management of operating data corresponding to different departments, and leakage of operating data. SUMMARY

[0005] The present application aims to provide a hospital management system with storage encryption processing to solve the problems in the background art.

[0006] To solve the above technical problems, one of the purposes of the present application is to provide a hospital management system based on storage encryption processing, which includes a collection component, a storage component and a management component. The hospital management data is collected by the collection component. The storage component is in communication connection with the collection component. The hospital management data is stored by the storage component. The management component is in communication connection with the storage component. The hospital management data in the storage component is encrypted by the management component to obtain a plurality of encrypted data. The hospital management decision is adjusted based on the encrypted data. The hospital management decision is adjusted based on the hospital management data, including the following steps: The hospital storage encryption standard is created by classifying the encryption level of each department in the hospital based on multiple hospital operation data, and the storage encryption level of each department in the hospital is updated in real time based on the hospital storage encryption standard.

[0007] Preferably, the hospital operation data includes department types, financial data of each department, and human resource data of each department.

[0008] Preferably, before the hospital storage encryption standard is created by classifying the encryption level of each department in the hospital based on multiple hospital operation data, and the storage encryption level of each department in the hospital is updated in real time based on the hospital storage encryption standard, the following steps are included: Extracting operation information from each hospital operation data in the storage component through NLP to obtain multiple operation information; Randomly selecting all operation information of a department; Judging whether there is missing information in the operation information of the department; If there is missing information, filling in the missing information based on the mean to obtain preprocessed information; Returning to randomly selecting all operation information of a department until all departments are selected.

[0009] Preferably, the hospital storage encryption standard is created by classifying the encryption level of each department in the hospital based on multiple hospital operation data, and the storage encryption level of each department in the hospital is updated in real time based on the hospital storage encryption standard, including the following steps: Calculating the department score of each department based on the preprocessed information; Setting the department security level and the department score range corresponding to each department security level; Dividing the corresponding department security level for each department based on the department score; Setting the corresponding storage encryption means based on different security levels.

[0010] Preferably, the department score of each department is calculated based on the preprocessed information, including the following steps: Randomly selecting a department and the preprocessed information of the department from multiple departments; Calculating the per capita income and per capita expenditure of the department based on the preprocessed information of the department; Calculating the department score of the department based on the per capita expenditure and the per capita income; Returning to randomly selecting a department and the preprocessed information of the department from multiple departments until all departments are selected to obtain the department score of each department.

[0011] Preferably, the setting department confidential level and the corresponding department score range of each department confidential level comprises the following steps: Setting N department confidential levels; According to the size of the department score, all departments are sorted from large to small; All departments are divided into N ranges according to the score order in turn; For N ranges, a corresponding relationship is established from large to small with the department confidential level; The maximum department score and the minimum department score contained in each range are obtained, and the maximum department score and the minimum department score are taken as the upper and lower limits of the department score range of the department confidential level.

[0012] Preferably, the setting corresponding storage encryption means based on different confidential levels comprises the following steps: The hospital operation data of the highest level department confidential level is algorithmically encrypted, key managed and access controlled; The hospital operation data of the middle level department confidential level is key managed and access controlled; The hospital operation data of the lowest level department confidential level is access controlled.

[0013] Preferably, the algorithmic encryption adopts AES-256 encryption algorithm.

[0014] Preferably, the access control comprises: Calculating the access score of each access personnel; Setting the corresponding access level based on the access score; Combining the access level and the department confidential level to judge whether the access personnel can access the hospital operation data of the department.

[0015] Preferably, the combining the access level and the department confidential level to judge whether the access personnel can access the hospital operation data of the department comprises: Judging whether the access level of the access personnel is greater than or equal to the department confidential level of the accessed department; If the access level of the access personnel is greater than or equal to the department confidential level of the accessed department, the access personnel can access the hospital operation data of the department; If the access level of the access personnel is less than the department confidential level of the accessed department, the access personnel cannot access the hospital operation data of the department.

