Information security encryption method and system based on smart medical care
By evaluating the security level of medical information and hierarchical encryption in a smart medical environment, and integrating key resolution ports and information scheduling ports, the problem of insufficient security of medical information is solved and efficient information security protection and management is achieved.
Patent Information
- Application Number
- CN202411825165.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-12
- Publication Date
- 2025-05-16
- Estimated Expiration
- 2044-12-12
AI Technical Summary
The medical information stored in a smart medical environment is insufficient in security and faces problems such as data leakage, tampering and illegal access.
By obtaining target medical information, conducting information security level assessment, displaying content based on the evaluation results, encrypting the content layer by layer to form an encrypted database, generating corresponding scheduling keys, and designing a port allocation plan, integrating the key resolution port, information scheduling port and encrypted database to generate medical encrypted information.
It significantly improves the security of medical information, prevents data leakage and illegal access, enhances the flexibility and management efficiency of the system, and realizes effective processing and monitoring of external interactive information.
Smart Images

Figure CN119312398B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of medical information security encryption, and in particular to an information security encryption method and system based on smart medical care. Background Art
[0002] With the widespread application of information technology in the medical industry, smart healthcare has become an important trend to improve the efficiency of medical services. In a smart medical environment, the sensitivity and importance of medical information exposes it to serious security threats, including data leakage, tampering, and illegal access. In addition, the information management system of the smart medical environment lacks a flexible scheduling mechanism and cannot flexibly schedule corresponding medical information according to different scenarios and needs. Summary of the invention
[0003] The purpose of the present invention is to provide an information security encryption method and system based on smart medical care, aiming to solve the problem of insufficient security of medical information stored in a smart medical environment in the prior art.
[0004] The present invention is implemented in this way. In a first aspect, the present invention provides an information security encryption method based on smart medical care, comprising:
[0005] Acquiring target medical information, and performing an information security level assessment on the target medical information to obtain a security level assessment result of the target medical information;
[0006] Performing information display scheduling processing on the target medical information according to the security level assessment result to obtain information display content corresponding to a number of information display scenarios;
[0007] Performing information encryption processing on the plurality of information display contents in sequence to obtain an information encryption database having a plurality of information encryption levels;
[0008] Generate a key according to the information display scene corresponding to the information display content contained in the information encryption level, and encapsulate the generated key to obtain an information scheduling port corresponding to each information encryption level;
[0009] A plan for port allocation is designed according to each of the information scheduling ports to obtain a key parsing port for receiving external interaction information to generate a port scheduling key;
[0010] The key parsing port, each of the information dispatching ports and the information encryption database are integrated and processed to obtain the medical encryption information of the target medical information.
[0011] In a second aspect, the present invention provides an information security encryption system based on smart medical care, which is used to implement an information security encryption method based on smart medical care as described in any one of the first aspects, including:
[0012] An information evaluation module, used to obtain target medical information, and perform information security level evaluation on the target medical information to obtain a security level evaluation result of the target medical information;
[0013] A display scheduling module, used to schedule the display of the target medical information according to the security level assessment result, and obtain information display content corresponding to a number of information display scenes;
[0014] An information encryption module, used to perform information encryption processing in sequence based on the information display contents to obtain an information encryption database having a plurality of information encryption levels;
[0015] An information scheduling module, used to generate a key according to the information display scene corresponding to the information display content contained in the information encryption level, and obtain an information scheduling port corresponding to each information encryption level;
[0016] A scheduling allocation module, used for designing a plan for port allocation according to each of the information scheduling ports, and obtaining a key parsing port for receiving external interaction information to generate a port scheduling key;
[0017] The information integration module is used to integrate the key parsing port, each of the information scheduling ports and the information encryption database to obtain the medical encryption information of the target medical information.
[0018] The present invention provides an information security encryption method based on smart medical care, which has the following beneficial effects:
[0019] The present invention collects target medical information and conducts a security level assessment, dispatches information according to the assessment results, generates corresponding display content, encrypts the display content layer by layer to form an encrypted database, generates corresponding dispatch keys according to the encryption level and display scenario, formulates a port allocation plan for the information dispatch port, creates a key parsing port, integrates the key parsing port, the dispatching port and the encryption database, and generates medical encrypted information. This method significantly improves the security of medical information through security level assessment and layered encryption, prevents data leakage and illegal access, and at the same time, dynamic scheduling and port design enhance the flexibility and management efficiency of the system, realizes effective processing and monitoring of external interactive information, and solves the problem of insufficient security of medical information stored in smart medical environments in the prior art. BRIEF DESCRIPTION OF THE DRAWINGS
[0020] Figure 1This is a schematic diagram of the steps of an information security encryption method based on smart medical care provided by an embodiment of the present invention;
[0021] Figure 2 It is a structural diagram of an information security encryption system based on smart medical care provided by an embodiment of the present invention. DETAILED DESCRIPTION
[0022] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.
