Medical information management system based on blockchain technology

Abstract

The present invention discloses a medical information management system based on blockchain technology, including a data acquisition module, an identity authentication module, a medical data storage module, a data sharing module, a smart contract module and a patient privacy protection module. The present invention belongs to the field of medical information technology, and specifically to a medical information management system based on blockchain technology. The present scheme uses the generation of security parameters, public keys and random numbers to initialize the process, the registration center performs private key matching to complete server registration, calculates the device password according to the device ID, and splices the device password and security parameters at the registration center and performs hash processing; initializes medical data, divides the data into blocks and calculates the verification identifier and file identifier, and then performs information integrity check; determines the scope and object of patient sensitive information to be encrypted, and selects the encryption algorithm and key length according to the type and importance, allocates access levels, and different keys correspond to different access levels to achieve refined management.

Description

Technical Field

[0001] The present invention belongs to the field of medical information technology, and specifically to a medical information management system based on blockchain technology. Background Art

[0002] The medical information management system is a system that uses information technology to collect, store, manage and analyze medical information. It covers various medical data such as patients' basic information, medical records, diagnosis results, treatment plans, examination reports and wills. It aims to improve the work efficiency and management level of medical institutions, realize the sharing and circulation of medical information, and facilitate doctors to better understand patients' conditions, make accurate diagnoses and treatments, and help monitor and improve medical quality, optimize resource allocation, and improve service levels. However, the existing medical information management system has technical problems such as the security and authentication of the information management system does not meet the standards, illegal personnel may impersonate legitimate users to perform improper operations, reduce patients' trust in the system, and cause obstruction of the medical process; there are technical problems such as low efficiency of medical data storage and management, data may be lost during the storage process, resulting in incomplete information and unsmooth operation of the medical system; there are technical problems such as the inability to carry out targeted protection of patients' privacy-sensitive information, and the inability to carry out hierarchical protection according to the type of information, resulting in weak information security protection capabilities of the medical system. Summary of the invention

[0003] In view of the above situation, in order to overcome the defects of the prior art, the medical information management system based on blockchain technology provided by the present invention aims at the technical problems that the security and authentication of the information management system do not meet the standards, illegal persons may impersonate legitimate users to perform improper operations, reduce patients' trust in the system, and cause obstruction of the medical process. An identity authentication module is adopted to specifically generate security parameters, public keys and random numbers to initialize the process, the registration center matches the private key to complete the server registration, calculates the device password according to the device ID, and splices the device password and security parameters at the registration center and performs hash processing; in view of the low efficiency of medical data storage and management, data may be lost during the storage process, resulting in incomplete information. , causing technical problems that cause the medical system to run unsmoothly, the medical data is initialized, the data is divided into blocks and the verification identifier and file identifier are calculated, the processed medical data is stored in the blockchain, and then the information integrity check is performed; the privacy-sensitive information of patients cannot be protected in a targeted manner, and cannot be graded according to the type of information, resulting in the weak information security protection capability of the medical system. The scope and object of the patient's sensitive information to be encrypted are determined, and the encryption algorithm and key length are selected according to the type and importance, and the access level is assigned. Different keys correspond to different access levels, realizing refined management, leaving traces of all access behaviors on the blockchain, and strictly controlling the patient's privacy data.

[0004] The medical information management system based on blockchain technology provided by the present invention includes a data acquisition module, an identity authentication module, a medical data storage module, a data sharing module, a smart contract module and a patient privacy protection module;

[0005] The data collection module specifically collects medical information and stores it on the blockchain;

[0006] The identity authentication module specifically generates security parameters, public keys and random numbers to initialize the process, the registration center performs private key matching to complete server registration, calculates the device password based on the device ID, and concatenates the device password and security parameters at the registration center and performs hash processing;

[0007] The medical data storage module specifically initializes the medical data, divides the data into blocks and calculates the verification identifier and the file identifier, stores the processed medical data in the blockchain, and then performs an information integrity check;

[0008] The data sharing module specifically defines the sharing scope and builds a sharing platform;

[0009] The smart contract module is specifically used to clarify the purpose of the contract and design the structure, terms and algorithms of the contract according to the requirements;

[0010] The patient privacy protection module specifically determines the scope and object of patient sensitive information to be encrypted, selects encryption algorithms and key lengths based on type and importance, and assigns access levels. Different keys correspond to different access levels to achieve refined management, leaving traces of all access behaviors on the blockchain, and strictly controlling patient privacy data.