[0016] Compared with the prior art, the present application has the following beneficial effects: The hospital operation data of various departments in the hospital is collected by the collection component, and the operation data of various departments is stored in the storage component. Before storage, the plurality of operation data is first encrypted by the operation component. Before encryption, the operation component divides the encryption level of each department in the hospital based on the plurality of hospital operation data, thereby creating a hospital storage encryption standard, and updating the storage encryption level of each department in the hospital in real time based on the hospital storage encryption standard. The application divides different department security levels for different departments, thereby performing different means of storage encryption based on different department security levels, that is, the corresponding encryption means is performed according to the department security level. On the one hand, the encryption means for the operation data of the low-level department security level is reduced, thereby improving the encryption efficiency. On the other hand, the security of the operation data of the high-level department security level is improved. BRIEF DESCRIPTION OF DRAWINGS

[0017] Figure 1 The connection diagram of the embodiment 1 is shown; Figure 2 The overall flowchart of the embodiment 2 is shown; Corresponding reference signs: 100, collection component; 200, storage component; 300, operation component. DETAILED DESCRIPTION

[0018] The technical solutions in the embodiments of the application will be clearly and completely described below with reference to the drawings in the embodiments of the application. Obviously, the described embodiments are only part of the embodiments of the application, rather than all the embodiments of the application. Based on the embodiments in the application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the application. EMBODIMENT

[0019] As shown in Figure 1 and Figure 2 One of the purposes of the application is to provide a hospital operation system based on storage encryption processing, which comprises a collection component 100, a storage component 200 and an operation component 300. The hospital operation data is collected by the collection component 100. The storage component 200 is in communication connection with the collection component 100. The hospital operation data is stored by the storage component 200. The operation component 300 is in communication connection with the storage component 200. The hospital operation data in the storage component 200 is encrypted by the operation component 300 to obtain a plurality of encrypted data, and the hospital operation decision is adjusted based on the encrypted data. The hospital operation data is adjusted based on the hospital operation data to adjust the hospital operation decision, which comprises the following steps: S1, respectively divide the encryption levels of each department in the hospital based on the plurality of hospital operation data, thereby creating a hospital storage encryption standard, and update the storage encryption levels of each department in the hospital in real time based on the hospital storage encryption standard.

[0020] It should be noted that the hospital operation data of each department in the hospital is collected by the collection component 100, and the operation data of each department is stored in the storage component 200. Before storage, the plurality of operation data needs to be encrypted by the operation component 300 first. Before encryption, the operation component 300 respectively divides the encryption levels of each department in the hospital based on the plurality of hospital operation data, thereby creating a hospital storage encryption standard, and updating the storage encryption levels of each department in the hospital in real time based on the hospital storage encryption standard. The present application divides different department security levels for different departments, thereby performing different means of storage encryption based on different department security levels, that is, performing corresponding encryption means according to the department security level. On the one hand, the encryption means for the operation data of the low-level department security level is reduced, thereby improving the encryption efficiency. On the other hand, the security of the operation data of the high-level department security level is improved.

[0021] In an embodiment of the present application, the hospital operation data includes department types, financial data of each department, and human resource data of each department.

[0022] It should be noted that since the hospital operation data includes management, finance, human resources and other aspects in addition to the medical services provided by itself, the operation data of the hospital can directly reflect the survival and development status of the hospital. Therefore, the development of each department included in the hospital can be evaluated by the hospital operation data. Then, the related data of the department with good development prospects should be improved in security, thereby ensuring the security of the department data.

[0023] In an embodiment of the present application, before the step of respectively dividing the encryption levels of each department in the hospital based on the plurality of hospital operation data, thereby creating a hospital storage encryption standard, and updating the storage encryption levels of each department in the hospital in real time based on the hospital storage encryption standard, the following steps are included: K100, respectively extracting operation information from each hospital operation data in the storage component by NLP, thereby obtaining a plurality of operation information; K110, randomly selecting all operation information of a department; K120, determining whether there is missing information in the operation information of the department; K130, if there is missing information, filling the missing information based on the mean value to obtain preprocessed information; K140, return all operating information of a randomly selected department, until all departments are selected.