[0023] The implementation of the present invention is described in detail below in conjunction with specific embodiments.
[0024] Reference Figure 1 , Figure 2 As shown, a preferred embodiment of the present invention is provided.
[0025] In a first aspect, the present invention provides an information security encryption method based on smart medical care, comprising:
[0026] S1: Acquire target medical information, and perform information security level assessment on the target medical information to obtain a security level assessment result of the target medical information;
[0027] S2: performing information display scheduling processing on the target medical information according to the security level assessment result, and obtaining information display content corresponding to a plurality of information display scenarios;
[0028] S3: performing information encryption processing on the plurality of information display contents in sequence to obtain an information encryption database having a plurality of information encryption levels;
[0029] S4: generating a key according to the information display scene corresponding to the information display content contained in the information encryption level, and encapsulating the generated key to obtain an information scheduling port corresponding to each information encryption level;
[0030] S5: designing a plan for port allocation according to each of the information scheduling ports, and obtaining a key parsing port for receiving external interaction information to generate a port scheduling key;
[0031] S6: Integrate the key parsing port, each of the information dispatching ports and the information encryption database to obtain the medical encryption information of the target medical information.
[0032] Specifically, in step S1 of the embodiment provided by the present invention, the source of the target medical information is determined, such as an electronic health record (EHR) system, a laboratory information management system (LIMS), a picture information system (PACS), etc., and an API, a database query or a data import tool is used to extract the target medical information from each data source, including medical records, diagnostic reports, test results, imaging data, etc. The acquired medical information is classified by category, such as personal information, diagnostic information, treatment information, test results, etc., and necessary annotations are added to each type of information, such as patient ID, timestamp, data source, etc., for subsequent processing and auditing.
[0033] More specifically, assess the privacy sensitivity of the information, for example, patients’ personally identifiable information (PII) has a higher privacy sensitivity, and set the information security level based on the business needs and data usage scenarios of the medical institution.
[0034] More specifically, the information security registration assessment of the target medical information can be carried out by designing an information security level assessment model, which usually includes a rule engine, a scoring mechanism, and a weight distribution. Based on preset rules and algorithms, each piece of information is scored and classified, and the assessment results of automated tools and manual reviews are summarized to generate a security level assessment report for each target medical information. A security level label is added to each target medical information, and the assessment basis and process are recorded. The assessment results and the labeled medical information are stored in a secure database to ensure data integrity and traceability.
[0035] It is understandable that by conducting security level assessment on target medical information, hierarchical protection of information can be achieved, ensuring that sensitive information is more protected, reducing the risk of information leakage and unauthorized access, and protecting patient privacy and medical data security.
[0036] Specifically, in step S2 of the embodiment provided by the present invention, the security level label of each piece of medical information is extracted from the security level assessment result, and the medical information is classified according to the security level, such as L1 (high sensitivity), L2 (medium sensitivity), L3 (low sensitivity), etc.
[0037] More specifically, different display scenarios are determined, such as doctor viewing, patient viewing, researcher viewing, administrative staff viewing, etc., and permission levels and display content are defined according to different scenarios. For example, doctors need to access all information, while patients can only view information related to themselves.
[0038] More specifically, information display templates are designed for different display scenarios, and the display method of information of each security level in the scenario is clarified. Doctor viewing template: displays highly sensitive information such as detailed diagnosis, treatment plan, laboratory results, etc. Patient viewing template: displays medium and low sensitive information such as basic diagnosis information, treatment progress, appointment information, etc. Researcher template: displays de-identified statistical data and analysis results; Administrative staff template: displays summary data and reports related to management.
[0039] More specifically, when a user requests to view medical information, permission verification is first performed to verify the user's identity and corresponding permission level. The medical information is filtered based on the user's permission level and security level assessment results to ensure that the user can only view information within his or her permission scope. According to the preset display template, the filtered information is assembled into display content suitable for the current scenario.
