Electronic medical record data encryption method and system based on browser fingerprint

Abstract

The application provides an electronic medical record data encryption method and system based on browser fingerprints, which comprises the following steps: obtaining a browser fingerprint encryption public key of a user by using a front end; obtaining fingerprint data of a browser terminal by using the front end; encrypting the fingerprint data of the browser terminal by using the browser fingerprint encryption public key to obtain encrypted data; performing authorized registration processing on the encrypted data and a preset electronic medical record by using a back end, and generating an encryption public key of the preset electronic medical record; encrypting the preset electronic medical record by using the encryption public key of the preset electronic medical record by using the front end to obtain an encrypted preset electronic medical record; and transmitting the encrypted preset electronic medical record and the encrypted data to the back end, and storing the encrypted data and the encrypted preset electronic medical record by using the back end. The application improves the confidentiality of hospital electronic medical record data and solves the problem that one electronic medical record cannot be authorized by multiple devices.

Description

Technical Field

[0001] This invention relates to the field of identity authentication technology, and in particular to a method and system for encrypting electronic medical record data based on browser fingerprints. Background Technology

[0002] Currently, most electronic medical record data is stored using base64 encoding and encrypted with a key. However, this method only implements account-level encryption. If a user's account password is leaked, other personnel can view the patient's medical record data on other terminals, thus posing a risk of leakage of hospital information and patient privacy. At the same time, in B / S architecture electronic medical record systems, it is impossible to verify the user's current device. General encryption and decryption methods are based on user-level verification. For example, if the current user calls the backend interface to obtain the encryption key for encryption, it is impossible to identify the terminal device used by the user. Summary of the Invention

[0003] To overcome the shortcomings of existing technologies, the purpose of this invention is to provide a method and system for encrypting electronic medical record data based on browser fingerprints. This invention improves the confidentiality of hospital electronic medical record data and solves the problem that a single electronic medical record cannot be authorized on multiple devices.

[0004] To achieve the above objectives, the present invention provides the following solution:

[0005] A browser fingerprint-based electronic medical record data encryption method includes:

[0006] Use the front-end to obtain the user's browser fingerprint encryption public key;

[0007] Use the front end to obtain the fingerprint data of the browser terminal;

[0008] The fingerprint data of the browser terminal is encrypted using the browser's fingerprint encryption public key to obtain encrypted data;

[0009] The backend performs authorization registration processing on the encrypted data and the preset electronic medical record, and generates the encryption public key for the preset electronic medical record;

[0010] Using the front end, the preset electronic medical record is encrypted using the public key of the preset electronic medical record to obtain the encrypted preset electronic medical record;

[0011] The encrypted preset electronic medical record and the encrypted data are transmitted to the backend, where the encrypted data and the encrypted preset electronic medical record are stored.

[0012] Preferably, the encryption method for the encrypted data is ASE encryption.

[0013] Preferably, after transmitting the encrypted preset electronic medical record and the encrypted data to the backend, and storing the encrypted data and the encrypted preset electronic medical record using the backend, the method further includes:

[0014] Obtain the current user's browser fingerprint and the current encryption public key;

[0015] The fingerprint data of the browser terminal is encrypted using the current browser fingerprint and the current encryption public key to obtain the current encrypted data;

[0016] The backend verifies the identity of the current encrypted data and the medical record number of the current electronic medical record to be read. If the identity verification fails, the reading of the current electronic medical record is refused. If the identity verification is successful, the encryption public key corresponding to the medical record number of the current electronic medical record is obtained.

[0017] Using the front end, the medical record number of the current electronic medical record is decrypted using the encryption public key corresponding to the medical record number.

[0018] Preferably, the step of using the backend to authenticate the currently encrypted data and the medical record number of the current electronic medical record to be read includes:

[0019] The backend database is used to identify and judge the current encrypted data and the medical record number of the current electronic medical record to be read. If the current encrypted data and the medical record number of the current electronic medical record to be read are identified as authorized, the identity verification is judged to be successful; if the current encrypted data and the medical record number of the current electronic medical record to be read are identified as unauthorized, the identity verification is judged to be unsuccessful.

[0020] An electronic medical record data encryption system based on browser fingerprints includes:

[0021] The first acquisition module is used to obtain the user's browser fingerprint encryption public key using the front end;

[0022] The second acquisition module is used to acquire fingerprint data from the browser terminal using the front end;

[0023] The first encryption module is used to encrypt the fingerprint data of the browser terminal using the browser fingerprint encryption public key to obtain encrypted data;

[0024] The authorization module is used to perform authorization registration processing on the encrypted data and the preset electronic medical record using the backend, and to generate the encryption public key of the preset electronic medical record;

[0025] The second encryption module is used to encrypt the preset electronic medical record using the encryption public key of the preset electronic medical record through the front end, so as to obtain the encrypted preset electronic medical record.

