A medical data security management method and system

Abstract

The present invention discloses a medical data security management method and system, which relates to the field of medical data management technology, including using a display unit to obtain and display Internet data; a user logs in to a medical intranet and verifies user information; a collection unit verifies the display unit; identifies the Internet data displayed by the verified display unit, and reads the technical metadata in the Internet data; inputs the technical metadata into the medical intranet, and updates the data in the medical intranet. The collection unit obtains Internet data by identifying the image information of the display unit, extracts text information from the Internet data, and then inputs the technical metadata into the medical intranet. The physical isolation between the collection unit and the display unit can prevent viruses from invading, being altered, or leaking when collecting Internet data, thereby eliminating security risks.

Description

Technical Field

[0001] The present invention relates to the technical field of medical data management, and in particular to a medical data security management method and system. Background Art

[0002] At present, the informatization construction of hospitals has entered a period of rapid development. Since the informatization construction of hospitals in the early stage was restricted by many factors such as funds, technology, standards, and cognition, each hospital is exploring its own informatization development direction. In the early stage, because there was no unified software development standard, each software company developed software according to its own ideas, and there were great differences in software architecture, data format, etc. This caused the independence of each software module within the hospital, and the data format and structure used by the same module in each hospital were also different. Different software developers used different data formats and structures, resulting in medical data that could not be shared between hospitals, resulting in information islands. For patients, the direct impact is repeated examinations, delayed treatment, and increased economic burden. Indirect harm is to increase the mental burden of patients. At the same time, it is not conducive to the exchange of medical technology between hospitals.

[0003] At present, a Chinese invention patent with publication number CN117438019A discloses a method for safe management and transmission of medical data. Although a shared database is established among multiple hospitals, medical data is transmitted between hospitals in the shared database to realize the sharing of medical data and verification of data authenticity; multiple hospitals have established transmission accounts and public security verification accounts; the public security verification account conducts security monitoring of the transmission account, and the public security verification account can verify the security of each transmission account at any time, but the connection between each transmission account and the Internet, although it is convenient for medical data transmission, it is easy to cause medical data to be invaded by viruses, changed or leaked, and there are security risks. In addition, the sharing of medical data between hospitals, between hospitals and medical management departments, between hospitals and communities, and between hospitals and patients is not safe enough. Summary of the invention

[0004] The technical problem solved by the present invention is that the related technology easily causes medical data to be invaded by viruses, changed or leaked, posing a security risk, and the sharing of medical data between hospitals, between hospitals and medical management departments, between hospitals and communities, and between hospitals and patients is not safe enough.

[0005] To solve the above technical problems, the present invention provides the following technical solutions: a medical data security management method, comprising obtaining and displaying Internet data using a display unit; a user logs in to a medical intranet and verifies user information; a collection unit verifies the display unit; identifies the Internet data displayed by the verified display unit, and reads the technical metadata in the Internet data; inputs the technical metadata into the medical intranet and updates the data in the medical intranet; retrieves data that needs to be shared in the medical intranet, and transmits the data unidirectionally to a handheld terminal.

[0006] As a preferred solution of the medical data security management method of the present invention, wherein: the Internet data includes medical data shared between hospitals, industry information, medical equipment maintenance information and medical insurance information;

[0007] The display unit displays the shared medical data, industry news information, medical equipment maintenance information and medical insurance information in the form of images.

[0008] As a preferred solution of the medical data security management method of the present invention, the user logs in to the medical intranet and verifies the user information, including:

[0009] The user logs into the medical intranet by means of dual authentication of work card and biometric identification, and the medical intranet verifies the work card and biometric information;

[0010] If the user's work card and biometric information are consistent with the information registered by the user in the medical intranet, the verification is passed;

[0011] If one of the user's work card and biometric information does not match the information registered by the user on the medical intranet, the verification will not pass.

[0012] As a preferred solution of the medical data security management method of the present invention, the acquisition unit verifies the display unit including:

[0013] The acquisition unit captures image information of the display unit;

[0014] The image information includes coding information of the display unit and image information of the display unit;

[0015] Matching the coding information with the coding information in the coding database, if the same coding is matched, it means that the coding information is a real coding, and obtaining the reserved image information of the acquisition unit corresponding to the coding information;

[0016] Extracting display unit image information from the image information by using edge detection, and calculating the similarity between the display unit image information and the reserved image information;

[0017] If the similarity is greater than a predetermined similarity threshold, it indicates that the display unit has passed the verification;

[0018] If the similarity is less than a predetermined similarity threshold, it indicates that the display unit has failed the verification.

