Data protection and analysis system for remote diagnosis and treatment

Abstract

The invention belongs to the technical field of remote diagnosis and treatment, and particularly relates to a data protection and analysis system for remote diagnosis and treatment. The system comprises a data acquisition module and a data storage module which are deployed in an intranet, a weak privacy data preparation module, a data analysis authorization module and an analysis data return module which are deployed on a local transfer platform of the intranet, and a remote login and data analysis module which is deployed in an extranet. Data collected by different devices are uploaded and stored locally, privacy desensitization is carried out on data needing to be analyzed, and after an analyst carries out identity verification and authority authorization, the analyst can remotely log in a local transfer platform through an external network to open local software to read a desensitized file, and real-time data labeling and reading are carried out. The whole data access and analysis process is completed locally, so that the risk of network load and data leakage is reduced; the sandbox technology is utilized to realize full-process monitoring for the user, and data leakage caused by data copying and the like is avoided.

Description

Technical Field

[0001] The present invention belongs to the technical field of remote diagnosis and treatment, and in particular relates to a data protection and analysis system for remote diagnosis and treatment. Background Art

[0002] In recent years, with the continuous development of the health care industry, health care-related data has been continuously accumulated. Health care data has the characteristics of large data volume, diversified structure, fast growth rate, and high data application value. At the same time, due to the involvement of personal attributes, health status and other privacy information, if adequate protection measures are not taken, it may lead to data information loss, patient privacy leakage, data tampering and other problems. In order to avoid the troubles caused by the leakage of health care data, most hospitals or scientific research institutions will limit external access by setting data access rights, resulting in the lack of information circulation between hospitals, leading to the problem of "information islands" between hospitals. Breaking the traditional data islands and rashly turning to sharing and openness will inevitably lead to many hidden dangers: 1. Data privacy leakage; 2. Data security issues: whether the data is true, complete and credible; 3. Distribution of rights and interests between data owners and users. How to break the information island and promote the development of telemedicine when the data of each system cannot be shared is also a current difficulty. Summary of the invention

[0003] The purpose of the present invention is to provide a data protection and data analysis system for remote diagnosis and treatment, which can realize remote online analysis of data without leaving the local area while having absolute control over the data, thereby ensuring data security and avoiding the problem of information islands.

[0004] The data protection and analysis system for remote diagnosis and treatment provided by the present invention includes: a data acquisition module, a data storage module, a weak privacy data preparation module, a data analysis authorization module, an analysis data return module, a remote login and data analysis module, wherein: The data acquisition module is used to collect various information data required for remote diagnosis and treatment analysis, such as electrophysiological signals (electroencephalography, electrooculography, electromyography, electrocardiography, etc.), voice signals, images, body composition, motion signals, 3D human body / head and face scans, etc.; The data storage module is used to store various types of information data collected by the data collection module; The weak privacy data preparation module is mainly used to screen the data to be analyzed and perform privacy desensitization on the screened data to facilitate the next step of data analysis; specifically includes: performing data screening, data de-privacy and other operations; screening out different data categories according to different data analysis requirements; using a customized desensitization method that combines different desensitization methods to desensitize personal identity information or sensitive information, such as name, ID number, address, telephone number, email address, image, voice, etc.; The data analysis authorization module is firstly used to set up access rights, time limits, access times, data destruction policies, etc., and uses a sandbox to record the entire process of user operations during the data analysis process, prohibiting users from copying data, rewriting original data, etc. during use; secondly, data analysis software is installed on the transfer platform and connected to a password dog to ensure that users can open the analysis software for data analysis after being authorized for data analysis; The parsed data return module is used to return the parsed data to the data storage module; The remote login and data analysis module includes: after the user authenticates the identity, he uses VPN to access the intranet, and then accesses the local transit platform through the bastion host; after accessing the local bastion host, the connection password dog is opened, and the authorized professional analysis software is used to parse the data that needs to be analyzed.

[0005] In the present invention, the data acquisition module can collect multimodal data; including but not limited to the following data collection, such as: using a polysomnography to collect physiological data related to the subject's sleep throughout the night; using electroencephalography and near-infrared equipment to collect brain function-related data of the subject; using an electronic glottis instrument to collect the subject's voice data; using inbody to collect the subject's body composition data; using dual-energy X-ray (DXA) to measure bone density data, etc.

