Hospital data transmission safety management system

Abstract

The invention discloses a hospital data transmission safety management system. The system comprises a data acquisition module for acquiring transmission data; the data transmission module is responsible for encrypting, transmitting and decrypting data; the monitoring and anomaly detection module is used for monitoring a data transmission process in real time and detecting an abnormal behavior based on a machine learning model; and the log recording module is used for recording all data transmission and operation logs to form detailed transmission logs so as to facilitate auditing and tracking. According to the method, the high integral function and the complex summation function are adopted, the complexity and safety of data in the encryption and decryption process are ensured, meanwhile, the homomorphic encryption operator phi and the inverse operator phi-1 are used, it is ensured that encrypted data can be directly calculated, the actual requirements in a hospital information system are met, and the method is suitable for being popularized and applied. The Hash function H and the inverse function H-1 are combined, so that the integrity and verification capability of the data in the transmission process are ensured, and the safety of private data such as patient information and medical records is ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and in particular to a hospital data transmission security management system. Background Art

[0002] Hospital data refers to various information related to medical services recorded, stored and managed by medical institutions. It is the core of hospital operations and patient treatment. It mainly includes: patient medical records, medical equipment data, medical management data, research and statistical data, etc. Its importance lies in its irreplaceable role in hospital operations, patient treatment, medical research and public health. Effective management and protection of hospital data can not only improve the quality and efficiency of medical services, but also protect patient privacy and promote the development of medical science.

[0003] Some existing hospital data security management systems are still using some relatively simple encryption algorithms, such as DES (Data Encryption Standard), MD5, etc. These algorithms are no longer safe because they are easily cracked by attackers, which makes hospital data prone to leakage. At the same time, abnormal behaviors that occur during data transmission, such as illegal access and data packet tampering, cannot be discovered in time, resulting in a greater risk of data leakage. Summary of the invention

[0004] The purpose of this section is to summarize some aspects of embodiments of the present invention and briefly introduce some preferred embodiments. Some simplifications or omissions may be made in this section and the specification abstract and the invention title of this application to avoid blurring the purpose of this section, the specification abstract and the invention title, and such simplifications or omissions cannot be used to limit the scope of the present invention.

[0005] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0006] In a first aspect, an embodiment of the present invention provides a hospital data transmission security management system, including:

[0007] Data acquisition module: collects transmission data;

[0008] Data transmission module: responsible for data encryption, transmission and decryption;

[0009] Monitoring and anomaly detection module: Based on machine learning models, it monitors the data transmission process in real time and detects abnormal behaviors;

[0010] Logging module: records all data transmission and operation logs to form detailed transmission logs for easy auditing and tracking.

[0011] As a preferred solution of the hospital data transmission security management system described in the present invention, the data transmission module includes an encryption unit for encrypting the original data; a transmission unit for transmitting the encrypted data from the sending end to the receiving end; and a decryption unit for decrypting the encrypted data sent from the sending end to restore it to the original data.

[0012] As a preferred solution of the hospital data transmission security management system described in the present invention, the monitoring and anomaly detection module includes a monitoring unit: which monitors data transmission in real time and extracts the feature vector of the transmission data at time t; an anomaly detection unit: which detects abnormal behavior in the data transmission process; and a response unit: which issues an alarm and cuts off the data connection when abnormal behavior is detected.

[0013] In a second aspect, in order to further solve the security problem in hospital data transmission, the present invention provides a hospital data transmission security management method, which specifically includes the following steps:

[0014] S1. Collect data in real time and pre-process the data;

[0015] S2, data encryption: before data transmission, the data is encrypted to generate ciphertext, and the encrypted data is sent to the receiving end;

[0016] S3, data decryption: After receiving the encrypted data, the receiving end decrypts the data and restores the plaintext data;

[0017] S4, monitoring and anomaly detection: When data transmission begins, network traffic and system logs are monitored in real time. If abnormal behavior is detected, the response mechanism is triggered immediately;

[0018] S5. Log Recording: Each data transmission and operation is recorded by the logging module to form a detailed transmission log. The log data is audited regularly to ensure the transparency and traceability of the data transmission process.