[0019] As a preferred solution of the medical data security management method of the present invention, wherein: identifying the Internet data displayed by the verified display unit and reading the technical metadata in the Internet data includes;

[0020] Using OCR text recognition to identify the Internet data displayed by the display unit, and extracting text information from the Internet data;

[0021] And use keyword detection to extract technical metadata from text information;

[0022] The technical metadata includes the patient's name, age, gender, occupation, registered residence, residential address, living habits, commuting mode, medical insurance information, medical device name, number, maintenance information, the patient's medical history, medical treatment, examination report, laboratory report, imaging data and reports, pathology report, allergy history, industry information date and information content.

[0023] As a preferred solution of the medical data security management method of the present invention, the extracted technical metadata is input into the medical intranet,

[0024] Matching the data set associated with the medical intranet and the technical metadata using a text matching algorithm;

[0025] Update the numbers of the overlapping parts of the technical metadata and the data set, and mark the update records, which include the update time, content before the update, and the source of the data after the update;

[0026] The technical metadata is associated with the rest of the dataset in an annotated manner.

[0027] As a preferred solution of the medical data security management method of the present invention, wherein: retrieving the data to be shared in the medical intranet and transmitting the data unidirectionally to the handheld terminal includes:

[0028] Before sending data, the medical intranet initiates a verification request to the handheld terminal. The handheld terminal receives the verification request and performs face recognition. After the face recognition, the data is transmitted to the handheld terminal in a one-way manner.

[0029] When the handheld terminal needs to query information, it initiates a verification request to the medical intranet. The medical intranet initiates a verification request to the handheld terminal. The handheld terminal receives the verification request and performs face recognition. After face recognition, the medical intranet retrieves information related to the logged-in person based on the logged-in person information, generates a display space, and the handheld terminal jumps to the display space.

[0030] As a preferred solution of the medical data security management system described in the present invention, it includes: a display unit, a login unit, a collection unit and a processing unit;

[0031] The display unit crawls public Internet data and Internet data in the communication software, and displays the Internet data through a display screen;

[0032] The login unit is used to verify user information when the user logs into the medical intranet;

[0033] The acquisition unit is used to verify the display unit, identify the Internet data displayed by the display unit, read the technical metadata in the Internet data, and input the technical metadata into the processing unit;

[0034] The processing unit is used to input the technical metadata into the medical intranet and update the data in the medical intranet.

[0035] As a preferred solution of the medical data security management system of the present invention, wherein: the login unit is provided with more than one, and the user logs into the medical intranet through the login unit;

[0036] Among them, the user is an internal staff of the hospital.

[0037] As a preferred solution of the medical data security management system described in the present invention, wherein: the medical intranet includes a storage unit and a verification unit, and the storage unit is used to store medical data, industry information, medical equipment maintenance information and medical insurance information, as well as technical metadata;

[0038] The verification unit is used to verify the login personnel, send a face recognition request and perform face recognition verification. The verification unit retrieves information related to the login personnel according to the login personnel information, generates a display space, and views the display space through the handheld terminal.

[0039] Beneficial effects of the present invention:

[0040] 1. The acquisition unit obtains Internet data by identifying the image information of the display unit, extracts the text information in the Internet data, and then inputs the technical metadata into the medical intranet. The physical isolation between the acquisition unit and the display unit can prevent viruses from invading, being changed or leaking when collecting Internet data, eliminating security risks.

[0041] 2. Before sending data, the medical intranet initiates a verification request to the handheld terminal. The handheld terminal receives the verification request and performs face recognition. After face recognition, the data is transmitted unidirectionally to the handheld terminal. This helps to ensure that the data is transmitted to the person who holds the handheld terminal and passes the face recognition verification, preventing data leakage. In addition, the data is transmitted unidirectionally to the handheld terminal, preventing the handheld terminal from sending virus-containing data packets in reverse, which helps to improve security.

[0042] 3. Through the handheld terminal, one can query the information related to oneself in the medical intranet, but cannot see other information. This is conducive to improving the privacy of data and preventing the data in the medical intranet from being acquired in batches, causing data leakage. In addition, the display space cannot send data back to the medical intranet, so that the display space and the medical intranet are relatively isolated, which is conducive to improving the security of medical data sharing between hospitals and medical management departments, between hospitals and communities, and between hospitals and patients. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 A basic flow chart of a medical data security management method and system provided for one embodiment of the present invention. DETAILED DESCRIPTION

[0044] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings. It is obvious that the described embodiments are only part of the embodiments of the present invention, but not all of the embodiments.

