Distributed pathology data management method and system based on blockchain

Abstract

The present invention discloses a distributed pathology data management method and system based on blockchain, relates to the technical field of pathology data management, constructs a pathology data blockchain network, and sets a plurality of distributed control nodes according to the local area network IP, uploads the pathology data stored in the local area network corresponding to each local area network IP to the respective distributed control nodes, performs node encryption and data encryption on each distributed control node, and then generates an encrypted pathology data file corresponding to each distributed control node, establishes an authorized communication link between each distributed control node and the pathology data blockchain network, shares the encrypted pathology data file of each distributed control node on the pathology data blockchain network through the authorized communication link, creates a corresponding query index in the pathology data blockchain network for each distributed control node, and the user inputs the query index into a preset pathology database to query the required pathology data.

Description

Technical Field

[0001] The present invention relates to the technical field of pathology data management, and specifically to a distributed pathology data management method and system based on blockchain. Background Art

[0002] With the development of medical technology, pathological data plays an increasingly important role in clinical diagnosis and treatment. However, the existing pathological data management methods have problems such as low data security and inconvenient query. Pathological data is an important cornerstone of clinical diagnosis, which leads to a relatively low efficiency of clinical diagnosis and treatment. How to solve these problems in order to provide a safe and reliable pathological data management method has become a top priority. Summary of the invention

[0003] In order to solve the above problems, the purpose of the present invention is to provide a distributed pathology data management method and system based on blockchain.

[0004] The purpose of the present invention can be achieved by the following technical solution: a distributed pathology data management method based on blockchain, comprising the following steps:

[0005] Step S1: Build a pathology data blockchain network, and set up several distributed control nodes according to the LAN IP, and upload the pathology data stored in the LAN corresponding to each LAN IP to their respective distributed control nodes;

[0006] Step S2: Perform node encryption and data encryption on each distributed control node, thereby generating an encrypted pathology data file corresponding to each distributed control node, and establishing an authorized communication link between each distributed control node and the pathology data blockchain network;

[0007] Step S3: The encrypted pathology data file of each distributed control node is shared on the pathology data blockchain network through an authorized communication link, and a corresponding query index is created for each distributed control node in the pathology data blockchain network. The user inputs the query index into the preset pathology database to query the required pathology data.

[0008] Furthermore, the process of building a pathology data blockchain network includes:

[0009] Create several blockchain nodes, assign a network ID and a gateway port to each blockchain node. The gateway port is set with different types of port states, including normal communication state, abnormal communication state, and shutdown maintenance state. The initial port states of several gateway ports are set to normal communication state;

[0010] When the gateway port is attacked from the outside, the port status of the gateway port attacked from the outside is changed to an abnormal communication state, and the gateway port in the abnormal communication state is accessed to the set remote maintenance program for maintenance. If the current maintenance of the gateway port cannot be completed through the remote maintenance code, the port status of the gateway port is changed to a shutdown maintenance state, and the corresponding network technicians are arranged to handle it;

[0011] Node configuration is performed on the blockchain nodes in normal communication status. The node communication whitelist, node communication protocol and node communication blacklist corresponding to each blockchain node are generated through node configuration. A pathological data blockchain network is constructed based on several blockchain nodes with completed node configurations.

[0012] Furthermore, a number of distributed control nodes are set according to the LAN IP, and the process of uploading the pathological data stored in the LAN corresponding to each LAN IP to the respective distributed control nodes includes:

[0013] Several distributed terminals are set up, each of which is used to store a part of the pathological data. Several distributed terminals share and use their own pathological data through their respective connected local area networks, obtain the local area network IP corresponding to each local area network, and set the corresponding distributed control node according to the local area network IP of each distributed terminal in the local area network;

[0014] Set the transmission rate and transmission credentials of each distributed terminal for uploading pathological data, and then upload the pathological data stored in each distributed terminal under the local area network to the corresponding distributed control node according to the corresponding transmission rate, and the distributed control node determines whether the received transmission credentials have been tampered with;

[0015] If yes, the received pathological data is packaged into an abnormal pathological file and returned to the corresponding distributed terminal; if no, the distributed management and control node stores the current pathological data.