[0019] As a preferred solution of the hospital data transmission security management method described in the present invention, the specific calculation formula for data encryption in S2 is:

[0020]

[0021] Where D is the original data, E(D) is the encrypted data, K is the encryption key, f(t) is the data stream function during transmission, t represents time, D(t) is the original data stream at time t, K(t) is the encryption key at time t, α is the encryption attenuation coefficient, which ensures that the data will not be distorted during transmission, H is the hash function used for data integrity verification, Φ is the homomorphic encryption operator, which ensures that the encrypted data can be directly calculated, and N is the number of summation items, which represents the future time point considered.

[0022] As a preferred solution of the hospital data transmission security management method described in the present invention, the specific calculation formula for data decryption in S3 is:

[0023]

[0024] Where D is the original data; E(D) is the encrypted data; K is the encryption key; f(t) is the data flow function during transmission; t represents time, D(t) is the original data flow at time t, K(t) is the encryption key at time t, β is the decryption growth coefficient, which ensures that the data will not be distorted during transmission, and H -1 is the inverse hash function, used for data integrity verification, Φ -1 is a homomorphic decryption operator, which ensures that the encrypted data can be directly calculated. N is the number of summation items, which represents the future time point considered.

[0025] As a preferred solution of the hospital data transmission security management method described in the present invention, the identification formula for abnormal behavior detection in S4 is:

[0026]

[0027] Where X(t) is the feature vector of the transmitted data at time t; W is the weight vector of the model; σ(z) is the activation function, and the Sigmoid function is selected, which is defined as α is the attenuation coefficient, which ensures the attenuation effect of the data over time; τ is the integral variable, which represents the past time; N is the number of summation items, which means that future time points are taken into consideration.

[0028] As a preferred solution of the hospital data transmission security management method described in the present invention, the abnormal behavior detection includes the following steps:

[0029] Extract the transmission data feature vector X(t) from the transmission data in real time;

[0030] Calculate A(t) at each time point t;

[0031] The calculated A(t) is compared with the preset threshold, and when A(t) exceeds the preset threshold, it is determined to be abnormal behavior.

[0032] As a preferred solution of the hospital data transmission security management method described in the present invention, the response mechanism in S4 includes recording abnormal logs, sending alarm information, and blocking abnormal connections.

[0033] In a third aspect, an embodiment of the present invention provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor implements the above-mentioned hospital data transmission security management system when executing the computer program.

[0034] Beneficial effects of the present invention:

[0035] 1. The encryption formula uses advanced integral functions and complex summation functions to ensure the complexity and security of data during encryption and decryption. At the same time, the homomorphic encryption operator Φ and the inverse operator Φ are used. -1 , which ensures that the encrypted data can be directly calculated, meeting the actual needs of hospital information systems, and combines the hash function H and the inverse function H -1 , ensuring the integrity and verification capabilities of data during transmission, ensuring that even if the data is intercepted during transmission, it cannot be interpreted and used, thereby ensuring the security of private data such as patient information and medical records.

[0036] 2. By real-time monitoring of network traffic and system logs, abnormal behaviors in the data transmission process can be discovered and responded to in a timely manner, such as unauthorized access, abnormal data transmission rate, etc. The rapid response mechanism effectively reduces the potential risk of data leakage or attack, and ensures the stability and security of the hospital information system. Timely recording of abnormal logs and sending of alarm information can help quickly locate and handle security incidents, and block abnormal connections to prevent further damage. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for describing the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative labor. Among them:

[0038] Figure 1 This is a system block diagram of a hospital data transmission security management system proposed by the present invention;

[0039] Figure 2 A flowchart of a hospital data transmission security management method proposed by the present invention;

[0040] Figure 3 A bar graph showing the data transmission volume changing with time points in Example 2;

[0041] Figure 4 It is a line graph of the abnormal detection situation and response time at various time points in Example 2. DETAILED DESCRIPTION

[0042] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the accompanying drawings.

