Electronic medical record sharing system, method and device

Abstract

The invention discloses an electronic medical record sharing system, method and device, electronic equipment and a computer storage medium. The system comprises a first hospital medical staff terminal, a patient terminal, a health chain server and a second hospital data processing subsystem. The first hospital medical staff terminal is used for displaying the electronic medical record to obtain the identification code; the patient terminal is used for identifying the electronic medical record to obtain the identification code and sending an electronic medical record authorization request message to the health chain server. The health chain server side is used for obtaining a retrieval request message, sent by a first hospital medical staff terminal, of the specified authorized electronic medical record, obtaining information of a hospital to which the specified authorized electronic medical record belongs according to a specified authorized electronic medical record index, and if the information of the hospital is information of a second hospital different from the first hospital, sending the retrieval request message to the first hospital; and if so, sending a specified authorized electronic medical record acquisition request message to a second hospital data processing subsystem. And the second hospital data processing subsystem is used for returning a specified authorized electronic medical record to the health chain server.

Description

[0001] This application claims the priority of the Chinese patent application filed with the China Patent Office on July 16, 2024, with application number 2024109521525 and invention name “An Electronic Medical Record Sharing System”, the entire contents of which are incorporated by reference in this application. Technical Field

[0002] The present application relates to the field of computer technology, and in particular to an electronic medical record sharing system, method, device, electronic device and computer storage medium. Background Art

[0003] With the popularization of medical care and the development of information technology, the medical industry is undergoing an information-based and intelligent transformation. Electronic Medical Records (EMRs), as the core of medical service informatization, record the entire process of medical diagnosis and treatment, and are therefore highly valued by hospitals and doctors. In order to achieve the interconnection of medical information and promote progress in clinical services, hospital development, and medical research, it is particularly important to share EMRs among various medical institutions.

[0004] Currently, electronic medical records (EMRs) are generally stored in centralized medical institutions, which not only limits the interoperability of medical information, but also exposes electronic medical record data to single point failure and potential large-scale leakage risks. In addition, this data storage model not only leads to the "information island" problem, but also prevents EMRs from being fully applied and shared. Moreover, the interoperability between different providers and hospital systems also affects the effective sharing of electronic medical record data.

[0005] In response to the above problems, the emerging blockchain technology has been widely used to develop a safe and reliable electronic medical record distributed management and sharing system by utilizing its decentralization, high-redundancy storage and tamper-proof features. Through blockchain technology, the patient's complete health history data can be recorded and shared across institutions.

[0006] Although blockchain technology has brought many advantages to the medical field, in the actual application of electronic medical record sharing, whether to share electronic medical records is mainly based on the doctor's authority. Sharing electronic medical records based on doctor's authority is likely to weaken the privacy of patients. Therefore, how to provide a solution that can realize electronic medical record sharing based on patient authority is an urgent problem to be solved. Summary of the invention

[0007] An embodiment of the present application provides an electronic medical record sharing system, which can realize the sharing of electronic medical records based on patient permissions and protect patient privacy.

[0008] The embodiment of the present application provides an electronic medical record sharing system, including: a first hospital medical staff terminal, a patient terminal, a health chain service end and a second hospital data processing subsystem; the first hospital medical staff terminal is used to display an electronic medical record acquisition identification code; the patient terminal is used to identify the electronic medical record acquisition identification code, obtain the identification information of the first hospital medical staff terminal as the first hospital medical staff terminal identification information, and send an electronic medical record authorization request message to the health chain service end, indicating that the designated patient requests the designated medical staff to authorize the designated medical staff to access the electronic medical record of the designated patient; the electronic medical record authorization request message The electronic medical record authorization request message includes the terminal identification information of the medical staff of the first hospital, obtains the electronic medical record index list of the designated patient returned by the health chain service end in response to the electronic medical record authorization request message, displays the electronic medical record index list, and in response to detecting a selection operation for an electronic medical record index in the electronic medical record index list, sends the selected electronic medical record index to the health chain service end as the index of the authorized electronic medical record authorized by the designated patient to be accessed by the designated medical staff, the designated medical staff being the designated medical staff of the first hospital using the medical staff terminal of the first hospital; the health chain service end is used to Generate an authorized electronic medical record index list according to the index of the authorized electronic medical record, send the authorized electronic medical record index list to the medical staff terminal of the first hospital according to the identification information of the medical staff terminal of the first hospital, obtain the access request message of the designated authorized electronic medical record corresponding to the designated authorized electronic medical record index in the authorized electronic medical record index list sent by the medical staff terminal of the first hospital, obtain the hospital information to which the designated authorized electronic medical record belongs according to the designated authorized electronic medical record index, if the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital, send a designated authorized electronic medical record acquisition request message for requesting to provide the designated authorized electronic medical record to the medical staff terminal of the first hospital to the data processing subsystem of the second hospital, obtain the designated authorized electronic medical record returned by the data processing subsystem of the second hospital in response to the designated authorized electronic medical record acquisition request message, and send the designated authorized electronic medical record to the medical staff terminal of the first hospital in response to the access request message; the data processing subsystem of the second hospital is used to store the electronic medical records of patients who visit the second hospital, and return the designated authorized electronic medical record to the health chain service end in response to the designated authorized electronic medical record acquisition request message.

[0009] The embodiment of the present application also provides an electronic medical record sharing method, including: obtaining the index of the authorized electronic medical record sent by the patient terminal that the designated patient authorizes the designated medical staff to access, and generating an authorized electronic medical record index list according to the index of the authorized electronic medical record; obtaining the identification information of the medical staff terminal of the first hospital, and sending the authorized electronic medical record index list to the medical staff terminal of the first hospital according to the identification information of the medical staff terminal of the first hospital; obtaining the access request message for the designated authorized electronic medical record corresponding to the designated authorized electronic medical record index in the authorized electronic medical record index list sent by the medical staff terminal of the first hospital, and obtaining the hospital information to which the designated authorized electronic medical record belongs according to the designated authorized electronic medical record index, if the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital, sending a designated authorized electronic medical record acquisition request message for requesting the provision of the designated authorized electronic medical record to the medical staff terminal of the first hospital to the data processing subsystem of the second hospital; obtaining the designated authorized electronic medical record returned by the data processing subsystem of the second hospital in response to the designated authorized electronic medical record acquisition request message, and sending the designated authorized electronic medical record to the medical staff terminal of the first hospital in response to the access request message.

[0010] The embodiment of the present application also provides an electronic medical record sharing device, including: a first obtaining unit, used to obtain the index of the authorized electronic medical record sent by the patient terminal that the designated patient authorizes the designated medical staff to access, and generate an authorized electronic medical record index list according to the index of the authorized electronic medical record; a first sending unit, used to obtain the identification information of the medical staff terminal of the first hospital, and send the authorized electronic medical record index list to the medical staff terminal of the first hospital according to the identification information of the medical staff terminal of the first hospital; a second obtaining unit, used to obtain the access information of the designated authorized electronic medical record corresponding to the designated authorized electronic medical record index in the authorized electronic medical record index list sent by the medical staff terminal of the first hospital A reading request message is sent to the data processing subsystem of the second hospital, and the hospital information to which the designated authorized electronic medical record belongs is obtained according to the designated authorized electronic medical record index. If the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital, a designated authorized electronic medical record acquisition request message is sent to the data processing subsystem of the second hospital to request that the designated authorized electronic medical record be provided to the medical staff terminal of the first hospital; a second sending unit is used to obtain the designated authorized electronic medical record returned by the data processing subsystem of the second hospital in response to the designated authorized electronic medical record acquisition request message, and send the designated authorized electronic medical record to the medical staff terminal of the first hospital in response to the reading request message.

[0011] An embodiment of the present application further provides an electronic device, comprising a processor and a memory; a computer program is stored in the memory, and the processor executes the above method after running the computer program.

[0012] An embodiment of the present application further provides a computer storage medium, wherein the computer storage medium stores a computer program, and after the computer program is run by a processor, the above method is executed.

[0013] Compared with the prior art, the embodiments of the present application have the following advantages:

[0014] The embodiment of the present application provides an electronic medical record sharing system, including: a first hospital medical staff terminal, a patient terminal, a health chain service end and a second hospital data processing subsystem; the first hospital medical staff terminal is used to display an electronic medical record acquisition identification code; the patient terminal is used to identify the electronic medical record acquisition identification code, obtain the identification information of the first hospital medical staff terminal as the first hospital medical staff terminal identification information, and send an electronic medical record authorization request message to the health chain service end, indicating that the designated patient requests the designated medical staff to authorize the designated medical staff to access the electronic medical record of the designated patient; the electronic medical record authorization request message The electronic medical record authorization request message includes the terminal identification information of the medical staff of the first hospital, obtains the electronic medical record index list of the designated patient returned by the health chain service end in response to the electronic medical record authorization request message, displays the electronic medical record index list, and in response to detecting a selection operation for an electronic medical record index in the electronic medical record index list, sends the selected electronic medical record index to the health chain service end as the index of the authorized electronic medical record authorized by the designated patient to be accessed by the designated medical staff, the designated medical staff being the designated medical staff of the first hospital using the medical staff terminal of the first hospital; the health chain service end is used to Generate an authorized electronic medical record index list according to the index of the authorized electronic medical record, send the authorized electronic medical record index list to the medical staff terminal of the first hospital according to the identification information of the medical staff terminal of the first hospital, obtain the access request message of the designated authorized electronic medical record corresponding to the designated authorized electronic medical record index in the authorized electronic medical record index list sent by the medical staff terminal of the first hospital, obtain the hospital information to which the designated authorized electronic medical record belongs according to the designated authorized electronic medical record index, if the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital, send a designated authorized electronic medical record acquisition request message for requesting to provide the designated authorized electronic medical record to the medical staff terminal of the first hospital to the data processing subsystem of the second hospital, obtain the designated authorized electronic medical record returned by the data processing subsystem of the second hospital in response to the designated authorized electronic medical record acquisition request message, and send the designated authorized electronic medical record to the medical staff terminal of the first hospital in response to the access request message; the data processing subsystem of the second hospital is used to store the electronic medical records of patients who visit the second hospital, and return the designated authorized electronic medical record to the health chain service end in response to the designated authorized electronic medical record acquisition request message.