[0006] In the present invention, when storing collected data, the data storage module generates an index tag with time and device information according to the data collection device and collection time, and the index tag facilitates the rapid query and reading of the data at a later time; according to the index tag, the target storage address of the data is determined to improve the data storage efficiency of the data.

[0007] In the present invention, a customized desensitization method is adopted in the weak privacy data preparation module, including: selecting different desensitization methods for different data types. For example, for structured data, k-anonymity, l-diversity, differential privacy, symmetric encryption, asymmetric encryption, conformal encryption and other methods can be used for irreversible / recoverable desensitization; for image data, Gaussian blur and other methods are used for desensitization; for audio data, sensitive audio is replaced with blank audio and other methods for desensitization, etc., so as to protect data involving personal identity information or sensitive information.

[0008] In the present invention, the data analysis authorization module adopts the security sandbox technology, which can record the entire process of user operation, prohibit users from copying data and rewriting original data during the operation, and further improve the data security during use.

[0009] In the present invention, in the parsed data return module, the parsed data is returned as a single file or in batches.

[0010] In the present invention, the remote login and data analysis module allows users to remotely access the intranet through the external network, read the data that needs to be analyzed, and analyze the data; for example, the collected nighttime electrophysiological signals are interpreted to identify sleep micro-events, sleep rhythms, sleep diseases, etc.; the collected brain function (EEG, near-infrared, brain imaging, etc.) signals are interpreted to identify brain function states, etc.; the collected voice signals are interpreted to identify voice-related diseases, such as pathological voice, etc.; the analysis results can be pushed to users as part of a health report, and can also be pushed to later data analysts as a gold standard to facilitate in-depth data mining by later data analysts.

[0011] The data protection and analysis system of the present invention is used for remote diagnosis and treatment, and its operation or workflow is as follows: (1) Upload and store data collected by different devices locally, such as: using polysomnography to collect physiological data related to the subject's sleep throughout the night; using electroencephalography and near-infrared equipment to collect brain function data related to the subject; using electronic glottis to collect voice data of the subject; using inbody to collect body composition data of the subject; using dual-energy X-ray (DXA) to measure bone density data, etc.; (2) When it is necessary to parse one or several types of data, the data to be parsed is first anonymized, and the anonymized data is pushed to the data parsing authorization module on the local transfer platform; (3) Doctors / data analysts log into the local transfer platform remotely, verify their identity and authorize permissions, then open the local software on the local transfer platform to read the desensitized files and perform real-time data annotation and interpretation; (4) Afterwards, the analysis results are pushed and stored locally through the parsing data return module; During the entire process, data storage, backup, analysis and management are all completed locally to ensure that the data does not leave the local area, reducing network load and the risk of data leakage. At the same time, each operation of the doctor / data analyst will be performed in a sandbox, which can realize full-process monitoring and avoid data leakage caused by duplication.

[0012] In the present invention, a weak privacy data preparation module, a data analysis authorization module and a analysis data return module are deployed on a local transfer platform; the transfer platform first provides a customized desensitization method according to the characteristics of different data types, and can select desensitization solutions according to different data types, effectively reducing the leakage of sensitive information and improving data security; for analysis software that requires a hard password dongle to use, by accessing the local transfer platform data analysis authorization module, after local authorization, the user can remotely access the transfer platform and use the analysis software to perform data analysis, solving the problem that when users use existing cloud storage technology, they cannot use professional software that needs to connect to a hard password dongle for analysis; at the same time, sandbox technology is used to monitor users throughout the entire process to avoid data leakage caused by copying, etc.

[0013] The present invention provides a specific solution for local data storage and remote analysis, which has absolute data control over the data and is independent of a third party. At the same time, for analysis software that requires a hard password dongle to access during data analysis, a solution for remote use of the software is provided.

[0014] The present invention can effectively improve the rational allocation of medical resources and facilitate remote consultation, teaching research, telemedicine, etc.

