A method, system and electronic device for network security protection of medical platform

Abstract

The present application relates to the technical field of security protection, and in particular to a method, system and electronic device for network security protection of a medical platform. A method for network security protection of a medical platform includes obtaining the patient's medical information at a first hospital, encrypting the medical information and storing it in the first hospital. If the patient is receiving medical treatment at a second hospital, an authorization request for obtaining the medical information is issued to the patient's device. After obtaining the authorization information of the patient's device, an authorization request for obtaining the medical information is issued to the first hospital. The authorization information of the first hospital is obtained, and the medical information is transferred to the second hospital. If the second hospital cannot determine the patient's condition, the medical information transferred to the second hospital is deleted. The present application has the effect of solving the problem that patient medical data information stored in the medical platform system is prone to leakage.

Description

Technical Field

[0001] The present application relates to the technical field of security protection, and in particular to the technical field of network security protection for medical platforms. Background Art

[0002] Nowadays, as people's health awareness continues to improve, more and more people choose to go to the hospital for medical treatment rather than diagnose and treat diseases through online searches or traditional experience; at the same time, with the advancement of technology, electronic medical records are gradually replacing paper medical records, and electronic medical systems are constantly improving. Patients' medical data information is stored in the electronic medical system for easy viewing at any time.

[0003] However, telecommunications fraud is currently widespread in society. Some fraudsters steal patients' medical data information from medical platform systems and defraud patients and their relatives based on their conditions.

[0004] In response to the above-mentioned current situation, the applicant believes that there is a problem that patient medical data information stored in the medical platform system is prone to leakage. Summary of the invention

[0005] In order to solve the problem that patient medical treatment data information stored in a medical platform system is prone to leakage, the present application provides a method, system and electronic device for network security protection of a medical platform.

[0006] In the first aspect, the present application provides a method for network security protection of a medical platform using the following technical solutions:

[0007] A method for network security protection of a medical platform, comprising:

[0008] Obtaining the patient's medical information at the first hospital, encrypting the medical information and storing it in the first hospital;

[0009] If the patient visits the second hospital for treatment, an authorization request is sent to the preset patient device to obtain the treatment information;

[0010] After obtaining the authorization information of the patient's device, sending an authorization request to the first hospital to obtain the medical information;

[0011] Obtain authorization information from the first hospital and transfer the medical information to the second hospital;

[0012] If the second hospital is unable to determine the patient's condition, the medical information called to the second hospital will be deleted.

[0013] By adopting the above technical solution, when a patient visits the first hospital, the patient's medical information is collected and encrypted and stored in the first hospital. When the patient visits the second hospital, the patient's medical information in the first hospital is directly obtained from the first hospital. When obtaining the patient's medical information from the first hospital, it is necessary to first send an authorization request to obtain the medical information to the patient's device. After the patient agrees to the authorization, an authorization request to obtain the patient's medical information is sent to the first hospital. When the first hospital agrees to the authorization, the patient's medical information is transferred from the first hospital to the second hospital.

[0014] If the second hospital cannot determine the patient's condition, then the patient's medical information called to the second hospital needs to be deleted. After obtaining authorization from the patient and the hospital that stores the patient's medical information, the patient's medical information is called, which is conducive to the security protection of the patient's medical information. At the same time, when the hospital that receives the patient's medical information is unable to determine and treat the patient's condition, the patient's medical information called to the hospital will be deleted, which is conducive to avoiding the leakage of the patient's medical information and further ensuring the patient's information security.

[0015] Optionally, the patient's medical information includes the patient's basic medical information and important medical information.

[0016] By adopting the above technical solution, the patient's medical information is differentiated according to the degree of importance, which is conducive to querying the corresponding historical medical information according to different medical conditions.

[0017] Optionally, when the patient visits the second hospital, an authorization request is sent to the patient device to obtain the medical information;

[0018] After obtaining the authorization information of the patient device, the step of sending an authorization request to the first hospital to obtain the medical information includes:

[0019] Obtain the medical level grades of the First Hospital and the Second Hospital;

[0020] If the medical level of the second hospital is lower than that of the first hospital, sending an authorization request to the patient to obtain basic medical information;

[0021] After obtaining the patient's authorization information, an authorization request is sent to the first hospital to obtain the basic medical information;

[0022] If the basic medical information does not meet the medical needs, a notification is sent to the patient, and the notification indicates whether to send an authorization request to the first hospital to obtain the important medical information.

