Patient health record security management system and method

Abstract

The present invention provides a patient health record security management system and method, which relates to the technical field of data management systems. The system includes: one-way cloud medical record and medical record copy application software is used for patients to initiate medical record and medical record copy applications in a one-way manner, and users push encrypted application files to medical record and medical record self-service terminal equipment; personal health record client software is used to encrypt, decrypt and manage the patient's health record; personal health record security lock facilities are used to provide hardware support for the security encryption and decryption of health records; personal health record portable devices are used to collect patient health data in real time, and store them after encryption through personal health record security lock facilities; medical record and medical record self-service terminal equipment is used to receive patients' medical record and medical record copy applications, automatically initiate an internal review process, and after confirming authorization through remote video, pull medical record data and perform printing, copying, scanning and export operations.

Description

Technical Field

[0001] The present invention relates to the technical field of data management systems, and in particular to a patient health record security management system and method. Background Art

[0002] Medical staff currently have difficulty fully understanding the changes in patients' conditions for the following reasons: patients seek medical treatment in different places; patients do not seek medical treatment continuously; patients receive medical treatment in multiple medical institutions; in particular, some patients with chronic diseases have poor self-health management capabilities and cannot fully and in detail describe their conditions when they seek medical treatment; some patients' family members do not pay enough attention to or cannot supervise the patient's condition and medication, and cannot clearly describe the changes in the disease; patients are sometimes hospitalized and sometimes outpatient for treatment, and data between departments cannot be effectively shared, coordinated, and managed in a standardized manner. The above factors make it difficult for doctors to review and manage the patient's medical information throughout the process, which in turn affects the doctor's understanding of the patient's condition, and the patient's condition fluctuates repeatedly, affecting the treatment effect and prognosis.

[0003] Therefore, it is very necessary to establish a patient-centered health archive covering basic patient information, medical records, medical records and related materials. On the premise of ensuring patient privacy and complying with national medical record management regulations, patient medical records and other archival materials distributed in different medical institutions and departments will be managed in a safe and integrated manner to facilitate medical staff to fully understand the patient's condition and formulate scientific diagnosis and treatment plans, especially greatly improve the treatment and management efficiency of chronic diseases, help patients save medical expenses, receive continuous treatment of diseases, reduce recurrence of diseases, save medical costs for medical institutions, and reduce waste of medical resources.

[0004] There are many patent inventions in China for the management of medical records, but they are basically for the management of medical records within medical institutions or departments, such as the "Intelligent Medical Record Digital Management System (Patent No. 202310589573.1)".

[0005] There is an invention patent in China, "A medical record management method and system based on blockchain technology", which mainly solves the storage and authorization problems of personal medical record data. Although blockchain technology is used to store indexes, the medical record data is still completely stored in an encrypted manner on a third-party platform. The control of personal privacy data is only through authorization, and there is still a risk of leakage. In addition, the invention does not solve the problem of how to collect and store medical record data distributed in different medical institutions, departments and individuals in a feasible way. Summary of the invention

[0006] In order to solve the technical problem in the prior art that complete medical record data cannot be directly obtained from a single medical institution due to protecting patient data privacy, the present invention provides a patient health record security management system and method.

[0007] The technical solution provided by the embodiment of the present invention is as follows:

[0008] First aspect:

[0009] A patient health record security management system provided by an embodiment of the present invention includes: one-way cloud medical record copy application software, personal health record client software, personal health record security lock facility, personal health record portable device and medical record self-service terminal device;

[0010] The one-way cloud medical record copy application software is used for patients to initiate a one-way medical record copy application, and the user pushes the encrypted application file to the medical record self-service terminal device;

[0011] The personal health record client software is used to encrypt, decrypt and manage the patient's health record, decrypt medical records from different medical institutions after identity verification through the security lock, and encrypt, store and manage the files;

[0012] The personal health record security lock facility is used to provide hardware support for the security encryption and decryption of health records, has multiple encryption algorithms built in and stores encrypted data matching the records;

[0013] The personal health record portable device is used to collect patient health data in real time, and store it after encryption through the personal health record security lock facility, and upload it to the cloud;

[0014] The medical record self-service terminal device is used to receive the patient's medical record copy application, automatically initiate an internal review process, and after confirming the authorization through remote video, pull the medical record data and perform printing, copying, scanning and export operations.

[0015] Second aspect:

[0016] A patient health record security management method provided by an embodiment of the present invention is applied to the patient health record security management system described in the first aspect, comprising:

[0017] S1: Collect the patient's personal health records;

[0018] S2: Construct a health record format document that covers basic patient information, medical history, medical records, and other health information;

[0019] S3: Safely store and manage the health record format document.

[0020] The beneficial effects brought about by the technical solution provided by the embodiment of the present invention include at least:

[0021] (1) In the present invention, the personal health record client software can encrypt, decrypt and manage the patient's health record. After identity authentication through the security lock, it can decrypt medical records from different medical institutions and encrypt, store and manage the files, ensuring that the patient's health data has a high level of security during transmission, storage and access, preventing data leakage and unauthorized access.

[0022] (2) In the present invention, the personal health record portable device can collect patient health data in real time, and store it after encryption through the personal health record security lock facility, and upload it to the cloud, so that patients can continuously monitor their health status.