[0045] Example 1

[0046] Reference Figure 1 , as an embodiment of the present invention, provides a medical data security management method, comprising:

[0047] S1: using the display unit to obtain Internet data and display it;

[0048] The Internet data includes medical data shared between hospitals, industry information, medical equipment maintenance information and medical insurance information;

[0049] The display unit displays the shared medical data, industry news information, medical equipment maintenance information and medical insurance information in the form of images.

[0050] The display unit traverses the public data on the Internet and captures industry news information. The display unit receives shared medical data, medical device maintenance information and medical insurance information from other hospitals, generates a display screen for the shared medical data, industry news information, medical device maintenance information and medical insurance information, and displays it in the form of an image, which can be directly queried and viewed through the display unit.

[0051] S2: The user logs in to the medical intranet and verifies the user information, including:

[0052] The user logs into the medical intranet by means of dual authentication of work card and biometric identification, and the medical intranet verifies the work card and biometric information;

[0053] If the user's work card and biometric information are consistent with the information registered by the user in the medical intranet, the verification is passed;

[0054] If one of the user's work card and biometric information does not match the information registered by the user on the medical intranet, the verification will not pass.

[0055] Double verification of the user's work card and biometric information is helpful to prevent someone from using the user's work card to log into the medical intranet, causing data leakage when logging into the medical intranet, and improving the security of the medical intranet.

[0056] S3: The collection unit verifies the display unit including:

[0057] The acquisition unit captures image information of the display unit;

[0058] The image information includes coding information of the display unit and image information of the display unit;

[0059] Matching the coding information with the coding information in the coding database, if the same coding is matched, it means that the coding information is a real coding, and obtaining the reserved image information of the acquisition unit corresponding to the coding information;

[0060] Extracting display unit image information from the image information by using edge detection, and calculating the similarity between the display unit image information and the reserved image information;

[0061] If the similarity is greater than a predetermined similarity threshold, it indicates that the display unit has passed the verification;

[0062] If the similarity is less than a predetermined similarity threshold, it indicates that the display unit has failed the verification.

[0063] By verifying the coded information and image information of the display unit, where the display unit image information is the image information of the display unit itself, and in one embodiment the display unit is a display screen, the image and coded information of the display screen are verified to prevent the collection unit from collecting malicious information from the impersonated display unit, thereby helping to improve security.

[0064] S4: Identifying the Internet data displayed by the verified display unit, and reading the technical metadata in the Internet data, including;

[0065] Using OCR text recognition to identify the Internet data displayed by the display unit, and extracting text information from the Internet data;

[0066] And use keyword detection to extract technical metadata from text information;

[0067] The technical metadata includes the patient's name, age, gender, occupation, registered residence, residential address, living habits, commuting mode, medical insurance information, medical device name, number, maintenance information, the patient's medical history, medical treatment, examination report, laboratory report, imaging data and reports, pathology report, allergy history, industry information date and information content.

[0068] The collection unit obtains Internet data by recognizing the image information of the display unit, extracts text information from the Internet data, and then inputs the technical metadata into the medical intranet. The physical isolation between the collection unit and the display unit can prevent viruses from invading, being altered or leaking the collected Internet data, thus eliminating security risks.

[0069] S5: inputting the technical metadata into the medical intranet, and updating the data in the medical intranet includes:

[0070] Inputting the extracted technical metadata into a medical intranet;

[0071] Matching the data set associated with the medical intranet and the technical metadata using a text matching algorithm;

[0072] Update the numbers of the overlapping parts of the technical metadata and the data set, and mark the update records, which include the update time, content before the update, and the source of the data after the update;

[0073] The technical metadata is associated with the rest of the dataset in an annotated manner.

[0074] Updating the data on the medical intranet and using update records to query the update time, content before the update, and the source of the updated data can help trace the source of the updated data, which can help improve the reliability of the data source and thus improve security.