[0043] In the following description, many specific details are set forth to facilitate a full understanding of the present invention, but the present invention may also be implemented in other ways different from those described herein, and those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0044] Secondly, the term "one embodiment" or "embodiment" as used herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The term "in one embodiment" that appears in different places in this specification does not necessarily refer to the same embodiment, nor does it refer to a separate or selective embodiment that is mutually exclusive with other embodiments.

[0045] Example 1

[0046] Reference Figure 1-2 The present invention provides a hospital data transmission security management system, comprising:

[0047] Data acquisition module: collects transmission data;

[0048] Data transmission module: responsible for data encryption, transmission and decryption;

[0049] Monitoring and anomaly detection module: Based on machine learning models, it monitors the data transmission process in real time and detects abnormal behaviors;

[0050] Logging module: records all data transmission and operation logs to form detailed transmission logs for easy auditing and tracking. Data is encrypted from the sender, transmitted over the network to the receiver for decryption. At the same time, the monitoring system monitors the data transmission process in real time, detects and handles abnormal behavior.

[0051] Among them, the data transmission module includes an encryption unit: encrypting the original data; a transmission unit: transmitting the encrypted data from the sending end to the receiving end; and a decryption unit: decrypting the encrypted data sent by the sending end to restore it to the original data.

[0052] Furthermore, the monitoring and anomaly detection module includes a monitoring unit: real-time monitoring of data transmission and extraction of feature vectors of the transmission data at time t; an anomaly detection unit: detection of abnormal behavior in the data transmission process; and a response unit: when abnormal behavior is detected, an alarm is issued and the data connection is cut off.

[0053] This embodiment also provides a hospital data transmission security management method, which specifically includes the following steps:

[0054] S1. Collect data in real time and pre-process the data;

[0055] S2, data encryption: before data transmission, the data is encrypted to generate ciphertext, and the encrypted data is sent to the receiving end;

[0056] S3, data decryption: After receiving the encrypted data, the receiving end decrypts the data and restores the plaintext data;

[0057] S4, monitoring and anomaly detection: When data transmission begins, network traffic and system logs are monitored in real time. If abnormal behavior is detected, the response mechanism is triggered immediately, including recording abnormal logs, sending alarm information, and blocking abnormal connections;

[0058] S5. Log Recording: Each data transmission and operation is recorded by the logging module to form a detailed transmission log. The log data is audited regularly to ensure the transparency and traceability of the data transmission process.

[0059] Furthermore, the specific calculation formula for data encryption in S2 is:

[0060]

[0061] Where D is the original data, E(D) is the encrypted data, K is the encryption key, f(t) is the data flow function during transmission, t represents time, D(t) is the original data flow at time t, K(t) is the encryption key at time t, α is the encryption attenuation coefficient, which ensures that the data will not be distorted during transmission, H is the hash function used for data integrity verification, Φ is the homomorphic encryption operator, which ensures that the encrypted data can be directly calculated, N is the number of summation items, which represents the future time point considered, and the encryption formula E(D,K) represents the encrypted data obtained by the original data D(t) under the action of the encryption key K(t) within the time range T through homomorphic encryption operations and complex summation functions. Its value range is the set of encrypted data, which is safe during transmission and can be calculated in an encrypted state.

[0062] Furthermore, the specific calculation formula for data decryption in S3 is:

[0063]

[0064] Where D is the original data; E(D) is the encrypted data; K is the encryption key; f(t) is the data flow function during transmission; t represents time, D(t) is the original data flow at time t, K(t) is the encryption key at time t, β is the decryption growth coefficient, which ensures that the data will not be distorted during transmission, and H -1 is the inverse hash function, used for data integrity verification, Φ -1 is a homomorphic decryption operator, ensuring that the encrypted data can be directly calculated, N is the number of summation items, representing the future time point considered, and the decryption formula D represents the original data recovered from the encrypted data E(D,K) through the homomorphic decryption operation. Its value range is the set of original data, ensuring that the decrypted data is consistent with the original data, maintaining the integrity and correctness of the data.