[0040] More specifically, information content suitable for current users and scenarios is generated and displayed in real time to ensure the timeliness and accuracy of information, and a friendly user interface is designed to ensure the clarity and ease of use of information display.
[0041] It is understandable that by scheduling the display of information according to the security level, it is ensured that sensitive information is only displayed in appropriate scenarios, improving information security, and strict permission verification and content filtering mechanisms can effectively prevent unauthorized access to information.
[0042] Specifically, in step S3 of the embodiment provided by the present invention, an encryption algorithm is selected according to the displayed content of the information, and the information is encrypted in sequence according to the security level to form several information encryption levels.
[0043] More specifically, the highest level of encryption is performed on the most sensitive information, using the strongest encryption algorithm and the longest key, moderate encryption is performed on medium sensitive information, using moderate encryption algorithms and keys, and basic encryption is performed on low sensitive information, using basic encryption algorithms and shorter keys.
[0044] More specifically, the encrypted information is stored in an information encryption database according to encryption levels, ensuring that information at each level is stored and managed independently.
[0045] More specifically, the structure of the information encryption database is designed to ensure that information at different encryption levels can be effectively stored and managed, the database is partitioned and stored according to the encryption level to ensure the physical isolation of highly sensitive information and less sensitive information, an effective indexing mechanism is established for the encrypted database, and the retrieval and access efficiency of encrypted information is optimized.
[0046] It can be understood that by encrypting information in a hierarchical manner, we can ensure that information of each sensitivity level is properly protected and improve overall data security. Through strict key management strategies, we can ensure the safe storage and use of encryption keys and prevent key leakage and abuse. Through encryption processing, we can ensure the integrity of information during storage and transmission and prevent data tampering and forgery. Encrypted information can be decrypted and verified through mechanisms to ensure the authenticity and integrity of data and prevent unauthorized data modification.
[0047] Specifically, in step S4 of the embodiment provided by the present invention, specific information display scenarios are identified and defined according to different information encryption levels and display contents, such as doctor access scenarios, patient access scenarios, administrator access scenarios, etc. in the medical information system, and different information display scenarios are classified and graded to ensure that each scenario has clear security requirements and access control strategies.
[0048] More specifically, analyze the security requirements and access patterns of each information display scenario, determine the appropriate key generation strategy, select the key generation algorithm suitable for the information display scenario and information encryption level, and collect the parameters required for key generation. It can be understood that the generation of the key is related to the encryption strategy implemented by the information encryption level in the previous step.
[0049] More specifically, based on the collected parameters and predefined key generation strategies, keys for the corresponding information encryption levels are generated, scene keys are generated based on specific information display scenarios, and level keys are generated based on the information encryption levels, ensuring that keys for each level are independent and secure.
[0050] More specifically, an independent information scheduling port is allocated to each information encryption level and corresponding display scene to ensure information scheduling and access control at different levels and scenes, and the access rights and security policies of each information scheduling port are configured to ensure that only authorized users and applications can access and schedule encrypted information through the corresponding ports.
[0051] It can be understood that by generating keys based on information display scenarios, ensuring that the keys for each scenario are independent and unique, data security is improved, and different information encryption levels use different keys and encryption strategies to ensure that information at each level is properly protected. Through the configuration and management of information scheduling ports, refined access control for different users and applications can be achieved to improve user experience.
[0052] Specifically, in step S5 of the embodiment provided by the present invention, different information scheduling ports in the system are determined, and the information encryption level corresponding to each information scheduling port and the type of external interactive information corresponding to each information scheduling port are analyzed.
[0053] More specifically, the port allocation plan pre-allocates various external interaction information and determines which information scheduling port the various external interaction information corresponds to. In other words, the port allocation plan is a mapping relationship between external interaction information and information scheduling ports.
[0054] More specifically, the function of the information dispatching port is to decrypt the information encryption layer, so as to retrieve the information display content in the information encryption layer. Therefore, it can be seen that the external interaction information is the account login behavior performed by the user for information display. The external interaction information corresponding to the accounts of different users is different, and thus the information dispatching port retrieved is different.
[0055] More specifically, the port allocation plan and key parsing port configuration are integrated into the existing system to ensure compatibility with existing functions and security mechanisms, functional tests are performed to verify the correctness of the port allocation and key parsing functions, and security tests are performed to ensure the security of the port allocation and key generation process to prevent unauthorized access and key leakage.