[0023] (3) In the present invention, the medical record self-service terminal device can receive the patient's medical record copy application, automatically initiate the internal review process, and after confirming the authorization through remote video, pull the medical record data and perform printing, copying, scanning and export operations. It can pull and integrate medical record data from different medical institutions, and can conveniently obtain complete medical record data, automatically initiate the review process and ensure the integrity of the medical record data, thereby solving the problem of difficulty in obtaining complete medical records due to the scattered storage of medical records, and helping doctors and patients obtain comprehensive health information. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0025] Figure 1 A schematic diagram of the structure of a patient health record security management system provided by an embodiment of the present invention;

[0026] Figure 2 A flowchart of a patient health record security management method provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0027] The technical solution of the present invention is described below in conjunction with the accompanying drawings.

[0028] In the embodiments of the present invention, words such as "exemplarily" and "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "example" in the present invention should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of the word "example" is intended to present the concept in a specific way. In addition, in the embodiments of the present invention, the meaning expressed by "and / or" can be both, or it can be either of the two.

[0029] In order to make the technical problems, technical solutions and advantages to be solved by the present invention more clear, a detailed description will be given below with reference to the accompanying drawings and specific embodiments.

[0030] Reference Manual Attached Figure 1 , showing a schematic structural diagram of a patient health record security management system provided by an embodiment of the present invention.

[0031] An embodiment of the present invention provides a patient health record security management system, including: one-way cloud medical record copy application software 1, personal health record client software 2, personal health record security lock facility 3, personal health record portable device 4 and medical record self-service terminal device 5.

[0032] The one-way cloud medical record copy application software 1 is used for patients to initiate a one-way medical record copy application, and the user pushes the encrypted application file to the medical record self-service terminal device 5.

[0033] Optionally, the one-way cloud medical record copy application software 1, the so-called one-way, is to design an API service, ordinary users initiate a copy application through the cloud (independent APP, WeChat applet, DingTalk applet, etc.), the platform unidirectionally pushes the application information in the encrypted RHRD format file to the medical record self-service terminal device designed by this system and deployed on the intranet of the medical institution. The terminal device runs a copy response engine. After receiving the application information, it decrypts and parses the application file, initiates the copy application, enters the internal approval process, and sends the important nodes to the applicant in the form of text messages. After the review is completed, if the copy is agreed, the medical record copy will be copied at the agreed time according to the user's remote online copy or agreed offline copy requirements. If there is an electronic version, the copy confirmed by the user will be directly downloaded to the medical record and medical file self-service terminal machine designed by the present invention and stored in the medical institution. If there is only a paper version, the user will go to the medical institution at the agreed time to copy the paper file into an electronic version through the medical record and medical file self-service terminal machine. The copies in the above two cases will be directly temporarily stored on the medical record and medical file self-service terminal machine.

[0034] The personal health record client software 2 is used to encrypt, decrypt and manage the patient's health record. After identity verification through the security lock, it decrypts medical records from different medical institutions and encrypts, stores and manages the files.

[0035] Optionally, the personal health record client software 2 is a software provided to doctors or patients for personal use. The software can merge and parse the HRD and hkey files stored in the personal health record security lock into readable files, and can query, print, and export personal medical records, medical records, and related medical records. When the personal health record security lock is inserted, the operating system will start to open the personal health record client software, prompt for a password, log in to the software, merge the health record master file MHRD and the key file hkey into an HRD file, and then call the HRD reading software for decryption processing, and perform operations such as querying, printing, and exporting personal medical records, medical records, and related medical records.

[0036] The personal health record security lock facility 3 is used to provide hardware support for the security encryption and decryption of health records. It has multiple encryption algorithms built in and stores encrypted data matching the records.

[0037] Optionally, the personal health record safety lock facility 3 has a USB computer terminal interface to connect to a computer, and a USB connector is connected to the other end. The connector has two USB interfaces, each connected to a storage module and an encryption and decryption module. The encryption and decryption module has a built-in variety of symmetric and asymmetric encryption algorithms, and stores encrypted data files (files with the extension hkey) of randomly separated personal health records. The safety lock facility supports connection with mobile devices in the form of Bluetooth, wired, etc., supports identity verification in the form of fingerprints or passwords, and the built-in storage module in the device has a 128G capacity storage space to store MHRD files. After accessing the personal health record client software or the medical institution end software, the software will open the writable setting of the storage device of the safety lock after the identity authentication is passed. At this time, data can be written and modified in the safety lock, but once the software is exited, the safety lock will be automatically set to a read-only state, and the safety lock cannot be written or deleted at this time.

[0038] The personal health record portable device 4 is used to collect patient health data in real time, and store it after encryption through the personal health record security lock facility 3 and upload it to the cloud.

[0039] The medical record self-service terminal device 5 is used to receive the patient's medical record copy application, automatically initiate the internal review process, and after confirming the authorization through remote video, pull the medical record data and perform printing, copying, scanning and export operations.