[0075] S6: Retrieve the data to be shared in the medical intranet and transmit the data to the handheld terminal in one direction. Including:

[0076] Before sending data, the medical intranet initiates a verification request to the handheld terminal. The handheld terminal receives the verification request and performs face recognition. After face recognition, the data is transmitted unidirectionally to the handheld terminal. This helps to ensure that the data is transmitted to the person who holds the handheld terminal and passes the face recognition verification, preventing data leakage. In addition, the data is transmitted unidirectionally to the handheld terminal, preventing the handheld terminal from sending virus-containing data packets in the reverse direction, which helps to improve security. The handheld terminal is configured for medical management departments, communities and patients, and the information of the person holding the handheld terminal is entered in the background for login verification and generating display space.

[0077] When the handheld terminal needs to query information, it initiates a verification request to the medical intranet. The medical intranet initiates a verification request to the handheld terminal. The handheld terminal receives the verification request and performs face recognition. After face recognition, the medical intranet retrieves information related to the logged-in person based on the logged-in person information, generates a display space, and the handheld terminal jumps to the display space.

[0078] Through handheld terminals, one can query the information related to oneself in the medical intranet without seeing other information. This is conducive to improving data privacy and preventing the data in the medical intranet from being acquired in batches, which may cause data leakage. Moreover, the display space cannot send data back to the medical intranet, so that the display space and the medical intranet are relatively isolated, which is conducive to improving the security of medical data sharing between hospitals and medical management departments, between hospitals and communities, and between hospitals and patients.

[0079] Example 2

[0080] Another embodiment of the present invention is different from the first embodiment in that it provides a medical data security management system including a display unit, a login unit, a collection unit and a processing unit;

[0081] The display unit crawls public Internet data and Internet data in the communication software, and displays the Internet data through a display screen;

[0082] The login unit is used to verify user information when the user logs into the medical intranet;

[0083] The acquisition unit is used to verify the display unit, identify the Internet data displayed by the display unit, read the technical metadata in the Internet data, and input the technical metadata into the processing unit;

[0084] The processing unit is used to input the technical metadata into the medical intranet and update the data of the medical intranet. The processing unit inputs the extracted technical metadata into the medical intranet;

[0085] Matching the data set associated with the medical intranet and the technical metadata using a text matching algorithm;

[0086] Update the numbers of the overlapping parts of the technical metadata and the data set, and mark the update records, which include the update time, content before the update, and the source of the data after the update;

[0087] The technical metadata is associated with the rest of the dataset in an annotated manner.

[0088] Updating the data on the medical intranet and using update records to query the update time, content before the update, and the source of the updated data can help trace the source of the updated data, which can help improve the reliability of the data source and thus improve security.

[0089] The collection unit obtains Internet data by recognizing the image information of the display unit, extracts text information from the Internet data, and then inputs the technical metadata into the medical intranet. The physical isolation between the collection unit and the display unit can prevent viruses from invading, being altered or leaking the collected Internet data, thus eliminating security risks.

[0090] The login unit is provided with more than one, and the user logs into the medical intranet through the login unit;

[0091] Among them, the user is an internal staff of the hospital.

[0092] The medical intranet includes a storage unit and a verification unit, wherein the storage unit is used to store medical data, industry information, medical device maintenance information, medical insurance information, and technical metadata;

[0093] The verification unit is used to verify the login personnel, send a face recognition request and perform face recognition verification. The verification unit retrieves information related to the login personnel according to the login personnel information, generates a display space, and views the display space through the handheld terminal.

[0094] The holders of the handheld terminal are medical management departments, communities and patients. They can query the information related to themselves in the medical intranet through the handheld terminal, but cannot see other information. This is conducive to improving data privacy and preventing data in the medical intranet from being acquired in batches, causing data leakage. Moreover, the display space cannot send data back to the medical intranet, so that the display space and the medical intranet are relatively isolated, which is conducive to improving the security of medical data sharing between hospitals and medical management departments, between hospitals and communities, and between hospitals and patients.

[0095] It should be appreciated that embodiments of the present invention may be implemented or enforced by a combination of computer hardware and software, or by computer instructions stored in a non-transitory computer-readable memory. The method may be implemented in a computer program using standard programming techniques - including a non-transitory computer-readable storage medium configured with a computer program, wherein the storage medium so configured causes the computer to operate in a specific and predefined manner - according to the methods and drawings described in the specific embodiments. Each program may be implemented in a high-level procedural or object-oriented programming language to communicate with a computer system. However, if desired, the program may be implemented in an assembly or machine language. In any case, the language may be a compiled or interpreted language. In addition, the program may be run on a programmed ASIC for this purpose.

