A database security management system and method for cross-institutional medical service collaboration

Abstract

The application discloses a kind of database security management systems and methods for cross-agency medical service cooperation, it is related to medical service technical field, to solve the problem of poor data stability in the process of interaction when cross-agency medical service carries out data interaction.The database security management system and method for cross-agency medical service cooperation will IP data and field be 0, will be marked as the number of 16 units in IP data header and be composed, and the composed number is sequentially summed by binary complement code;According to the data result of binary complement code summation, the result is stored in the field of IP data, which can effectively prevent the integrity of data from being damaged by human, generate message digest by hash function, encrypt the message digest according to the private key, and transmit the data together with the message and the digital signature of the encrypted message digest, which strengthens the integrity of data.

Description

Technical Field

[0001] This invention relates to the field of medical service technology, specifically to a database security management system and method for cross-institutional medical service collaboration. Background Technology

[0002] Medical services refer to health promotion services provided by health professionals in accordance with professional technical standards, including care for life and treatment of diseases, as well as services such as medicines, medical devices, rescue and transportation, and hospital accommodation provided to achieve these services.

[0003] Chinese patent CN113987443A discloses a multi-cloud, multi-chain collaborative method for secure sharing of electronic medical data. It primarily stores encrypted medical data in a private cloud, effectively protecting patient privacy and the security of medical data. A confidentiality-based intermediary access control protocol is implemented to ensure the security of data accessed by alliance users in the shared pool. After access is complete, the data is immediately destroyed, effectively saving storage space and providing strong security guarantees. While this patent solves the data sharing problem, the following issues still exist in practical operation:

[0004] 1. It simply verifies the terminal's IP address data without binding the IP address data to the digital signature, which leads to inconvenience caused by excessively frequent signature changes.

[0005] 2. The data exchanged was not encrypted, which made the data vulnerable to external virus intrusion during the exchange process, resulting in data corruption.

[0006] 3. When medical data is exchanged across institutions, the efficiency of data exchange is too low, and the exchanged data cannot be exchanged in an orderly manner. Summary of the Invention

[0007] The purpose of this invention is to provide a database security management system and method for cross-institutional medical service collaboration. The method involves setting IP data and fields to 0, marking the IP data header as a series of 16-bit numbers, and then performing a binary one's complement sum on each of these numbers. The result of the binary one's complement sum is stored in the IP data field, effectively preventing human-caused data corruption. A hash function is used to generate a message digest from the message text, which is then encrypted using a private key. This encrypted message digest is used as the digital signature of the message and transmitted along with the message, enhancing data integrity. Furthermore, using the version number of the public key used for encryption improves the stability of the encrypted data during transmission, thus solving problems in existing technologies.

[0008] To achieve the above objectives, the present invention provides the following technical solution:

[0009] A database security management system for cross-institutional collaborative healthcare services includes:

[0010] The intranet medical data acquisition unit is used for:

[0011] Based on the medical data from the first terminal, the medical data from the first terminal is acquired, where the first terminal is the medical server of station A;

[0012] External network medical data acquisition unit, used for:

[0013] Based on the medical data from the second terminal, the medical data from the second terminal is acquired. The second terminal is Bilibili's medical server.

[0014] The authentication and data transmission unit is used for:

[0015] Based on the data from the intranet medical data acquisition unit and the extranet medical data acquisition unit, the operator's identity is verified. Among them, those who can operate the medical server of Station A and the medical server of Station B are all internal staff. When performing data interaction operations, the operator's identity is verified by the personnel registration data in the medical server of Station A and the medical server of Station B. At the same time, after the operator's identity verification is successful, the received data is transmitted.

[0016] Interactive data processing unit, used for:

[0017] Based on the data received in the authentication and data transmission unit, the data is verified and encrypted respectively, and the data that has completed the verification and encryption is marked as standard data.

[0018] Internal and external network data interaction unit, used for:

[0019] Based on the standard data received in the interactive data processing unit, the standard data is packaged into data transmission formats, and the packaged data is labeled as target data. The target data is then interacted with and transmitted.

[0020] The encrypted data anomaly detection unit is used for:

[0021] Based on the target data in the internal and external network data interaction unit, the target data is grouped and packaged separately, and the data with importance greater than or equal to the preset standard threshold in the packaged data is statistically analyzed. After the statistical analysis is completed, the data with abnormality in the statistical data is filtered out and the abnormal data is stored independently.