[0065] Furthermore, the identification formula for abnormal behavior detection in S4 is:

[0066]

[0067] Where X(t) is the feature vector of the transmitted data at time t; W is the weight vector of the model; σ(z) is the activation function, and the Sigmoid function is selected, which is defined as α is the attenuation coefficient, which ensures the attenuation effect of data over time; τ is the integral variable, which represents the past time; N is the number of summation items, which means that future time points are taken into account, A(t) is calculated in real time, and abnormal behaviors that may occur during data transmission are monitored. When A(t) exceeds the predetermined threshold, the alarm system is triggered to notify the management personnel to take corresponding measures.

[0068] Furthermore, abnormal behavior detection includes the following steps:

[0069] Extract the transmission data feature vector X(t) from the transmission data in real time;

[0070] Calculate A(t) at each time point t;

[0071] The calculated A(t) is compared with the preset threshold, and when A(t) exceeds the preset threshold, it is determined to be abnormal behavior.

[0072] Furthermore, the response mechanism in S4 includes recording abnormal logs, sending alarm information, blocking abnormal connections, recording abnormal data in operation, and sending alarm information to staff before taking corresponding measures. At the same time, abnormal connections are blocked to avoid data leakage.

[0073] This embodiment also provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor implements the above-mentioned hospital data transmission security management system when executing the computer program.

[0074] Example 2

[0075] Reference Figure 3-4 , which is the second embodiment of the present invention. This embodiment is different from the first embodiment in that, in order to verify its beneficial effects, specific implementation data of the present invention is provided. The specific process of this experiment is as follows:

[0076] S1, real-time data collection and preprocessing, using data acquisition equipment to collect data flow and system logs in the hospital information system in real time;

[0077] S2, data encryption and transmission, before data transmission, the pre-processed data is encrypted to generate ciphertext, ensuring the security of the encryption algorithm and key management system to prevent the data from being obtained by unauthorized visitors during the transmission process;

[0078] S3, data reception and decryption, the receiving end receives the encrypted data and decrypts it using the corresponding key to restore the plaintext form of the data;

[0079] S4. Real-time monitoring and anomaly detection: real-time monitoring of network traffic and system logs during data transmission, and use of anomaly detection systems to detect abnormal behaviors such as unauthorized data access and abnormal data transmission rates. When abnormal behaviors are detected, the response mechanism is immediately triggered to record abnormal logs, send alarm information, and block abnormal connections to ensure the security of data transmission;

[0080] S5. Logging,Each data transmission and operation is recorded by the logging module, which records,in detail the key information such as the time, type, source and destination of the,operation.

[0081] The data collection and analysis results in this embodiment are as follows:

[0082] Time Data Transfer Volume (MB) Anomaly detection situation Response time (seconds) 8:00 120 No abnormality - 9:00 180 Anomaly detected 10 10:00 150 No abnormality - 11:00 200 Anomaly detected 8

[0083] It can be seen from the above table that the real-time monitoring and anomaly detection system effectively detected abnormal behavior, such as abnormal data transmission detected at 9:00 and 11:00, and the response mechanism was triggered in time. The average response time of the response mechanism was short when an anomaly was detected, such as 10 seconds at 9:00 and 8 seconds at 11:00, indicating that the invention's rapid response capability helps reduce potential security risks and data leakage risks.

[0084] By comparing the data in the examples, it can be clearly seen that the invention has higher security and efficiency than the traditional data transmission management method. In particular, the application in real-time monitoring and anomaly detection demonstrates the innovation and advantages of the invention, and effectively makes up for the shortcomings of the traditional method in terms of security and response speed.