[0015] The electronic medical record sharing system described in the embodiment of the present application can send an electronic medical record authorization request message to the health chain service end through the patient terminal, which is used to indicate that the designated patient requests the designated medical personnel to be authorized to access the electronic medical records of the designated patient. After obtaining the electronic medical record index list of the designated patient returned by the health chain service end in response to the electronic medical record authorization request message, the health chain service end sends the index of the authorized electronic medical record that the designated patient authorizes the designated medical personnel to access to the electronic medical record, and the electronic medical record authorization request message includes the terminal identification information of the medical personnel of the first hospital; the health chain service end sends the authorized electronic medical record index list to the terminal of the medical personnel of the first hospital according to the terminal identification information of the medical personnel of the first hospital, and after obtaining the electronic medical record index list of the designated patient returned by the medical personnel of the first hospital After sending a request message for accessing the designated authorized electronic medical record corresponding to the designated authorized electronic medical record index in the authorized electronic medical record index list, the hospital information to which the designated authorized electronic medical record belongs is obtained according to the designated authorized electronic medical record index. If the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital, a designated authorized electronic medical record acquisition request message for requesting to provide the designated authorized electronic medical record to the medical staff terminal of the first hospital is sent to the data processing subsystem of the second hospital to obtain the designated authorized electronic medical record returned by the data processing subsystem of the second hospital for the designated authorized electronic medical record acquisition request message, and the designated authorized electronic medical record is sent to the medical staff terminal of the first hospital for the access request message. If the hospital information to which the designated authorized electronic medical record belongs is information of the first hospital, the designated authorized electronic medical record is directly obtained from the data processing subsystem of the first hospital. Therefore, the electronic medical record sharing system can provide patients with initiative when medical staff view the patient's medical records in other hospitals. The electronic medical records viewed by medical staff are electronic medical records authorized by patients, which protects the privacy of patients. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 This is a schematic diagram of an application scenario of an electronic medical record sharing system provided by this application;

[0017] Figure 2 This is the blockchain-based electronic medical record sharing flow chart provided by this application;

[0018] Figure 3 This is the data chain flow chart provided by this application;

[0019] Figure 4 It is the flow chart of medical visit data exchange provided by this application;

[0020] Figure 5 It is an interactive diagram of the hospital and data collaborative service platform provided by this application;

[0021] Figure 6 It is the health chain network diagram provided by this application;

[0022] Figure 7 Schematic diagram of the patient authentication process provided by this application;

[0023] Figure 8 is a flow chart of an electronic medical record sharing method provided in the first embodiment of the present application;

[0024] Fig. 9 is a schematic diagram of an electronic medical record sharing device provided in the second embodiment of the present application;

[0025] Fig.10 This is a schematic diagram of an electronic device provided in the third embodiment of the present application. DETAILED DESCRIPTION

[0026] Many specific details are described in the following description to facilitate a full understanding of the present application. However, the present application can be implemented in many other ways than those described herein, and those skilled in the art can make similar generalizations without violating the connotation of the present application, so the present application is not limited by the specific implementation disclosed below.

[0027] First of all, in order to enable those skilled in the art to better understand the present application, before describing the electronic medical record sharing system provided by the present application, the terms involved in the present application are first explained.

[0028] Blockchain Technology: A distributed database or master ledger technology that uses encryption technology to ensure the security, transparency and immutability of transaction data. In the medical field, blockchain technology is used to ensure the integrity and privacy of medical records.

[0029] Electronic Medical Records (EMRs): Electronic records of a patient's health information, covering the entire medical process of the patient from diagnosis, treatment to discharge. Through EMRs, healthcare providers can easily access and update patients' health records.

[0030] Smart Contract: A self-executing contract running on a blockchain network that can automatically execute the terms of the contract when predetermined conditions are met. In electronic medical record systems, smart contracts are used to automatically process data access and sharing permissions to protect patient privacy.

[0031] Asymmetric Encryption Technology: A method of encryption and decryption using public and private keys. The public key can be shared publicly and used to encrypt messages; the private key is kept private and used to decrypt messages. In electronic medical record systems, this technology is used to protect the security of data transmission.

[0032] Proxy Re-encryption (PRE): An encryption mode that allows a third party (agent) to convert ciphertext from one key to another without decrypting it. In medical data sharing, PRE can be used to securely share data across domains without leaking the original data content.

[0033] Consensus Mechanism: A mechanism in a blockchain network that is used to reach an agreement on transaction verification and data consistency between different nodes, ensuring the correctness and consistency of blockchain data. Hyperledger Fabric: An open source enterprise-level distributed ledger technology that supports smart contracts and is widely used in various industry solutions, including the management and sharing of health data.

[0034] Token mechanism (Token): An identity authentication and access control mechanism used in blockchain. Token can represent the user's authority and achieve secure data access and exchange.

[0035] Facial Recognition Verification: A biometric technology that analyses an individual’s facial features for identity verification. In electronic medical record systems, facial recognition can be used to improve the security and convenience of user authentication.

[0036] Health Chain: refers to a blockchain network specifically used to store and share health records. It aims to establish a secure and decentralized medical information sharing platform.

[0037] With the popularization of health care and the development of information technology, the medical industry is undergoing an information-based and intelligent transformation. Electronic Medical Records (EMRs), as the core of medical service informatization, record the entire process of medical diagnosis and treatment, and are therefore highly valued by hospitals and doctors. In order to achieve the interconnection and interoperability of medical information and promote progress in clinical services, hospital development, and medical research, it is particularly important to share EMRs among various medical institutions. At present, electronic medical records (EMRs) are generally stored in a decentralized manner in centralized medical institutions, which not only limits the interoperability of medical information, but also exposes electronic medical record data to single point failures and potential large-scale leakage risks. In addition, this data storage model not only leads to the "information island" problem, but also prevents EMRs from being fully applied and shared. Moreover, the interoperability between different providers and hospital systems also affects the effective sharing of electronic medical record data.

[0038] In response to the above problems, the emerging blockchain technology has been widely used to develop a safe and reliable electronic medical record distributed management and sharing system by utilizing its decentralized, highly redundant storage and tamper-proof features. Through blockchain technology, patients' complete health history data can be recorded and shared across institutions. First, the decentralized nature of blockchain means that electronic medical record data no longer relies on a single centralized institution for storage and management, but is distributed on multiple nodes in the network. This helps reduce the risk of single point failures and improves the stability and reliability of the system. At the same time, the decentralized nature also makes the data more secure and not easily tampered with or leaked. Secondly, the immutability of blockchain ensures the authenticity and integrity of electronic medical record data. Once the data is added to the blockchain, it cannot be modified or deleted. This helps prevent the data from being maliciously tampered with and ensures the accuracy of the patient's medical record. Although blockchain technology has brought many advantages to the medical field, in the actual application of electronic medical record sharing, it is mainly based on the doctor's authority to determine whether to share the electronic medical record. The way of sharing electronic medical records based only on the doctor's authority without considering the patient's authority is likely to weaken the patient's privacy. Based on this, the present application provides an electronic medical record sharing system, which can provide patients with the initiative when medical staff view the patient's medical records in other hospitals. The electronic medical records viewed by medical staff are electronic medical records authorized by the patient, protecting the patient's privacy.

[0039] The following describes in detail the specific application scenarios of an electronic medical record sharing system provided by this application. Figure 1 As shown, it is a schematic diagram of an application scenario of an electronic medical record sharing system provided by this application. The electronic medical record sharing system includes a first hospital medical staff terminal 10, a patient terminal 20, a health chain service terminal 30 and a second hospital data processing subsystem 40, wherein the first hospital may be the hospital where the patient is currently receiving treatment, and the second hospital may be a hospital other than the first hospital. When introducing the electronic medical record sharing system, this application takes a designated patient as an example, but it is actually applicable to all patients. The following is combined with Figure 1 A detailed introduction to the process of the electronic medical record sharing system provided in this application is given.

[0040] Step S101: The first hospital medical staff terminal 10 is used to display an electronic medical record acquisition identification code, and the identification code may be in the form of a QR code, a bar code, etc. The patient can scan the identification code to obtain the electronic medical record information of the patient's previous visits, the patient's visit ID, the hospital visited, and other related information. Before the first hospital medical staff terminal 10 displays the electronic medical record acquisition identification code, the first hospital medical staff terminal 10 is also used to send an external hospital medical record query request message to the health chain service end 30 to query whether the designated patient has an external hospital medical record; obtain the query result returned by the health chain service end 30 to indicate whether the designated patient has an external hospital medical record; the display of the electronic medical record acquisition identification code includes: if the query result indicates that the designated patient has an external hospital medical record, then the external hospital medical record is displayed. During specific implementation, after the patient registers at the hospital for treatment, the medical staff terminal 10 of the first hospital goes to the health chain server 30 to inquire whether the patient has any medical records in other hospitals. If so, the corresponding electronic medical record acquisition identification code is provided to the patient. The patient scans the QR code electronic medical record acquisition identification code to obtain the patient's medical ID, hospital information, etc., and then obtains the corresponding relevant information from the health chain server 30 to obtain the relevant medical record index list.

[0041] Step S102: The patient terminal 20 is used to identify the electronic medical record and obtain the identification code, and obtain the identification information of the medical staff terminal of the first hospital as the identification information of the medical staff terminal of the first hospital. After the patient terminal 20 scans the electronic medical record to obtain the identification code, it can also obtain the identification information of the medical staff terminal of the first hospital. Step S103: The patient terminal 20 is also used to send an electronic medical record authorization request message to the health chain service end 30, which is used to indicate that the designated patient requests the designated medical staff to authorize the designated medical staff to access the electronic medical record of the designated patient, and the electronic medical record authorization request message includes the identification information of the medical staff terminal of the first hospital. This step is used for the patient terminal 20 to send a request to the health chain service end 30, requesting the designated medical staff to authorize the designated patient to access the electronic medical record. Step S104: The patient terminal 20 obtains the electronic medical record index list of the designated patient returned by the health chain service end 30 in response to the electronic medical record authorization request message. Step S105: After obtaining the electronic medical record index list of the designated patient, the patient terminal 20 displays the electronic medical record index list.

[0042] Step S106: In response to detecting a selection operation for an electronic medical record index in the electronic medical record index list, the patient terminal 20 sends the selected electronic medical record index to the health chain service end 30 as the index of the authorized electronic medical record that the designated patient authorizes the designated medical staff to access, and the designated medical staff is the designated medical staff of the first hospital using the medical staff terminal of the first hospital. After the patient terminal 20 displays the electronic medical record index list of the designated patient, the patient can select the electronic medical record index authorized to be accessed by the designated medical staff from the electronic medical record index list as the index of the authorized electronic medical record that the designated patient authorizes the designated medical staff to access.

[0043] Step S107: The health chain service end 30 is used to generate an authorized electronic medical record index list according to the index of the authorized electronic medical record. Step S108: The health chain service end 30 sends the authorized electronic medical record index list to the medical staff terminal 10 of the first hospital according to the identification information of the medical staff terminal of the first hospital. Step S109: The health chain service end 30 is also used to obtain a retrieval request message for a designated authorized electronic medical record corresponding to a designated authorized electronic medical record index in the authorized electronic medical record index list sent by the medical staff terminal 10 of the first hospital. Step S110: The health chain service end 30 obtains the hospital information to which the designated authorized electronic medical record belongs according to the designated authorized electronic medical record index. If the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital, then a designated authorized electronic medical record acquisition request message is sent to the data processing subsystem of the second hospital to request the provision of the designated authorized electronic medical record to the medical staff terminal of the first hospital.

[0044] It should be noted that after the health chain service end 30 obtains the hospital information to which the designated authorized electronic medical record belongs according to the designated authorized electronic medical record index, if the hospital information to which the designated authorized electronic medical record belongs is the information of the first hospital, the health chain service end 30 can directly obtain the designated authorized electronic medical record from the data processing subsystem of the first hospital, and the data processing subsystem of the first hospital is used to store the electronic medical records of patients who visit the first hospital. If the hospital information to which the designated authorized electronic medical record belongs is the information of a second hospital different from the first hospital, it is necessary to obtain the designated authorized electronic medical record from the data processing subsystem of the second hospital. At this time, the health chain service end 30 sends a designated authorized electronic medical record acquisition request message to the data processing subsystem 40 of the second hospital for requesting to provide the designated authorized electronic medical record to the medical staff terminal of the first hospital.