[0016] Furthermore, the process of performing node encryption and data encryption on each distributed control node and then generating an encrypted pathology data file corresponding to each distributed control node includes:

[0017] The encryption order of the node encryption and data encryption is: node encryption is performed first, and then data encryption; the node encryption performed on each distributed control node includes building a key pair, dynamic key storage, node communication test, and node authorization authentication; the pathology data in each distributed control node is encrypted in segments, and then the corresponding encrypted pathology data files are generated and stored by the distributed control nodes.

[0018] Furthermore, the process of establishing an authorized communication link between each distributed control node and the pathology data blockchain network includes:

[0019] Obtain the authorization certificate corresponding to each distributed control node, associate the authorization certificate of each distributed control node with the encrypted pathology data file stored therein, and perform data backup of the authorization certificate of each distributed control node, thereby generating a copy of the authorization certificate corresponding to the authorization certificate;

[0020] Each distributed control node sends a communication link request to the pathology data blockchain network. The communication link request carries a copy of the authorization certificate. The pathology data blockchain network receives the communication link request and determines whether the copy of the authorization certificate is consistent with the authorization certificate of the corresponding distributed control node.

[0021] If so, any blockchain node in the pathology data blockchain network that is in a normal communication state is assigned to establish data communication with the distributed control node, and then an authorized communication link is established between the corresponding distributed control node and the pathology data blockchain network;

[0022] If not, it is determined that there is an abnormality in the distributed control node that sends the copy authorization certificate, and the communication link request sent by it is rejected, and the authorized communication link is not established.

[0023] Furthermore, the process of sharing the encrypted pathology data file of each distributed control node to the pathology data blockchain network through an authorized communication link includes:

[0024] A data sharing period is set. During the data sharing period, each distributed management and control node that establishes an authorized communication link with the pathology data blockchain network shares its own encrypted pathology data file to the pathology data blockchain network, and creates a file storage space on the pathology data blockchain network for storing encrypted pathology data files.

[0025] Furthermore, a corresponding query index is created for each distributed control node in the pathology data blockchain network, and the user inputs the query index into the preset pathology database, and then the process of querying the required pathology data includes:

[0026] Creating a query index for each distributed control node in the pathology data blockchain network, where the query index is used to query the encrypted pathology data file corresponding to the corresponding distributed control node in the pathology data blockchain network;

[0027] A pathology database is preset, and the pathology database is used to store the addresses to be retrieved of several encrypted pathology data files, where the address to be retrieved = <query index, location of file storage space>. The user inputs the query index into the pathology database, and then locates the encrypted pathology data file that the current user needs to find in the pathology data blockchain network by matching the query index with the address to be retrieved;

[0028] Decrypt the encrypted pathology data file to obtain the pathology data required by the user.

[0029] Furthermore, the distributed pathology data management system based on blockchain includes:

[0030] The blockchain network and control node module is used to build a pathology data blockchain network, set up a number of distributed control nodes according to the LAN IP, and upload the pathology data stored in the LAN corresponding to each LAN IP to their respective distributed control nodes;

[0031] The pathology data processing module is used to perform node encryption and data encryption on each distributed control node, thereby generating an encrypted pathology data file corresponding to each distributed control node, and establishing an authorized communication link between each distributed control node and the pathology data blockchain network;

[0032] The pathology data query module is used to share the encrypted pathology data files of each distributed management and control node on the pathology data blockchain network through an authorized communication link, create a corresponding query index for each distributed management and control node in the pathology data blockchain network, and the user inputs the query index into the preset pathology database to query the required pathology data.

[0033] Compared with the prior art, the beneficial effects of the present invention are as follows: by constructing a pathology data blockchain network, and setting up a number of distributed control nodes according to the LAN IP, the pathology data stored in the LAN corresponding to each LAN IP is uploaded to the respective distributed control nodes for node encryption and data encryption to generate an encrypted pathology data file corresponding to each distributed control node, and an authorized communication link is established between each distributed control node and the pathology data blockchain network, and then the encrypted pathology data file of each distributed control node is shared on the pathology data blockchain network, and a corresponding query index is created for each distributed control node in the pathology data blockchain network, and the user inputs the query index to the preset pathology database, and then queries the required pathology data, which improves the security of the pathology data to a certain extent and facilitates the query of the pathology data. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 It is a flow chart of the present invention. DETAILED DESCRIPTION