[0040] Optionally, the medical record self-service terminal device 5 facilitates users to handle medical record copying services and download personal health records to the personal health record security lock. The device is connected to a server in the medical institution that can unidirectionally receive external network data and send mobile phone text messages, which we call a network proxy server. The medical record self-service terminal device receives the application from the medical record cloud application platform through the proxy server; after receiving it, it initiates an application to the relevant personnel of the medical institution. After the review is passed, the applicant is notified by SMS. The medical institution staff confirms the copy by the applicant remotely or on-site, and then the copy is stored in the medical record self-service terminal device.

[0041] Furthermore, there is a camera and an ID card scanning and recognition component above the medical record automatic service terminal, so as to identify the identity through the ID card and face scanning. At the same time, there are built-in printing, copying and scanning components to print out the electronic files of medical records, or scan the paper medical records into the self-service device and store them in the personal health record file. A set of personal health record management medical institution server software runs on the self-service device. In addition to realizing the normal personal health record file (HRD format) encryption and decryption, merging and separation, printing, exporting and other management functions, the software also has the function of receiving copy applications and issuing the copy approval process to the relevant responsible personnel of the medical institution through the intranet. The medical institution server software provides the function of downloading personal health records. After clicking download, the personal health record file will be encrypted and packaged into two files, one is the split file with the extension of HRD, and the other is the encrypted file similar to the key with the extension of HKEY, which are stored in the personal health record inverted lock.

[0042] Take the workflow of the patient health record security management system as an example: First, configure a configuration file HRD.config, which is an XML file and a template file of the XHRD file. When the user uses the software for the first time, first open the medical institution or client software, and be prompted to insert the personal health record security lock. If it is the first time to use it, the registered user information pops up, and the HRD.config template file is detected at this time. Please fill in the name, gender, age, date of birth, ID number and other basic information according to the template requirements. Then combine the filled information with the HRD.config file to generate the current patient personal health record configuration file XXX.XHRD file associated with the current security lock. At this time, the personal health record security lock is blank and available. The personal health record security lock has an external Type-c wiring port, which can be connected to the USB port on the computer, and the other end is connected to an adapter, which separates two interfaces, respectively connected to a third-party encryption and decryption module, and a storage module. The storage module is used to store the encrypted and castrated personal health record MHRD file, and the castrated encrypted data file hkey is stored in the encryption and decryption module. Patient Zhang XX comes to the outpatient clinic of medical institution A for treatment. At this time, the outpatient doctor of medical institution A asks the patient about his previous illness, examination, medication and treatment history. Patient Zhang XX tells him that he had been examined and treated at medical institution B last month, but was delayed due to business trips and other reasons, and the effect was not ideal. In order to ensure the continuity of treatment, outpatient doctor A recommends patient Zhang XX to go to medical institution B to copy relevant medical records. Patient Zhang applies to medical institution B through the online medical record copy application cloud platform described in the present invention. The medical record copy application cloud platform pushes Zhang XX's copy application to the medical record and medical record self-service terminal device deployed in medical institution B through the proxy server of medical institution B in a one-way manner, and automatically initiates the internal approval process of the medical institution through the device. Relevant personnel within the medical institution approve the copy application through the internal system or the approval system supporting the self-service terminal, and are approved, and send a mobile phone text message to the applicant, notifying him to go to the medical institution at XX:00 on XX:00 on XX:00 on XX:00 on XX:00 on XXXX to handle the electronic copy copy business. Zhang XX received the SMS notification and brought his personal health record security lock to the medical institution at the appointment time. Since Zhang XX's medical record has been created in electronic file, his medical record has not been created in electronic file. At this time, the relevant staff asked Zhang XX to confirm the electronic medical record and the paper outpatient medical record. Zhang XX confirmed that the copy was consistent with the actual file through the cloud application platform. At this time, Zhang XX inserted the personal health record security lock into the medical record self-service terminal device of medical institution B, and logged in to the personal health record management medical institution software after identity authentication. At this time, the staff directly copied the electronic file to the medical record self-service terminal device, and at the same time brought the paper outpatient medical record to the medical record self-service terminal device for scanning. After the scanning is completed, the personal health record management medical institution software prompts that there are copies to be archived.The software automatically collects the copies into relevant directories according to the contents in the copy. If the copies cannot be collected automatically, the user can collect the corresponding directories by himself. Patient Zhang XX clicks the Create Health Record button of the software, and the software can call the encryption algorithm of the security lock and the encryption logic of the present invention to process the personal health record into a castrated MHRD file and a key file hkey, which are stored in the data storage area and encryption area of ​​the security lock respectively. At the same time, a MHRD castrated version of the personal health record file is stored in the terminal device (it can only be fully viewed by cooperating with the hkey file when the personal health record security lock is inserted). Patient Zhang XX takes out the personal health security lock, and the medical institution software automatically exits. Patient Zhang XX can also use the print and export functions of the software to export the personal health record as a PDF document, or print it directly. When printing, it will have a watermark to clearly indicate that it is printed from the medical record self-service terminal device of the XX medical institution. The exported file format is HRD format, which can only be opened if the personal health record security lock is inserted and matches the hkey file inside. Zhang XX comes to Medical Institution A with the health record copied from Medical Institution B. The doctor at Medical Institution A inserts the personal health record security lock into the computer, which automatically opens the personal health record management client software, allowing the doctor to review the patient's medical record information.