[0026] The storage module is used to transmit the encrypted preset electronic medical record and the encrypted data to the backend, and the backend stores the encrypted data and the encrypted preset electronic medical record.

[0027] Preferably, it further includes:

[0028] The third acquisition module is used to acquire the current user's browser fingerprint and the current encryption public key;

[0029] The third encryption module is used to encrypt the fingerprint data of the browser terminal using the current browser fingerprint and the current encryption public key to obtain the current encrypted data;

[0030] The verification module is used to verify the identity of the current encrypted data and the medical record number of the current electronic medical record to be read by the backend. If the identity verification fails, the current electronic medical record will not be read. If the identity verification is successful, the encryption public key corresponding to the medical record number of the current electronic medical record will be obtained.

[0031] The decryption module is used to decrypt the medical record number of the current electronic medical record using the encryption public key corresponding to the medical record number of the current electronic medical record, through the front end.

[0032] According to specific embodiments provided by the present invention, the present invention discloses the following technical effects:

[0033] This invention provides a method and system for encrypting electronic medical record data based on browser fingerprints. By encrypting a preset electronic medical record and browser fingerprint data, this invention generates a unique corresponding electronic medical record decryption public key, which improves the confidentiality of hospital electronic medical record data, effectively protects hospital data and patient privacy, and through a backend authorization mode, can generate electronic medical record encryption public keys from browser fingerprint data of multiple devices, solving the problem that one electronic medical record cannot be authorized by multiple devices. Attached Figure Description

[0034] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0035] Figure 1 A flowchart of an electronic medical record data encryption method provided in an embodiment of the present invention. Detailed Implementation

[0036] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0037] In this document, the term "embodiment" means that a particular feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of this application. The appearance of this phrase in various places throughout the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.

[0038] The terms "first," "second," "third," and "fourth," etc., used in the specification, claims, and accompanying drawings of this application are used to distinguish different objects, not to describe a specific order. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion. For example, including a series of steps, processes, methods, etc., is not limited to the steps listed, but may optionally include steps not listed, or may optionally include other steps inherent to these processes, methods, products, or devices.

[0039] The purpose of this invention is to provide a method and system for encrypting electronic medical record data based on browser fingerprints, which improves the confidentiality of hospital electronic medical record data and solves the problem that one electronic medical record cannot be authorized by multiple devices.

[0040] To make the above-mentioned objects, features and advantages of the present invention more apparent and understandable, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0041] like Figure 1 As shown, this invention provides a method for encrypting electronic medical record data based on browser fingerprints, comprising:

[0042] Step 100: Obtain the user's browser fingerprint encryption public key using the front-end;

[0043] Step 200: Obtain the fingerprint data of the browser terminal using the front end;

[0044] Step 300: Encrypt the fingerprint data of the browser terminal using the browser fingerprint encryption public key to obtain encrypted data;

[0045] Step 400: The backend performs authorization registration processing on the encrypted data and the preset electronic medical record, and generates the encryption public key of the preset electronic medical record;

[0046] Step 500: Using the front end, encrypt the preset electronic medical record using the encryption public key of the preset electronic medical record to obtain the encrypted preset electronic medical record;

[0047] Step 600: Transmit the encrypted preset electronic medical record and the encrypted data to the backend, and use the backend to store the encrypted data and the encrypted preset electronic medical record.

[0048] Furthermore, the encryption method for the encrypted data is ASE encryption.

[0049] This implementation details the ASE encryption method, which is as follows:

[0050] Unlike MD5 and SHA encryption, the ASE algorithm is a symmetric encryption algorithm. Its symmetry is reflected in the fact that when sending information, the information needs to be encrypted with a key, and the receiver needs to decrypt the encrypted information with the same key in order to obtain the information content.

[0051] ASE algorithm: a symmetric encryption algorithm that is reversible and ensures that private information is not leaked.

[0052] MD5 and SHA algorithms are hash digest algorithms that are irreversible and used to verify the consistency and integrity of information.

[0053] The three essential elements of the ASE algorithm are: key, padding, and pattern.

[0054] The key is fundamental to the encryption and decryption capabilities of the ASE algorithm. Symmetric encryption algorithms are symmetric because they require the same key to encrypt and decrypt plaintext (information).

[0055] ase supports three key lengths: 128 bits, 192 bits, and 256 bits.

[0056] ase128, ase192, and ase256 are actually just different length keys.

[0057] ASE256 has the highest security and ASE128 has the highest performance, which is essentially due to the difference in the number of encryption rounds they use.