[0096] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A medical data security management method, characterized in that: include: Using display units to obtain Internet data and display it; The user logs into the medical intranet and verifies the user information; The collection unit verifies the display unit; Identify the Internet data displayed by the verified display unit, and read the technical metadata in the Internet data; Inputting the technical metadata into a medical intranet and updating data on the medical intranet; Retrieve the data that needs to be shared in the medical intranet and transmit the data unidirectionally to the handheld terminal; The Internet data includes medical data shared between hospitals, industry information, medical equipment maintenance information and medical insurance information; The display unit displays the shared medical data, industry information, medical device maintenance information and medical insurance information in the form of images; The user logs into the medical intranet and verifies the user information, including: The user logs into the medical intranet by means of dual authentication of work card and biometric identification, and the medical intranet verifies the work card and biometric information; If the user's work card and biometric information are consistent with the information registered by the user in the medical intranet, the verification is passed; If one of the user's work card and biometric information does not match the information registered by the user on the medical intranet, the verification will fail; The collection unit verifies the display unit by: The acquisition unit captures image information of the display unit; The image information includes coding information of the display unit and image information of the display unit; Matching the coding information with the coding information in the coding database, if the same coding is matched, it means that the coding information is a real coding, and obtaining the reserved image information of the acquisition unit corresponding to the coding information; Extracting display unit image information from the image information by using edge detection, and calculating the similarity between the display unit image information and the reserved image information; If the similarity is greater than a predetermined similarity threshold, it indicates that the display unit has passed the verification; If the similarity is less than a predetermined similarity threshold, it indicates that the display unit has not passed the verification; Identifying the Internet data displayed by the verified display unit and reading the technical metadata in the Internet data includes: Using OCR text recognition to identify the Internet data displayed by the display unit, and extracting text information from the Internet data; And use keyword detection to extract technical metadata from text information; The technical metadata includes the patient's name, age, gender, occupation, registered residence, residential address, living habits, commuting mode, medical insurance information, medical device name, number, maintenance information, the patient's medical history, medical treatment, examination report, laboratory report, imaging data and reports, pathology report, allergy history, industry information date and information content.

2. The medical data security management method according to claim 1, characterized in that: The extracted technical metadata is input into the medical intranet, Matching the data set associated with the medical intranet and the technical metadata using a text matching algorithm; Update the numbers of the overlapping parts of the technical metadata and the data set, and mark the update records, which include the update time, content before the update, and the source of the data after the update; The technical metadata is associated with the rest of the dataset in an annotated manner.

3. The medical data security management method according to claim 2, characterized in that: Retrieving the data to be shared in the medical intranet and transmitting the data to the handheld terminal in one direction includes: Before sending data, the medical intranet initiates a verification request to the handheld terminal. The handheld terminal receives the verification request and performs face recognition. After the face recognition, the data is transmitted to the handheld terminal in a one-way manner. When the handheld terminal needs to query information, it initiates a verification request to the medical intranet. The medical intranet initiates a verification request to the handheld terminal. The handheld terminal receives the verification request and performs face recognition. After face recognition, the medical intranet retrieves information related to the logged-in person based on the logged-in person information, generates a display space, and the handheld terminal jumps to the display space.

4. A medical data security management system, comprising the medical data security management method according to any one of claims 1 to 3, characterized in that: It includes a display unit, a login unit, a collection unit and a processing unit; The display unit crawls public Internet data and Internet data in the communication software, and displays the Internet data through a display screen; The login unit is used to verify user information when the user logs into the medical intranet; The acquisition unit is used to verify the display unit, identify the Internet data displayed by the display unit, read the technical metadata in the Internet data, and input the technical metadata into the processing unit; The processing unit is used to input the technical metadata into the medical intranet and update the data in the medical intranet.

5. The medical data security management system according to claim 4, characterized in that: The login unit is provided with more than one, and the user logs into the medical intranet through the login unit; Among them, the user is an internal staff of the hospital.

6. The medical data security management system according to claim 5, characterized in that: The medical intranet includes a storage unit and a verification unit, wherein the storage unit is used to store medical data, industry information, medical device maintenance information, medical insurance information, and technical metadata; The verification unit is used to verify the logged-in person, send a face recognition request and perform face recognition verification. The verification unit retrieves information related to the logged-in person based on the logged-in person's information, generates a display space, and views the display space through a handheld terminal.

Images