[0015] Compared with the existing data protection and data analysis platform for remote diagnosis and treatment, the present invention has the following substantial advantages: (1) Existing cloud storage technology or hosted storage technology requires data to be stored on a virtual server hosted by a third party. Therefore, it is usually necessary to consider not only whether the service provider / supplier is reliable, but also potential hosting interruption events and data security risks. The present invention not only provides a specific solution for local data storage and remote analysis, but also enjoys absolute data control over the data without relying on a third party. For data analysis, data can be analyzed online without leaving the local server. (2) The customized desensitization method provided by the present invention adopts different desensitization schemes for different data types, which can effectively reduce the leakage of sensitive information and improve data security; (3) For professional analysis software that needs to be connected to a hard dongle such as a USB / serial port / parallel port, the present invention provides a solution for a local transfer platform. The hard dongle can be directly connected to the local transfer platform. After local authorization, the user can remotely access the transfer platform and use the analysis software to perform data analysis, thereby solving the problem that when using existing cloud storage technology, users cannot use professional software that requires a hard dongle for analysis. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 It is a diagram of the data protection and analysis system for remote diagnosis and treatment according to the present invention.

[0017] Figure 2 It is the data protection and analysis system process framework for remote diagnosis and treatment of the present invention.

[0018] Figure 3 It is a sleep monitoring system-labeled list.

[0019] Figure 4 is an example of sleep data.

[0020] Figure 5 This is an example of sleep annotation data results.

[0021] Figure 6 This is an example of sleep data annotation completion and result verification. Implementation

[0022] Taking remote sleep data analysis and annotation as an example, the present invention is further introduced: 1. Open the data protection and analysis system for remote diagnosis and treatment, including the sleep monitoring system - see the annotation list Figure 3 shown.

[0023] Doctors / data analysts access the local transfer platform through remote login (local transfer platform system interface, such as Figure 3 ), Figure 3 The annotation list includes pending annotations, all annotations, my annotations, as well as a verification list and a report list. Clicking the pending annotations in the annotation list can display the sleep data that has been pushed from the local server to the platform and needs to be analyzed. Clicking all annotations can display the analysis / annotation status of all sleep data that has been pushed from the local server to the platform. Clicking my annotations can display the historical records of the annotation data related to me. The verification list mainly shows which data has completed secondary verification and which data is pending secondary verification. The report list is mainly used to display the specific situation based on the annotation, which reports have been generated, and whether the reports have been pushed back to the local.

[0024] 2. Read the sleep data to be analyzed that has been pushed to the platform from the local server and start data analysis. Figure 4 shown.

[0025] from Figure 3 Click on the "Start" button in the interface to start the data analysis process. Data analysis is mainly done by opening the authorized data analysis software, such as Figure 4 As shown, doctors / data analysts then begin to manually interpret the data.

[0026] 3. Complete the sleep data analysis and save the data analysis results. Figure 5 shown.

[0027] After completing the data analysis, the sleep data annotation results are generated, such as Figure 5 The results mainly include an objective quantitative evaluation of the complete sleep data, including the duration of falling asleep, the latency of falling asleep, the proportion of time in each sleep stage, etc. After saving the sleep data annotation results, you can Figure 3 You can query the generated reports in the report list.

[0028] 4. Verify the sleep data analysis results and send them back to the local server. Sleep data labeling completed - result verification see Figure 6 shown.

[0029] For the sleep data analysis results generated in step 2-3, if you need to verify them again, you can open Figure 3 The checklist is checked for a second time. After passing the second check, you can Figure 3 Check the verification status in all the tags. After the verification is completed, the remote analysis of a data set is completed.

Claims

1. A data protection and analysis system for remote diagnosis and treatment, characterized in that: include: Data collection module, data storage module, weak privacy data preparation module, data analysis authorization module, analysis data return module, remote login and data analysis module; The system is divided into two parts: the intranet and the extranet; the data acquisition module and the data storage module are deployed in the intranet, the weak privacy data preparation module, the data analysis authorization module and the analysis data return module are deployed on the local transfer platform of the intranet; the remote login and data analysis module is deployed in the extranet; wherein: The data acquisition module is used to collect various information data required for remote diagnosis and treatment analysis, including electrophysiological signals, voice signals, image data, and body composition information; The data storage module is used to store various types of information data collected by the data collection module; The weak privacy data preparation module is mainly used to screen the data to be analyzed and perform privacy desensitization on the screened data to facilitate the next step of data analysis; specifically includes: performing data screening and data de-privacy operations; screening out different data categories according to different data analysis requirements; using a customized desensitization method that combines different desensitization methods to desensitize personal identity information or sensitive information; The data analysis authorization module is first used to set up access rights, time limits, access times, and data destruction policies, and uses a sandbox to record the entire process of user operations during the data analysis process, prohibiting users from copying data or rewriting original data during use; secondly, data analysis software is installed on the transfer platform and connected to a password dog to ensure that users can open the analysis software for data analysis after being authorized for data analysis; The parsed data return module can return the parsed data to the data storage module after being authorized by the parsing personnel; The remote login and data analysis module includes: after the user authenticates the identity, he uses VPN to access the intranet, and then accesses the local transit platform through the bastion host; after accessing the local bastion host, the connection password dog is opened, and the authorized professional analysis software is used to parse the data that needs to be analyzed.