[0022] Preferably, the interactive data processing unit includes:

[0023] The data IP verification module is used for:

[0024] Obtain the IP data of the medical server on site A and the medical server on site B respectively, set the IP data and fields to 0, mark the IP data header as a number in 16-bit units, and sum the numbers in binary one's complement.

[0025] Based on the summation of the binary one's complement, the result is stored in the field of the IP data;

[0026] If the data result is zero, the IP verification is considered correct; if the data result is not zero, the IP verification is considered incorrect. When the data is incorrect, it is automatically discarded and no further operation is performed; the operation stops automatically.

[0027] Preferably, the interactive data processing unit further includes:

[0028] The data digital signature processing module is used for:

[0029] Based on the IP data verified correctly in the data IP verification module, the IP data is bound to the digital signature. The digital signature generates a data packet from the data transmitted between the medical server on site A and the medical server on site B. The packet text is then converted into a message digest using a hash function. The message digest is encrypted using a private key, and the encrypted message digest is used as the digital signature of the message and transmitted together with the message.

[0030] Preferably, the data digital signature processing module is further used for:

[0031] Meanwhile, when receiving data, the medical server at station A or station B first uses the same hash function transmitted by the medical server at station A or station B to calculate the message digest from the original message received by the medical server at station A or station B, and then decrypts the digital signature attached to the message using the public key transmitted by the medical server at station A or station B.

[0032] If the two digests are identical when the medical server on site A or the medical server on site B interact, then the digital signature is determined to be correct data.

[0033] Preferably, the data digital signature processing module is further configured to:

[0034] Obtain the message digest, set a random number, and determine the key parameters for the digital signature;

[0035]

[0036] Among them, f eThis represents a random encrypted number f under an encryption exponent e; K represents the encryption modulus of medical server A or medical server B; J represents any random number; mod represents the remainder operator; The XOR operator; m represents the key parameter;

[0037] Based on the key parameters, the public and private key pairs for the medical servers on platforms A and B are determined. The private key is sent to both medical servers, and the public key is made public.

[0038] The public-private key pair is (GK i Sk i ), GK i Sk represents the public key of the transmitted data corresponding to the digest of the i-th message. i This represents the private key for the transmitted data corresponding to the i-th message digest. The private keys of the medical server at station A and the medical server at station B are different in the public-private key pair.

[0039]

[0040]

[0041] Where / represents OR; KA represents the encryption modulus of medical server A; KB represents the encryption modulus of medical server B.

[0042] Preferably, the interactive data processing unit further includes:

[0043] The data encryption module is used for:

[0044] Data is received electronically from the receiving end of either the medical server on platform A or platform B, and the data is encrypted using a public key on either platform A or platform B. The encrypted data includes a hash value.

[0045] Preferably, the data encryption module is further used for:

[0046] The hash value represents the numbered version of the public key used to encrypt the data. The encrypted data is then transmitted to either the medical server on platform A or the medical server on platform B, and stored in a database associated with either the medical server on platform A or the medical server on platform B.

[0047] Preferably, the internal and external network data interaction unit is further used for:

[0048] Read the target data and sign an agreement based on the read data;

[0049] Once the agreement is successfully signed, the target data will be processed according to the information transmission format and transmitted to the medical server of Station A or the medical server of Station B for information exchange.

[0050] At the same time, after the information exchange is completed, the system automatically checks whether the exchange is complete. If the check result is that the exchange is completed, it is considered a successful exchange. If the check result is that the exchange is not completed, the system will try to exchange information again until the exchange is completed.

[0051] Preferably, the automatic data detection of whether the interaction is completed includes the following steps:

[0052] Obtain the first interactive data transmitted from medical server A to medical server B;

[0053] Obtain the second interactive data transmitted from Bilibili's medical server to A site's medical server;

[0054] Construct the first weighted entropy of the first interaction data and the second weighted entropy of the second interaction data;

[0055]

[0056]

[0057] Where P(A) represents the first weighted entropy of the medical server at site A; R i (A) represents the random function of the i-th transmitted data in the first interactive data under random variable a; q i Y represents the weight of the i-th transmitted data in the first interactive data; β represents the weighting coefficient; P(b) represents the second weighted entropy of the Bilibili medical server; j (b) represents the random function of the j-th transmitted data in the second interactive data under the random variable b; Q j i represents the weight of the j-th transmitted data in the second interactive data; m represents the total number of data in the second interactive data; n represents the total number of data in the first interactive data; i and j are both positive integers;

[0058] Calculate the association function after the medical server on site A transmits data to the medical server on site B.