[0056] It can be understood that the port scheduling key is generated through the key parsing port, ensuring that the key of each information scheduling port is independent and secure, preventing security risks caused by key sharing, supporting dynamic generation and management of keys, and improving the security and protection capabilities of the system.
[0057] Specifically, in step S6 of the embodiment provided by the present invention, the overall architecture of the integrated system is designed to ensure that the key parsing port, information scheduling port and information encryption database can communicate effectively, and define the interfaces and protocols between each component, including data format, transmission method and security requirements.
[0058] More specifically, configure the key parsing port to ensure that it can receive and process external interaction information, generate the corresponding port scheduling key based on the external information through a preset key generation algorithm, receive medical information requests from users or systems through the information scheduling port, perform request verification and authorization, and assign the request to the corresponding encryption database according to the scheduling rules.
[0059] More specifically, the target medical information is queried from the information encryption database, and the generated key is used to encrypt the information. The encrypted medical information is stored in the database for subsequent access. The encrypted medical information is integrated to form medical encryption information of the target medical information. The medical encryption information is fed back to the requester through the information dispatching port to ensure safe and reliable transmission of information.
[0060] It can be understood that through the collaborative work of key parsing and information scheduling, the security of medical information can be improved, the protection of data during transmission and storage can be ensured, the integrated processing flow can simplify information request and response time, the overall performance and response speed of the system can be improved, and a well-designed integrated architecture and scheduling mechanism can enable the system to adapt to different application scenarios and user needs and have good scalability.
[0061] The present invention provides an information security encryption method based on smart medical care, which has the following beneficial effects:
[0062] The present invention collects target medical information and conducts a security level assessment, dispatches information according to the assessment results, generates corresponding display content, encrypts the display content layer by layer to form an encrypted database, generates corresponding dispatch keys according to the encryption level and display scenario, formulates a port allocation plan for the information dispatch port, creates a key parsing port, integrates the key parsing port, the dispatching port and the encryption database, and generates medical encrypted information. This method significantly improves the security of medical information through security level assessment and layered encryption, prevents data leakage and illegal access, and at the same time, dynamic scheduling and port design enhance the flexibility and management efficiency of the system, realizes effective processing and monitoring of external interactive information, and solves the problem of insufficient security of medical information stored in smart medical environments in the prior art.
[0063] Preferably, the step of acquiring target medical information, and performing information security level assessment on the target medical information to obtain the security level assessment result of the target medical information comprises:
[0064] S11: performing information extraction processing in a corresponding manner on the target original data collected through multiple channels to obtain the target medical information fed back by the target original data collected through each channel;
[0065] S12: converting the target medical information into a format according to a preset information expression format to obtain a medical information matrix having a plurality of medical information;
[0066] S13: Analyzing and processing the information sensitivity of the medical information on the medical information matrix to obtain a first evaluation list for providing information sensitivity feedback on each piece of medical information in the medical information matrix;
[0067] S14: Analyzing and processing the information leakage impact of medical information on the medical information matrix to obtain a second evaluation list for providing information leakage impact feedback on each piece of medical information in the medical information matrix;
[0068] S15: performing a comprehensive assessment of the security level of each piece of medical information in the medical information matrix according to the first assessment list and the second assessment list to obtain the security level of each piece of medical information;
[0069] S16: The security level of each piece of medical information in the medical information matrix is taken together as the security level assessment result of the target medical information.
[0070] Specifically, target raw data are collected through different channels (such as hospital systems, patient questionnaires, and laboratory reports), the collected raw data are processed, and content related to medical information is extracted to form preliminary target medical information.
[0071] More specifically, according to a preset information expression format (such as JSON, XML, etc.), the target medical information is converted into a unified format, and the converted information is integrated into a medical information matrix to facilitate subsequent analysis. A sensitivity analysis is performed on each piece of information in the medical information matrix to evaluate its impact on patient privacy, and a first evaluation list is generated to feedback the sensitivity of each piece of medical information.
[0072] More specifically, the potential impact of medical information leakage is analyzed, the legal, ethical and economic consequences are considered, and a second evaluation list is formed to feedback the impact of each medical information leakage.
[0073] More specifically, the first evaluation list and the second evaluation list are combined to conduct a comprehensive security level assessment on each piece of information in the medical information matrix to determine the security level of each piece of medical information. Based on its sensitivity and leakage impact, the security level of each piece of medical information is summarized as the security level assessment result of the target medical information.