[0045] Step S111: The data processing subsystem 40 of the second hospital is used to store the electronic medical records of patients who visit the second hospital, and returns the designated authorized electronic medical records to the health chain server 30 in response to the designated authorized electronic medical record acquisition request message. Step S112: The health chain server 30 obtains the designated authorized electronic medical records returned by the data processing subsystem 40 of the second hospital in response to the designated authorized electronic medical record acquisition request message. Step S113: The health chain server 30 sends the designated authorized electronic medical records to the medical staff terminal 10 of the first hospital in response to the access request message. At this point, the electronic medical record sharing process is completed. In this process, since the electronic medical records are authorized electronic medical records that can be accessed by designated medical staff authorized by the patient, the electronic medical record sharing system can provide patients with initiative when medical staff view the patient's medical records in other hospitals. The electronic medical records viewed by medical staff are electronic medical records authorized by the patient, which protects the patient's privacy.

[0046] In a specific implementation, the patient terminal 20 is also used to obtain the designated patient information of the designated patient, and send the designated patient information to the health chain service end 30. The designated patient information includes the designated patient basic information, the designated patient key, and the designated patient image information used to verify the identity of the designated patient. Among them, the basic information of the designated patient includes the patient's name, mobile phone number, ID number and other information, the designated patient key can be a patient random number, and the designated patient image information used to verify the identity of the designated patient can be a selfie of the patient holding the ID card.

[0047] It should be noted that for privacy reasons, the health chain server 30 will not directly store the patient's name, mobile phone number and ID card information, but will store their hashes. Each medical record data generates a unique identifier through a hash algorithm to ensure the uniqueness and immutability of the data, thereby preventing anyone from accessing the patient's sensitive information without proper authority. The patient's random number, public key and authentication time can be stored publicly because they are either publicly visible or are used for identification and security purposes. In order to add data to the on-chain contract, the patient needs to interact with the backend of the system. The backend will calculate the hash of the data and be responsible for calling the smart contract to store the hash on the blockchain. The query function is public, and anyone can retrieve the hash of user information and other non-sensitive public data through a unique index. Specific hash operations (such as the hash of the patient's name, mobile phone number, and ID card) need to be performed off-chain to prevent all participants on the chain from obtaining the original sensitive information.

[0048] The health chain service end 30 is also used to obtain the designated patient information of the designated patient from the patient terminal 10, and generate the public key information of the designated patient based on the patient key in the designated patient information; send the identity information in the designated patient basic information of the designated patient and the public key information to the hospital data processing subsystems of multiple hospitals, and the hospital data processing subsystems of the multiple hospitals respectively store the electronic medical records of the designated patient in the hospital; any one of the hospital data processing subsystems of the multiple hospitals is used to verify the identity information of the designated patient, and then use the public key information to encrypt the electronic medical record address of the designated patient in any one of the hospital data processing subsystems, generate the electronic medical record address ciphertext of the designated patient in any one of the hospital data processing subsystems, and upload the electronic medical record address ciphertext to the health chain service end 30.

[0049] The health chain server 30 is also used to generate an electronic medical record index list of the designated patient based on the electronic medical record address ciphertext of the designated patient in any of the hospital data processing subsystems; the electronic medical record index list is used to represent the medical information of the designated patient. Before generating the public key information of the designated patient based on the patient key in the designated patient information, the health chain server 30 is also used to send the designated patient image information in the designated patient information to a third-party platform through a third-party real-name authentication interface for real-name authentication. If the authentication is successful, the public key information of the designated patient is generated based on the designated patient key in the designated patient information. It should be noted that after the health chain server 30 obtains the patient's basic information and a selfie of the patient holding the ID card, it submits the photo of the patient holding the ID card to the face verification interface provided by the third party for identity verification, and registers the patient information after the review is successful. After the face verification is successful, the health chain server 30 generates a user asymmetric key (public key) through the random number provided by the user, and then synchronizes the user public key information and identity information to the front-end machines of each hospital to the data center (the hospital data processing subsystem includes the front-end machine and the data center). Finally, the data center synchronizes the patient medical record index and the patient medical record URL encrypted by the patient's public key to the health chain server 30. The health chain server 30 stores the patient data in the database and blockchain.

[0050] The health chain service end 30 is further used to generate an access token for the designated authorized electronic medical record based on the designated authorized electronic medical record access request message, and generate an address ciphertext of the designated authorized electronic medical record for access by the designated medical personnel of the first hospital according to the access token as the designated authorized electronic medical record address ciphertext; obtain a designated medical personnel key for decrypting the designated authorized electronic medical record address ciphertext; based on the designated medical personnel key, convert the designated authorized electronic medical record address ciphertext for access by the designated medical personnel of the first hospital into a decrypted designated authorized electronic medical record address for access by the designated medical personnel of the first hospital; and convert the decrypted designated authorized electronic medical record address ciphertext for access by the designated medical personnel of the first hospital into a decrypted designated authorized electronic medical record address for access by the designated medical personnel of the first hospital. A designated authorized electronic medical record address for access by designated medical personnel of a hospital determines that the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital; the sending of a designated authorized electronic medical record acquisition request message to the data processing subsystem of the second hospital for requesting the provision of the designated authorized electronic medical record to the medical personnel terminal of the first hospital comprises: based on the decrypted designated authorized electronic medical record address for access by designated medical personnel of the first hospital, sending a designated authorized electronic medical record acquisition request message to the data processing subsystem of the second hospital for requesting the provision of the designated authorized electronic medical record to the medical personnel terminal of the first hospital.

[0051] The health chain service end 30 is also used to obtain an access token from the decrypted designated authorized electronic medical record address for access by designated medical personnel of the first hospital, and verify the decrypted designated authorized electronic medical record address for access by designated medical personnel of the first hospital according to the access token to obtain a verification result of whether the access token is a legal token; the sending of a designated authorized electronic medical record acquisition request message to the second hospital data processing subsystem for requesting the provision of the designated authorized electronic medical record to the medical personnel terminal of the first hospital includes: if the verification result is that the access token is a legal token, sending a designated authorized electronic medical record acquisition request message to the second hospital data processing subsystem for requesting the provision of the designated authorized electronic medical record to the medical personnel terminal of the first hospital.

[0052] The health chain service end 30 is further used to obtain, after obtaining an electronic medical record authorization request message indicating that the designated patient requests the designated medical personnel to authorize the designated medical personnel to access the electronic medical records of the designated patient, a list of designated authorized electronic medical records that the designated patient allows the designated medical personnel to access, as a list of authorized electronic medical records that the designated patient authorizes the designated medical personnel to access; based on the list of authorized electronic medical records that the designated patient authorizes the designated medical personnel to access, query each authorized electronic medical record in the electronic medical record list of authorized electronic medical records that the designated patient authorizes the designated medical personnel to access The electronic medical record address of the designated patient is used as the electronic medical record address of the authorized electronic medical record that the designated patient authorizes the designated medical personnel to access; converting each electronic medical record address of the authorized electronic medical record that the designated patient authorizes the designated medical personnel to access into a conversion address as the electronic medical record conversion address of the authorized electronic medical record that the designated patient authorizes the designated medical personnel to access, and sending the electronic medical record conversion address list of the authorized electronic medical records that the designated patient authorizes the designated medical personnel to access to the designated medical personnel terminal of the first hospital; obtaining the electronic medical record conversion address sent by the designated medical personnel terminal for an authorized electronic medical record access request message for accessing the authorized electronic medical record, wherein the authorized electronic medical record access request message includes the electronic medical record conversion address of the authorized electronic medical record authorized by the designated patient to be accessed by the designated medical personnel and the access token; according to the authorized electronic medical record access request message for accessing the authorized electronic medical record, verifying the legitimacy of the access token, and when the access token is legitimate, obtaining the authorization token authorized by the designated patient to be accessed by the designated medical personnel according to the electronic medical record conversion address of the authorized electronic medical record authorized by the designated patient to be accessed by the designated medical personnel The electronic medical record conversion address of the electronic medical record corresponds to the electronic medical record address of the authorized electronic medical record that the designated patient authorizes the designated medical personnel to access; based on the electronic medical record address of the authorized electronic medical record that the designated patient authorizes the designated medical personnel to access, a designated authorized electronic medical record acquisition request message is sent to the second hospital data processing subsystem 40 to request the designated medical personnel terminal of the first hospital to provide the designated authorized electronic medical record, and the designated authorized electronic medical record returned by the second hospital data processing subsystem 40 in response to the designated authorized electronic medical record acquisition request message is obtained.

[0053] It should be noted that the patient checks the relevant shared medical records on the patient terminal 20 and enters the random number for generating the public key into the health chain server 30. After verification, the health chain server 30 takes out the shared medical record address and converts it into a new address with a token and synchronizes it to his doctor station (the medical staff terminal of the first hospital); the doctor station displays the medical record list based on the feedback from the health chain server 30, and the doctor accesses the relevant medical records. The health chain server 30 verifies the legitimacy of the access and converts the access into the real address of the medical record. The address is accompanied by a token and submitted to the front-end machine of the hospital where the real medical record is located, that is, the front-end machine of the second hospital; the hospital front-end machine obtains the token and submits the token to the health chain server 30 to verify the legitimacy of the access, blocks illegal access outside the front-end machine, and redirects valid access to the patient medical record view of the data center.

[0054] During specific implementation, the second hospital data processing subsystem 40 includes a second hospital front-end processor and a second hospital data storage center; the second hospital data storage center is used to store the electronic medical records of patients who visit the second hospital; the second hospital front-end processor is used to obtain a request message for the designated authorized electronic medical record, and request the second hospital data storage center to obtain the designated authorized electronic medical record; obtain the designated authorized electronic medical record returned by the second hospital data storage center; and return the designated authorized electronic medical record to the health chain server 30.

[0055] The health chain service end 30 is also used to store information that the designated patient authorizes the designated medical personnel of the designated hospital to access the designated electronic medical record within the designated time; the first hospital medical personnel terminal 10 is also used to respond to the detection of the medical personnel's access request operation for the designated patient's electronic medical record, send an authorized external hospital electronic medical record query request message to the health chain service end 30 to request whether the designated patient has an authorized external hospital electronic medical record, and the authorized external hospital electronic medical record query request message includes the identification information of the first hospital medical personnel terminal; obtain the authorized external hospital electronic medical record query request message returned by the health chain service end 30 The query result of the authorized external hospital electronic medical record; the external hospital is the second hospital; the health chain service end 30 is also used to obtain an authorized external hospital electronic medical record query request message for requesting to query whether the designated patient has an authorized external hospital electronic medical record; based on the authorized external hospital electronic medical record query request message, query the external hospital electronic medical record authorization information of the designated patient, and based on the external hospital electronic medical record authorization information, generate an authorized external hospital electronic medical record index of the authorized external hospital electronic medical record currently accessible to the medical staff of the first hospital; send the authorized external hospital electronic medical record index to the medical staff terminal 10 of the first hospital; the first A hospital medical staff terminal 10 is also used to generate an authorized electronic medical record index that can be currently accessed by medical staff of the first hospital based on the authorized external hospital electronic medical record index and the electronic medical record index queried from the data processing subsystem of the first hospital, and display the authorized electronic medical record index; in response to detecting an access operation for a designated external hospital electronic medical record in the authorized electronic medical record index, send a designated external hospital electronic medical record query request message for requesting to query the designated external hospital electronic medical record to the health chain service end 30, and obtain the query result of the designated external hospital electronic medical record returned by the health chain service end 30; the health chain service end 30 The server end 30 is also used to query the address of the designated external hospital's electronic medical record based on the designated external hospital's electronic medical record query request message, and send a designated external hospital's electronic medical record retrieval request message to the second hospital data processing subsystem 40 based on the designated external hospital's electronic medical record address to request retrieval of the designated external hospital's electronic medical record, and obtain the designated external hospital's electronic medical record returned by the second hospital data processing subsystem 40 in response to the designated external hospital's electronic medical record retrieval request message; send the designated external hospital's electronic medical record to the first hospital medical staff terminal 10; the first hospital medical staff terminal is also used to display the designated external hospital's electronic medical record.