2. The data protection and analysis system for remote diagnosis and treatment according to claim 1, characterized in that: The data acquisition module can collect multimodal data; specifically including but not limited to the following data collection, such as: using a polysomnography to collect the subject's sleep-related physiological data for the whole night; using electroencephalography and near-infrared equipment to collect the subject's brain function-related data; using an electronic glottis instrument to collect the subject's voice data; using inbody to collect the subject's body composition data; using dual-energy X-ray DXA to measure bone density data.

3. The data protection and analysis system for remote diagnosis and treatment according to claim 1, characterized in that: When storing collected data, the data storage module generates an index tag with time and device information based on the data collection device and collection time. The index tag facilitates rapid query and reading of the data at a later time; based on the index tag, the target storage address of the data is determined to improve the data storage efficiency of the data.

4. The data protection and analysis system for remote diagnosis and treatment according to claim 1, characterized in that: In the weak privacy data preparation module, a customized desensitization method is adopted, including: selecting different desensitization methods according to different data types, including: for structured data, using k-anonymity, l-diversity, differential privacy, symmetric encryption, asymmetric encryption or conformal encryption methods for irreversible / recoverable desensitization; for image data, using Gaussian blur method for desensitization; for audio data, using blank audio to replace sensitive audio for desensitization.

5. The data protection and analysis system for remote diagnosis and treatment according to claim 1, characterized in that: In the data analysis authorization module, the security sandbox technology is used to record the entire process of user operation, prohibiting users from copying data and rewriting original data during the operation process, thereby further improving data security during use.

6. The data protection and analysis system for remote diagnosis and treatment according to claim 1, characterized in that: In the parsed data return module, the parsed data is returned as a single file or in batches.

7. The data protection and analysis system for remote diagnosis and treatment according to claim 1, characterized in that: The remote login and data analysis module allows users to remotely access the intranet through the external network, read the data that needs to be analyzed, and analyze the data; for example, the collected nighttime electrophysiological signals are interpreted to identify sleep micro-events, sleep rhythms, and sleep disorders; the collected brain function signals are interpreted to identify the functional state of the brain; the collected voice signals are interpreted to identify voice-related diseases; the analysis results can be pushed to the user as part of the health report, and can also be pushed to later data analysts as a gold standard to facilitate in-depth data mining by later data analysts.

8. The data protection and analysis system for remote diagnosis and treatment according to any one of claims 1 to 7, characterized in that: The workflow is: (1) Upload and store data collected by different devices locally, such as using a polysomnography device to collect sleep-related physiological data of the subject throughout the night; The subjects' brain function-related data were collected using EEG and near-infrared equipment; the subjects' voice data were collected using an electronic glottis instrument; the subjects' body composition data were collected using inbody; and the bone density data were measured using dual-energy X-ray DXA; (2) When it is necessary to parse one or several types of data, the data to be parsed is first anonymized, and the anonymized data is pushed to the data parsing authorization module on the local transfer platform; (3) Doctors / data analysts log into the local transfer platform remotely, verify their identity and authorize permissions, then open the local software on the local transfer platform to read the desensitized files and perform real-time data annotation and interpretation; (4) Afterwards, the analysis results are pushed and stored locally through the parsing data feedback module; the analysis results can be pushed to the user as part of the health report, or pushed to the later data analysts as the gold standard to facilitate the later data analysts to conduct in-depth data mining; During the entire process, data storage, backup, analysis and management are all completed locally to ensure that the data does not leave the local area, reducing network load and the risk of data leakage. At the same time, each operation of the doctor / data analyst will be performed in a sandbox, which can realize full-process monitoring and avoid data leakage caused by duplication.

Images