[0011] Furthermore, in the data collection module, various medical information of patients is collected, including diagnosis records, examination reports and treatment plans. The collected medical data is processed and stored on the blockchain to ensure the data is tamper-proof and traceable.

[0012] Furthermore, in the identity authentication module, a setting unit, a server registration unit and a device registration unit are provided, including the following contents:

[0013] Setup unit, the system generates security parameters, public keys and random numbers to initialize the process. The public key is created by selecting two random real numbers and multiplying them together and is public to all entities in the system. A hash function is selected and the public key is hashed using a random number r to generate security parameters.

[0014] The server registration unit sends the server ID and server password to the registration center to obtain the server's private key. The formula used is as follows:

[0015] ;

[0016] In the formula, Represents the server's private key, represents the server ID, h() represents the hash function, Indicates the server password. represents the concatenation symbol, which refers to the process of combining two variables, and s represents the safety parameter;

[0017] The private key is transmitted to the server and stored as , the stored Feed it to the registration center, where the server's private key matches, and the server is registered;

[0018] The device registration unit calculates the device password based on the device ID. The formula used is as follows:

[0019] ;

[0020] In the formula, r represents a random number with a value range of (0, 1), k represents a public key, Indicates the device ID. Indicates the device password. Represents the exclusive OR symbol;

[0021] At the registration center, the obtained device password and security parameters are concatenated and the concatenated result is hashed. The formula used is as follows:

[0022] ;

[0023] Where P represents the one-time password. The registration center transmits the one-time password to the device and stores it as P1. If P1=P, the device is considered registered. Indicates the form in which the device ID is transmitted to the registration center. Indicates the form in which the device password is transmitted to the registration center;

[0024] Ensure that only legally certified servers and devices can participate in the medical information management and interaction process on the blockchain, thereby ensuring the security and reliability of the system.

[0025] Furthermore, in the medical data storage module, there are provided a data normalization processing unit, an initialization medical data unit, a calculation medical storage data unit, a calculation identifier unit and an information integrity check unit, including the following contents:

[0026] The data normalization processing unit clarifies the type, size, access requirements and security requirements of medical data, determines the format suitable for storing medical data, and classifies and stores medical data for easy management and retrieval;

[0027] Initialize the medical data unit using the following formula:

[0028] ;

[0029] In the formula, Represents the initialized medical data, represents the data initialization vector, Represents medical storage data, Represents the verification identifier, Represents a file identifier;

[0030] The storage data block unit, the active behavior initiator blocks the storage data, and the active behavior initiator performs the sending integrity check, selecting the set and sending the request operation. The formula used is as follows:

[0031] ;

[0032] In the formula, Represents medical storage data, It indicates that the medical storage data is divided into n blocks, and n represents the total number of blocks of medical storage data;

[0033] Calculate the identifier unit, including the following:

[0034] Calculate the verification identifier using the following formula:

[0035] ;

[0036] In the formula, represents the key associated with the identity, AID represents the identity, f represents the data unique identifier, represents the norm, j represents the validation data variable, Represents the unique identifier of the data associated with variable j;

[0037] Calculate the file identifier using the following formula:

[0038] ;

[0039] In the formula, represents the file identifier, a represents the file data variable, and Sig represents the signature function, which is used to calculate the signature of the data combination and generate a result with verification function;

[0040] The key information of the medical data after initialization, calculation and identification, including verification identifier and file identifier, is stored on the blockchain as data fingerprint to ensure the integrity and authenticity of the key information;

[0041] The information integrity check unit records the results of each check in the blockchain, forming an unalterable check record to increase trust. The information integrity check unit includes the following contents:

[0042] The active behavior initiator sends an integrity check to the receiving server. The active behavior initiator randomly selects a set and then sends a request to the receiving server. The receiving server represents the server that receives and processes the request from the active behavior initiator. The formula used is as follows:

[0043] ;

[0044] In the formula, IC represents the request information for integrity check, and k represents the index of the request, which is used to distinguish different requests. Indicates the specific request content. An identifier representing each medical data file;

[0045] The receiving server receives the integrity check request sent by the active behavior initiator, and first checks whether the identifier of the medical data file is correct. If the identifier of the medical data file is incorrect, the receiving server requests the active behavior initiator to resend.