[0043] In a possible implementation, the one-way cloud medical record copy application software 1 is specifically responsible for the one-way application initiation process from the user end to the medical institution end. The one-way cloud medical record copy application software 1 pushes the application information in the form of an encrypted file with a specific extension (named RHRD, but not limited to a specific name) to the medical record self-service terminal device 5 deployed on the intranet of the medical institution, so that the medical record self-service terminal device 5 receives the copy application and calls the security lock algorithm for decryption and parsing, and then automatically initiates the internal approval process of the copy application to the internal business system. The one-way cloud medical record copy application software 1 ensures that the applicant performs the medical record copy task with the medical institution handling personnel at the agreed time, and confirms the execution status, and at the same time notifies the applicant of the entire process of the copy application by SMS or email.

[0044] In one possible implementation, the personal health record client software 2 is specifically used to perform encryption and decryption reading of emergency medical records, outpatient medical records, inpatient medical records and medical records from different medical institutions using a security lock algorithm. When the personal health record client software 2 is running, it performs identity recognition and detects whether it is connected to the personal health record security lock facility 3. After identifying the security lock, it extracts the separated paired encrypted data in the security lock and calls the security lock algorithm to decrypt and parse the health record. The personal health record client software 2 supports re-encryption of decrypted documents, and separate storage and management. The personal health record client software 2 has two versions: a personal terminal version and a medical terminal version. The medical terminal version has a copy application response engine function, which initiates an internal approval process to the internal business system of the medical institution through the copy application response engine function, and receives various document file archive materials from the internal business system.

[0045] Optionally, the personal health record client software 2 has two versions, namely a personal terminal version and a medical terminal version. The medical terminal version software also has the function of copying the application response engine, initiating an internal approval process to the internal business system of the medical institution, and receiving various document files and archives from the internal business system.

[0046] In a possible implementation, the personal health record security lock facility 3 has multiple symmetric and asymmetric encryption and decryption algorithms built in. The personal health record security lock facility 3 stores randomly separated encrypted data that matches the personal health record. The personal health record security lock facility 3 supports connection with mobile devices via Bluetooth, WIFI, or wired. The personal health record security lock facility 3 supports identity verification by fingerprint or password. The normal operation of the personal health record client software 2 depends on the personal health record security lock facility 3.

[0047] Optionally, the algorithm built into the personal health record security lock facility 3 can be a combination of any one or more algorithms including SM1, SM2, SM3, SM4, RSA, SHA-1, SHA-256, SHA-384, SHA-512, MD5, DES, and 3DES.

[0048] In a possible implementation, the personal health record portable device 4 is used to collect and process the patient's health self-monitoring data in real time, and merge the data into this device. The personal health record portable device 4 is used to monitor the patient's health data. The personal health record portable device 4 is used to identify the recurrence and recovery of the patient's condition. The personal health data in the personal health record portable device 4 is encrypted by the personal health record client software 2 calling the security lock algorithm to become a document with an extension of MHRD, and is stored in the personal health record security lock facility 3. When reading is required, the personal health record portable device 4 decrypts the file merged into the HKEY extension through the security lock algorithm for reading. The personal health record portable device 4 has a cloud operation mode. When the cloud operation mode is turned on, the personal health monitoring data is uploaded to the personal health cloud monitoring platform under personal authorization. The personal health record portable device 4 has the function of calling medical staff with one click. The patient or the accompanying person can contact the doctor immediately through one-click call.

[0049] In a possible implementation, the medical record and medical record self-service terminal device 5 is deployed in a medical institution. The medical record and medical record self-service terminal device 5 unilaterally receives and manages the patient's medical record and medical record copying application, and automatically initiates the internal review process of the medical institution. The medical record and medical record self-service terminal device 5 provides the function of confirming the authorization application for the copying task by remote video. The medical record and medical record self-service terminal device 5 accesses the existing medical record and medical record system of the medical institution by calling the interface, and pulls the medical records and medical records of the authorized medical institution's electronic medical record and medical record system to the device. The medical record and medical record self-service terminal device 5 runs the personal health record client software 2, which provides the function of printing, copying or scanning personal health records, and exporting medical record and medical record copies.

[0050] The beneficial effects brought about by the technical solution provided by the embodiment of the present invention include at least:

[0051] (1) In the present invention, the personal health record client software can encrypt, decrypt and manage the patient's health record. After identity authentication through the security lock, it can decrypt medical records from different medical institutions and encrypt, store and manage the files, ensuring that the patient's health data has a high level of security during transmission, storage and access, preventing data leakage and unauthorized access.

[0052] (2) In the present invention, the personal health record portable device can collect patient health data in real time, and store it after encryption through the personal health record security lock facility, and upload it to the cloud, so that patients can continuously monitor their health status.

[0053] (3) In the present invention, the medical record self-service terminal device can receive the patient's medical record copy application, automatically initiate the internal review process, and after confirming the authorization through remote video, pull the medical record data and perform printing, copying, scanning and export operations. It can pull and integrate medical record data from different medical institutions, and can conveniently obtain complete medical record data, automatically initiate the review process and ensure the integrity of the medical record data, thereby solving the problem of difficulty in obtaining complete medical records due to the scattered storage of medical records, and helping doctors and patients obtain comprehensive health information.

[0054] Reference Manual Attached Figure 2 , showing a flow chart of a patient health record security management method provided by the present invention.