[0023] By adopting the above technical solution, when a patient visits the second hospital, the medical level of the first hospital and the second hospital are compared. If the medical level of the second hospital is lower than that of the first hospital, it means that the second hospital is limited in the conditions it can diagnose, and then the patient's basic medical information can only be obtained from the first hospital. First, an authorization request for obtaining basic medical information is sent to the patient. When the patient agrees to the authorization, an authorization request for obtaining basic medical information is sent to the first hospital. Only when the patient and the first hospital agree to the authorization can the patient's basic medical information stored in the first hospital be transferred to the second hospital for viewing.

[0024] When the allocated basic medical information does not meet the medical needs, the patient can choose whether to agree to send an authorization request to the first hospital to obtain important medical information. By comparing the medical level of the first hospital and the second hospital, it can be obtained whether the second hospital where the patient is treated has the authority to obtain important medical information. If the medical level of the second hospital is insufficient, the patient decides whether to request the notification of important medical information from the second hospital, which is conducive to treating the patient's condition according to the medical level of the hospital, saving resources, and protecting the patient's important medical information.

[0025] Optionally, the steps before sending the authorization request to the patient to obtain the medical information include:

[0026] Obtain the patient's account and password login information;

[0027] Obtaining biometric information of patients;

[0028] If the patient's account password login information and the patient's biometric identification information meet the requirements at the same time, an authorization request to obtain the medical information will be sent to the patient.

[0029] By adopting the above technical solution, the patient needs to log in and identify on the terminal device, specifically by logging in with the account password, and at the same time use the patient's own biometrics to identify whether it is the patient himself. If the patient's account password information and the patient's biometric identification information both show that it is the patient himself, then an authorization request to obtain medical information is sent to the patient. After double identification of whether the patient is himself, the authorization request to obtain medical information is sent to the patient's device based on the result of confirming that it is the patient himself, thereby enhancing the security of sending authorization requests to patients.

[0030] Optionally, the step of sending an authorization request to the first hospital to obtain the medical information includes:

[0031] Obtaining the recipient information of the patient's medical information, and determining whether the recipient is the second hospital;

[0032] If the recipient of the patient's medical information is the second hospital, an authorization request for obtaining the medical information is sent to the first hospital.

[0033] By adopting the above technical solution, when sending an authorization request to the first hospital, the hospital information receiving the patient's medical information is first obtained to determine whether the hospital is the second hospital where the patient is receiving medical treatment. If the hospital receiving the patient's medical information is the second hospital, an authorization request to obtain the patient's medical information is sent to the first hospital. By confirming whether the hospital receiving the medical information is the second hospital, it is helpful to avoid sending the patient's medical information to other hospitals by mistake.

[0034] Optionally, the method further includes:

[0035] Performing different levels of encryption processing on the patient's medical information;

[0036] The patient's medical information is divided into different units according to different encryption levels.

[0037] By adopting the above technical solution, the patient's medical information is divided according to its importance, and different encryption processes are performed on the medical information according to its importance. The medical information with different encryption processes is stored in different units. This is beneficial to the load balancing of the First Hospital storage database and to improving the security of important medical information.

[0038] Optionally, the method further includes:

[0039] Acquire the data information of the hospital, and store the data information of the hospital and the medical information of the patient in the first database;

[0040] The hospital's data information and the patient's medical information are backed up in a second database.

[0041] By adopting the above technical solution, the patient medical information stored in the first hospital is stored in the first database, and at the same time, the information in the first database is backed up to the second database, which is conducive to timely supplementing the patient medical information when the data in the first database is lost or the first database is attacked.

[0042] Optionally, the method further includes:

[0043] When checking the medical information, obtain the authorization request for checking the medical information sent by the patient to the first hospital;

[0044] After obtaining the authorization information of the first hospital, the medical information is sent to the patient device.

[0045] By adopting the above technical solution, when a patient wants to view medical information on his / her device, he / she sends an authorization request to the First Hospital to view the medical information. At the same time, before sending the authorization request to the First Hospital to view the medical information, it is necessary to confirm whether the patient is operating in person through the patient's account password information and biometric identification information. This is conducive to patients viewing their medical information anytime and anywhere.