[0046] Furthermore, in the data sharing module, the following contents are included:

[0047] Clarify the sharing objectives and scope, determine the patient data content to be shared, the medical departments and institutions involved, and clean, integrate and standardize the medical data to be shared;

[0048] Build a sharing platform and construct a platform that facilitates the sharing and management of medical data through a reliable data transmission network, so that medical data can flow safely and efficiently among different departments and institutions.

[0049] Furthermore, in the smart contract module, the purpose of the contract is to better ensure the security and rational use of medical data. The functional and business logic requirements must comply with the requirements of medical data protection. The structure, terms and algorithms of the contract are designed according to the requirements. The tested contract interactions are deployed on the blockchain network. The operating status of the contract is continuously monitored, problems are handled in a timely manner, and updates and maintenance are performed as needed.

[0050] Furthermore, in the patient privacy protection module, there are a clear encryption information unit, a data encryption unit and an access level allocation unit, and the patient privacy protection module includes the following contents:

[0051] Define the encrypted information unit, determine the scope and objects of data that need to be encrypted, screen and classify various types of sensitive information of patients, including basic personal information, medical diagnosis records and treatment plans, and select the corresponding encryption algorithm and key length according to different data types and importance levels;

[0052] Data encryption unit, the encryption function is used to encrypt data through matrix generation in data encryption, and encrypt data using code password. The formula used is as follows:

[0053] ;

[0054] In the formula, represents an encryption matrix with size k rows and L columns, E represents the encryption function, D represents the device, Indicates the encryption result generated after encrypting data with a code password;

[0055] Assign access level units, generate protected data and keys by performing element multiplication, correspond access levels to users, control and execute access rights through smart contracts, ensure that only users with corresponding permissions can access encrypted data of a specific level, and all access behaviors can be recorded on the blockchain, so as to achieve strict control and transparent supervision of access to patient privacy data. The formula used is as follows:

[0056] ;

[0057] In the formula, Represents the generated protected data, Indicates a tensor product operation. Represents a key. Different keys correspond to different levels of data access permissions, which means that different users are assigned corresponding access levels based on actual needs to achieve more flexible and sophisticated data management.

[0058] The beneficial effects achieved by the present invention using the above scheme are as follows:

[0059] (1) In view of the technical problem that the security and authentication of the information management system do not meet the standards, illegal persons may impersonate legitimate users to perform improper operations, reduce patients' trust in the system, and cause obstruction of the medical process, an identity authentication module is used to generate security parameters, public keys and random numbers to initialize the process, the registration center matches the private key to complete the server registration, calculates the device password based on the device ID, and concatenates the device password and security parameters at the registration center and performs hash processing;

[0060] (2) In order to solve the technical problems of low efficiency in medical data storage and management, possible loss of data during storage, incomplete information, and poor operation of the medical system, the medical data is initialized, the data is divided into blocks, and the verification identifier and file identifier are calculated. The processed medical data is stored in the blockchain, and then the information integrity check is performed;

[0061] (3) In order to address the technical issues that patients’ privacy-sensitive information cannot be protected in a targeted manner and cannot be protected in a graded manner based on information type, resulting in weak information security capabilities of the medical system, we determine the scope and objects of patient sensitive information to be encrypted, select encryption algorithms and key lengths based on type and importance, assign access levels, and assign different keys to different access levels to achieve refined management. All access behaviors are recorded on the blockchain, and patient privacy data is strictly controlled. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] Figure 1 A schematic diagram of a medical information management system based on blockchain technology provided by the present invention;

[0063] Figure 2 is a schematic diagram of an identity authentication module;

[0064] Figure 3 A schematic diagram of a medical data storage module;

[0065] Figure 4 Schematic diagram of the patient privacy protection module.