[0059]

[0060] Where w represents the correlation function;

[0061] Determine whether P(a) and P(b) are ≥ P(a|b) respectively. If P(a) and P(b) are both ≥ P(a|b), it means that the medical server of station A and the medical server of station B have completed the interaction.

[0062] This invention provides another technical solution: a management method for a database security management system for cross-institutional medical service collaboration, comprising the following steps:

[0063] Step 1: First, acquire the medical data that needs to be transmitted and exchanged through the intranet medical data acquisition unit and the extranet medical data acquisition unit respectively;

[0064] Step 2: After the medical data is acquired by the intranet medical data acquisition unit and the extranet medical data acquisition unit, the operator's identity is securely verified through the identity verification and data transmission unit. Data transmission is then performed after the identity security verification is successful.

[0065] Step 3: The interactive data processing unit processes the transmitted data by performing data IP, digital signature, and data encryption.

[0066] Step 4: Once all the transmitted data has been processed, the data from the medical server on site A will be transferred to the medical server on site B, or the data from the medical server on site B will be transferred to the medical server on site A, thereby enabling data interaction.

[0067] Step 5: Finally, the encrypted data anomaly detection unit will perform anomaly detection on the interactive data received from the medical server at station A and the medical server at station B, and store the abnormal data independently.

[0068] Compared with the prior art, the beneficial effects of the present invention are as follows:

[0069] 1. This invention provides a database security management system and method for cross-institutional medical service collaboration. The system verifies the IP address data of medical servers A and B through a data IP verification module. First, the IP data and fields are set to 0. The header of the IP data is then labeled with 16-bit numbers, and these numbers are sequentially summed using binary one's complement. The result of the binary one's complement summation is stored in the IP data field, effectively preventing human intervention that could compromise data integrity.

[0070] 2. This invention provides a database security management system and method for cross-institutional medical service collaboration. After successful verification, the data digital signature processing module binds IP address data with the digital signature. This prevents unauthorized access to data using unknown IP addresses based on the user's usage time. Specifically, a hash function generates a message digest from the message text, which is then encrypted using a private key. The encrypted message digest is transmitted along with the message as its digital signature, enhancing data integrity. Simultaneously, medical server A or medical server B uses the same hash function to calculate the message digest from the received original message. The digital signature attached to the message is then decrypted using the public key transmitted by medical server A or B. By comparing the information from the two servers, it can be determined whether the data has been maliciously modified during transmission, effectively preventing data repudiation in transactions.

[0071] 3. This invention provides a database security management system and method for cross-institutional medical service collaboration. By encrypting data on medical servers A and B using a public key, the security of data during interaction between the two servers can be effectively guaranteed. Furthermore, based on the version number of the public key used to encrypt the data, the encrypted data is transmitted to medical servers A and B and stored in a database associated with them, improving the stability of the encrypted data during transmission. According to the data reading agreement, the target data is formatted according to the information transmission format and transmitted to medical servers A and B for information interaction, improving the rigor of data interaction and facilitating its efficiency, ensuring orderly data exchange. Attached Figure Description

[0072] Figure 1 This is a schematic diagram of the overall process structure of the present invention;

[0073] Figure 2 This is a schematic diagram of the interactive data processing unit module of the present invention. Detailed Implementation

[0074] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0075] To address the issue in existing technologies where, when exchanging medical data across institutions, only the terminal's IP address is verified without binding the IP address data to a digital signature, leading to inconvenience due to excessively frequent signature changes, please refer to [link to relevant documentation]. Figure 1 and Figure 2 This embodiment provides the following technical solution:

[0076] A database security management system for cross-institutional medical service collaboration includes: an intranet medical data acquisition unit, used to acquire medical data from a first terminal, wherein the first terminal is a medical server on site A; an extranet medical data acquisition unit, used to acquire medical data from a second terminal, wherein the second terminal is a medical server on site B; and an authentication and data transmission unit, used to verify the operator's identity based on data from the intranet and extranet medical data acquisition units, wherein those who can operate on both the site A and site B medical servers are internal staff, and during data interaction operations, the operator's identity is verified through personnel registration data on the site A and site B medical servers. After successful operator authentication, the received data is transmitted. The interactive data processing unit performs data verification and encryption on the data received from the authentication and data transmission unit, and marks the verified and encrypted data as standard data. The internal and external network data interaction unit packages the standard data received from the interactive data processing unit according to the data transmission format, marks the packaged data as target data, and performs data interaction and transmission on the target data. The encrypted data anomaly detection unit groups and packages the target data from the internal and external network data interaction unit, statistically analyzes data with importance greater than or equal to a preset standard threshold, filters out abnormal data from the statistical data, and stores the abnormal data independently.