[0056] The method of generating an authorized external hospital electronic medical record index of the authorized external hospital electronic medical record currently available for medical staff of the first hospital based on the external hospital electronic medical record authorization information includes: matching the external hospital electronic medical record authorization information of the designated patient with the terminal identification information of the medical staff of the first hospital, and judging whether there is external hospital electronic medical record authorization information matching the terminal identification information of the medical staff of the first hospital; if there is external hospital electronic medical record authorization information matching the terminal identification information of the medical staff of the first hospital, judging whether the current time is within the specified authorization time range, or judging whether the distance between the current time and the specified authorization time exceeds the preset time length; if so, generating an authorized external hospital electronic medical record index of the authorized external hospital electronic medical record currently available for medical staff of the first hospital. It should be noted that the health chain service end 30 also stores information that the designated patient authorizes the designated medical staff of the designated hospital to access the designated electronic medical record within the specified time. For example, if the patient's review time is within the above-mentioned specified time range, the medical staff can access the designated electronic medical record without the patient's authorization again. Patient authorization information includes patient primary index, mobile phone number, hospital name, doctor name, visit ID, authorization time, etc. Patient medical record index includes patient visit ID (medical record primary index), patient primary index, medical record URL encryption, visit hospital, visit department, etc.

[0057] See also Figure 2 , Figure 2This is a blockchain-based electronic medical record sharing flowchart provided by this application, and the process includes: step S201: the patient registers the APP, the patient logs in to the APP to provide the patient's name, mobile phone number, ID number, patient random number, selfie holding the ID card, and submits it to the APP for real-name authentication; step S202: the health chain submits the patient's ID card photo to the face verification interface provided by the third party for identity verification, and registers the patient information after the review is successful; step S203: after the face verification is successful, the health chain system generates the patient's asymmetric key (public key and private key) through the random number provided by the patient; step S204: synchronize the patient's public key information and identity information to the front-end of each hospital to the data center; step S205: the data center synchronizes the patient's medical record index, and the patient's medical record URL encrypted by the patient's public key is sent to the health chain, and the health chain stores the patient's data in the database and blockchain; step S206: After the patient registers at the hospital for treatment, he goes to the health chain to check Check whether there is any medical record from another hospital, and if so, provide the corresponding QR code to the patient; step S207: the patient scans the QR code to obtain the patient ID and hospital information, and then goes to the health chain to obtain the relevant medical record index list according to the corresponding relevant information; step S208: the patient checks the relevant shared medical record in the APP, and enters the random number for generating public and private keys into the health chain; step S209: after verification by the health chain, the shared medical record address is taken out and converted into a new address with a token attached to the health chain and synchronized to his doctor station; step S210: the doctor station displays the medical record list according to the feedback from the health chain, the doctor accesses the relevant medical records, the health chain verifies the legitimacy of the access, and converts the access into the real address of the medical record, which is attached with a token and submitted to the front-end machine of the hospital where the real medical record is located; step S211: the hospital front-end machine obtains the token and submits the token to the health chain to verify the legitimacy of the access, shields illegal access outside the front-end machine, and redirects valid access to the patient medical record view in the data center. The above is the electronic medical record sharing process based on blockchain. The process of uploading user information (patient information) and medical record index to the chain during the electronic medical record sharing process, as well as the process of exchanging medical data during the user's medical treatment process can be found in Figure 3 and Figure 4 , Figure 3 This is the data chain flow chart provided by this application. Figure 4 This is the medical data exchange flow chart provided by this application.

[0058] In specific implementation, proxy re-encryption technology (PRE) is applied as a key technology to achieve secure medical record sharing. With proper authorization, patients can effectively share their medical record data with designated doctors without exposing their medical records to security risks. The implementation details of this process are as follows: When the patient agrees to share his medical record with the doctor, the smart contract converts the encrypted address related to the patient's medical record into an address accessible to the doctor's key through the proxy re-encryption algorithm, and attaches an access token. This process does not require the participation of the data owner, and there will be no short-term existence of plaintext data. The security of electronic medical records during transmission and storage is guaranteed by data encryption technology. Proxy re-encryption technology includes three key participants: data owner (patient), trusted agent (smart contract), and authorized party (doctor or hospital). At the contract level, the smart contract (as a trusted agent) is responsible for proxy re-encrypting the original encrypted medical record provided by the patient through the re-encryption key jointly generated by the patient and the requester, generating an encrypted medical record that can only be decrypted by a specific doctor's key. The design purpose of the smart contract is to automatically complete proxy re-encryption and access authorization at the contract level.

[0059] Based on the sample smart contract snippet provided, the key functions and events of the contract are described below: Upload Medical Record: The patient or contract owner uploads the medical record and sets the encryption key associated with it to ensure that the correspondence between the record and the personal public key is securely stored in the blockchain. Grant Access to Record: Only the patient has the right to start the access authorization process for his or her medical record. Using the proxy re-encryption library function, the smart contract converts the patient's encrypted medical record into an encrypted medical record accessible to the doctor and records this authorization event. Generate Re Encryption Key: Generate a proxy re-encryption key with the cooperation of the patient and the requester. This step is critical and establishes a bridge between patient data and doctor access. Request Record Access: Record the behavior of doctors or other authorized personnel requesting access to patient medical records. Record Access Requested and Record Access Granted: Provide the necessary transparency to record access requests and authorization behaviors, so that patients and related parties can track the medical record access process on the blockchain. Integrating proxy re-encryption technology into the original blockchain-based electronic medical record security sharing and access method significantly improves the security and convenience of medical record data sharing. This not only provides a more secure encryption method for information sharing between doctors and patients, but also enables smart contracts to automatically handle authorization and data conversion, improving the efficiency of medical services.

[0060] In the specific implementation, in order to ensure the uniqueness of user identity and access security, this application provides a unique user unique index and token generation method. The method for generating a user unique index ID is to encrypt the concatenated string 'platform + mobile phone + ID card' through the MD5 encryption algorithm to obtain an irreversible encrypted string. Among them, the "platform" identifier ensures that a unique ID can be generated even in different third-party clients, while the "mobile phone number" and "ID card number" are the user's unique primary index. This process ensures that the user's source information is clear and traceable, and can accurately determine the user's identity and its correctness. The user Token is encrypted by the MD5 algorithm for the string 'platform + hospital ID + medical record ID + time (or number of times) + method' to generate a secure Token for accessing the medical record URL. This application designs two application scenarios of Token: Scenario 1: used for hospitals to submit requests to the health chain through access URLs. When generating tokens, the encrypted information of 'platform + hospital ID + medical record ID + time + method' is used to set the validity period to ensure that the medical record can be continuously accessed by the authorized hospital before the effective time. Scenario 2: Used for access to the hospital where the health chain converts the address to the medical record. In this process, the token encryption information adds "number of times" instead of "time" and follows the one-time principle, that is, a token can only access the medical record view once to prevent data from being maliciously intercepted and accessed.

[0061] This application provides a method for secure sharing and accessing of electronic medical records that integrates blockchain, asymmetric encryption technology, and facial recognition verification, aiming to create a highly secure, privacy-protected medical information sharing platform while ensuring the integrity and traceability of the data. At the same time, the method also enables cross-institutional data sharing through smart contracts and token mechanisms. In addition, this application uses blockchain technology to give patients ownership of their electronic medical record data, and patients can independently decide on the sharing and use of data. Through blockchain technology, patients can not only authorize different medical service providers to ensure the security and transparency of data access. Moreover, patients can also grant fine-grained data access authorization to specific medical service providers through smart contracts.

[0062] See also Figure 5 and Figure 6 , Figure 5 This is the interactive diagram of the hospital and data collaborative service platform provided by this application. Figure 6This is the health chain network diagram provided by this application. The data collaborative service platform is the link between the external business system and the blockchain. The data collaborative service platform displays the available data services to the external business system, receives data service requests from the client, and submits them to the health chain blockchain network for authorization and authentication. After obtaining authorization, it executes specific data services and submits the execution process to the blockchain network for evidence storage and broadcasting. At the same time, the blockchain network will record the distribution of benefits of data transaction services. The health chain is a consortium chain network, and the types of nodes deployed include: CA nodes, sorting nodes, and Peer nodes.

[0063] See also Figure 7 , Figure 7 This is a schematic diagram of the patient authentication process provided by this application. In specific implementation, the automatic push of medical records such as examinations and test reports to patients will be changed to asking patients to "actively apply" to authenticate their identities. Patients are required to sign informed consent forms, and patient authentication records and signed informed consent forms will be stored through the health chain to avoid medical institution risks and prevent denial; the medical record index information pushed to patients will be stored through the blockchain to prevent disputes caused by tampering with the pushed information; patient authentication records and signed informed consent forms will be stored through the health chain. Because blockchain is tamper-proof, storing this process through the health chain can further avoid medical institution risks and prevent denial; the digital signature of the health record is stored on the health chain. After the patient applies for authorization, the hospital will share the patient's medical record directory with the patient and notify the patient, and the patient will ultimately control the whereabouts and access of the record.

[0064] In specific implementation, the electronic medical record authorization request message also includes the identification information of the designated medical personnel; the health chain service end 30 is also used to obtain the disease label that the designated medical personnel is good at diagnosing and treating according to the identification information of the designated medical personnel, obtain the medical record disease label corresponding to the electronic medical record of the designated patient, filter out the electronic medical record index whose medical record disease label matches the disease label that the designated patient is good at diagnosing and treating from the electronic medical record index of the designated patient, and use it as the recommended electronic medical record index, set a recommended review label for the recommended electronic medical record index, and generate a list of electronic medical record indexes of the designated patient according to the electronic medical record index of the designated patient and the recommended review label, wherein the recommended electronic medical record index is the index of the electronic medical record of the designated patient recommended for the designated medical personnel to review.

[0065] It should be noted that each medical staff member has a specialty in the diagnosis and treatment of diseases. Therefore, the health chain service end 30 also stores the disease labels that the medical staff member is good at diagnosing and treating. The designated medical staff member may have multiple disease labels that he or she is good at diagnosing and treating. The disease labels that he or she is good at diagnosing and treating may be pre-generated. For example, the health chain service end may request the hospital system to obtain the disease labels that the medical staff member is good at diagnosing and treating. The health chain service end may also generate such labels based on the doctor's medical records or the doctor's resume. The medical record disease labels corresponding to the electronic medical records of the designated patient are used to indicate the disease information that the patient may have. The medical record disease labels corresponding to the electronic medical records indicate the type of disease that the patient may have, and the disease labels that the medical staff member is good at diagnosing and treating indicate the type of disease that the doctor is good at diagnosing and treating. The medical records that match the two are screened out as medical records recommended for the doctor to review.