[0024] It should be noted that NLP refers to Natural Language Processing, which is an important research direction in the field of artificial intelligence, and integrates knowledge in multiple disciplines such as linguistics, computer science, machine learning, mathematics, and cognitive psychology. It is a cross-discipline that combines computer science, artificial intelligence, and linguistics, and includes natural language understanding and natural language generation. The research content includes multiple levels such as words, phrases, sentences, paragraphs, and chapters, and is a bridge between machine language and human language.

[0025] The present application extracts the operating information of each department from the hospital operating data of multiple hospitals through NLP. On the one hand, the invalid information in the hospital operating data is removed, thereby reducing the data volume of the hospital operating data. On the other hand, it is convenient to preprocess the hospital operating data, thereby filling in missing information or removing duplicate information, and improving the reliability of the hospital operating data.

[0026] In an embodiment of the present application, the S1 comprises: S100, calculating the department score of each department based on the preprocessed information respectively; S200, setting the department security level and the department score range corresponding to each department security level; S300, dividing the corresponding department security level for each department based on the department score; S400, setting the corresponding storage encryption means based on different security levels.

[0027] It should be noted that the department score is actually a numerical value for describing the operating condition of the department, so that the user can intuitively see the good or bad of the operating condition of the department. Generally speaking, the higher the department score, the better the operating condition of the department.

[0028] After obtaining the department score, different department security levels can be divided for each department according to the department score. Generally speaking, the higher the department score, the higher the corresponding department security level of the department, because the better the operating condition of the department, the security of the medical data should be enhanced to avoid data leakage.

[0029] In an embodiment of the present application, the S100 comprises: S110, randomly selecting a department and the preprocessed information of the department from multiple departments; S120, calculating the per capita income and per capita expenditure of the department based on the preprocessed information of the department; Specifically, the per capita income of the department is calculated by formula 1; Formula 1; Wherein, is the per capita income of the department, N is the total number of the department, is the total income of the department; The per capita expenditure of the department is calculated by formula 2; Formula 1; Wherein, Q is the per capita income of the department, N is the total number of the department, is the total expenditure of the department; S130, calculating the department score of the department based on the per capita expenditure and the per capita income; Specifically, the difference between the per capita expenditure and the per capita income is the department score; S140, returning to randomly select a department and the preprocessed information of the department from the plurality of departments until all the departments are selected and completed, obtaining the department score of each department.

[0030] It should be noted that, since the data of human resources of each department is different, it is necessary to convert the operating data of the department into per capita for comparison, so as to ensure the fairness of the department score. The difference between the per capita expenditure and the per capita income is used as the department score because the department score obtained in this way can better reflect the profit gap between different departments.

[0031] After obtaining the department score of each department, all the departments can be divided into different security levels according to the department score, so that the user can encrypt the operating data of each department according to the security level.

[0032] In an embodiment of the present application, the S200 comprises: S210, setting N department security levels; S220, sorting all the departments according to the size of the department score from large to small; S230, dividing all the departments into N ranges according to the score order in turn; S240, for the N ranges, respectively establishing a corresponding relationship from large to small with the department security level; S250, obtaining the maximum department score and the minimum department score contained in each range, and taking the maximum department score and the minimum department score as the upper and lower limits of the department score range of the department security level; Specifically, if there is a department score of a department that is not in any department score range, it is allocated to the department security level of the department corresponding to the department score closest to it.

[0033] It should be noted that if there are 6 departments, after sorting according to the department score, the 6 departments are recorded as A1, A2,..., A6, and the department score corresponding to each department is 30.2, 29.0, 21.1, 15.2, 13.1, and 9.2, respectively. If N is set to 3 at this time, that is, divided into a first security level, a second security level, and a third security level, and the departments corresponding to the first security level are A1 and A2, the corresponding department score range is [30.2, 29.0], the departments corresponding to the second security level are A3 and A4, the corresponding department score range is [21.1, 15.2], and the departments corresponding to the third security level are A5 and A6, the corresponding department score range is [13.1, 9.2].