[0074] It is understandable that systematically evaluating the security level of medical information can reduce the risk of information leakage, provide medical institutions with a scientific basis for security management, support policy formulation and risk control, help institutions allocate resources reasonably, and focus on protecting highly sensitive information.
[0075] Preferably, the step of performing information display scheduling processing on the target medical information according to the security level assessment result to obtain information display content corresponding to a plurality of information display scenarios includes:
[0076] S21: Generate corresponding information display scenarios according to predefined user roles; wherein the user roles include doctor users, patient users, researcher users and administrative staff users, and the information display scenarios include doctor scenarios, patient scenarios, researcher scenarios and administrative staff scenarios;
[0077] S22: performing a corresponding allocation process of the medical information security level according to each of the information display scenarios, and obtaining an information security level allocation strategy corresponding to each of the information display scenarios; wherein the information security level allocation strategy is used to describe the information security level corresponding to the target medical information and the information display scenario;
[0078] S23: performing information disassembly processing on the target medical information according to each of the information security level allocation strategies and the security level assessment results, to obtain a subset of medical information corresponding to each of the information security level allocation strategies;
[0079] S24: extracting key expression information from each of the medical information subsets according to each of the user roles, and obtaining medical information expression content suitable for each of the user roles;
[0080] S25: Convert the expression format of each medical information expression content according to each user role to obtain information display content corresponding to each information display scene.
[0081] Specifically, pre-defined user roles are clearly defined, including doctor users, patient users, researcher users and administrative staff users, and corresponding information display scenarios are generated according to each user role, such as doctor scenario, patient scenario, etc. It can be understood that the information display scenario is a specific scenario for displaying content of the target medical information corresponding to the user role.
[0082] More specifically, according to the information display scenario, a corresponding medical information security level is assigned to each scenario to ensure compliance with role needs and security requirements, generate an information security level allocation strategy, and guide information display and access control.
[0083] More specifically, according to the security level allocation strategy, the target medical information is disassembled to form medical information subsets applicable to each information security level allocation strategy, ensuring that each medical information subset meets the security requirements of a specific scenario.
[0084] More specifically, according to each user role, key expression information of the medical information subset is extracted, and the most relevant information is refined to ensure that the extracted information meets the needs and understanding of the user role. According to the needs of each user role, the format of the medical information expression content is converted to generate a format suitable for display (such as charts, text, etc.), and finally generate specific information display content for each information display scenario.
[0085] It is understandable that it is necessary to ensure that different user roles can obtain medical information suitable for their needs, improve the effectiveness of information transmission, effectively control information access through security level allocation and information disassembly, reduce the risk of data leakage, and ensure that the information expression content is in line with the user's understanding habits, thereby improving user experience and information acquisition efficiency.
[0086] Preferably, the step of performing information encryption processing in sequence based on the plurality of information display contents to obtain an information encryption database having a plurality of information encryption levels comprises:
[0087] S31: performing ordinal number distribution processing of encryption importance for each of the information display contents according to the information display scene, to obtain an encryption ordinal number for each of the information display contents;
[0088] S32: sorting the corresponding information display contents according to the encryption sequence numbers to obtain an information sequence to be encrypted consisting of the information display contents arranged from small to large according to the encryption sequence numbers;
[0089] S33: Retrieve the information display contents in the information sequence to be encrypted and retrieve the corresponding information encryption strategies respectively;
[0090] S34: executing the information encryption strategy from the information display content with the smallest encryption sequence number in the information sequence to be encrypted, and obtaining an information encryption level at which the information encryption strategy is executed;
[0091] S35: Starting from the information encryption level with the first encryption sequence number in the information sequence to be encrypted, extracting information features based on the information encryption level that has completed the information encryption strategy, to obtain hierarchical information features;
[0092] S36: Generate a key according to the hierarchical information feature to obtain a hierarchical key, and use the hierarchical key in the execution of the information encryption strategy of the information encryption level with the next encryption sequence number in the information sequence to be encrypted to obtain the information encryption level with the next encryption sequence number, and return the next information encryption level to the step of extracting information features based on the information encryption level that has completed the execution of the information encryption strategy to obtain the hierarchical information feature, until all the information encryption levels that have completed the execution of the information encryption strategy are obtained;
[0093] S37: Combining the information encryption levels in sequence according to the arrangement order of the corresponding encryption ordinal numbers to obtain the information encryption database.