[0066] The electronic medical record sharing system includes a first hospital data processing subsystem, and the first hospital data processing subsystem is used to store the electronic medical records of patients who visit the first hospital; the obtaining of the disease label that the designated medical staff is good at treating according to the identification information of the designated medical staff includes: sending a disease label acquisition request message for requesting to obtain the disease label that the designated medical staff is good at treating to the first hospital data processing subsystem, the disease label acquisition request message includes the identification information of the designated medical staff, and obtaining the disease label that the designated medical staff is good at treating returned by the first hospital data processing subsystem; or sending a disease label acquisition request message to the first hospital data processing subsystem. A request message for obtaining an electronic medical record signed by a designated medical staff member is used to request obtaining the electronic medical record signed by the designated medical staff member, obtain the electronic medical record signed by the designated medical staff member returned by the data processing subsystem of the first hospital, input each electronic medical record signed by the designated medical staff member into the medical record disease label prediction model, obtain the prediction result of the medical record disease label corresponding to each electronic medical record signed by the designated medical staff member, obtain the ratio of each predicted medical record disease label to the number of electronic medical records signed by the designated medical staff member as the medical record disease label proportion, and determine the medical record disease label whose proportion exceeds a preset proportion threshold as the disease label that the designated medical staff member is good at diagnosing and treating.

[0067] In specific implementation, the disease labels that doctors are good at diagnosing and treating are obtained in the following ways: one is to obtain the disease labels that designated medical personnel are good at diagnosing and treating from the data processing subsystem of the First Hospital; the other is to input each electronic medical record signed by the designated medical personnel into the case disease label model, and the case disease label model outputs which disease labels correspond to the medical record, and the medical record signed by the medical personnel with more disease labels is used as the label of the disease that the medical personnel is good at diagnosing and treating.

[0068] The medical record disease label prediction model is trained in the following manner: obtaining electronic medical record sample data, obtaining case disease label result samples corresponding to the electronic medical record sample data; obtaining an initial medical record disease label prediction model; inputting the electronic medical record sample data into the initial medical record disease label prediction model to obtain an initial case disease label result; if the loss data between the initial case disease label result and the case disease label result sample meets an acceptable loss condition, then the initial medical record disease label prediction model is determined as the medical record disease label prediction model; otherwise, the model parameters in the initial medical record disease label prediction model are adjusted until the loss data between the predicted case disease label result obtained by the medical record disease label prediction model after adjusting the model parameters and the case disease label result sample meets the acceptable loss condition, then the medical record disease label prediction model after adjusting the model parameters is determined as the medical record disease label prediction model.

[0069] The electronic medical record sharing system includes a first hospital data processing subsystem, which is used to store electronic medical records of patients who visit the first hospital; obtaining the medical record disease label corresponding to the electronic medical record of the designated patient includes: sending a medical record disease label acquisition request message for requesting to obtain the medical record disease label corresponding to the electronic medical record of the designated patient to the first hospital data processing subsystem, and obtaining the medical record disease label corresponding to the electronic medical record of the designated patient returned by the first hospital data processing subsystem; or, sending a designated patient electronic medical record acquisition request message for requesting to obtain the electronic medical record of the designated patient to the first hospital data processing subsystem, obtaining the electronic medical record of the designated patient returned by the first hospital data processing subsystem, inputting the electronic medical record of the designated patient into a medical record disease label prediction model, and obtaining the prediction result of the medical record disease label corresponding to the electronic medical record of the designated patient.

[0070] During specific implementation, the medical record disease label corresponding to the electronic medical record of the designated patient is obtained in the following ways: one is to obtain the medical record disease label corresponding to the electronic medical record of the designated patient from the data processing subsystem of the first hospital; the other is to input the electronic medical record of the designated patient into the medical record disease label prediction model to obtain the prediction result of the medical record disease label corresponding to the electronic medical record of the designated patient.

[0071] The health chain service end 30 is also used to obtain the disease label that the designated medical personnel is good at diagnosing and treating based on the identification information of the designated medical personnel, determine whether each electronic medical record index of the designated patient has a reference label applicable to the disease label that the designated medical personnel is good at diagnosing and treating, determine the electronic medical record index with the reference label applicable to the disease label that the designated medical personnel is good at diagnosing and treating as the recommended electronic medical record index, set a recommended review label for the recommended electronic medical record index, and generate a list of electronic medical record indexes of the designated patient based on the electronic medical record index of the designated patient and the recommended review label, wherein the recommended review electronic medical record index is the index of the electronic medical record of the designated patient recommended for review by the designated medical personnel.

[0072] It should be noted that the reference value of electronic medical records for medical personnel can be determined by the number of times the electronic medical records are read by medical personnel, the number of times they are cited by medical personnel, etc. Medical record citation means that when a patient visits the hospital for the first time, the attending doctor issues a medical record for the patient. When the patient returns for a follow-up visit, if the returning doctor is another doctor, the returning doctor will cite the previous medical record record one or several times in the new case, or not cite it. The health chain service end 30 will determine whether each electronic medical record index of the designated patient has a reference label applicable to the label of the disease that the patient is good at diagnosing and treating, and determine the electronic medical record index with a reference label applicable to the label of the disease that the patient is good at diagnosing and treating as the recommended electronic medical record index.

[0073] The health chain service end 30 is also used to obtain, for any electronic medical record of the designated patient, the number of times the electronic medical record has been read by the medical personnel with the disease label who are good at diagnosing and treating the disease, and the reading ratio between the number of times the electronic medical record has been provided to the medical personnel with the disease label who are good at diagnosing and treating the disease; if the reading ratio exceeds a preset reading ratio threshold, a reference label applicable to the disease label who are good at diagnosing and treating the disease is set for the any electronic medical record.

[0074] The health chain service end 30 is also used to obtain the medical record reading result sent by the medical staff terminal used by the medical staff with the disease diagnosis and treatment label who is good at diagnosing and treating the disease, and the medical record reading result is used to indicate whether the medical staff with the disease diagnosis and treatment label who is good at diagnosing and treating the disease has read any one of the electronic medical records; the health chain service end 30 is specifically used to obtain the number of times the any one of the electronic medical records has been read by the medical staff with the disease diagnosis and treatment label who is good at diagnosing and treating the disease according to the medical record reading result; the health chain service end 30 is also used to obtain the number of times the any one of the electronic medical records has been provided to the medical staff with the disease diagnosis and treatment label who is good at diagnosing and treating the disease according to the number of times the any one of the electronic medical records has been sent to the medical staff terminal used by the medical staff with the disease diagnosis and treatment label who is good at diagnosing and treating the disease.

[0075] The health chain service end 30 is also used to obtain, for any electronic medical record of the designated patient, the number of citations of the any electronic medical record by the medical personnel having the label of the disease that they are good at diagnosing and treating, and the ratio of the number of citations to the number of times the any electronic medical record is provided to the medical personnel having the label of the disease that they are good at diagnosing and treating; if the citation ratio exceeds a preset citation ratio threshold, a reference label applicable to the label of the disease that they are good at diagnosing and treating is set for the any electronic medical record.

[0076] The health chain service end 30 is also used for, after any one of the electronic medical records is provided to the medical staff with the disease label that he is good at diagnosing and treating, sending the subsequent electronic medical record of the designated patient signed by the medical staff with the disease label that he is good at diagnosing and treating, the medical staff terminal used by the medical staff with the disease label that he is good at diagnosing and treating, inputting the any one of the electronic medical records and the subsequent electronic medical record into a text comparator, obtaining a text comparison result of whether the any one of the electronic medical records and the subsequent electronic medical record have at least one identical text, and if so, generating a reference result that the any one of the electronic medical records is referenced once; the health chain service end 30 is specifically used for obtaining the number of times the any one of the electronic medical records is cited by the medical staff with the disease label that he is good at diagnosing and treating according to the reference result; the health chain service end 30 is also used for obtaining the number of times the any one of the electronic medical records is provided to the medical staff with the disease label that he is good at diagnosing and treating according to the number of times the any one of the electronic medical records is sent to the medical staff terminal used by the medical staff with the disease label that he is good at diagnosing and treating. Generally speaking, if the doctor who is returning for a follow-up visit quotes the electronic medical record issued by the previous doctor, he or she will directly quote the original description in the previous electronic medical record. By inputting the two electronic medical records into the text comparator, it can be found whether the two medical records have the same text description, especially whether the medical history, chief complaint, examination results, diagnosis results, etc. have the same text paragraphs. If the two medical records have the same text, the citation result that the electronic medical record has been cited once can be obtained.

[0077] The electronic medical record authorization request message also includes the identification information of the designated medical personnel; the health chain service end 30 is also used to obtain the disease label of the designated medical personnel's expertise in diagnosis and treatment according to the identification information of the designated medical personnel, obtain the medical record disease label corresponding to the designated authorized electronic medical record, and determine whether the disease label of the designated medical personnel's expertise in diagnosis and treatment matches the medical record disease label corresponding to the designated authorized electronic medical record. If the disease label of the designated medical personnel's expertise in diagnosis and treatment does not match the medical record disease label corresponding to the designated authorized electronic medical record, a message is sent to the medical personnel terminal of the first hospital to prompt the designated medical personnel to diagnose and treat the disease. The designated medical staff invites the special medical staff to send an invitation prompt message for the access request message for the designated authorized electronic medical record to the health chain service end 30. The special medical staff is a medical staff with a disease tag that is good at diagnosis and treatment and matches the medical record disease tag corresponding to the designated authorized electronic medical record. If the access request message for the designated authorized electronic medical record sent by the medical staff terminal used by the special medical staff is obtained, it is determined whether the disease tag that is good at diagnosis and treatment of the special medical staff matches the medical record disease tag corresponding to the designated authorized electronic medical record; the health chain service end 30 is specifically used to if the If the disease label that the special medical staff is good at treating matches the medical record disease label corresponding to the designated authorized electronic medical record, and the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital, then a designated authorized electronic medical record acquisition request message is sent to the data processing subsystem of the second hospital to request that the designated authorized electronic medical record be provided to the medical staff terminal of the first hospital; the health chain service end 30 is specifically used to send a designated authorized electronic medical record acquisition request message to the data processing subsystem of the second hospital to request that the designated authorized electronic medical record be provided to the medical staff terminal of the first hospital if the disease label that the designated medical staff is good at treating matches the medical record disease label corresponding to the designated authorized electronic medical record, and the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital; the medical staff terminal of the first hospital is also used to send an invitation message to the medical staff terminal used by the special medical staff to invite the special medical staff to send a request message for reading the designated authorized electronic medical record to the health chain service end 30 if the invitation prompt information is obtained and the invitation operation of the designated medical staff to the special medical staff is detected.

[0078] It should be noted that if a doctor wants to view the electronic medical record of a designated patient, but the medical record disease label of the electronic medical record does not match the doctor's specialty disease label, proving that the disease is not the doctor's specialty, the health chain service end 30 can allow the doctor to invite a doctor who is good at the disease to send a request to access the electronic medical record. Therefore, it can be ensured that even if a doctor who is not good at the disease views the electronic medical record, the safety and legality of the medical record review is guaranteed due to the participation and supervision of the doctor who is good at the disease, while also protecting the privacy of the patient.