[0077] The interactive data processing unit includes: a data IP verification module, used to: acquire IP data from medical servers A and B respectively, set the IP data and fields to 0, mark the IP data header as a 16-bit number, and perform binary one's complement summation on the resulting numbers; store the result of the binary one's complement summation into the fields of the IP data; if the result is equal to zero, the IP verification is correct; if the result is not zero, the IP verification is incorrect. When it is incorrect, the data is automatically discarded and no further operation is performed, and the operation stops automatically.

[0078] The interactive data processing unit further includes a data digital signature processing module, used to: bind IP data with a digital signature based on the IP data verified correctly in the data IP verification module. The digital signature generates data packets from the data transmitted between the medical servers A and B, generates a message digest from the message text using a hash function, encrypts the message digest using a private key, and transmits the encrypted message digest as the digital signature of the message along with the message. The data digital signature processing module is also used to: simultaneously, when receiving data, the medical server A or the medical server B first calculates a message digest from the original message received by the medical server A or the medical server B using the same hash function transmitted by the medical server A or the medical server B, and then decrypts the digital signature attached to the message using the public key transmitted by the medical server A or the medical server B. If the two digests are identical during data interaction between the medical server A and the medical server B, the digital signature is determined to be correct.

[0079] Specifically, the feature is that the data digital signature processing module is further used for:

[0080] Obtain the message digest, set a random number, and determine the key parameters for the digital signature;

[0081]

[0082] Among them, f e This represents a random encrypted number f under an encryption exponent e; K represents the encryption modulus of medical server A or medical server B; J represents any random number; mod represents the remainder operator; The XOR operator; m represents the key parameter;

[0083] Based on the key parameters, the public and private key pairs for the medical servers on platforms A and B are determined. The private key is sent to both medical servers, and the public key is made public.

[0084] The public-private key pair is (GK i Sk i ), GK i Sk represents the public key of the transmitted data corresponding to the digest of the i-th message. i This represents the private key for the transmitted data corresponding to the i-th message digest. The private keys of the medical server at station A and the medical server at station B are different in the public-private key pair.

[0085]

[0086]

[0087] Where / represents OR; KA represents the encryption modulus of medical server A; KB represents the encryption modulus of medical server B.

[0088] In this embodiment, when the digital signature processing module performs encryption, it sets an encryption key according to the specific message content, so that different interactive data are encrypted with different encryption keys. This makes it easier to classify the encrypted data and increases the security of the encryption without increasing the encryption complexity.

[0089] In this embodiment, the random number is set according to the message content, and the keyword parameters of the message content are converted into an encrypted random number;

[0090] In this embodiment, the key parameter is the encryption parameter of the encrypted ciphertext;

[0091] In this embodiment, the modulo and XOR operations are used to distinguish the private keys of the encryption keys of the medical server on site A and the medical server on site B.

[0092] In this embodiment, in the public-private key pair, the private key distinguishes the encryption private keys of the medical server on site A and the medical server on site B based on the different encryption moduli used, thus ensuring encryption security.

[0093] Specifically, the IP address data of the medical servers on both website A and website B are first verified using a data IP verification module. This involves setting the IP data field to 0 initially, then constructing the IP data header as a series of 16-bit numbers, and performing a binary one's complement sum on each of these numbers. The result of this sum is then stored in the IP data field, effectively preventing data corruption. Simultaneously, a data digital signature processing module binds the IP address data to a digital signature upon successful verification. This prevents unauthorized access to data using unknown IP addresses based on the user's usage time. A message digest is generated from the message text using a hash function. This digest is then encrypted using a private key, and the encrypted digest is transmitted along with the message as a digital signature, enhancing data integrity. Simultaneously, medical servers A and B use the same hash function to calculate the message digest from the original message received from either server. The digital signature attached to the message is then decrypted using the public key transmitted by either server. By comparing the information from the two servers, it can be determined whether the data has been maliciously modified during transmission, effectively preventing data repudiation in transactions.