[0055] The present invention also provides a patient health record security management method, which is applied to the above-mentioned patient health record security management system, comprising:

[0056] S1: Collect the patient's personal health records;

[0057] S2: Construct a health record format document that covers basic patient information, medical history, medical records, and other health information;

[0058] In a possible implementation, the archive format document includes an XML definition file, which defines basic information, emergency medical records, outpatient medical records, inpatient medical records, medical record information, data set information, and other extended data sets based on medical institutions; the archive format document includes a document directory, which is used to store specific files; the archive format document includes a self-health management file record, which stores the patient's self-monitored health status data; the final file is an archive file with a specific name.

[0059] Specifically, the document format is: First, the header is defined as:<?xml version="1.0" encoding="UTF-8" standalone="yes"?> , followed by the patient's basic information definition <basic> <name required="”true”">< / name> <birth required="”true”">< / birth> <age>< / age> <job>< / job> <address>< / address> <idcard required="”true”">< / idcard> <sex required="”true”">< / sex> <phone required="”false”">< / phone> ...< / basic> . This is followed by the definition of information collected from medical institutions: <hospitals> <hospital name="”A医疗机构”">< / hospital> <hospital name="”B医疗机构”">< / hospital> <hospital name="”C医疗机构”">< / hospital> < / hospitals> , each <hospital>< / hospital> It records the outpatient, emergency, and inpatient medical records and medical records collected from designated medical institutions. Outpatient medical records are defined as:<outpatient medicalRecords> ,Emergency medical records are defined as: <emergencymedicalrecord>The hospitalization medical records are defined in the following order: Temperature <temperaturesheets>, doctor's order <medicalorders>, hospital admission records <admissionrecords>, medical records <courserecords>, Preoperative discussion record <preoperativediscussionrecords>, Surgery consent form <surgicalconsentforms>, Anesthesia Consent Form <anesthesiaconsentforms>, Anesthesia Preoperative Visit Records, Surgical Safety Verification Records <surgicalsafetyverificationrecords>, surgical inventory records <surgicalinventoryrecords>, anesthesia records <anesthesiarecords>, surgical records <surgicalrecords>, Post-anesthesia visit records <anesthesiapostoperativevisitrecords>, Postoperative medical records <postoperativecourserecords>, Nursing records for seriously ill (critically ill) patients <nursingrecordsofcriticallyillcriticallyillpatients>, discharge records <dischargerecords>, death records <deathrecords>, Informed Consent Form for Blood Transfusion Treatment <informedconsentformsforbbloodtransfusiontreatment>, Special Examination (Special Treatment) Consent Form <specialexaminationsortreatmentconsentform>, consultation records <consultationrecord>, Notice of Critical (Severe) Illness <criticalorseriousnotice>, pathological data <pathologicaldata>, auxiliary inspection report <auxiliaryexaminationreportform>, medical imaging examination data <medicalimagingexaminationdata>The medical record is defined and collects information in the following order: Home page of the inpatient medical record <homepageofinpatientmedicalrecords>, hospital admission records <admissionrecords>, medical records <courserecords>, Preoperative discussion record <preoperativediscussionrecords>, Surgery consent form <surgicalconsentforms>, Anesthesia Consent Form <anesthesiaconsentforms>, Anesthesia Preoperative Visit Records, Surgical Safety Verification Records <surgicalsafetyverificationrecords>, surgical inventory records <surgicalinventoryrecords>, anesthesia records <anesthesiarecords>, surgical records <surgicalrecords>, Post-anesthesia visit records <anesthesiapostoperativevisitrecords>, Postoperative course record <postoperativecourserecords>, discharge records <dischargerecords>, death records <deathrecords>, Discussion record of death cases <discussionrecordofdeathcases>, Informed Consent Form for Blood Transfusion Treatment <informedconsentformsforbbloodtransfusiontreatment>, Special Examination (Special Treatment) Consent Form <specialexaminationsortreatmentconsentform>, consultation records <consultationrecord>, Notice of Critical (Severe) Illness <criticalorseriousnotice>, Pathological data <pathologicaldata>, auxiliary inspection report <auxiliaryexaminationreportform>, medical imaging examination data <medicalimagingexaminationdata>, Temperature sheet <temperaturesheets>, doctor's order <medicalorders>, Nursing records for seriously ill (critically ill) patients <nursingrecordsofcriticallyillcriticallyillpatients>.

[0060] The above-mentioned outpatient, emergency, inpatient medical records and medical record definition tags can contain several <file>That is, the file label, which specifies the file location, file type, and file name in the standard. This is followed by the data directory label related to patient self-health management <tracks>, there are multiple <file>Tags, record key health indicator data. Next is the extended data tag <extends>, there are multiple <file>Tags record various necessary documents. All the bottom-level tags above can define the required attribute to indicate whether the data must be collected. If it is true, it must be collected, and if it is false, it is not required. If the required attribute is not defined for the bottom-level tag and it is true, it means that there must be at least one required item under this tag.