[0035] like Figure 1 As shown, the distributed pathology data management method based on blockchain includes the following steps:

[0036] Step S1: Build a pathology data blockchain network, and set up several distributed control nodes according to the LAN IP, and upload the pathology data stored in the LAN corresponding to each LAN IP to their respective distributed control nodes;

[0037] Step S2: Perform node encryption and data encryption on each distributed control node, thereby generating an encrypted pathology data file corresponding to each distributed control node, and establishing an authorized communication link between each distributed control node and the pathology data blockchain network;

[0038] Step S3: The encrypted pathology data file of each distributed control node is shared on the pathology data blockchain network through an authorized communication link, and a corresponding query index is created for each distributed control node in the pathology data blockchain network. The user inputs the query index into the preset pathology database to query the required pathology data.

[0039] It should be further explained that in the specific implementation process, the process of building a pathology data blockchain network includes:

[0040] Create several blockchain nodes, assign a network ID and a gateway port to each blockchain node, the network ID is a unique identity corresponding to each blockchain node, and the gateway port of the blockchain node is set with different types of port states;

[0041] The types of the port status include normal communication status, abnormal communication status and shutdown maintenance status; the initial port status of the plurality of gateway ports is set to the normal communication status;

[0042] When the gateway port is attacked by the outside world, the port state of the corresponding gateway port attacked by the outside world is changed to an abnormal communication state, and the gateway port in the abnormal communication state is connected to the set remote maintenance program, and the remote maintenance program generates a remote maintenance code to perform maintenance on the gateway port. If the current maintenance of the gateway port cannot be completed through the remote maintenance code, the port state of the gateway port is changed to a shutdown maintenance state, and the corresponding network technicians are arranged to handle it;

[0043] Perform node configuration for each blockchain node in normal communication state, and generate node communication whitelist, node communication protocol and node communication blacklist corresponding to each blockchain node through node configuration;

[0044] The node communication whitelist is used to define the data content that each blockchain node is allowed to access; the node communication blacklist is used to define the data content that each blockchain node is prohibited from accessing;

[0045] Determine whether several blockchain nodes in normal communication status are all under the same node communication protocol, identify blockchain nodes that are not under the current node communication protocol as nodes to be changed, and unify all nodes to be changed to the current node communication protocol;

[0046] A pathology data blockchain network is constructed based on several blockchain nodes that have been configured.

[0047] It should be further explained that, in the specific implementation process, a number of distributed control nodes are set according to the LAN IP, and the process of uploading the pathological data stored in the LAN corresponding to each LAN IP to the respective distributed control nodes includes:

[0048] Several distributed terminals are set up, each distributed terminal is used to store a part of the pathological data, and the communication rights corresponding to the several distributed terminals storing the pathological data are obtained. The several distributed terminals share and use their own pathological data through the local area networks connected to them, and the local area network IP corresponding to each local area network is obtained. According to the local area network IP under the local area network where each distributed terminal is located, a corresponding distributed control node is set;

[0049] Set the transmission rate and transmission credentials of each distributed terminal for uploading pathological data, and then upload the pathological data stored in each distributed terminal under the local area network to the corresponding distributed control node according to the corresponding transmission rate, and the distributed control node determines whether the received transmission credentials have been tampered with;

[0050] If yes, the received pathological data is packaged into an abnormal pathological file and returned to the corresponding distributed terminal;

[0051] If not, the distributed control node will store the current pathology data.

[0052] Set the safe rate range corresponding to the transmission rate. When the transmission rate is in the safe rate range, no operation is performed. When the transmission rate is not in the safe rate range, a corresponding rate abnormality warning is generated, and the network maintenance personnel will maintain the distributed terminals that have the corresponding abnormal warning.