[0094] To address the issue in existing technologies where data exchange is not encrypted, making the data vulnerable to external virus intrusion and thus corrupted during the interaction process, please refer to [link to relevant documentation]. Figure 1 and Figure 2 This embodiment provides the following technical solution:

[0095] The interactive data processing unit further includes a data encryption module, used to: receive data electronically from the receiving end of the medical server A or the medical server B on the medical server A or the medical server B, and encrypt the data on the medical server A or the medical server B using a public key, wherein the encrypted data includes a hash value. The data encryption module is also used to: transmit the encrypted data to the medical server A or the medical server B using the hash value as a version number of the public key used to encrypt the data, and store the encrypted data in a database associated with the medical server A or the medical server B.

[0096] Specifically, by encrypting data on the medical server of Station A or Station B using a public key, the security of data during interaction between the two medical servers can be effectively guaranteed. At the same time, based on the version number of the public key used to encrypt the data, the encrypted data is transmitted to the medical server of Station A or Station B and stored in a database associated with the medical server of Station A or Station B, which can improve the stability of the encrypted data during transmission.

[0097] To address the issues of low efficiency and unordered data exchange in existing technologies for cross-institutional medical data interaction, please refer to [link to relevant documentation]. Figure 1 This embodiment provides the following technical solution:

[0098] The internal and external network data interaction unit is also used to: read target data and sign an agreement on the read data; wherein, after successful signing, the target data is processed according to the information transmission format and transmitted to the medical server of station A or medical server of station B for information interaction; at the same time, after the information interaction is completed, the system automatically checks whether the interaction is completed. If the detection result is that the interaction is completed, it is considered a successful interaction. If the detection result is that the interaction is not completed, the information interaction is repeated until the information interaction is completed.

[0099] Specifically, the automatic data detection of whether the interaction is completed includes the following steps:

[0100] Obtain the first interactive data transmitted from medical server A to medical server B;

[0101] Obtain the second interactive data transmitted from Bilibili's medical server to A site's medical server;

[0102] Construct the first weighted entropy of the first interaction data and the second weighted entropy of the second interaction data;

[0103]

[0104]

[0105] Where P(A) represents the first weighted entropy of the medical server at site A; R i (A) represents the random function of the i-th transmitted data in the first interactive data under random variable a; q i Y represents the weight of the i-th transmitted data in the first interactive data; β represents the weighting coefficient; P(b) represents the second weighted entropy of the Bilibili medical server; j (b) represents the random function of the j-th transmitted data in the second interactive data under the random variable b; Q j i represents the weight of the j-th transmitted data in the second interactive data; m represents the total number of data in the second interactive data; n represents the total number of data in the first interactive data; i and j are both positive integers;

[0106] Calculate the association function after the medical server on site A transmits data to the medical server on site B.

[0107]

[0108] Where w represents the correlation function;

[0109] Determine whether P(a) and P(b) are ≥ P(a|b) respectively. If P(a) and P(b) are both ≥ P(a|b), it means that the medical server of station A and the medical server of station B have completed the interaction.

[0110] In this embodiment, the interactive data is data transmitted from medical server A to medical server B or from medical server B to medical server A;

[0111] In this embodiment, the first weighted entropy of the first interactive data and the second weighted entropy of the second interactive data are used to quantify and measure the information of the interaction;

[0112] In this embodiment, a weighted entropy calculation method is used, which can reduce the cross-regression loss of transmitted data during information exchange.

[0113] In this embodiment, by comparing the correlation function and the weighted entropy, the weighted entropy is higher than the correlation function. This is because after the data interaction, whether it's the medical server on site A or the medical server on site B, the amount of interactive data is greater than the amount of individual data on either site. The correlation function only reflects the interactive data. The interactive data exists on both the medical server on site A and the medical server on site B, but there is also non-interactive data on either site. Therefore, in terms of information volume, the interaction function of the medical server on site A or the medical server on site B needs to be less than or equal to the information entropy. If it is equal, it means that all information is synchronously interacted; if it is greater, it means that some information has not been interacted, but most of the data has been interacted.

[0114] Specifically, according to the agreement signed for reading the data, the target data is processed according to the information transmission format and transmitted to the medical server of Station A or the medical server of Station B for information interaction. This improves the rigor of data interaction, facilitates the improvement of data interaction efficiency, and ensures that data is exchanged in an orderly manner.