[0066] The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. They are used to explain the present invention together with the embodiments of the present invention and do not constitute a limitation of the present invention. DETAILED DESCRIPTION

[0067] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments; based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0068] In the description of the present invention, it should be understood that terms such as “upper”, “lower”, “front”, “back”, “left”, “right”, “top”, “bottom”, “inside” and “outside” indicating directions or positional relationships are based on the directions or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific direction, be constructed and operated in a specific direction, and therefore should not be understood as limiting the present invention.

[0069] Example 1, see Figure 1 , the medical information management system based on blockchain technology provided by the present invention includes a data acquisition module, an identity authentication module, a medical data storage module, a data sharing module, a smart contract module and a patient privacy protection module;

[0070] The data collection module specifically collects medical information and stores it on the blockchain;

[0071] The identity authentication module specifically generates security parameters, public keys and random numbers to initialize the process, the registration center performs private key matching to complete server registration, calculates the device password based on the device ID, and concatenates the device password and security parameters at the registration center and performs hash processing;

[0072] The medical data storage module specifically initializes the medical data, divides the data into blocks and calculates the verification identifier and the file identifier, stores the processed medical data in the blockchain, and then performs an information integrity check;

[0073] The data sharing module specifically defines the sharing scope and builds a sharing platform;

[0074] The smart contract module is specifically used to clarify the purpose of the contract and design the structure, terms and algorithms of the contract according to the requirements;

[0075] The patient privacy protection module specifically determines the scope and object of patient sensitive information to be encrypted, selects encryption algorithms and key lengths based on type and importance, and assigns access levels. Different keys correspond to different access levels to achieve refined management, leaving traces of all access behaviors on the blockchain, and strictly controlling patient privacy data.

[0076] Example 2, see Figure 1 This embodiment is based on the above embodiment. In the data collection module, various medical information of patients is collected, including diagnosis records, examination reports and treatment plans. The collected medical data is processed and stored on the blockchain to ensure the data is tamper-proof and traceable.

[0077] Example 3, see Figure 1 and Figure 2 This embodiment is based on the above embodiment. In the identity authentication module, a setting unit, a server registration unit and a device registration unit are provided, and include the following contents:

[0078] Setup unit, the system generates security parameters, public keys and random numbers to initialize the process. The public key is created by selecting two random real numbers and multiplying them together and is public to all entities in the system. A hash function is selected and the public key is hashed using a random number r to generate security parameters.

[0079] The server registration unit sends the server ID and server password to the registration center to obtain the server's private key. The formula used is as follows:

[0080] ;

[0081] In the formula, Represents the server's private key, represents the server ID, h() represents the hash function, Indicates the server password. represents the concatenation symbol, which refers to the process of combining two variables, and s represents the safety parameter;

[0082] The private key is transmitted to the server and stored as , the stored Feed it to the registration center, where the server's private key matches, and the server is registered;

[0083] The device registration unit calculates the device password based on the device ID. The formula used is as follows:

[0084] ;

[0085] In the formula, r represents a random number with a value range of (0, 1), k represents a public key, Indicates the device ID. Indicates the device password. Represents the exclusive OR symbol;

[0086] At the registration center, the obtained device password and security parameters are concatenated and the concatenated result is hashed. The formula used is as follows:

[0087] ;

[0088] Where P represents the one-time password. The registration center transmits the one-time password to the device and stores it as P1. If P1=P, the device is considered registered. Indicates the form in which the device ID is transmitted to the registration center. Indicates the form in which the device password is transmitted to the registration center;

[0089] Ensure that only legally certified servers and devices can participate in the medical information management and interaction process on the blockchain, thereby ensuring the security and reliability of the system.

[0090] By performing the above operations, the identity authentication module is used to generate security parameters, public keys and random numbers to initialize the process. The registration center performs private key matching to complete server registration, calculates the device password based on the device ID, and concatenates and hashes the device password and security parameters at the registration center. This solves the technical problem that the security and authentication of the information management system do not meet the standards, and illegal persons may impersonate legitimate users to perform improper operations, reduce patients' trust in the system, and cause obstruction of the medical process.