[0034] By establishing a security level classification system for the department and applying different storage encryption means according to different security levels, simple encryption is performed on the hospital operation data of the low security level, and complex encryption is performed on the hospital operation data of the high security level, so as to minimize invalid encryption and improve encryption efficiency under the premise of ensuring the security of the hospital operation data.

[0035] In an embodiment of the present application, the S400 comprises: S410, algorithmic encryption, key management, and access control are performed on the hospital operation data of the highest level of department security level; S420, key management and access control are performed on the hospital operation data of the middle level of department security level; S430, access control is performed on the hospital operation data of the lowest level of department security level.

[0036] It should be noted that different encryption means are implemented on the operation data of departments of different security levels. For the hospital operation data of the department of the highest level of department security level, multiple encryption methods are adopted, and different encryption methods have different focuses. Algorithmic encryption is to process the original plaintext file or data according to a certain algorithm, so that it becomes a piece of unreadable code "ciphertext", so that it can only be displayed after the corresponding key is input. The purpose of this approach is to protect data from being stolen and read by non-persons. Key management is the core of encryption, and access control is to limit access personnel and clearly define the data content that different personnel can access.

[0037] In an embodiment of the present application, the algorithmic encryption adopts the AES-256 encryption algorithm.

[0038] Note that AES is a symmetric encryption algorithm that uses the same key to encrypt and decrypt your data. Essentially, both the sender and the receiver need the same key to decrypt the data. Although symmetric encryption is faster, it is slightly less secure than asymmetric encryption. AES-256 encryption scrambles data into random characters with a 14-round algorithm, guarding your password managers, bank transactions, and even WhatsApp messages with quantum resistance and a 128-bit block size.

[0039] In an embodiment of the present application, the access control comprises: S431, calculating an access score of each access personnel; S432, setting a corresponding access level based on the access score; S433, combining the access level and the department security level to determine whether the access personnel can access the hospital operation data of the department.

[0040] Note that when calculating the access score of the access personnel, the access score can be calculated in combination with personal data such as the position and work experience of the access personnel, so as to give the access personnel with a high access score a high access level, and the higher the access level, the higher the security level of the hospital operation data that can be accessed.

[0041] In an embodiment of the present application, the 433 comprises: S4331, determining whether the access level of the access personnel is greater than or equal to the department security level of the department being accessed; S4332, if the access level of the access personnel is greater than or equal to the department security level of the department being accessed, the access personnel can access the hospital operation data of the department; S4333, if the access level of the access personnel is less than the department security level of the department being accessed, the access personnel cannot access the hospital operation data of the department.

[0042] Note that after obtaining the access level of the access personnel, the access level of the access personnel can be compared with the security level of the hospital operation data, so that the hospital operation data of the department with a high department security level can only be accessed by the access personnel with the same level or a higher level, to avoid leakage of the hospital operation data.

[0043] The above shows and describes the basic principles, main features and advantages of the present application. Those skilled in the art should understand that the present application is not limited to the above-mentioned embodiments, and the above-mentioned embodiments and descriptions in the specification are only preferred examples of the present application and are not intended to limit the present application. Various changes and improvements can be made to the present application without departing from the spirit and scope of the present application, and these changes and improvements all fall within the scope of the claimed present application. The scope of protection of the present application is defined by the appended claims and their equivalents.

Claims

1. A hospital management system based on storage encryption processing, characterized in that, include: Collect components; The collection component collects hospital operational data; Storage components; The storage component is communicatively connected to the collection component, and stores hospital operational data through the storage component. Operating components; The operation component is communicatively connected to the storage component. The operation component encrypts the hospital operation data in the storage component to obtain multiple encrypted data, and adjusts hospital operation decisions based on the encrypted data. The method of adjusting hospital management decisions based on hospital management data includes the following steps: Based on operational data from multiple hospitals, encryption levels are assigned to each department within the hospital to create a hospital storage encryption standard. The storage encryption level of each department within the hospital is then updated in real time based on this standard.