[0061] Optionally, the present invention directly uses open source compression software to manage HRD personal health records. Since the software is completely open source and has mature compression and encryption algorithms, it can quickly realize the daily management of HRD documents. At the same time, since it is open source, the encryption algorithm can be defined by itself and the management logic can be customized. The specific processing flow of the document is: first, the format of the document definition file is checked, and then the medical record document directory, the patient's key behavior or status tracking data directory, and other document directories are analyzed, and the compression algorithm of the open source compression software is called for compression, and then converted into a binary file, the number of bytes of the binary file is counted, and a number greater than or equal to a specific number of words and less than a specified maximum number of bytes is randomly generated according to the number of bytes of the entire binary file, and the binary data corresponding to these numbers are extracted, and then the extracted files and the extracted data are symmetrically encrypted; after encryption, the incomplete health document is stored in an area of ​​the personal health record security lock with the extension of MHRD, and the extracted encrypted pairing data is stored in another area of ​​the personal health record security lock with the extension of HKEY.

[0062] Optionally, the HRD personal health record file includes, in addition to the above-mentioned XHRD definition file, a document directory for storing medical records and medical files collected from outpatient and emergency departments and inpatient departments of various medical institutions. This is a multi-level directory, with the main directory being hospitals, under which are the identification codes of specific medical institutions, and then specific medical record and medical file files; there is also a document directory for storing key physical indicator data for patient self-health management, named tracks, under which are a series of text files with dates as their full names; there is also an extended document directory named extends, under which are multiple files.

[0063] S3: Safely store and manage the health record format document.

[0064] It should be noted that by taking the patient as the center and, on the premise of obtaining the patient's authorization, comprehensively applying one-way cloud medical record copy application software, personal health record client software, personal health record security lock facilities, medical record self-service terminal equipment, and personal health record portable equipment, the problem of patient personal data privacy is effectively solved, thereby solving the problem of the patient's medical records being stored separately in different medical institutions due to the software used, national and medical institution regulations, and thus the inability to fully collect medical records. This is to achieve the goal of gradually establishing a complete medical record document that is controlled and managed by the patient under the existing legal and regulatory system.

[0065] In a possible implementation manner, the S3 specifically includes sub-steps S301 to S305:

[0066] S301: The patient or agent sends a medical record copy application to the medical institution in a one-way manner through the one-way cloud medical record copy application software;

[0067] S302: The medical record self-service terminal device deployed in the intranet of the medical institution unidirectionally receives and responds to the medical record copy application;

[0068] S303: Patients or their agents handle medical record duplication and establish a one-file personal health record in a specific format;

[0069] S304: The patient or agent downloads the personal health record to the personal health record security lock;

[0070] S305: Repeat S301 to S304 above for multiple iterations, so that the patient or agent can gradually and safely collect and manage complete personal health records.

[0071] In a possible implementation manner, the encryption and decryption method of the health record format document specifically includes sub-steps S30A to S30I:

[0072] S30A: Encrypt and process the document into binary format;

[0073] S30B: taking out the character at the randomly designated position;

[0074] S30C: Call the security lock algorithm to symmetrically encrypt the processed document;

[0075] S30D: The extracted characters are encrypted in a symmetrical manner by using a security lock algorithm;

[0076] S30E: encrypt each individual file in the document directory in the same manner as S30A to S30D;

[0077] S30F: Save the separated data together on the personal health record security lock facility;

[0078] S30G: When data needs to be viewed, the encrypted incomplete health record is merged with the data on the personal health record security lock to form a complete personal health record;

[0079] S30H: Call the encryption and decryption algorithm of the personal health record security lock to decrypt the personal health record data;

[0080] S30I: Through personal health record reading software, the distributed health records are decrypted and merged and presented in full to doctors and authorized users.

[0081] In the present invention, the document and the extracted encrypted data are stored separately in a manner of separate storage data. Even if a storage location is invaded, the complete health record data will not be leaked, which effectively enhances data privacy protection.

[0082] The patient health record security management method provided by the present invention can be run on the above-mentioned patient health record security management system and achieve the same or similar technical effects. To avoid repetition, the present invention will not be described in detail.

[0083] The beneficial effects brought about by the technical solution provided by the embodiment of the present invention include at least:

[0084] (1) In the present invention, the personal health record client software can encrypt, decrypt and manage the patient's health record. After identity authentication through the security lock, it can decrypt medical records from different medical institutions and encrypt, store and manage the files, ensuring that the patient's health data has a high level of security during transmission, storage and access, preventing data leakage and unauthorized access.

[0085] (2) In the present invention, the personal health record portable device can collect patient health data in real time, and store it after encryption through the personal health record security lock facility, and upload it to the cloud, so that patients can continuously monitor their health status.

[0086] (3) In the present invention, the medical record self-service terminal device can receive the patient's medical record copy application, automatically initiate the internal review process, and after confirming the authorization through remote video, pull the medical record data and perform printing, copying, scanning and export operations. It can pull and integrate medical record data from different medical institutions, and can conveniently obtain complete medical record data, automatically initiate the review process and ensure the integrity of the medical record data, thereby solving the problem of difficulty in obtaining complete medical records due to the scattered storage of medical records, and helping doctors and patients obtain comprehensive health information.