[0091] Example 4, see Figure 1 and Figure 3 This embodiment is based on the above embodiment. In the medical data storage module, a data normalization processing unit, a medical data initialization unit, a medical storage data calculation unit, an identifier calculation unit and an information integrity check unit are provided, and the following contents are included:

[0092] The data normalization processing unit clarifies the type, size, access requirements and security requirements of medical data, determines the format suitable for storing medical data, and classifies and stores medical data for easy management and retrieval;

[0093] Initialize the medical data unit using the following formula:

[0094] ;

[0095] In the formula, Represents the initialized medical data, represents the data initialization vector, Represents medical storage data, Represents the verification identifier, Represents a file identifier;

[0096] The storage data block unit, the active behavior initiator blocks the storage data, and the active behavior initiator performs the sending integrity check, selecting the set and sending the request operation. The formula used is as follows:

[0097] ;

[0098] In the formula, Represents medical storage data, It indicates that the medical storage data is divided into n blocks, and n represents the total number of blocks of medical storage data;

[0099] Calculate the identifier unit, including the following:

[0100] Calculate the verification identifier using the following formula:

[0101] ;

[0102] In the formula, represents the key associated with the identity, AID represents the identity, f represents the data unique identifier, represents the norm, j represents the validation data variable, Represents the unique identifier of the data associated with variable j;

[0103] Calculate the file identifier using the following formula:

[0104] ;

[0105] In the formula, represents the file identifier, a represents the file data variable, and Sig represents the signature function, which is used to calculate the signature of the data combination and generate a result with verification function;

[0106] The key information of the medical data after initialization, calculation and identification, including verification identifier and file identifier, is stored on the blockchain as data fingerprint to ensure the integrity and authenticity of the key information;

[0107] The information integrity check unit records the results of each check in the blockchain, forming an unalterable check record to increase trust. The information integrity check unit includes the following contents:

[0108] The active behavior initiator sends an integrity check to the receiving server. The active behavior initiator randomly selects a set and then sends a request to the receiving server. The receiving server represents the server that receives and processes the request from the active behavior initiator. The formula used is as follows:

[0109] ;

[0110] In the formula, IC represents the request information for integrity check, and k represents the index of the request, which is used to distinguish different requests. Indicates the specific request content. An identifier representing each medical data file;

[0111] The receiving server receives the integrity check request sent by the active behavior initiator, and first checks whether the identifier of the medical data file is correct. If the identifier of the medical data file is incorrect, the receiving server requests the active behavior initiator to resend.

[0112] By performing the above operations, the medical data is initialized, the data is divided into blocks and the verification identifier and file identifier are calculated, the processed medical data is stored in the blockchain, and then the information integrity check is performed, which solves the technical problems of low efficiency in medical data storage management, possible loss of data during the storage process, resulting in incomplete information and poor operation of the medical system.

[0113] Example 5, see Figure 1 This embodiment is based on the above embodiment and includes the following contents in the data sharing module:

[0114] Clarify the sharing objectives and scope, determine the patient data content to be shared, the medical departments and institutions involved, and clean, integrate and standardize the medical data to be shared;

[0115] Build a sharing platform and construct a platform that facilitates the sharing and management of medical data through a reliable data transmission network, so that medical data can flow safely and efficiently among different departments and institutions.

[0116] Example 6, see Figure 1 This embodiment is based on the above embodiment. In the smart contract module, it is specifically to clarify that the purpose of the contract is to better ensure the security and reasonable use of medical data. The functional and business logic requirements must meet the requirements of medical data protection. The structure, terms and algorithms of the contract are designed according to the requirements. The tested contract interactions are deployed on the blockchain network, the operating status of the contract is continuously monitored, problems are handled in a timely manner, and updates and maintenance are performed as needed.