[0094] Specifically, according to the information display scenario, the encryption importance of each information display content is evaluated and ranked to generate an encryption ordinal number. According to the encryption ordinal number, the information display content is arranged in ascending order to form an information sequence to be encrypted. The encryption ordinal number is used to describe the encryption degree of the encryption strategy executed corresponding to the information display content, that is, the information display content with a higher encryption ordinal number invokes an encryption strategy with a higher encryption degree.
[0095] More specifically, the corresponding information encryption strategy is retrieved for each information display content in the information sequence to be encrypted to ensure the effectiveness of the encryption measures, and the encryption strategy is executed starting from the information display content with the smallest encryption sequence number to form the first information encryption level.
[0096] More specifically, based on the information features of the previous encryption level, the corresponding level information features are extracted, and a level key is generated according to the level information features to provide security for subsequent information encryption. The generated level key is applied to the information encryption strategy of the next encryption sequence in the information sequence to be encrypted, and encryption is performed in sequence until all content is encrypted. The level key is based on the information encryption level of the encrypted information to extract information features, and a piece of data is extracted from it as a key to participate in the encryption of the subsequent information display content. If you want to decrypt the information encryption level of the subsequent information display content, you must decrypt this key, and the means of decrypting this key is to call the corresponding information scheduling port through the interactive information in the preset scheme, which prevents the encryption of the information display content from being decrypted by bypassing the interactive authentication through other forms.
[0097] More specifically, each information encryption level is combined in sequence according to the execution order, and finally an information encryption database is formed.
[0098] It is understandable that by encrypting layer by layer, differentiated security measures are implemented for different information display contents, the overall data protection level is improved, systematic sorting and policy execution reduce confusion in the encryption process, improve processing efficiency, and use hierarchical key generation mechanism to ensure that each encryption layer has an independent key, further reducing the risk of information leakage.
[0099] Preferably, the step of generating a key according to the information display scene corresponding to the information display content contained in the information encryption level to obtain the information scheduling port corresponding to each information encryption level includes:
[0100] S41: acquiring encryption steps executed at the corresponding information encryption level according to the information display scene;
[0101] S42: performing reverse calculation according to the encryption steps executed by the information encryption level to obtain an information acquisition key for decrypting the corresponding information encryption level;
[0102] S43: performing reverse calculation according to the encryption steps executed by the information encryption level to obtain an information acquisition key for decrypting the information encryption level;
[0103] S44: generating a key scene label for describing the information display scene corresponding to the information acquisition key according to the information display scene corresponding to each information acquisition key;
[0104] S45: Bind the key scenario tag with the information acquisition key to obtain the information scheduling port.
[0105] Specifically, according to the information display content contained in the information encryption level, the corresponding information display scene is determined, and the encryption steps to be executed are obtained from the information display scene corresponding to the information encryption level. In preparation for subsequent decryption, reverse calculation is performed based on the encryption steps to obtain the information acquisition key for decrypting the information encryption level.
[0106] More specifically, the encryption step is to obtain the encryption strategy executed by obtaining the information display content and the hierarchical keys involved in the encryption. After the encryption strategy is obtained, the corresponding decryption strategy can be generated, and the decryption strategy can be converted to obtain the decryption method of the corresponding information encryption level. The hierarchical key is further substituted into the decryption method to obtain the information acquisition key used to decrypt the information encryption level.
[0107] More specifically, a key scene label describing the corresponding information display scene is generated for each information acquisition key to facilitate identification and management, and the key scene label is bound to the information acquisition key to generate a final information scheduling port.
[0108] It can be understood that by combining clear scenario labels and keys, the efficiency of information decryption management can be improved, the security and controllability of information can be ensured, and a clear interface can be provided for information scheduling in different scenarios, facilitating targeted access control and data processing.
[0109] Preferably, the step of designing a plan for port allocation according to each of the information scheduling ports to obtain a key parsing port for receiving external interaction information to generate a port scheduling key comprises:
[0110] S51: performing correlation analysis on external interaction information according to the information display scenarios corresponding to the information scheduling ports, and obtaining a form set of external interaction information associated with the information scheduling ports;
[0111] S52: taking the form set of the external interaction information associated with the information scheduling port as a port allocation plan of the information scheduling port;
[0112] S53: Generate a corresponding scheduling key generation port according to the port allocation plan of each information scheduling port; wherein the scheduling key generation port is used to parse the external interaction information according to the port allocation plan, and generate a port scheduling key of the port allocation plan corresponding to the external interaction information, and the port scheduling key is used to call the corresponding information scheduling port;
[0113] S54: constructing an information collection port for receiving external interaction information, and combining the information collection port with each of the scheduling key generation ports to obtain the key parsing port.