[0087] It should be understood that the processor in the embodiment of the present invention may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0088] It should also be understood that the memory in the embodiments of the present invention may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0089] The above embodiments can be implemented in whole or in part by software, hardware (such as circuits), firmware or any other combination. When implemented by software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, the process or function described in the embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (for example, a floppy disk, a hard disk, a tape), an optical medium (for example, a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0090] It should be understood that the term "and / or" in this article is only a description of the association relationship between related objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. A and B can be singular or plural. In addition, the character " / " in this article generally indicates that the related objects before and after are in an "or" relationship, but it may also indicate an "and / or" relationship. Please refer to the context for specific understanding.

[0091] In the present invention, "at least one" means one or more, and "more" means two or more. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or plural.

[0092] It should be understood that in various embodiments of the present invention, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0093] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0094] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described equipment, devices and units can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0095] In the several embodiments provided by the present invention, it should be understood that the disclosed devices, apparatuses and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another device, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0096] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0097] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0098] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, and other media that can store program codes.

[0099] An embodiment of the present invention provides a computer-readable storage medium having a computer program stored thereon. When the program is executed by a processor, the method for securely managing patient health records as described in the method embodiment is implemented.

[0100] A computer-readable storage medium provided by the present invention can implement the steps and effects of the patient health record security management method of the above method embodiment. To avoid repetition, the present invention will not go into details.

[0101] The beneficial effects brought about by the technical solution provided by the embodiment of the present invention include at least:

[0102] In the present invention, the risk function value of each postoperative care plan is automatically determined by a proportional risk model based on a neural network, and the candidate postoperative care plan with the lowest risk function value is selected as the optimal postoperative care plan to avoid the influence of subjective factors, improve the accuracy and consistency of the determined postoperative care plan, reduce the possibility of complications, and promote the patient's rehabilitation and recovery.

[0103] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

[0104] There are a few points to note:

[0105] (1) The drawings of the embodiments of the present invention only involve structures related to the embodiments of the present invention. Other structures may refer to conventional designs.

[0106] (2) For the sake of clarity, in the drawings used to describe the embodiments of the present invention, the thickness of layers or regions is exaggerated or reduced, that is, these drawings are not drawn according to the actual scale. It is understood that when an element such as a layer, film, region or substrate is referred to as being "on" or "under" another element, the element may be "directly" "on" or "under" the other element or there may be intermediate elements.

[0107] (3) In the absence of conflict, the embodiments of the present invention and the features therein may be combined with each other to obtain new embodiments.

[0108] The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. The protection scope of the present invention shall be based on the protection scope of the claims.< / file> < / extends> < / file> < / tracks> < / file> < / nursingrecordsofcriticallyillcriticallyillpatients> < / medicalorders> < / temperaturesheets> < / medicalimagingexaminationdata> < / auxiliaryexaminationreportform> < / pathologicaldata> < / criticalorseriousnotice> < / consultationrecord> < / specialexaminationsortreatmentconsentform> < / informedconsentformsforbbloodtransfusiontreatment> < / discussionrecordofdeathcases> < / deathrecords> < / dischargerecords> < / postoperativecourserecords> < / anesthesiapostoperativevisitrecords> < / surgicalrecords> < / anesthesiarecords> < / surgicalinventoryrecords> < / surgicalsafetyverificationrecords> < / anesthesiaconsentforms> < / surgicalconsentforms> < / preoperativediscussionrecords> < / courserecords> < / admissionrecords> < / homepageofinpatientmedicalrecords> < / medicalimagingexaminationdata> < / auxiliaryexaminationreportform> < / pathologicaldata> < / criticalorseriousnotice> < / consultationrecord> < / specialexaminationsortreatmentconsentform> < / informedconsentformsforbbloodtransfusiontreatment> < / deathrecords> < / dischargerecords> < / nursingrecordsofcriticallyillcriticallyillpatients> < / postoperativecourserecords> < / anesthesiapostoperativevisitrecords> < / surgicalrecords> < / anesthesiarecords> < / surgicalinventoryrecords> < / surgicalsafetyverificationrecords> < / anesthesiaconsentforms> < / surgicalconsentforms> < / preoperativediscussionrecords> < / courserecords> < / admissionrecords> < / medicalorders> < / temperaturesheets> < / emergencymedicalrecord>

Claims

1. A patient health record security management system, characterized in that: include: One-way cloud medical record copy application software, personal health record client software, personal health record security lock facility, personal health record portable device and medical record self-service terminal equipment; The one-way cloud medical record copy application software is used for patients to initiate a one-way medical record copy application, and the user pushes the encrypted application file to the medical record self-service terminal device; The personal health record client software is used to encrypt, decrypt and manage the patient's health record, decrypt medical records from different medical institutions after identity verification through the security lock, and encrypt, store and manage the files; The personal health record security lock facility is used to provide hardware support for the security encryption and decryption of health records, has multiple encryption algorithms built in and stores encrypted data matching the records; The personal health record portable device is used to collect patient health data in real time, and store it after encryption through the personal health record security lock facility, and upload it to the cloud; The medical record self-service terminal device is used to receive the patient's medical record copy application, automatically initiate the internal review process, and after confirming the authorization through remote video, pull the medical record data and perform printing, copying, scanning and export operations; The personal health record client software is specifically used to perform encryption and decryption reading of emergency medical records, outpatient medical records, inpatient medical records and medical records of patients from different medical institutions using a security lock algorithm; When the personal health record client software is running, it performs identity recognition to detect whether it is connected to the personal health record security lock facility. After identifying the security lock, it extracts the separated pairing encrypted data in the security lock and calls the security lock algorithm to decrypt and parse the health record; The personal health record client software supports re-encryption of decrypted documents and separate storage and management; The personal health record client software has two versions: a personal terminal version and a medical terminal version. The medical terminal version has a copy application response engine function, which initiates an internal approval process to the internal business system of the medical institution through the copy application response engine function, and receives various document files and archive materials from the internal business system; Among them, the personal health record security lock facility has built-in multiple symmetric and asymmetric encryption and decryption algorithms; The personal health record security lock facility stores randomly separated encrypted data that matches the personal health record; The personal health record security lock facility supports connection with mobile devices via Bluetooth, WIFI, or wired mode; The personal health record security lock facility supports identity verification by fingerprint or password; The normal operation of the personal health record client software depends on the personal health record security lock facility.