[0117] Embodiment 7, see Figure 1 and Figure 4 This embodiment is based on the above embodiment. In the patient privacy protection module, there are a clear encryption information unit, a data encryption unit and an access level allocation unit. The patient privacy protection module includes the following contents:

[0118] Define the encrypted information unit, determine the scope and objects of data that need to be encrypted, screen and classify various types of sensitive information of patients, including basic personal information, medical diagnosis records and treatment plans, and select the corresponding encryption algorithm and key length according to different data types and importance levels;

[0119] Data encryption unit, the encryption function is used to encrypt data through matrix generation in data encryption, and encrypt data using code password. The formula used is as follows:

[0120] ;

[0121] In the formula, represents an encryption matrix with size k rows and L columns, E represents the encryption function, D represents the device, Indicates the encryption result generated after encrypting data with a code password;

[0122] Assign access level units, generate protected data and keys by performing element multiplication, correspond access levels to users, control and execute access rights through smart contracts, ensure that only users with corresponding permissions can access encrypted data of a specific level, and all access behaviors can be recorded on the blockchain, so as to achieve strict control and transparent supervision of access to patient privacy data. The formula used is as follows:

[0123] ;

[0124] In the formula, Represents the generated protected data, Indicates a tensor product operation. Represents a key. Different keys correspond to different levels of data access permissions, which means that different users are assigned corresponding access levels based on actual needs to achieve more flexible and sophisticated data management.

[0125] By performing the above operations, the scope and object of patient sensitive information to be encrypted are determined, and the encryption algorithm and key length are selected according to the type and importance, and access levels are assigned. Different keys correspond to different access levels, and refined management is achieved. All access behaviors are recorded on the blockchain, and patient privacy data is strictly controlled. This solves the technical problem that patients' privacy-sensitive information cannot be protected in a targeted manner and cannot be protected in a graded manner according to the type of information, resulting in weak information security protection capabilities of the medical system.

[0126] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0127] While the embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that many changes, modifications, substitutions and variations can be made to the embodiments without departing from the principles and spirit of the invention.

[0128] The present invention and its embodiments are described above, which is not restrictive. The drawings show only one embodiment of the present invention, and the actual structure is not limited thereto. In short, if ordinary technicians in the field are inspired by it and design structural methods and embodiments similar to the technical solution without creativity without departing from the purpose of the invention, they should all fall within the protection scope of the present invention.

Claims

1. A medical information management system based on blockchain technology, characterized by: The system includes a data collection module, an identity authentication module, a medical data storage module, a data sharing module, a smart contract module, and a patient privacy protection module; The data collection module specifically collects medical information and stores it on the blockchain; The identity authentication module specifically generates security parameters, public keys and random numbers to initialize the process, the registration center performs private key matching to complete server registration, calculates the device password based on the device ID, and concatenates the device password and security parameters at the registration center and performs hash processing; The medical data storage module specifically initializes the medical data, divides the data into blocks and calculates the verification identifier and the file identifier, stores the processed medical data in the blockchain, and performs an information integrity check; The data sharing module specifically defines the sharing scope and builds a sharing platform; The smart contract module is specifically used to clarify the purpose of the contract and design the structure, terms and algorithms of the contract according to the requirements; The patient privacy protection module specifically determines the scope and object of patient sensitive information to be encrypted, selects encryption algorithms and key lengths according to the type and importance, assigns access levels, and different keys correspond to different access levels. All access behaviors are recorded on the blockchain, and patient privacy data is strictly controlled; In the identity authentication module, there are a setting unit, a server registration unit and a device registration unit, including the following: Setup unit, the system generates security parameters, public keys and random numbers to initialize the process. The public key is created by selecting two random real numbers and multiplying them together and is public to all entities in the system. A hash function is selected and the public key is hashed using a random number to generate security parameters. The server registration unit sends the server ID and server password to the registration center to obtain the server's private key. The formula used is as follows: ； In the formula, Represents the server's private key, represents the server ID, h() represents the hash function, Indicates the server password. represents the concatenation symbol, which refers to the process of combining two variables, and s represents the safety parameter; The private key is transmitted to the server and stored as , the stored Feed it to the registration center, where the server's private key is matched and the server is registered; The device registration unit calculates the device password based on the device ID. The formula used is as follows: ； In the formula, r represents a random number, k represents a public key, Indicates the device ID. Indicates the device password. Represents the exclusive OR symbol; At the registration center, the obtained device password and security parameters are concatenated and the concatenated result is hashed. The formula used is as follows: ； Where P represents the one-time password. The registration center transmits the one-time password to the device and stores it as P1. If P1=P, the device is considered registered. Indicates the form in which the device ID is transmitted to the registration center. Indicates the format in which the device password is transmitted to the registration center.