[0058] Furthermore, after transmitting the encrypted preset electronic medical record and the encrypted data to the backend, and storing the encrypted data and the encrypted preset electronic medical record using the backend, the method further includes:

[0059] Obtain the current user's browser fingerprint and the current encryption public key;

[0060] The fingerprint data of the browser terminal is encrypted using the current browser fingerprint and the current encryption public key to obtain the current encrypted data;

[0061] The backend verifies the identity of the current encrypted data and the medical record number of the current electronic medical record to be read. If the identity verification fails, the reading of the current electronic medical record is refused. If the identity verification is successful, the encryption public key corresponding to the medical record number of the current electronic medical record is obtained.

[0062] Using the front end, the medical record number of the current electronic medical record is decrypted using the encryption public key corresponding to the medical record number.

[0063] Furthermore, the step of using the backend to authenticate the current encrypted data and the medical record number of the current electronic medical record to be read includes:

[0064] The backend database is used to identify and judge the current encrypted data and the medical record number of the current electronic medical record to be read. If the current encrypted data and the medical record number of the current electronic medical record to be read are identified as authorized, the identity verification is judged to be successful; if the current encrypted data and the medical record number of the current electronic medical record to be read are identified as unauthorized, the identity verification is judged to be unsuccessful.

[0065] The creator of the current electronic medical record receives requests from other devices to access the electronic medical record, reviews and authorizes these requests, and if the creator chooses to authorize, the current electronic medical record will be displayed as authorized on other devices.

[0066] This embodiment discloses the process of authorizing electronic medical records to other devices:

[0067] User A created Electronic Medical Record 1 using browser AA. By default, the backend generates fingerprint data for user A, browser AA, and permission data for Electronic Medical Record 1. This permission data is approved by default. Thus, the next time user A uses browser AA, they will have permission to access Electronic Medical Record 1, and as the creator of Electronic Medical Record 1, user A also has the permission to approve it.

[0068] User B uses browser BB to request access to the data in electronic medical record 1. The backend generates user B's fingerprint data, browser BB's fingerprint data, and access data for electronic medical record 1. This access data is unapproved by default. After user A logs into the system and approves the request, user B can then use browser BB to access the data in electronic medical record 1.

[0069] This implementation also discloses the specific steps for encrypting electronic medical record data:

[0070] Step 1. The front end obtains the user's browser fingerprint encryption public key through an API request.

[0071] Step 2. The front end obtains the fingerprint data of the browser terminal, encrypts the current browser fingerprint data using the public key obtained in Step 1, and sends the encrypted data and the current electronic medical record number to the back end for authorization registration.

[0072] Step 3. After authorization and registration, the front end sends the encrypted data from Step 2 and the electronic medical record number to the back end. The back end obtains all authorized browser fingerprint encryption data based on the authorization and registration information, generates the corresponding electronic medical record encryption public key, and sends it to the front end.

[0073] Step 4. The front end uses the electronic medical record encryption public key to encrypt the electronic medical record data using ASE, and sends the encrypted data and the electronic medical record number to the back end for database storage.

[0074] Step 5. Repeat Step 1 to obtain the current user's browser fingerprint encryption public key, obtain the current browser fingerprint data and encrypt it. Send the encrypted data and the medical record number of the electronic medical record to be read to the backend for authentication. If the authentication is successful, the backend returns the electronic medical record data stored in the database and the corresponding electronic medical record encryption public key. The frontend browser decrypts the electronic medical record data using the public key and provides it to the user for viewing and editing.

[0075] Corresponding to the above method, this embodiment also provides an electronic medical record data encryption system based on browser fingerprints, including:

[0076] The first acquisition module is used to obtain the user's browser fingerprint encryption public key using the front end;

[0077] The second acquisition module is used to acquire fingerprint data from the browser terminal using the front end;

[0078] The first encryption module is used to encrypt the fingerprint data of the browser terminal using the browser fingerprint encryption public key to obtain encrypted data;

[0079] The authorization module is used to perform authorization registration processing on the encrypted data and the preset electronic medical record using the backend, and to generate the encryption public key of the preset electronic medical record;

[0080] The second encryption module is used to encrypt the preset electronic medical record using the encryption public key of the preset electronic medical record through the front end, so as to obtain the encrypted preset electronic medical record.

[0081] The storage module is used to transmit the encrypted preset electronic medical record and the encrypted data to the backend, and the backend stores the encrypted data and the encrypted preset electronic medical record.

[0082] Specifically, it also includes:

[0083] The third acquisition module is used to acquire the current user's browser fingerprint and the current encryption public key;

[0084] The third encryption module is used to encrypt the fingerprint data of the browser terminal using the current browser fingerprint and the current encryption public key to obtain the current encrypted data;

[0085] The verification module is used to verify the identity of the current encrypted data and the medical record number of the current electronic medical record to be read by the backend. If the identity verification fails, the current electronic medical record will not be read. If the identity verification is successful, the encryption public key corresponding to the medical record number of the current electronic medical record will be obtained.