[0046] In the second aspect, the medical platform network security protection system provided by the present application adopts the following technical solutions:

[0047] The server includes an acquisition unit, a processing unit and a sending unit;

[0048] The acquisition unit is used to acquire the patient's medical information at the first hospital, and is used to acquire the patient's equipment and the authorization information of the first hospital;

[0049] The processing unit is used to encrypt the medical information and store it in the first hospital, and to delete the medical information called to the second hospital;

[0050] The sending unit is used to send an authorization request to the patient equipment and the first hospital to obtain the medical information.

[0051] By adopting the above technical solution, the patient's medical information in the first hospital is obtained through the acquisition unit, and the acquired medical information is encrypted and stored in the first hospital through the processing unit. When the patient visits the second hospital, it is necessary to obtain the patient's historical medical information from the first hospital, so it is necessary to send an authorization request for obtaining the patient's medical information to the patient's device and the first hospital through the sending unit. After the acquisition unit obtains the authorization information of the patient's device and the first hospital, the patient's medical information stored in the first hospital is deployed to the second hospital. When the second hospital cannot determine the patient's condition, the medical information called to the second hospital is deleted. This is conducive to avoiding the leakage of the patient's medical information and further ensuring the patient's information security.

[0052] In a third aspect, the present application provides an electronic device that adopts the following technical solution:

[0053] An electronic device comprising a memory;

[0054] Processor; and

[0055] Computer programs;

[0056] Wherein, the computer program is stored in the memory and is configured so that the processor executes any of the methods for network security protection of a medical platform.

[0057] In summary, this application includes the following beneficial technical effects:

[0058] 1. Encrypted storage of patients’ medical information helps ensure the security of their medical information.

[0059] 2. When allocating the patient's medical information, multiple parties are required to confirm the operation, which helps to avoid the patient's medical information being leaked. BRIEF DESCRIPTION OF THE DRAWINGS

[0060] Figure 1 It is a flowchart of a method for network security protection of a medical platform according to an embodiment of the present application;

[0061] Figure 2 It is a module schematic diagram of a system for network security protection of a medical platform according to an embodiment of the present application;

[0062] Figure 3 is a module schematic diagram of an electronic device according to an embodiment of the present application;

[0063] Description of reference numerals:

[0064] 1. Acquisition unit; 2. Processing unit; 3. Sending unit;

[0065] 21. Processor; 22. Communication bus; 23. Computer program; 24. User interface; 25. Network interface; 26. Memory. DETAILED DESCRIPTION

[0066] The following is combined with Figure 1-3 The present application is further described in detail. Obviously, the described embodiments are only a part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0067] In the description of the embodiments of the present application, words such as "illustrative", "for example" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "illustrative", "for example" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "illustrative", "for example" or "for example" is intended to present related concepts in a concrete way.

[0068] In the description of the embodiments of the present application, the term "and / or" is only a kind of association relationship describing the associated objects, indicating that there may be three kinds of relationships, for example, A and / or B, which can represent: A exists alone, B exists alone, and A and B exist at the same time. In addition, unless otherwise specified, the meaning of the term "multiple" refers to two or more. For example, multiple systems refer to two or more systems, and multiple screen terminals refer to two or more screen terminals. In addition, the terms "first" and "second" are only used for descriptive purposes, and cannot be understood as indicating or implying relative importance or implicitly indicating the indicated technical features. Thus, the features defined as "first" and "second" can explicitly or implicitly include one or more of the features. The terms "include", "comprise", "have" and their variations all mean "including but not limited to", unless otherwise specifically emphasized.

[0069] In the embodiment of the present application, the first hospital is specifically the hospital where the patient first visited, and the second hospital is specifically other hospitals except the first hospital. The first database is specifically the database of the hospital where the patient first visited, and the second database is specifically other databases of the hospital except the first database.

[0070] The embodiment of the present application discloses a method for network security protection of a medical platform.

[0071] refer to Figure 1 , a method for network security protection of a medical platform includes steps S100 to S500.

[0072] Step S100: Obtain the patient's medical information at the first hospital, encrypt the medical information and store it in the first hospital.

[0073] Specifically, when a patient visits the first hospital for medical treatment for the first time, the first hospital collects the patient's medical treatment information data, and encrypts and stores the collected patient's medical treatment information data in the first database of the first hospital.

[0074] Step S200: When the patient is receiving medical treatment at the second hospital, an authorization request for obtaining medical treatment information is sent to the patient's device.

[0075] Step S200 also includes steps S210 to S240.