[0079] The health chain service end 30 is also used to obtain medical record review feature data representing the characteristics of the designated medical staff reviewing medical records according to the terminal identification information of the medical staff of the first hospital, obtain any electronic medical record feature data representing the characteristics of any electronic medical record of the designated patient according to any electronic medical record index in the electronic medical record index list of the designated patient, input the medical record review feature data of the designated medical staff and any electronic medical record feature data of the designated patient into the electronic medical record review result prediction model, obtain an electronic medical record review prediction result representing whether the designated medical staff will review any electronic medical record, generate an electronic medical record review prediction result label of any electronic medical record according to the electronic medical record review prediction result, the electronic medical record index list of the designated patient returned by the health chain service end 30 for the electronic medical record authorization request message includes an electronic medical record review prediction result label of each electronic medical record of the designated patient, and the display of the electronic medical record index list includes displaying the electronic medical record review prediction result label of each electronic medical record of the designated patient.

[0080] During specific implementation, the health chain service end 30 can also obtain the medical record characteristics of the doctor's previous medical record review, input the doctor's medical record review characteristic data and the electronic medical record characteristic data into the electronic medical record review result prediction model, and obtain the electronic medical record review prediction result indicating whether the designated medical staff will review any of the electronic medical records, and generate an electronic medical record review prediction result label for any of the electronic medical records based on the electronic medical record review prediction result, so that the electronic medical record review result prediction model can be used to predict whether the doctor will review the electronic medical record.

[0081] The obtaining of medical record review characteristic data for indicating the characteristics of the designated medical staff member's review of medical records according to the terminal identification information of the medical staff member of the first hospital includes: obtaining a record of the designated medical staff member's review of medical records according to the terminal identification information of the medical staff member of the first hospital as the record of the designated medical staff member's review of medical records; obtaining the number of times the designated medical staff member has reviewed any one of the electronic medical records within a preset time period according to the record of the designated medical staff member's review of medical records as the number of times any one of the electronic medical records has been reviewed; obtaining the number of times the designated medical staff member has reviewed electronic medical records similar to the any one of the electronic medical records within the preset time period according to the record of the designated medical staff member's review of medical records as the number of times any one of the electronic medical records has been reviewed. The number of medical record retrieval times, electronic medical records similar to any one of the electronic medical records refer to electronic medical records whose number of features identical to those of any one of the electronic medical records reaches or exceeds a preset threshold of the number of identical medical features; based on the number of retrieval times of any one of the electronic medical records and the number of retrieval times of similar electronic medical records, the total number of times the designated medical personnel has retrieved electronic medical records related to any one of the electronic medical records is obtained as the total number of related electronic medical record retrieval times, wherein the related electronic medical records to any one of the electronic medical records include the any one of the electronic medical records and electronic medical records similar to the any one of the electronic medical records; based on the total number of retrieval times of related electronic medical records and the number of retrieval times of the designated medical personnel within the preset time period The total number of times the medical records are consulted, and the ratio between the total number of times the relevant electronic medical records are consulted and the total number of times the designated medical staff consult the medical records within the preset time period is obtained as the ratio of the number of times the relevant electronic medical records are consulted; based on the corresponding relationship between the preset ratio of the number of times the electronic medical records are consulted and the quantified value of the electronic medical record attention and the ratio of the number of times the relevant electronic medical records are consulted, the quantified value of the attention of the designated medical staff to the electronic medical record related to any one of the electronic medical records is obtained as the quantified value of the attention of the relevant electronic medical record; for any feature of any one of the electronic medical records, it is determined whether the any feature is a feature of attention of the designated medical staff; based on the correspondence between the preset ratio of the number of times the electronic medical records are consulted and the quantified value of the electronic medical record attention, the quantified value of the attention of the designated medical staff to the electronic medical record related to any one of the electronic medical records is obtained as the quantified value of the attention of the relevant electronic medical record The judgment result of whether each feature of the electronic medical record is the feature of concern of the designated medical personnel is obtained, and the number of features that the designated medical personnel pays attention to in any one of the electronic medical records is obtained as the number of features of concern; the ratio between the number of features of concern and the total number of features of any one of the electronic medical records is obtained as the ratio of the number of features of concern; according to the corresponding relationship between the preset number of features and the quantified value of feature attention and the ratio of the number of features of concern, the quantitative value of the feature that the designated medical personnel pays attention to in any one of the electronic medical records is obtained as the quantitative value of the feature of concern; according to the quantified value of the relevant electronic medical record attention and the quantified value of the feature of concern, the reviewed medical record feature data is generated.

[0082] In specific implementation, the degree of attention paid by medical staff to any electronic medical record or similar medical records of the electronic medical record can also be obtained. By checking the proportion of the number of times the doctor has read the medical record or similar medical record in the total number of times the doctor has read all medical records, the proportion is quantified into a value, namely, the quantitative value of the attention to the relevant electronic medical record. The higher the value, the higher the doctor's attention to the relevant electronic medical record. For any feature of any electronic medical record, it can also be determined whether the feature is a feature of concern to the doctor, and the number of features that the doctor pays attention to in the electronic medical record is used as the number of attention features. The ratio between the number of attention features and the total number of features in the electronic medical record is determined as the ratio of the number of attention features, thereby obtaining the quantitative value of the attention feature. The process mainly looks at the proportion of the features in the medical record that the doctor pays attention to among all the features in the medical record, and the proportion is quantified into a value, namely, the quantitative value of the attention feature. In fact, it is to see the situation of the features that the doctor pays attention to in this medical record. If the proportion of the features that the doctor pays attention to in all the features in this medical record is high, it proves that the doctor may read the medical record. Therefore, the medical record feature data reviewed includes the quantitative values ​​of the relevant electronic medical record attention quantities and the quantitative values ​​of the attention features.

[0083] The step of judging, for any feature of any one of the electronic medical records, whether the feature is a feature of interest to the designated medical personnel includes: judging, for any feature of the electronic medical records, whether each electronic medical record accessed by the designated medical personnel within the preset time period has the feature; obtaining, based on the judgment result of whether each electronic medical record accessed by the designated medical personnel within the preset time period has the feature, the number of times the feature is accessed by the designated medical personnel within the preset time period as the number of times the feature is accessed; obtaining, based on the number of times the feature is accessed and the total number of times the medical records are accessed by the designated medical personnel within the preset time period, the ratio between the number of times the feature is accessed and the total number of times the medical records are accessed by the designated medical personnel within the preset time period as the ratio of the number of times the feature is accessed; if the ratio of the number of times the feature is accessed reaches or exceeds the preset threshold value of the ratio of the number of times the feature is accessed, determining that the feature is a feature of interest to the designated medical personnel; otherwise, determining that the feature is not a feature of interest to the designated medical personnel.

[0084] In specific implementation, when judging whether any feature is a feature of concern to designated medical personnel, firstly, it is judged whether each medical record read by the doctor within the preset time period has the feature. If so, it is proved that the feature appears once, and then the number of times the feature appears in all medical records read by the doctor is calculated, and the ratio between the number of times any feature is read and the total number of times the designated medical personnel read the medical records within the preset time period is used as the ratio of the number of times any feature is read. If the ratio of the number of times any feature is read reaches or exceeds the preset threshold of the ratio of the number of times the feature is read, then it is determined that any feature is a feature of concern to designated medical personnel. If the ratio of the number of times any feature is read does not reach or exceed the preset threshold of the ratio of the number of times the feature is read, then it is determined that any feature is not a feature of concern to designated medical personnel.

[0085] The obtaining of any electronic medical record characteristic data representing the characteristics of any electronic medical record of the designated patient according to any electronic medical record index in the electronic medical record index list of the designated patient includes: obtaining the access record of any electronic medical record according to the any electronic medical record index; obtaining the number of times any electronic medical record is accessed within a preset time period according to the access record of any electronic medical record, and obtaining the generation time data of any electronic medical record; obtaining the medical record of the designated patient according to the identification information of the designated patient; obtaining the medical record of the designated patient within the preset time period and at the generation time of any electronic medical record according to the medical record of the designated patient. The number of visits after the completion time is used as the number of visits of the designated patient; according to the number of times any one of the electronic medical records is accessed within the preset time period and the number of visits of the designated patient, the ratio between the number of times any one of the electronic medical records is accessed within the preset time period and the number of visits of the designated patient is obtained as the number ratio of the number of times any one of the electronic medical records is accessed within the preset time period; according to the corresponding relationship between the preset ratio of the number of times the electronic medical records are accessed and the quantified value of the attention paid to the electronic medical records during the patient's visits and the ratio of the number of times any one of the electronic medical records is accessed within the preset time period, the quantified value of the attention paid to any one of the electronic medical records during the designated patient's visits is obtained; according to the corresponding relationship between the preset ratio of the number of times the electronic medical records are accessed and the quantified value of the attention paid to the electronic medical records during the patient's visits According to the access records of electronic medical records, the number of medical personnel who accessed any one of the electronic medical records within the preset time period is obtained as the number of medical personnel who accessed any one of the electronic medical records; the access records of other electronic medical records of the designated patient except for the designated one of the electronic medical records are obtained; according to the access records of other electronic medical records, the number of medical personnel who accessed the other electronic medical records within the preset time period is obtained as the number of medical personnel who accessed other electronic medical records; according to the number of medical personnel who accessed any one of the electronic medical records and the number of medical personnel who accessed other electronic medical records, the average number of medical personnel who accessed the electronic medical records of the designated patient is obtained as the average number of medical personnel who accessed the electronic medical records of the designated patient; and the number of medical personnel who accessed the electronic medical records of the designated patient is obtained. The absolute value of the difference between the number of medical personnel who review any electronic medical record and the average number of medical personnel who review the electronic medical records of the designated patient is used as the absolute value of the difference in the number of medical personnel for any electronic medical record; the ratio between the absolute value of the difference in the number of medical personnel for any electronic medical record and the average number of medical personnel who review the electronic medical records of the designated patient is obtained as the ratio of the number of medical personnel for any electronic medical record; according to the corresponding relationship between the ratio of the number of medical personnel for electronic medical records and the quantified value of the attention paid by medical personnel to electronic medical records and the ratio of the number of medical personnel for any electronic medical record, the quantitative value of the attention paid by medical personnel to any electronic medical record is obtained as the quantified value of the attention paid by medical personnel to any electronic medical record;Generate characteristic data of any electronic medical record according to the quantified value of attention paid to any electronic medical record during the visit of the designated patient and the quantified value of attention paid to any electronic medical record by medical staff. ;

[0086] In specific implementation, after an electronic medical record is generated, the number of times the electronic medical record has been accessed during the patient's visit can be checked. If the electronic medical record is accessed every time the patient visits, it proves that the electronic medical record is a relatively important medical record for the patient, or a medical record that the patient pays more attention to during the visit, which can be reflected by the quantified value of the attention paid to any electronic medical record during the specified patient's visit. It can also be based on how many doctors have accessed any electronic medical record. If the electronic medical record has been accessed by many doctors, it proves that many doctors pay attention to the electronic medical record, which can be reflected by the quantified value of the attention paid by medical staff to any electronic medical record. Finally, the characteristic data of any electronic medical record can be generated based on the quantified value of the attention paid to any electronic medical record during the specified patient's visit and the quantified value of the attention paid to any electronic medical record by medical staff.