[0086] The decryption module is used to decrypt the medical record number of the current electronic medical record using the encryption public key corresponding to the medical record number of the current electronic medical record, through the front end.

[0087] The beneficial effects of this invention are as follows:

[0088] This invention provides a method and system for encrypting electronic medical record data based on browser fingerprints. By encrypting a preset electronic medical record and browser fingerprint data, this invention generates a unique corresponding electronic medical record decryption public key, which improves the confidentiality of hospital electronic medical record data, effectively protects hospital data and patient privacy, and through a backend authorization mode, can generate electronic medical record encryption public keys from browser fingerprint data of multiple devices, solving the problem that one electronic medical record cannot be authorized by multiple devices.

[0089] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably. For the systems disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the descriptions are relatively simple; relevant parts can be referred to the method section.

[0090] This document uses specific examples to illustrate the principles and implementation methods of the present invention. The descriptions of the above embodiments are only for the purpose of helping to understand the method and core ideas of the present invention. Furthermore, those skilled in the art will recognize that, based on the ideas of the present invention, there will be changes in the specific implementation methods and application scope. Therefore, the content of this specification should not be construed as a limitation of the present invention.

Claims

1. A method for encrypting electronic medical record data based on browser fingerprints, characterized in that, include: Use the front-end to obtain the user's browser fingerprint encryption public key; Use the front end to obtain the fingerprint data of the browser terminal; The fingerprint data of the browser terminal is encrypted using the browser's fingerprint encryption public key to obtain encrypted data; The backend performs authorization registration processing on the encrypted data and the preset electronic medical record, and generates the encryption public key for the preset electronic medical record; Using the front end, the preset electronic medical record is encrypted using the public key of the preset electronic medical record to obtain the encrypted preset electronic medical record; The encrypted preset electronic medical record and the encrypted data are transmitted to the backend, and the backend stores the encrypted data and the encrypted preset electronic medical record. After transmitting the encrypted preset electronic medical record and the encrypted data to the backend, and storing the encrypted data and the encrypted preset electronic medical record in the backend, the method further includes: Obtain the current user's browser fingerprint and the current encryption public key; The fingerprint data of the browser terminal is encrypted using the current user's browser fingerprint and the current encryption public key to obtain the current encrypted data; The backend verifies the identity of the current encrypted data and the medical record number of the current electronic medical record to be read. If the identity verification fails, the reading of the current electronic medical record is refused. If the identity verification is successful, the encryption public key corresponding to the medical record number of the current electronic medical record is obtained. Using the front end, the medical record number of the current electronic medical record is decrypted using the encryption public key corresponding to the medical record number.

2. The method for encrypting electronic medical record data based on browser fingerprints according to claim 1, characterized in that, The encryption method for the encrypted data is ASE encryption.

3. The method for encrypting electronic medical record data based on browser fingerprints according to claim 1, characterized in that, The process of authenticating the currently encrypted data and the medical record number of the current electronic medical record to be read using the backend includes: The backend database is used to identify and judge the current encrypted data and the medical record number of the current electronic medical record to be read. If the current encrypted data and the medical record number of the current electronic medical record to be read are identified as authorized, the identity verification is judged to be successful; if the current encrypted data and the medical record number of the current electronic medical record to be read are identified as unauthorized, the identity verification is judged to be unsuccessful.

4. An electronic medical record data encryption system based on browser fingerprinting, characterized in that, include: The first acquisition module is used to obtain the user's browser fingerprint encryption public key using the front end; The second acquisition module is used to acquire fingerprint data from the browser terminal using the front end; The first encryption module is used to encrypt the fingerprint data of the browser terminal using the browser fingerprint encryption public key to obtain encrypted data; The authorization module is used to perform authorization registration processing on the encrypted data and the preset electronic medical record using the backend, and to generate the encryption public key of the preset electronic medical record; The second encryption module is used to encrypt the preset electronic medical record using the encryption public key of the preset electronic medical record through the front end, so as to obtain the encrypted preset electronic medical record. A storage module is used to transmit the encrypted preset electronic medical record and the encrypted data to the backend, and the backend stores the encrypted data and the encrypted preset electronic medical record. The third acquisition module is used to acquire the current user's browser fingerprint and the current encryption public key; The third encryption module is used to encrypt the fingerprint data of the browser terminal using the current user's browser fingerprint and the current encryption public key to obtain the current encrypted data; The verification module is used to verify the identity of the current encrypted data and the medical record number of the current electronic medical record to be read by the backend. If the identity verification fails, the current electronic medical record will be refused to be read. If the identity verification is successful, the encryption public key corresponding to the medical record number of the current electronic medical record will be obtained. The decryption module is used to decrypt the medical record number of the current electronic medical record using the encryption public key corresponding to the medical record number of the current electronic medical record, through the front end.

Images