2. A hospital management system based on storage encryption processing according to claim 1, characterized in that: The hospital's operational data includes the types of departments, the financial data of each department, and the human resources data of each department.

3. The hospital management system based on storage encryption processing according to claim 1, characterized in that: Before classifying the encryption levels of each department within the hospital based on multiple hospital operational data to create a hospital storage encryption standard, and updating the storage encryption level of each department within the hospital in real time based on the hospital storage encryption standard, the following steps are included: The operational information of each hospital's operational data in the storage component was extracted using NLP, resulting in multiple operational information sets. Randomly select all operational information for a department; Determine if there are any missing information in the department's operational data; If missing information exists, the missing information is filled in based on the mean to obtain preprocessed information; Return all operating information for a randomly selected department until all departments have been selected.

4. The hospital management system based on storage encryption processing according to claim 3, characterized in that: The process of classifying encryption levels for each department within a hospital based on multiple hospital operational data, thereby creating a hospital storage encryption standard, and updating the storage encryption level of each department in real time based on this standard, includes the following steps: Each department score is calculated based on the preprocessed information; Set departmental confidentiality levels and the corresponding departmental scoring range for each confidentiality level; Each department is assigned a corresponding confidentiality level based on its departmental rating. Different storage encryption methods are set according to different security levels.

5. The hospital management system based on storage encryption processing according to claim 4, characterized in that: The calculation of departmental scores for each department based on preprocessed information includes the following steps: Randomly select one department from multiple departments and its preprocessing information; Calculate the average income and average expenditure per person in the department based on the preprocessed information of the department; The department score is calculated based on per capita expenditure and per capita income; Returns a randomly selected department from multiple departments and its preprocessed information until all departments have been selected, and obtains a department score for each department.

6. The hospital management system based on storage encryption processing according to claim 5, characterized in that: The process of setting departmental confidentiality levels and the corresponding departmental scoring ranges for each confidentiality level includes the following steps: Set up N confidentiality levels for each department; All departments are sorted from highest to lowest based on their departmental scores; Divide all departments into N ranges according to the scoring order; For N ranges, establish a correspondence between them, from largest to smallest, and the department's confidentiality level; Obtain the maximum and minimum department scores within each range, and use the maximum and minimum department scores as the upper and lower limits of the department score range for the confidentiality level of that department.

7. The hospital management system based on storage encryption processing according to claim 6, characterized in that: The method of setting corresponding storage encryption methods based on different security levels includes the following steps: For hospital operational data with the highest level of departmental confidentiality, algorithm encryption, key management, and access control are implemented. Implement key management and access control for hospital operational data with medium-level departmental confidentiality. Access control is implemented for hospital operational data with the lowest level of departmental confidentiality.

8. The hospital management system based on storage encryption processing according to claim 7, characterized in that: The algorithm uses the AES-256 encryption algorithm for encryption.

9. The hospital management system based on storage encryption processing according to claim 8, characterized in that: The access control includes: Calculate the visit score for each visitor; Set corresponding access levels based on access scores; The access level and departmental confidentiality level are combined to determine whether an individual can access the department's hospital operational data.

10. The hospital management system based on storage encryption processing according to claim 9, characterized in that: The method of determining whether an accessee can access the department's hospital operational data by combining access level and departmental confidentiality level includes: Determine whether the visitor's access level is greater than or equal to the department's confidentiality level. If the access level of the visitor is greater than or equal to the confidentiality level of the department being visited, then the visitor can access the hospital's operational data of that department. If the access level of the visitor is lower than the confidentiality level of the department being visited, then the visitor cannot access the hospital's operational data for that department.

Images