2. The patient health record security management system according to claim 1, characterized in that: The one-way cloud medical record copy application software is specifically responsible for the one-way application initiation process from the user end to the medical institution end; The one-way cloud medical record copy application software pushes the application information in the form of an encrypted file with a specific extension to the medical record self-service terminal device deployed on the intranet of the medical institution, so that the medical record self-service terminal device receives the copy application and calls the security lock algorithm for decryption and analysis, and then automatically initiates the internal approval process of the copy application to the internal business system; The one-way cloud medical record copy application software ensures that the applicant performs the medical record copy task with the medical institution staff at the agreed time, and confirms the execution status. At the same time, the applicant is notified of the entire process status of the copy application by SMS or email.

3. The patient health record security management system according to claim 1, characterized in that: The personal health record portable device is used to collect and process the patient's health self-monitoring data in real time and merge the data into the device; The personal health record portable device is used to monitor the patient's health data; The portable personal health record device is used to identify the patient's recurrence and recovery status; The personal health data in the personal health record portable device is encrypted by the personal health record client software using a security lock algorithm to become a document with an extension of MHRD, and is stored in the personal health record security lock facility; When reading is required, the personal health record portable device decrypts the file merged into the HKEY extension through a security lock algorithm for reading; The portable device for personal health records has a cloud operation mode. When the cloud operation mode is turned on, the personal health monitoring data is uploaded to the personal health cloud monitoring platform with personal authorization; The portable personal health record device has a function of calling medical staff with one button, and the patient or the accompanying person can contact the doctor immediately through the one-button call.

4. The patient health record security management system according to claim 1, characterized in that: The medical record self-service terminal device is deployed in a medical institution; The medical record self-service terminal device unilaterally receives and manages the patient's medical record copy application, and automatically initiates the internal review process of the medical institution; The medical record self-service terminal device provides a function of confirming the application for authorization of the copying task by remote video; The medical record self-service terminal device accesses the existing medical record system of the medical institution by calling the interface, and pulls the medical records of the authorized medical institution's electronic medical record system to the device; The medical record self-service terminal device runs the personal health record client software, providing the functions of printing, copying or scanning personal health records, and exporting copies of medical records.

5. A patient health record security management method, characterized in that: The patient health record security management system applied to any one of claims 1 to 4 comprises: S1: Collect the patient's personal health records; S2: Construct a health record format document that covers basic patient information, medical history, medical records, and other health information; S3: Safely store and manage the health record format document.

6. The patient health record security management method according to claim 5, characterized in that: The S3 specifically includes: S301: The patient or agent sends a medical record copy application to the medical institution in a one-way manner through the one-way cloud medical record copy application software; S302: The medical record self-service terminal device deployed in the intranet of the medical institution unilaterally receives and responds to the medical record copy application; S303: Patients or their agents handle medical record duplication and establish a one-file personal health record in a specific format; S304: The patient or agent downloads the personal health record to the personal health record security lock; S305: Repeat S301 to S304 above for multiple iterations, so that the patient or agent can gradually and safely collect and manage complete personal health records.

7. The patient health record security management method according to claim 5, characterized in that: The archive format document includes an XML definition file, which defines basic information, emergency medical records, outpatient medical records, inpatient medical records, medical record information, data set information, and other extended data sets based on medical institutions; The archive format document includes a document directory, and the document directory is used to store specific files; The archive format document includes a self-health management file record, and the self-health management file record stores the patient's self-monitored health status data; The final file is an archive file with a specific name.

8. The patient health record security management method according to claim 5, characterized in that: The encryption and decryption methods of the health record format document specifically include: S30A: Encrypt and process the document into binary format; S30B: taking out the character at the randomly designated position; S30C: Call the security lock algorithm to symmetric encrypt the processed document; S30D: The extracted characters are encrypted in a symmetrical manner by using a security lock algorithm; S30E: encrypt each individual file in the document directory in the same manner as S30A to S30D; S30F: Save the separated data together on the personal health record security lock facility; S30G: When data needs to be viewed, the encrypted incomplete health record is merged with the data on the personal health record security lock to form a complete personal health record; S30H: Call the encryption and decryption algorithm of the personal health record security lock to decrypt the personal health record data; S30I: Through personal health record reading software, the distributed health records are decrypted and merged and presented in full to doctors and authorized users.

Images