[0053] It should be further explained that, in the specific implementation process, the process of performing node encryption and data encryption on each distributed control node and then generating an encrypted pathology data file corresponding to each distributed control node includes:

[0054] The encryption order of the node encryption and data encryption is: node encryption is performed first, and then data encryption is performed; the node encryption performed on each distributed control node includes building a key pair, dynamic key storage, node communication test, and node authorization authentication; the pathology data in each distributed control node is encrypted in sections, and then a corresponding encrypted pathology data file is generated;

[0055] The key pair construction includes: constructing a pair of node public key and node private key for each distributed management and control node, the node public key is used to verify the node integrity and node environment security of the distributed management and control node, and the node private key is used to encrypt and decrypt the distributed management and control node;

[0056] The content of the key dynamic storage is: constructing a plurality of temporary storage areas for storing node private keys, numbering the plurality of temporary storage areas, and recording the number as i, then i=1, 2, 3, ..., n, where n is a natural number greater than 0;

[0057] Set the storage period corresponding to each temporary storage area, and initially store the node private key in any temporary storage area. When the storage time of the node private key in the current temporary storage area reaches the corresponding storage period, set the jump number, and obtain the number of the next temporary storage area that will store the node private key according to the number of the current temporary storage area + the jump number;

[0058] That is, the number of the next temporary storage area for storing the private key of the node = the number of the current temporary storage area + the number of jumps. For example, if the number of the current temporary storage area for storing the private key of the node is 3 and the number of jumps is 5, then the corresponding number of the next temporary storage area for storing the private key of the node is 3+5=8. It should be noted that the jump number is generated by a random function, and the temporary storage area for the current storage node private key is destroyed after the storage period expires. If the next temporary storage area for storing the private key of the node obtained according to the jump number does not exist, then the number is postponed in sequence until the next temporary storage area is obtained. For example, if the number of the next temporary storage area for storing the private key of the node is 9, but the temporary storage area numbered 9 has stored the node private key and was destroyed after expiration, then the temporary storage area numbered 10 and later will be postponed.

[0059] The content of the node communication test is: encrypting the data communication between different distributed management and control nodes through SSL or TLS protocol, and testing the data security and communication strength of each distributed management and control node;

[0060] When both data security and communication strength meet the standards, the test of the corresponding distributed control node passes. If both data security and communication strength meet the standards but at least one of the tests fails, the node will be marked as a node to be supervised, and the node to be supervised will be encrypted again;

[0061] The content of the node authorization authentication is: an authorization certificate is associated with each distributed control node that passes the test, and only the distributed control nodes holding the authorization certificate are set to have access authentication permissions to the pathology data blockchain network.

[0062] The pathological data in each distributed control node is encrypted in sections, and the specific contents of the corresponding encrypted pathological data files are generated as follows:

[0063] Divide the pathological data in the distributed control node into a head data segment, an intermediate data segment and a tail data segment, and select different segment encryption algorithms for the head data segment, the intermediate data segment and the tail data segment, wherein the segment encryption algorithms include an AES encryption algorithm, an RSA encryption algorithm and an ECC encryption algorithm;

[0064] The corresponding relationship between the header data segment, the middle data segment, and the tail data segment and the corresponding segment encryption algorithm is as follows:

[0065] Header data segment—AES encryption algorithm;

[0066] Intermediate data segment—RSA encryption algorithm;

[0067] Tail data segment—ECC encryption algorithm;

[0068] The head data segment is encrypted by the AES encryption algorithm to generate the first encrypted pathology data, the middle data segment is encrypted by the RSA encryption algorithm to generate the second encrypted pathology data, and the tail data segment is encrypted by the ECC encryption algorithm to generate the third encrypted pathology data;

[0069] The first encrypted pathology data, the second encrypted pathology data, and the third encrypted pathology data corresponding to each distributed control node are integrated into a preset blank file, thereby generating an encrypted pathology data file corresponding to each distributed control node.

[0070] It should be further explained that, in the specific implementation process, the process of establishing an authorized communication link between each distributed control node and the pathology data blockchain network includes:

[0071] Associating the authorization credential of each distributed control node with the encrypted pathology data file stored therein, and backing up the authorization credential of each distributed control node, thereby generating a copy authorization credential corresponding to the authorization credential;

[0072] Each distributed control node sends a communication link request to the pathology data blockchain network, and the communication link request is sent together with the copy authorization certificate. The pathology data blockchain network receives the communication link request and determines whether the copy authorization certificate is consistent with the authorization certificate of the corresponding distributed control node;

[0073] If so, any blockchain node in the pathology data blockchain network that is in a normal communication state is assigned to establish data communication with the distributed control node, and then an authorized communication link is established between the corresponding distributed control node and the pathology data blockchain network;

[0074] If not, it is judged that there is an abnormality in the distributed control node that sends the copy authorization certificate, and the communication link request sent by it is rejected, and the authorized communication link between the corresponding distributed control node and the pathology data blockchain network is not established.