[0115] Based on the aforementioned database security management system for cross-institutional medical service collaboration, this embodiment proposes a management method for such a system, comprising the following steps:

[0116] Step 1: First, acquire the medical data that needs to be transmitted and exchanged through the intranet medical data acquisition unit and the extranet medical data acquisition unit respectively;

[0117] Step 2: After the medical data is acquired by the intranet medical data acquisition unit and the extranet medical data acquisition unit, the operator's identity is securely verified through the identity verification and data transmission unit. Data transmission is carried out after successful identity verification, which enhances the security of collaborative data interaction during operation.

[0118] Step 3: The interactive data processing unit processes the transmitted data by performing data IP, digital signature, and data encryption.

[0119] After successful verification, the data digital signature processing module binds the IP address data to the digital signature, which can prevent strangers from directly obtaining data using unknown IPs based on the different usage times of the operators.

[0120] Step 4: Once all the transmitted data has been processed, the data from the medical server on site A will be transferred to the medical server on site B, or the data from the medical server on site B will be transferred to the medical server on site A, thereby enabling data interaction.

[0121] The target data is processed according to the information transmission format and then transmitted to the medical server of Station A or the medical server of Station B for information exchange. This improves the rigor of data exchange, facilitates the efficiency of data exchange, and ensures that data is exchanged in an orderly manner.

[0122] Step 5: Finally, the encrypted data anomaly detection unit will perform anomaly detection on the interactive data received from the medical server on Station A and the medical server on Station B, and store the abnormal data independently. This independent storage of abnormal data will facilitate the viewing and verification of the abnormal data later.

[0123] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus.

[0124] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents.

Claims

1. A database security management system for cross-institutional collaborative medical services, characterized in that, include: The intranet medical data acquisition unit is used for: Based on the medical data from the first terminal, the medical data from the first terminal is acquired, where the first terminal is the medical server of station A; External network medical data acquisition unit, used for: Based on the medical data from the second terminal, the medical data from the second terminal is acquired. The second terminal is Bilibili's medical server. The authentication and data transmission unit is used for: Based on the data from the intranet medical data acquisition unit and the extranet medical data acquisition unit, the operator's identity is verified. Among them, those who can operate the medical server of Station A and the medical server of Station B are all internal staff. When performing data interaction operations, the operator's identity is verified by the personnel registration data in the medical server of Station A and the medical server of Station B. At the same time, after the operator's identity verification is successful, the received data is transmitted. Interactive data processing unit, used for: Based on the data received in the authentication and data transmission unit, the data is verified and encrypted respectively, and the data that has completed the verification and encryption is marked as standard data. Internal and external network data interaction unit, used for: Based on the standard data received in the interactive data processing unit, the standard data is packaged into data transmission formats, and the packaged data is labeled as target data. The target data is then interacted with and transmitted. The encrypted data anomaly detection unit is used for: Based on the target data in the internal and external network data interaction unit, the target data is grouped and packaged separately, and the data with importance greater than or equal to the preset standard threshold in the packaged data is statistically analyzed. After the statistical analysis is completed, the data with abnormality in the statistical data is filtered out and the abnormal data is stored independently. The interactive data processing unit includes: The data IP verification module is used for: Obtain the IP data of the medical server on site A and the medical server on site B respectively, set the IP data and fields to 0, mark the IP data header as a number in 16-bit units, and sum the numbers in binary one's complement. Based on the summation of the binary one's complement, the result is stored in the field of the IP data; If the data result is zero, the IP verification is correct; if the data result is not zero, the IP verification is incorrect. When the data is incorrect, it is automatically discarded and no further operation is performed. The operation stops automatically. The data digital signature processing module is used for: Based on the IP data verified correctly in the data IP verification module, the IP data is bound to the digital signature. The digital signature generates a data packet from the data transmitted between the medical server on site A and the medical server on site B. The packet text is then converted into a message digest using a hash function. The message digest is encrypted using a private key, and the encrypted message digest is used as the digital signature of the message and transmitted together with the message.

2. The database security management system for cross-institutional medical service collaboration according to claim 1, characterized in that: The data digital signature processing module is also used for: Meanwhile, when receiving data, the medical server at station A or station B first uses the same hash function transmitted by the medical server at station A or station B to calculate the message digest from the original message received by the medical server at station A or station B, and then decrypts the digital signature attached to the message using the public key transmitted by the medical server at station A or station B. If the two digests are identical when the medical server on site A or the medical server on site B interact, then the digital signature is determined to be correct data.