[0087] The above is the entire process of electronic medical record sharing described in the embodiment of the present application. The system can send an electronic medical record authorization request message to the health chain server through the patient terminal, which is used to indicate that the designated patient requests the designated medical personnel to be authorized to access the electronic medical records of the designated patient. After obtaining the electronic medical record index list of the designated patient returned by the health chain server in response to the electronic medical record authorization request message, the system sends the index of the authorized electronic medical records that the designated patient authorizes the designated medical personnel to access to the health chain server, and the electronic medical record authorization request message includes the terminal identification information of the medical personnel of the first hospital; the health chain server sends the authorized electronic medical record index list to the medical personnel terminal of the first hospital according to the terminal identification information of the medical personnel of the first hospital, and after obtaining the terminal identification information of the medical personnel of the first hospital, the system sends the authorized electronic medical record index list to the medical personnel terminal of the first hospital. After the medical staff terminal sends a request message for accessing the designated authorized electronic medical record corresponding to the designated authorized electronic medical record index in the authorized electronic medical record index list, the hospital information to which the designated authorized electronic medical record belongs is obtained according to the designated authorized electronic medical record index. If the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital, a designated authorized electronic medical record acquisition request message for requesting the first hospital medical staff terminal to provide the designated authorized electronic medical record is sent to the second hospital data processing subsystem, and the designated authorized electronic medical record returned by the second hospital data processing subsystem for the designated authorized electronic medical record acquisition request message is obtained. The designated authorized electronic medical record is sent to the medical staff terminal of the first hospital for the access request message. If the hospital information to which the designated authorized electronic medical record belongs is information of the first hospital, the designated authorized electronic medical record is directly obtained from the first hospital data processing subsystem. Therefore, the electronic medical record sharing system can provide patients with initiative when medical staff view the patient's medical records in other hospitals. The electronic medical records viewed by medical staff are electronic medical records authorized by patients, which protects the privacy of patients.

[0088] The present application is described below through a number of embodiments and drawings.

[0089] First embodiment

[0090] The first embodiment of the present application provides an electronic medical record sharing method. Figure 8 The electronic medical record sharing method is described. Since the electronic medical record sharing method is similar to the electronic medical record sharing system, the same parts of this embodiment and the electronic medical record sharing system are not described in detail. Please refer to the corresponding parts of the electronic medical record sharing system.

[0091] Step S801: Obtain the index of the authorized electronic medical record sent by the patient terminal that the designated patient authorizes the designated medical staff to access, and generate an authorized electronic medical record index list according to the index of the authorized electronic medical record; Step S802: Obtain the identification information of the medical staff terminal of the first hospital, and send the authorized electronic medical record index list to the medical staff terminal of the first hospital according to the identification information of the medical staff terminal of the first hospital; Step S803: Obtain the access request message of the designated authorized electronic medical record corresponding to the designated authorized electronic medical record index in the authorized electronic medical record index list sent by the medical staff terminal of the first hospital, and generate an authorized electronic medical record index list according to the identification information of the medical staff terminal of the first hospital; Step S804: Obtain the access request message of the designated authorized electronic medical record corresponding to the designated authorized electronic medical record index in the authorized electronic medical record index list sent by the medical staff terminal of the first hospital The designated authorized electronic medical record index is used to obtain the hospital information to which the designated authorized electronic medical record belongs. If the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital, a designated authorized electronic medical record acquisition request message is sent to the data processing subsystem of the second hospital to request that the designated authorized electronic medical record be provided to the medical staff terminal of the first hospital. Step S804: obtaining the designated authorized electronic medical record returned by the data processing subsystem of the second hospital in response to the designated authorized electronic medical record acquisition request message, and sending the designated authorized electronic medical record to the medical staff terminal of the first hospital in response to the access request message.

[0092] Optionally, it also includes: obtaining the designated patient information of the designated patient from the patient terminal, and generating the public key information of the designated patient based on the patient key in the designated patient information; sending the identity information in the designated patient basic information of the designated patient and the public key information to the hospital data processing subsystems of multiple hospitals, so that any one of the hospital data processing subsystems of the multiple hospitals verifies the identity information of the designated patient, and then uses the public key information to encrypt the electronic medical record address of the designated patient in any one of the hospital data processing subsystems to generate a ciphertext of the electronic medical record address of the designated patient in any one of the hospital data processing subsystems; the hospital data processing subsystems of the multiple hospitals respectively store the electronic medical records of the designated patient when receiving treatment in the hospital.

[0093] Optionally, it also includes: obtaining the ciphertext of the electronic medical record address of the designated patient in any one of the hospital data processing subsystems; generating an electronic medical record index list of the designated patient based on the ciphertext of the electronic medical record address of the designated patient in any one of the hospital data processing subsystems; the electronic medical record index list is used to represent the medical information of the designated patient.

[0094] Optionally, it also includes: generating an access token for the designated authorized electronic medical record based on the designated authorized electronic medical record access request message, generating an address ciphertext of the designated authorized electronic medical record for access by the designated medical personnel of the first hospital according to the access token as the designated authorized electronic medical record address ciphertext; obtaining a designated medical personnel key for decrypting the designated authorized electronic medical record address ciphertext; based on the designated medical personnel key, converting the designated authorized electronic medical record address ciphertext for access by the designated medical personnel of the first hospital into a decrypted designated authorized electronic medical record address for access by the designated medical personnel of the first hospital; and converting the designated medical personnel key into a decrypted designated authorized electronic medical record address for access by the designated medical personnel of the first hospital according to the decrypted designated medical personnel key for decrypting the designated authorized electronic medical record address ciphertext. The designated authorized electronic medical record address for designated medical personnel to access by the designated medical personnel of the first hospital is used to determine that the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital that is different from the first hospital; the designated authorized electronic medical record acquisition request message is sent to the data processing subsystem of the second hospital to request that the designated authorized electronic medical record be provided to the medical personnel terminal of the first hospital, including: according to the decrypted designated authorized electronic medical record address for designated medical personnel to access by the designated medical personnel of the first hospital, the designated authorized electronic medical record acquisition request message is sent to the data processing subsystem of the second hospital to request that the designated authorized electronic medical record be provided to the medical personnel terminal of the first hospital.

[0095] Second embodiment

[0096] In the above-mentioned first embodiment, an electronic medical record sharing method is provided. Correspondingly, the second embodiment of the present application provides an electronic medical record sharing device. Since the device embodiment is basically similar to the first method embodiment, the description is relatively simple. For relevant parts, please refer to the partial description of the method embodiment. The device embodiment described below is only illustrative.

[0097] Please refer to Fig. 9 , is a schematic diagram of an electronic medical record sharing device provided in the second embodiment of the present application.

[0098] The electronic medical record sharing device 900 includes: a first obtaining unit 901, which is used to obtain the index of the authorized electronic medical record sent by the patient terminal and authorized by the designated patient to be accessed by the designated medical staff, and generate an authorized electronic medical record index list according to the index of the authorized electronic medical record; a first sending unit 902, which is used to obtain the identification information of the medical staff terminal of the first hospital, and send the authorized electronic medical record index list to the medical staff terminal of the first hospital according to the identification information of the medical staff terminal of the first hospital; a second obtaining unit 903, which is used to obtain the access information of the designated authorized electronic medical record corresponding to the designated authorized electronic medical record index in the authorized electronic medical record index list sent by the medical staff terminal of the first hospital A request message is sent to obtain the hospital information to which the designated authorized electronic medical record belongs according to the designated authorized electronic medical record index; if the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital, a designated authorized electronic medical record acquisition request message is sent to the second hospital data processing subsystem to request that the designated authorized electronic medical record be provided to the medical staff terminal of the first hospital; a second sending unit 904 is used to obtain the designated authorized electronic medical record returned by the data processing subsystem of the second hospital in response to the designated authorized electronic medical record acquisition request message, and send the designated authorized electronic medical record to the medical staff terminal of the first hospital in response to the access request message.

[0099] Third embodiment

[0100] Corresponding to the above method embodiment of the present application, the third embodiment of the present application further provides an electronic device. Fig.10 As shown, Fig.10 This is a schematic diagram of an electronic device provided in the third embodiment of the present application. The electronic device includes: at least one processor 1001, at least one communication interface 1002, at least one memory 1003 and at least one communication bus 1004; optionally, the communication interface 1002 can be an interface of a communication module, such as an interface of a GSM module; the processor 1001 may be a processor CPU, or an application specific integrated circuit ASIC (Application Specific Integrated Circuit), or one or more integrated circuits configured to implement an embodiment of the present invention. The memory 1003 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage. Among them, the memory 1003 stores a program, and the processor 1001 calls the program stored in the memory 1003 to execute the method provided in the above embodiment of the present application.

[0101] Fourth embodiment

[0102] Corresponding to the above method of the present application, the fourth embodiment of the present application further provides a computer storage medium. The computer storage medium stores a computer program, which is executed by a processor to execute the method provided in the above embodiment of the present application.

[0103] Although the present application is disclosed as above in the form of a preferred embodiment, it is not intended to limit the present application. Any technical personnel in this field may make possible changes and modifications without departing from the spirit and scope of the present application. Therefore, the scope of protection of the present application shall be based on the scope defined by the claims of the present application.

[0104] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0105] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0106] 1. Computer-readable media includes permanent and non-permanent, removable and non-removable media that can be used to store information by any method or technology. Information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media does not include non-transitory media such as modulated data signals and carrier waves.

[0107] 2. Those skilled in the art should understand that the embodiments of the present application can be provided as methods, systems or computer program products. Therefore, the present application can take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware. Moreover, the present application can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0108] It should be noted that the embodiments of the present application may involve the use of user data. In actual applications, user-specific personal data can be used in the scheme described herein within the scope permitted by applicable laws and regulations, subject to the requirements of applicable laws and regulations of the country where the user is located (for example, with the user's explicit consent, effective notification to the user, etc.).

[0109] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of the relevant countries and regions, and provide corresponding operation entrances for users to choose to authorize or refuse.

Claims

1. An electronic medical record sharing system, It is characterized in that include: The first hospital's medical staff terminal, patient terminal, health chain service terminal and the second hospital's data processing subsystem; The terminal for medical staff of the first hospital is used to display the electronic medical record to obtain the identification code; The patient terminal is used to identify the electronic medical record acquisition identification code, obtain the identification information of the medical staff terminal of the first hospital as the identification information of the medical staff terminal of the first hospital, send an electronic medical record authorization request message to the health chain service end, indicating that the designated patient requests the designated medical staff to authorize the designated medical staff to access the electronic medical record of the designated patient, the electronic medical record authorization request message includes the identification information of the medical staff terminal of the first hospital, obtain the electronic medical record index list of the designated patient returned by the health chain service end in response to the electronic medical record authorization request message, display the electronic medical record index list, and in response to detecting a selection operation for an electronic medical record index in the electronic medical record index list, send the selected electronic medical record index to the health chain service end as the index of the authorized electronic medical record that the designated patient authorizes the designated medical staff to access, the designated medical staff being the designated medical staff of the first hospital using the medical staff terminal of the first hospital; The health chain service end is used to generate an authorized electronic medical record index list according to the index of the authorized electronic medical record, send the authorized electronic medical record index list to the medical staff terminal of the first hospital according to the identification information of the medical staff terminal of the first hospital, obtain the access request message of the designated authorized electronic medical record corresponding to the designated authorized electronic medical record index in the authorized electronic medical record index list sent by the medical staff terminal of the first hospital, obtain the hospital information to which the designated authorized electronic medical record belongs according to the designated authorized electronic medical record index, if the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital, then send a designated authorized electronic medical record acquisition request message for requesting the provision of the designated authorized electronic medical record to the medical staff terminal of the first hospital to the data processing subsystem of the second hospital, obtain the designated authorized electronic medical record returned by the data processing subsystem of the second hospital in response to the designated authorized electronic medical record acquisition request message, and send the designated authorized electronic medical record to the medical staff terminal of the first hospital in response to the access request message; The second hospital data processing subsystem is used to store the electronic medical records of patients who visit the second hospital, and return the designated authorized electronic medical records to the health chain service end in response to the designated authorized electronic medical record acquisition request message.