[0085] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A hospital data transmission security management system, characterized by: include: Data acquisition module: collects transmission data; Data transmission module: responsible for data encryption, transmission and decryption; Monitoring and anomaly detection module: Based on machine learning models, it monitors the data transmission process in real time and detects abnormal behaviors; Logging module: records all data transmission and operation logs to form detailed transmission logs for easy auditing and tracking.

2. A hospital data transmission security management system according to claim 1, characterized in that: The data transmission module includes an encryption unit for encrypting original data; a transmission unit for transmitting the encrypted data from a sending end to a receiving end; and a decryption unit for decrypting the encrypted data sent from the sending end to restore it to the original data.

3. A hospital data transmission security management system according to claim 2, characterized in that: The monitoring and anomaly detection module includes a monitoring unit: monitoring data transmission in real time and extracting feature vectors of the transmission data at time t; an anomaly detection unit: detecting abnormal behavior in the data transmission process; and a response unit: sounding an alarm and cutting off the data connection when abnormal behavior is detected.

4. A hospital data transmission security management method, based on a hospital data transmission security management system according to any one of claims 1 to 3, characterized in that: The specific steps include: S1. Collect data in real time and pre-process the data; S2, data encryption: before data transmission, the data is encrypted to generate ciphertext, and the encrypted data is sent to the receiving end; S3, data decryption: After receiving the encrypted data, the receiving end decrypts the data and restores the plaintext data; S4, monitoring and anomaly detection: When data transmission begins, network traffic and system logs are monitored in real time. If abnormal behavior is detected, the response mechanism is triggered immediately, including recording abnormal logs, sending alarm information, and blocking abnormal connections; S5. Log Recording: Each data transmission and operation is recorded by the logging module to form a detailed transmission log. The log data is audited regularly to ensure the transparency and traceability of the data transmission process.

5. A hospital data transmission security management method according to claim 4, characterized in that: The specific calculation formula for data encryption in S2 is: Where D is the original data, E(D) is the encrypted data, K is the encryption key, f(t) is the data stream function during transmission, t represents time, D(t) is the original data stream at time t, K(t) is the encryption key at time t, α is the encryption attenuation coefficient, which ensures that the data will not be distorted during transmission, H is the hash function used for data integrity verification, Φ is the homomorphic encryption operator, which ensures that the encrypted data can be directly calculated, and N is the number of summation items, which represents the future time point considered.

6. A hospital data transmission security management method according to claim 5, characterized in that: The specific calculation formula for data decryption in S3 is: Where D is the original data; E(D) is the encrypted data; K is the encryption key; f(t) is the data flow function during transmission; t represents time, D(t) is the original data flow at time t, K(t) is the encryption key at time t, β is the decryption growth coefficient, which ensures that the data will not be distorted during transmission, and H -1 is the inverse hash function, used for data integrity verification, Φ -1 is a homomorphic decryption operator, which ensures that the encrypted data can be directly calculated. N is the number of summation items, which represents the future time point considered.

7. A hospital data transmission security management method according to claim 6, characterized in that: The identification formula for abnormal behavior detection in S4 is: Where X(t) is the feature vector of the transmitted data at time t; W is the weight vector of the model; σ(z) is the activation function, and the Sigmoid function is selected, which is defined as α is the attenuation coefficient, which ensures the attenuation effect of the data over time; τ is the integral variable, which represents the past time; N is the number of summation items, which means that future time points are taken into consideration.

8. A hospital data transmission security management method according to claim 7, characterized in that: The abnormal behavior detection comprises the following steps: Extract the transmission data feature vector X(t) from the transmission data in real time; Calculate A(t) at each time point t; The calculated A(t) is compared with the preset threshold, and when A(t) exceeds the preset threshold, it is determined to be abnormal behavior.

9. A hospital data transmission security management method according to claim 8, characterized in that: The response mechanism in S4 includes recording abnormal logs, sending alarm information, and blocking abnormal connections.

10. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, a hospital data transmission security management system as described in any one of claims 1 to 3 is implemented.

Images