[0076] Step S210: Obtain the patient's account and password login information.

[0077] Step S220: Acquire the patient's biometric identification information.

[0078] Step S230: If the patient's account password login information and the patient's biometric identification information meet the requirements, an authorization request to obtain medical information is sent to the patient.

[0079] Specifically, when a patient chooses to go to the second hospital for treatment, he does not need to bring his own paper medical records. He only needs to retrieve the patient's medical information stored in the first hospital. According to the patient's historical medical records and the patient's current physical condition, the patient's condition can be accurately judged. When obtaining the patient's medical information stored in the first hospital, the patient's authorization must be obtained first. Before obtaining the patient's authorization, the patient needs to log in and identify on the device.

[0080] The patient first logs in to the APP or mini program related to the hospital database with the account and password set by himself. Then the biometric feature is used to identify whether the patient is himself. In this embodiment, the biometric feature is face recognition. If the patient successfully logs in to the APP or mini program and confirms that it is his own operation through face recognition, an authorization request is sent to the patient to obtain the patient's historical medical information stored in the first hospital.

[0081] Step S200 also includes steps S240 to S260.

[0082] Step S240: Obtain the medical level grades of the first hospital and the second hospital.

[0083] Step S250: If the medical level of the second hospital is lower than that of the first hospital, an authorization request for obtaining basic medical information is sent to the patient.

[0084] Step S260: If the basic medical information does not meet the medical needs, a notification is sent to the patient, indicating whether to send an authorization request to the first hospital to obtain important medical information.

[0085] Specifically, when a patient visits the second hospital for treatment, the medical level grades of the first hospital and the second hospital are first obtained to determine the difference between the medical level grades of the first hospital and the second hospital. If the medical level grade of the first hospital is higher than that of the second hospital, then the second hospital can only send an authorization request to the first hospital to obtain the basic medical information of the patient. In this embodiment, the first hospital is a Class 3A hospital, and the second hospital is a Class 2A hospital. If the medical level grade of the second hospital is lower than that of the first hospital, and if the patient wants to treat a heart disease, but the second hospital does not have the medical level grade corresponding to the disease, then the second hospital can only obtain the patient's basic medical information and make a preliminary diagnosis of the patient's condition. If the patient agrees that the Class 2A hospital can obtain important medical information, then an authorization request to obtain important medical information can be sent to the first hospital later.

[0086] In another embodiment, if both the first hospital and the second hospital are tertiary hospitals, or the medical level of the second hospital is higher than that of the first hospital, then a request for obtaining the patient's basic medical information and the patient's important medical information can be directly sent to the first hospital in the future, so as to make a more comprehensive diagnosis of the patient's condition.

[0087] Step S300: After obtaining the authorization information of the patient's device, an authorization request for obtaining the medical information is sent to the first hospital.

[0088] Step S300 includes steps S310 to S320.

[0089] Step S310: Obtain the recipient information of the patient's medical information and determine whether the recipient is the second hospital.

[0090] Step S320: If the recipient of the patient's medical information is the second hospital, an authorization request for obtaining the medical information is sent to the first hospital.

[0091] Specifically, after obtaining the patient's authorization information, if the party receiving the patient's medical information called by the first hospital is the second hospital, then send an authorization request to the first hospital to obtain the medical information. If the party receiving the patient's medical information called by the first hospital is not the second hospital, then no authorization request to obtain the medical information is sent to the first hospital. At the same time, a message is sent to the patient to confirm whether he is receiving medical treatment in the hospital that received the patient's medical information called by the first hospital.

[0092] Step S400: Obtain the authorization information of the first hospital and transfer the medical information to the second hospital.

[0093] Step S500: If the second hospital is unable to determine the patient's condition, the medical information called to the second hospital is deleted.

[0094] Specifically, after confirming that the patient's device is used by the patient himself and obtaining the authorization information between the patient and the first hospital, the medical information is transferred to the second hospital. If the patient is treated in the second hospital, but the second hospital cannot determine the patient's condition, in this embodiment, the patient needs to change hospitals for treatment. Then the medical information of the patient transferred to the second hospital needs to be deleted to prevent the patient's medical information from being leaked.

[0095] A method for network security protection of a medical platform also includes steps S600 to S700.

[0096] Step S600: Perform different levels of encryption processing on the patient's medical information, and divide the patient's medical information into different units according to different encryption levels.