[0075] It should be further explained that, in the specific implementation process, the process of sharing the encrypted pathology data file of each distributed control node on the pathology data blockchain network through the authorized communication link includes:

[0076] Set a data sharing period and record the data sharing period as T 共享 , T 共享 =[t1, t2], where t1 is the start time of the data sharing period, and t2 is the end time of the data sharing period;

[0077] During the data sharing period, each distributed management and control node that establishes an authorized communication link with the pathology data blockchain network will share its own encrypted pathology data file to the pathology data blockchain network and create a file storage space on the pathology data blockchain network for storing encrypted pathology data files.

[0078] It should be further explained that, in the specific implementation process, a corresponding query index is created for each distributed control node in the pathology data blockchain network, and the user inputs the query index into the preset pathology database, and then the process of querying the required pathology data includes:

[0079] Creating a query index for each distributed control node in the pathology data blockchain network, wherein the query index is used to query the encrypted pathology data file corresponding to the corresponding distributed control node in the pathology data blockchain network;

[0080] A pathology database is preset, and the pathology database is used to store the addresses to be retrieved of several encrypted pathology data files, wherein the address to be retrieved = <query index, location of file storage space>, and the user inputs the query index into the pathology database, and then locates the encrypted pathology data file that the current user needs to find in the pathology data blockchain network by matching the query index with the address to be retrieved;

[0081] Decrypt the encrypted pathology data file to obtain the pathology data required by the user.

[0082] The present invention also provides a distributed pathology data management system based on blockchain, the system comprising:

[0083] The blockchain network and control node module is used to build a pathology data blockchain network, set up a number of distributed control nodes according to the LAN IP, and upload the pathology data stored in the LAN corresponding to each LAN IP to their respective distributed control nodes;

[0084] The pathology data processing module is used to perform node encryption and data encryption on each distributed control node, thereby generating an encrypted pathology data file corresponding to each distributed control node, and establishing an authorized communication link between each distributed control node and the pathology data blockchain network;

[0085] The pathology data query module is used to share the encrypted pathology data files of each distributed management and control node on the pathology data blockchain network through an authorized communication link, create a corresponding query index for each distributed management and control node in the pathology data blockchain network, and the user inputs the query index into the preset pathology database to query the required pathology data.

[0086] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.