2. The medical information management system based on blockchain technology according to claim 1, characterized in that: In the medical data storage module, there are a data normalization processing unit, an initialization medical data unit, a calculation medical storage data unit, a calculation identifier unit and an information integrity check unit, including the following contents: The data normalization processing unit clarifies the type, size, access requirements and security requirements of medical data, determines the format suitable for storing medical data, and classifies and stores medical data; Initialize the medical data unit using the following formula: ； In the formula, Represents the initialized medical data, represents the data initialization vector, Represents medical storage data, Represents the verification identifier, Represents a file identifier; The storage data block unit, the active behavior initiator blocks the storage data, and the active behavior initiator performs the sending integrity check, selecting the set and sending the request operation. The formula used is as follows: ； In the formula, Represents medical storage data, It indicates that the medical storage data is divided into n blocks, and n represents the total number of blocks of medical storage data; Calculate the identifier unit, including the following: Calculate the verification identifier using the following formula: ； In the formula, represents the key associated with the identity, AID represents the identity, f represents the data unique identifier, represents the norm, j represents the validation data variable, Represents the unique identifier of the data associated with variable j; Calculate the file identifier using the following formula: ； In the formula, represents the file identifier, a represents the file data variable, and Sig represents the signature function, which is used to calculate the signature of the data combination and generate a result with verification function; The key information of the medical data after initialization, calculation and identification, including the verification identifier and the file identifier, is stored on the blockchain as a data fingerprint; The information integrity check unit records the results of each check on the blockchain to form an unalterable check record. The information integrity check unit includes the following contents: The active behavior initiator sends an integrity check to the receiving server. The active behavior initiator randomly selects a set and then sends a request to the receiving server. The receiving server represents the server that receives and processes the request from the active behavior initiator. The formula used is as follows: ； In the formula, IC represents the request information for integrity check, and k represents the index of the request, which is used to distinguish different requests. Indicates the specific request content. Identifiers representing individual medical data files.

3. The medical information management system based on blockchain technology according to claim 1, characterized in that: In the patient privacy protection module, there are a clear encryption information unit, a data encryption unit and an access level allocation unit. The patient privacy protection module includes the following contents: Define the encrypted information unit, determine the scope and objects of data that need to be encrypted, screen and classify various types of sensitive information of patients, including basic personal information, medical diagnosis records and treatment plans, and select the corresponding encryption algorithm and key length according to different data types and importance levels; Data encryption unit, the encryption function is used to encrypt data through matrix generation in data encryption, and encrypt data using code password. The formula used is as follows: ； In the formula, represents an encryption matrix with size k rows and L columns, E represents the encryption function, D represents the device, Indicates the encryption result generated after encrypting data with a code password; Allocate access level units, generate protected data and keys by performing element multiplication, correspond access levels to users, control and enforce access rights through smart contracts, and all access behaviors can be recorded on the blockchain. The formula used is as follows: ； In the formula, Represents the generated protected data, Indicates a tensor product operation. Represents a key. Different keys correspond to different levels of data access permissions.

4. The medical information management system based on blockchain technology according to claim 1, characterized in that: In the data collection module, various medical information of patients is collected, including diagnosis records, examination reports and treatment plans, and the collected medical data is processed and stored on the blockchain.

5. The medical information management system based on blockchain technology according to claim 1, characterized in that: In the data sharing module, the following are included: Clarify the sharing objectives and scope, determine the patient data content to be shared, the medical departments and institutions involved, and clean, integrate and standardize the medical data to be shared; Build a sharing platform and create a platform that facilitates medical data sharing and management through a reliable data transmission network.

6. The medical information management system based on blockchain technology according to claim 1, characterized in that: In the smart contract module, the structure, terms and algorithms of the contract are designed according to the requirements, the tested contract interactions are deployed on the blockchain network, the operating status of the contract is continuously monitored, problems are handled in a timely manner, and updates and maintenance are performed as needed.

Images