[0097] Step S700: Acquire the hospital's data information, store the hospital's data information and the patient's medical information in the first database, and back up the hospital's data information and the patient's medical information in the second database.

[0098] Specifically, when the patient's medical information is stored in the first database of the first hospital, it is necessary to perform different levels of encryption processing on the patient's medical information according to the importance of the patient's medical information. In this embodiment, the three-level medical information includes height, weight, blood pressure, internal medicine, surgery, otolaryngology, oral and ophthalmology. The second-level medical information includes chest X-ray, blood routine, blood sugar and blood lipids. The first-level medical information includes liver and kidney function, blood biochemical examination, serum tumor markers, urine routine examination and electrocardiogram examination. The third-level medical information is simply encrypted, such as setting a firewall; the second-level and first-level medical information are complexly encrypted. And according to different encryption levels of medical information, the medical information is stored in different units. For example, the height, weight, blood pressure, internal medicine, surgery, otolaryngology, oral and ophthalmology in the three-level medical information are respectively divided into the height unit, weight unit, blood pressure unit, internal medicine unit, surgery unit, otolaryngology unit, oral unit and ophthalmology unit. At the same time, all the medical information in the above embodiment is backed up to the second database.

[0099] Step S800: when checking the medical information, obtain the authorization request for checking the medical information sent by the patient to the first hospital, and after obtaining the authorization information of the first hospital, send the medical information to the patient's device.

[0100] Specifically: when the patient has completed the medical treatment at the First Hospital, the patient's medical information is stored in the database of the First Hospital. When the patient wants to view his or her own medical information in real time, he or she directly sends an authorization request to view the medical information to the First Hospital. The authorization request can choose which part of the medical information to request to be viewed according to the patient's needs. After the First Hospital authorizes the view, the device to which the patient sends the request can display the patient's medical information. In this embodiment, if the patient wants to view his or her third-level and second-level medical data on the mobile phone APP, he or she sends an authorization request to view the third-level and second-level medical data to the First Hospital. After the First Hospital authorizes, the patient's second-level and third-level medical information can be displayed on the patient's mobile phone APP.

[0101] refer to Figure 2 , an embodiment of the present application also discloses a system for network security protection of a medical platform.

[0102] A medical platform network security protection system includes:

[0103] The acquisition unit 1 is used to acquire the patient's medical information in the first hospital and to acquire the patient's equipment and the authorization information of the first hospital;

[0104] Processing unit 2 is used to encrypt the medical information and store it in the first hospital, and to delete the medical information called to the second hospital;

[0105] The sending unit 3 is used to send an authorization request to the patient device and the first hospital to obtain the medical information.

[0106] The processing unit 2 is also used to classify the patient's medical information into basic medical information and important medical information.

[0107] The acquisition unit 1 is also used to acquire the authorization information of the patient's device, and is also used to acquire the medical level grades of the first hospital and the second hospital. The processing unit 2 is also used to determine the medical level grades of the first hospital and the second hospital. The sending unit 3 is also used to send an authorization request to the first hospital, and is also used to send an authorization request to the patient to obtain basic medical information, and is also used to send a notification to the patient whether to send an authorization request to the first hospital to obtain important medical information.

[0108] The acquisition unit 1 is also used to obtain the patient's account password login information and biometric identification information. The processing unit 2 is also used to determine whether the patient's account password login information and the patient's biometric identification information meet the requirements at the same time. The sending unit 3 is also used to send an authorization request to the patient to obtain the medical information.

[0109] The acquisition unit 1 is also used to acquire the recipient information of the patient's medical information. The processing unit 2 is also used to determine whether the recipient is the second hospital. The sending unit 3 is also used to send an authorization request to the first hospital to obtain the medical information.

[0110] The processing unit 2 is also used to perform different levels of encryption processing on the patient's medical information, and divide the patient's medical information into different units according to different encryption levels.

[0111] The acquisition unit 1 is also used to acquire the data information of the hospital. The processing unit 2 is also used to store the data information of the hospital and the medical information of the patient in the first database, and to back up the data information of the hospital and the medical information of the patient in the second database.

[0112] The acquisition unit 1 is also used to acquire the authorization request for viewing the medical information sent by the patient to the first hospital. The sending device is also used to send the medical information to the patient's device.