2. The electronic medical record sharing system according to claim 1, It is characterized in that The health chain service end is further used to obtain the designated patient information of the designated patient from the patient terminal, and generate the public key information of the designated patient based on the patient key in the designated patient information; Sending the identity information and the public key information of the designated patient's basic information to the hospital data processing subsystems of multiple hospitals, wherein the hospital data processing subsystems of the multiple hospitals respectively store the electronic medical records of the designated patient in the hospital; Any one of the hospital data processing subsystems of the multiple hospitals is used to verify the identity information of the designated patient, encrypt the electronic medical record address of the designated patient in the any one of the hospital data processing subsystems using the public key information, generate a ciphertext of the electronic medical record address of the designated patient in the any one of the hospital data processing subsystems, and upload the ciphertext of the electronic medical record address to the health chain server.

3. The electronic medical record sharing system according to claim 2, It is characterized in that The health chain service end is also used to generate an electronic medical record index list of the designated patient based on the electronic medical record address ciphertext of the designated patient in any hospital data processing subsystem; the electronic medical record index list is used to represent the medical information of the designated patient.

4. The electronic medical record sharing system according to claim 3, It is characterized in that The health chain service end is also used to generate an access token for the designated authorized electronic medical record based on the access request message of the designated authorized electronic medical record, and generate an address ciphertext of the designated authorized electronic medical record for access by the designated medical personnel of the first hospital according to the access token as the designated authorized electronic medical record address ciphertext; obtain a designated medical personnel key for decrypting the designated authorized electronic medical record address ciphertext; based on the designated medical personnel key, convert the designated authorized electronic medical record address ciphertext for access by the designated medical personnel of the first hospital into a decrypted designated authorized electronic medical record address for access by the designated medical personnel of the first hospital; according to the decrypted designated authorized electronic medical record address for access by the designated medical personnel of the first hospital, determine that the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital; The sending of a designated authorized electronic medical record acquisition request message for requesting the first hospital medical staff terminal to provide the designated authorized electronic medical record to the second hospital data processing subsystem includes: Based on the decrypted designated authorized electronic medical record address for access by designated medical personnel of the first hospital, a designated authorized electronic medical record acquisition request message is sent to the second hospital data processing subsystem to request provision of the designated authorized electronic medical record to the medical personnel terminal of the first hospital.

5. The electronic medical record sharing system according to claim 4, It is characterized in that The health chain service end is further used to obtain, after obtaining an electronic medical record authorization request message indicating that the designated patient requests the designated medical personnel to authorize the designated medical personnel to access the electronic medical records of the designated patient, a list of designated authorized electronic medical records that the designated patient allows the designated medical personnel to access, as a list of authorized electronic medical records that the designated patient authorizes the designated medical personnel to access; Based on the list of authorized electronic medical records that the designated patient authorizes the designated medical personnel to access, query the electronic medical record address of each authorized electronic medical record in the electronic medical record list of authorized electronic medical records that the designated patient authorizes the designated medical personnel to access, and use the electronic medical record address of the authorized electronic medical records that the designated patient authorizes the designated medical personnel to access; convert the electronic medical record address of each authorized electronic medical record that the designated patient authorizes the designated medical personnel to access into a conversion address, and use the electronic medical record conversion address of the authorized electronic medical records that the designated patient authorizes the designated medical personnel to access, and send the list of electronic medical record conversion addresses of the authorized electronic medical records that the designated patient authorizes the designated medical personnel to access to the designated medical personnel terminal of the first hospital; Obtaining an authorized electronic medical record access request message sent by the designated medical staff terminal for accessing the authorized electronic medical record, wherein the authorized electronic medical record access request message includes an electronic medical record conversion address of the authorized electronic medical record that the designated patient authorizes the designated medical staff to access and the access token; Verify the legitimacy of the access token according to the authorized electronic medical record access request message for accessing the authorized electronic medical record, and if the access token is legitimate, obtain the electronic medical record address of the authorized electronic medical record authorized by the designated patient to be accessed by the designated medical personnel, which corresponds to the electronic medical record conversion address of the authorized electronic medical record authorized by the designated patient to be accessed by the designated medical personnel; Based on the electronic medical record address of the authorized electronic medical record authorized by the designated patient for the designated medical staff to access, a designated authorized electronic medical record acquisition request message is sent to the second hospital data processing subsystem to request the designated medical staff terminal of the first hospital to provide the designated authorized electronic medical record, and the designated authorized electronic medical record returned by the second hospital data processing subsystem in response to the designated authorized electronic medical record acquisition request message is obtained.

6. The electronic medical record sharing system according to claim 1, It is characterized in that The health chain service end is also used to store information that the designated patient authorizes the designated medical staff of the designated hospital to access the designated electronic medical record within the designated time; The medical staff terminal of the first hospital is further used to, in response to detecting the medical staff's request operation for accessing the electronic medical record of the designated patient, send an authorized external hospital electronic medical record query request message to the health chain service end for requesting to query whether there is an authorized external hospital electronic medical record of the designated patient, wherein the authorized external hospital electronic medical record query request message includes the identification information of the medical staff terminal of the first hospital; obtain the query result of the authorized external hospital electronic medical record returned by the health chain service end; the external hospital is the second hospital; The health chain service end is further used to obtain an authorized external hospital electronic medical record query request message for requesting to query whether the designated patient has an authorized external hospital electronic medical record; based on the authorized external hospital electronic medical record query request message, query the external hospital electronic medical record authorization information of the designated patient, and based on the external hospital electronic medical record authorization information, generate an authorized external hospital electronic medical record index of the authorized external hospital electronic medical record currently accessible to the medical staff of the first hospital; and send the authorized external hospital electronic medical record index to the medical staff terminal of the first hospital; The medical staff terminal of the first hospital is further used to generate an authorized electronic medical record index that can be currently accessed by the medical staff of the first hospital according to the authorized external hospital electronic medical record index and the electronic medical record index queried from the data processing subsystem of the first hospital, and display the authorized electronic medical record index; in response to detecting a retrieval operation for a designated external hospital electronic medical record in the authorized electronic medical record index, send a designated external hospital electronic medical record query request message for requesting to query the designated external hospital electronic medical record to the health chain service end, and obtain the query result of the designated external hospital electronic medical record returned by the health chain service end; The health chain service end is further used to query the address of the electronic medical record of the designated external hospital based on the electronic medical record query request message of the designated external hospital, send a designated external hospital electronic medical record access request message for requesting to access the electronic medical record of the designated external hospital to the data processing subsystem of the second hospital based on the electronic medical record query request message of the designated external hospital, obtain the electronic medical record of the designated external hospital returned by the data processing subsystem of the second hospital in response to the electronic medical record access request message of the designated external hospital; and send the electronic medical record of the designated external hospital to the medical staff terminal of the first hospital; The medical staff terminal of the first hospital is also used to display the electronic medical records of the designated external hospital.

7. The electronic medical record sharing system according to claim 1, It is characterized in that The medical staff terminal of the first hospital is further used to send an external hospital medical record query request message to the health chain server to query whether the designated patient has an external hospital medical record; Obtaining a query result returned by the health chain service end to indicate whether the designated patient has a medical record in an external hospital; The display of the electronic medical record to obtain the identification code includes: If the query result indicates that the designated patient has medical records in other hospitals, the medical records in other hospitals are displayed.

8. The electronic medical record sharing system according to claim 1, It is characterized in that The electronic medical record authorization request message also includes identification information of the designated medical personnel; The health chain service end is also used to obtain the disease label that the designated medical staff is good at diagnosing and treating based on the identification information of the designated medical staff, obtain the medical record disease label corresponding to the electronic medical record of the designated patient, filter out the electronic medical record index whose medical record disease label matches the disease label that the designated medical staff is good at diagnosing and treating from the electronic medical record index of the designated patient, and use it as the recommended electronic medical record index, set a recommended review label for the recommended electronic medical record index, and generate a list of electronic medical record indexes of the designated patient based on the electronic medical record index of the designated patient and the recommended review label, wherein the recommended review electronic medical record index is the index of the electronic medical record of the designated patient recommended for review by the designated medical staff.

9. The electronic medical record sharing system according to claim 1, It is characterized in that The health chain service end is also used to obtain the disease label that the designated medical staff is good at diagnosing and treating based on the identification information of the designated medical staff, determine whether each electronic medical record index of the designated patient has a reference label applicable to the disease label that the designated medical staff is good at diagnosing and treating, determine the electronic medical record index with the reference label applicable to the disease label that the designated medical staff is good at diagnosing and treating as the recommended electronic medical record index, set a recommended review label for the recommended electronic medical record index, and generate a list of electronic medical record indexes of the designated patient based on the electronic medical record index of the designated patient and the recommended review label, the recommended review electronic medical record index being the index of the electronic medical record of the designated patient recommended for review by the designated medical staff.

10. The electronic medical record sharing system according to claim 1, It is characterized in that The electronic medical record authorization request message also includes identification information of the designated medical personnel; The health chain service end is also used to obtain the disease label that the designated medical staff is good at treating according to the identification information of the designated medical staff, obtain the medical record disease label corresponding to the designated authorized electronic medical record, and judge whether the disease label that the designated medical staff is good at treating matches the medical record disease label corresponding to the designated authorized electronic medical record. If the disease label that the designated medical staff is good at treating does not match the medical record disease label corresponding to the designated authorized electronic medical record, then send an invitation prompt message to the medical staff terminal of the first hospital to prompt the designated medical staff to invite a special medical staff to send a review request message for the designated authorized electronic medical record to the health chain service end. The special medical staff is a medical staff with a disease label that is good at treating that matches the medical record disease label corresponding to the designated authorized electronic medical record. If the review request message for the designated authorized electronic medical record sent by the medical staff terminal used by the special medical staff is obtained, then judge whether the disease label that the special medical staff is good at treating matches the medical record disease label corresponding to the designated authorized electronic medical record; The health chain service end is specifically used for sending a designated authorized electronic medical record acquisition request message for requesting the first hospital medical staff terminal to provide the designated authorized electronic medical record if the disease label of the special medical staff's specialty matches the medical record disease label corresponding to the designated authorized electronic medical record, and the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital; The health chain service end is specifically used for sending a designated authorized electronic medical record acquisition request message for requesting the first hospital medical staff terminal to provide the designated authorized electronic medical record if the disease tag that the designated medical staff is good at diagnosing and treating matches the medical record disease tag corresponding to the designated authorized electronic medical record, and the hospital information to which the designated authorized electronic medical record belongs is information of a second hospital different from the first hospital; The medical staff terminal of the first hospital is also used to send an invitation message to the medical staff terminal used by the special medical staff to invite the special medical staff to send a retrieval request message for the designated authorized electronic medical record to the health chain service end if the invitation prompt information is obtained and the invitation operation of the designated medical staff to the special medical staff is detected.

Images