3. A database security management system for cross-institutional medical service collaboration according to claim 2, characterized in that: The data digital signature processing module is also used for: Obtain the message digest, set a random number, and determine the key parameters for the digital signature; ； in, Represents random numbers In the crypto index The following is a random encrypted number; This indicates the encryption modulus of either the medical server on site A or the medical server on site B. Represents any random number; Represents the remainder operator; It is the XOR operator; Indicates key parameters; Based on the key parameters, the public and private key pairs for the medical servers on platforms A and B are determined. The private key is sent to both medical servers, and the public key is made public. The public-private key pair is ( ), Indicates the first The public key of the transmitted data corresponding to the message digest. Indicates the first The private key corresponding to the transmitted data in the message digest; the private keys of the medical server at station A and the medical server at station B are different in the public-private key pair. ； ； in, Indicates or; This indicates the encryption modulus of the medical server on website A; This indicates the encryption modulus of Bilibili's medical server.

4. A database security management system for cross-institutional medical service collaboration according to claim 1, characterized in that: The interactive data processing unit further includes: The data encryption module is used for: Data is received electronically from the receiving end of either the medical server on platform A or platform B, and the data is encrypted using a public key on either platform A or platform B. The encrypted data includes a hash value.

5. A database security management system for cross-institutional medical service collaboration according to claim 4, characterized in that: The data encryption module is also used for: The hash value represents the numbered version of the public key used to encrypt the data. The encrypted data is then transmitted to either the medical server on platform A or the medical server on platform B, and stored in a database associated with either the medical server on platform A or the medical server on platform B.

6. A database security management system for cross-institutional medical service collaboration according to claim 1, characterized in that: The internal and external network data interaction unit is also used for: Read the target data and sign an agreement based on the read data; Once the agreement is successfully signed, the target data will be processed according to the information transmission format and transmitted to the medical server of Station A or the medical server of Station B for information exchange. At the same time, after the information exchange is completed, the system automatically checks whether the exchange is complete. If the check result is that the exchange is completed, it is considered a successful exchange. If the check result is that the exchange is not completed, the system will try to exchange information again until the exchange is completed.

7. A database security management system for cross-institutional medical service collaboration according to claim 6, characterized in that: The automatic data detection of whether the interaction is complete includes the following steps: Obtain the first interactive data transmitted from medical server A to medical server B; Obtain the second interactive data transmitted from Bilibili's medical server to A site's medical server; Construct the first weighted entropy of the first interaction data and the second weighted entropy of the second interaction data; ； ； in, This represents the first weighted entropy of the medical server on website A. Indicates the first interactive data. Data transmission in random variables The random function below; Indicates the first interactive data. Weight of transmitted data; Indicates the weighting coefficient; This represents the second weighted entropy of Bilibili's medical server; Indicates the second interactive data. Data transmission in random variables The random function below; Indicates the second interactive data. Weight of transmitted data; This indicates the total number of data items in the second interactive data; This indicates the total number of data items in the first interaction. and All are positive integers; Calculate the association function after the medical server on site A transmits data to the medical server on site B. ； in, Indicates an association function; Judge separately and Is it ≥ and in and At the same time ≥ This indicates that the medical servers of station A and station B have completed their interaction.

8. A management method for a database security management system for cross-institutional medical service collaboration as described in any one of claims 1-7, characterized in that, Includes the following steps: Step 1: First, acquire the medical data that needs to be transmitted and exchanged through the intranet medical data acquisition unit and the extranet medical data acquisition unit respectively; Step 2: After the medical data is acquired by the intranet medical data acquisition unit and the extranet medical data acquisition unit, the operator's identity is securely verified through the identity verification and data transmission unit. Data transmission is then performed after the identity security verification is successful. Step 3: The interactive data processing unit processes the transmitted data by performing data IP, digital signature, and data encryption. Step 4: Once all the transmitted data has been processed, the data from the medical server on site A will be transferred to the medical server on site B, or the data from the medical server on site B will be transferred to the medical server on site A, thereby enabling data interaction. Step 5: Finally, the encrypted data anomaly detection unit will perform anomaly detection on the interactive data received from the medical server at station A and the medical server at station B, and store the abnormal data independently.

Images