[0113] The implementation principle of a medical platform network security protection system in an embodiment of the present application is as follows: when a patient goes to the first hospital for medical treatment for the first time, the first hospital obtains the patient's medical information data, and encrypts and stores the obtained patient's medical information data in the first database of the first hospital. When the patient chooses to go to the second hospital for medical treatment, there is no need to bring the patient's own paper medical record book, but only needs to retrieve the patient's stored medical information from the first hospital. According to the patient's historical medical records and the patient's current physical condition, an accurate judgment is made on the patient's condition. When obtaining the patient's medical information stored in the first hospital, it is necessary to first obtain the patient's authorization. Before obtaining the patient's authorization, the patient is required to log in and identify on the device.

[0114] The patient first logs in to the APP or mini-program related to the hospital database with the account and password set by himself. Then, the biometric feature is used to identify whether the patient is himself. In this embodiment, biometric feature recognition is face recognition. If the patient successfully logs in to the APP or mini-program and confirms that it is his own operation through face recognition, an authorization request for obtaining the patient's historical medical information stored in the first hospital is sent to the patient. If the party receiving the medical information of the patient called by the first hospital is the second hospital, an authorization request for obtaining the medical information is sent to the first hospital. If the party receiving the medical information of the patient called by the first hospital is not the second hospital, no authorization request for obtaining the medical information is sent to the first hospital.

[0115] After confirming that the patient's device is for personal use and obtaining the authorization information between the patient and the first hospital, the medical information will be transferred to the second hospital. If the patient is receiving medical treatment at the second hospital, but the second hospital cannot determine the patient's condition, the medical information of the patient transferred to the second hospital needs to be deleted to prevent the patient's medical information from being leaked. By encrypting, storing, transferring and viewing the patient's medical information, it is helpful to further ensure the security of the patient's medical information.

[0116] The system for network security protection of a medical platform provided in the above embodiment only uses the division of the above-mentioned functional modules as an example when implementing a method for network security protection of a medical platform. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the device is divided into different functional modules to complete all or part of the functions described above. In addition, the system for network security protection of a medical platform provided in the above embodiment and the method embodiment for network security protection of a medical platform belong to the same concept, and the implementation process thereof is detailed in the method embodiment. It should be understood that the above system is used to execute the method in the above embodiment, and the implementation principle and technical effect of the corresponding program module in the system are similar to those described in the above method embodiment. The working process of the system can refer to the corresponding process in the above method, which will not be repeated here.

[0117] refer to Figure 3 , an embodiment of the present application also discloses an electronic device.

[0118] The electronic device may include: at least one processor 21 , a computer program 23 , at least one network interface 25 , a user interface 24 , a memory 26 , and at least one communication bus 22 .

[0119] The communication bus 22 is used to realize the connection and communication between these components.

[0120] The user interface 24 may include a display screen, and the optional user interface 24 may also include a standard wired interface or a wireless interface.

[0121] The network interface 25 may optionally include a standard wired interface or a wireless interface (such as a WI-FI interface).

[0122] Among them, the processor 21 may include one or more processing cores. The processor 21 uses various interfaces and lines to connect various parts in the entire server, and executes various functions of the server and processes data by running or executing instructions, programs, code sets or instruction sets stored in the memory 26, and calling data stored in the memory 26. Among them, the processor 21 can be implemented in at least one hardware form of digital signal processing, field programmable gate array, and programmable logic array. The processor 21 can integrate one or a combination of a central processing unit (CPU), a graphics processing unit (GPU), and a modem. Among them, the CPU mainly processes the operating system, user interface, and application programs; the GPU is responsible for rendering and drawing the content to be displayed on the display screen; and the modem is used to process wireless communications. It can be understood that the above-mentioned modem may not be integrated into the processor 21, but may be implemented separately through a chip.

[0123] Among them, the computer program 23 stores at least one instruction, and at least one instruction is loaded and executed by the processor 21, such as a method for security protection of a medical platform system in the above embodiment. The specific execution process can be referred to the specific description of the above embodiment, which will not be repeated here.

[0124] The memory 26 may include a random access memory or a read-only memory. The memory 26 includes a non-transitory computer-readable medium. The memory 26 may be used to store instructions, programs, codes, code sets or instruction sets. The memory 26 may include a program storage area and a data storage area, wherein the program storage area may store instructions for implementing an operating system, instructions for at least one function, instructions for implementing the above-mentioned various method embodiments, etc.; the data storage area may store data involved in the above-mentioned various method embodiments, etc. The memory 26 may optionally be at least one storage device located away from the aforementioned processor 21. The memory 26 as a computer storage medium may include an operating system, a network communication module, a user interface 24 module, and an extended control application of an expandable component.