Claims

1. A distributed pathology data management method based on blockchain, characterized in that: The following steps are involved: Step S1: Build a pathology data blockchain network, and set up several distributed control nodes according to the LAN IP, and upload the pathology data stored in the LAN corresponding to each LAN IP to their respective distributed control nodes; Step S2: Perform node encryption and data encryption on each distributed control node, thereby generating an encrypted pathology data file corresponding to each distributed control node, and establishing an authorized communication link between each distributed control node and the pathology data blockchain network; Step S3: sharing the encrypted pathology data file of each distributed control node on the pathology data blockchain network through an authorized communication link, creating a corresponding query index for each distributed control node in the pathology data blockchain network, and allowing the user to input the query index into a preset pathology database to query the required pathology data; The process of building a pathology data blockchain network includes: Create several blockchain nodes, assign a network ID and a gateway port to each blockchain node. The gateway port is set with different types of port states, including normal communication state, abnormal communication state, and shutdown maintenance state. The initial port states of several gateway ports are set to normal communication state; When the gateway port is attacked from the outside, the port status of the gateway port attacked from the outside is changed to an abnormal communication state, and the gateway port in the abnormal communication state is accessed to the set remote maintenance program for maintenance. If the current maintenance of the gateway port cannot be completed through the remote maintenance code, the port status of the gateway port is changed to a shutdown maintenance state, and the corresponding network technicians are arranged to handle it; Perform node configuration on the blockchain nodes in normal communication state, generate node communication whitelist, node communication protocol and node communication blacklist corresponding to each blockchain node through node configuration, and build a pathological data blockchain network based on several blockchain nodes with completed node configuration; Several distributed control nodes are set up according to the LAN IP, and the process of uploading the pathological data stored in the LAN corresponding to each LAN IP to the respective distributed control nodes includes: Several distributed terminals are set up, each of which is used to store a part of the pathological data. Several distributed terminals share and use their own pathological data through their respective connected local area networks, obtain the local area network IP corresponding to each local area network, and set the corresponding distributed control node according to the local area network IP of each distributed terminal in the local area network; Set the transmission rate and transmission credentials of each distributed terminal for uploading pathological data, and then upload the pathological data stored in each distributed terminal under the local area network to the corresponding distributed control node according to the corresponding transmission rate, and the distributed control node determines whether the received transmission credentials have been tampered with; If yes, the received pathological data is packaged into an abnormal pathological file and returned to the corresponding distributed terminal; if no, the distributed control node stores the current pathological data; The process of performing node encryption and data encryption on each distributed control node and then generating an encrypted pathology data file corresponding to each distributed control node includes: The encryption order of the node encryption and data encryption is: node encryption is performed first, and then data encryption is performed; the node encryption performed on each distributed control node includes building a key pair, dynamic key storage, node communication test, and node authorization authentication; the pathological data in each distributed control node is encrypted in sections, and then the corresponding encrypted pathological data files are generated and stored by the distributed control node; The process of establishing an authorized communication link between each distributed control node and the pathology data blockchain network includes: Obtain the authorization certificate corresponding to each distributed control node, associate the authorization certificate of each distributed control node with the encrypted pathology data file stored therein, and perform data backup of the authorization certificate of each distributed control node, thereby generating a copy of the authorization certificate corresponding to the authorization certificate; Each distributed control node sends a communication link request to the pathology data blockchain network. The communication link request carries a copy of the authorization certificate. The pathology data blockchain network receives the communication link request and determines whether the copy of the authorization certificate is consistent with the authorization certificate of the corresponding distributed control node. If so, any blockchain node in the pathology data blockchain network that is in a normal communication state is assigned to establish data communication with the distributed control node, and then an authorized communication link is established between the corresponding distributed control node and the pathology data blockchain network; If not, it is determined that there is an abnormality in the distributed control node that sent the duplicate authorization certificate, and the communication link request sent by it is rejected, and the authorized communication link is not established; The process of sharing the encrypted pathology data files of each distributed control node to the pathology data blockchain network through an authorized communication link includes: Set a data sharing period, during which each distributed control node that establishes an authorized communication link with the pathology data blockchain network shares its own encrypted pathology data file to the pathology data blockchain network, and creates a file storage space on the pathology data blockchain network for storing encrypted pathology data files; A corresponding query index is created for each distributed control node in the pathology data blockchain network. The user inputs the query index into the preset pathology database, and then the process of querying the required pathology data includes: Creating a query index for each distributed control node in the pathology data blockchain network, where the query index is used to query the encrypted pathology data file corresponding to the corresponding distributed control node in the pathology data blockchain network; A pathology database is preset, and the pathology database is used to store the addresses to be retrieved of several encrypted pathology data files, where the address to be retrieved = <query index, location of file storage space>. The user inputs the query index into the pathology database, and then locates the encrypted pathology data file that the current user needs to find in the pathology data blockchain network by matching the query index with the address to be retrieved; Decrypt the encrypted pathology data file to obtain the pathology data required by the user.

2. A distributed pathology data management system based on blockchain, used to implement the distributed pathology data management method according to claim 1, characterized in that: The system includes: The blockchain network and control node module is used to build a pathology data blockchain network, set up a number of distributed control nodes according to the LAN IP, and upload the pathology data stored in the LAN corresponding to each LAN IP to their respective distributed control nodes; The pathology data processing module is used to perform node encryption and data encryption on each distributed control node, thereby generating an encrypted pathology data file corresponding to each distributed control node, and establishing an authorized communication link between each distributed control node and the pathology data blockchain network; The pathology data query module is used to share the encrypted pathology data files of each distributed management and control node on the pathology data blockchain network through an authorized communication link, create a corresponding query index for each distributed management and control node in the pathology data blockchain network, and the user inputs the query index into the preset pathology database to query the required pathology data.

Images