[0125] The embodiments of this specific implementation method are all preferred embodiments of the present application, and are not intended to limit the protection scope of the present application. Therefore, all equivalent changes made based on the structure, shape, and principle of the present application should be included in the protection scope of the present application.

Claims

1. A method for network security protection of a medical platform, characterized in that: Applied to servers, including: Obtaining the patient's medical information at the first hospital, the patient's medical information including the patient's basic medical information and important medical information, encrypting the medical information and storing it in the first hospital; If the patient visits the second hospital for treatment, an authorization request is sent to the preset patient device to obtain the treatment information; After obtaining the authorization information of the patient's device, sending an authorization request to the first hospital to obtain the medical information; Obtain authorization information from the first hospital and transfer the medical information to the second hospital; If the second hospital is unable to determine the patient's condition, the medical information transferred to the second hospital is deleted; Wherein, when the patient visits the second hospital, the step of sending an authorization request to the patient device to obtain the medical information; after obtaining the authorization information of the patient device, sending an authorization request to the first hospital to obtain the medical information includes: Obtain the medical level grades of the First Hospital and the Second Hospital; If the medical level of the second hospital is lower than that of the first hospital, sending an authorization request to the patient to obtain basic medical information; After obtaining the patient's authorization information, an authorization request is sent to the first hospital to obtain the basic medical information; If the basic medical information does not meet the medical needs, a notification is sent to the patient, and the notification indicates whether to send an authorization request to the first hospital to obtain the important medical information.

2. A method for network security protection of a medical platform according to claim 1, characterized in that: The patient The steps before sending the authorization request for obtaining the medical information include: Obtain the patient's account and password login information; Obtaining biometric information of patients; If the patient's account password login information and the patient's biometric identification information meet the requirements, the patient will be sent An authorization request is made to obtain the medical information.

3. A method for network security protection of a medical platform according to claim 1, characterized in that: The step of sending an authorization request to the first hospital to obtain the medical information includes: Obtaining the recipient information of the patient's medical information, and determining whether the recipient is the second hospital; If the recipient of the patient's medical information is the second hospital, an authorization request for obtaining the medical information is sent to the first hospital.

4. A method for protecting network security of a medical platform according to claim 1, characterized in that: The method further comprises: Performing different levels of encryption processing on the patient's medical information; The patient's medical information is divided into different units according to different encryption levels.

5. A method for network security protection of a medical platform according to claim 1, characterized in that: The method further comprises: Acquire the data information of the hospital, and store the data information of the hospital and the medical information of the patient in the first database; The hospital's data information and the patient's medical information are backed up in a second database.

6. A method for network security protection of a medical platform according to claim 1, characterized in that: The method further comprises: When checking the medical information, obtain the authorization request for checking the medical information sent by the patient to the first hospital; After obtaining the authorization information of the first hospital, the medical information is sent to the patient device.

7. A system for network security protection of a medical platform, characterized in that: A method for protecting network security of a medical platform applied to any one of claims 1 to 6 above, wherein the server comprises an acquisition unit (1), a processing unit (2) and a sending unit (3); The acquisition unit (1) is used to acquire the patient's medical information at the first hospital, the patient's medical information including the patient's basic medical information and important medical information, and is used to acquire the patient's equipment and the authorization information of the first hospital; The processing unit (2) is used to encrypt the medical information and store it in the first hospital, and to delete the medical information called to the second hospital; The sending unit (3) is used to send an authorization request to the patient device and the first hospital to obtain the medical information, specifically including: obtaining the medical level of the first hospital and the second hospital; if the medical level of the second hospital is lower than the medical level of the first hospital, sending an authorization request to the patient to obtain basic medical information; after obtaining the patient's authorization information, sending an authorization request to the first hospital to obtain the basic medical information; if the basic medical information does not meet the medical needs, sending a notification to the patient, the notification indicating whether to send an authorization request to the first hospital to obtain the important medical information.

8. An electronic device, characterized in that: include: A memory (26); a processor (21); and a computer program (23); wherein the computer program (23) is stored in the memory (26) and is configured to be executed by the processor (21) Execute to implement a method for network security protection of a medical platform as described in any one of claims 1 to 6.

Images