[0114] Specifically, analyze the information display scenario corresponding to each information scheduling port, identify the associated external interaction information form, understand the external interaction requirements in different scenarios, ensure that the port design can effectively process this information, and improve the responsiveness of the system.
[0115] More specifically, the external interactive information forms associated with each information scheduling port are integrated to form a port allocation plan, creating a systematic framework so that each scheduling port can effectively manage and schedule information related to it, thereby improving the organization and manageability of the system.
[0116] More specifically, according to the port allocation plan, a corresponding dispatch key generation port is generated for each information dispatch port to ensure that the appropriate key can be parsed and generated according to the external interaction information so as to facilitate the subsequent secure calling of the information dispatch port.
[0117] More specifically, an information collection port dedicated to receiving external interactive information is constructed as the source of data input to ensure that the system can obtain external information in real time and enhance the system's dynamics and flexibility.
[0118] More specifically, the information collection port is combined with the scheduling key generation port to form a key parsing port, which integrates various components to achieve seamless connection between information flow and key generation, thereby improving the operational efficiency and security of the entire system.
[0119] It can be understood that through the above steps, a complete port management mechanism is formed to ensure the effectiveness and security of information interaction. The system can quickly generate corresponding scheduling keys according to changes in external information to ensure the timeliness of information processing. Through a clear key generation and parsing mechanism, the risk of data leakage is reduced and the security of information processing is enhanced. This step-by-step design logic enables the entire system to not only have efficient operation capabilities, but also ensure security and flexibility.
[0120] Preferably, the step of integrating the key parsing port, each of the information dispatching ports and the information encryption database to obtain the medical encryption information of the target medical information includes:
[0121] S61: Initializing network parameter configuration for the key parsing port, each of the information scheduling ports, and the information encryption database;
[0122] S62: performing simulation debugging on the key parsing port, each of the information scheduling ports and the information encryption database after the initialization parameter configuration, and optimizing the network parameter configuration according to the simulation debugging result;
[0123] S63: Setting a recording unit for data recording based on the key parsing port, each of the information scheduling ports and the information encryption database;
[0124] S64: a monitoring unit for monitoring abnormal data flow is set based on the recording unit to monitor abnormal data flow between the key parsing port, each of the information dispatching ports and the information encryption database, so as to determine whether to block the information encryption database according to the monitoring result;
[0125] S65: Encapsulate the key parsing port, each of the information dispatching ports, the information encryption database, the recording unit and the monitoring unit to obtain medical encryption information.
[0126] Specifically, initial network parameter settings are performed for the key parsing port, information scheduling port, and information encryption database to ensure that system components can effectively connect and communicate, providing a basis for subsequent operations.
[0127] More specifically, the system with the initialization parameter configuration is simulated and debugged, and the network parameters are optimized based on the debugging results. Through testing and adjustment, the system performance and stability are improved to ensure the effectiveness and reliability of data transmission.
[0128] More specifically, a recording unit for data recording is configured for the key parsing port, the information dispatching port, and the information encryption database, providing a mechanism to record all interaction data for subsequent analysis and auditing.
[0129] More specifically, a monitoring unit for abnormal data flow monitoring is provided based on the recording unit so as to monitor data flow in real time, improve the security of the system, identify and process abnormal data flow in time, and prevent potential security threats.
[0130] More specifically, the monitoring results are used to determine whether to block the information encryption database, so that when an abnormality is found, a quick response can be made to protect the security of sensitive medical information.
[0131] More specifically, the key parsing port, information scheduling port, information encryption database, recording unit and monitoring unit are encapsulated and processed to form the final medical encryption information, providing an overall, closed system, so that medical data has higher security and integrity during transmission and storage.
[0132] It can be understood that through monitoring and blocking mechanisms, medical information can be ensured not to be illegally accessed or tampered with. Initializing and optimizing network parameters can improve the response speed and stability of the system and ensure the efficient processing of medical information. The recording and monitoring units ensure that all data interactions are tracked to facilitate auditing and compliance checks.
[0133] Reference Figure 2 As shown, in a second aspect, the present invention provides an information security encryption system based on smart medical care, which is used to implement an information security encryption method based on smart medical care as described in any one of the first aspects, including:
[0134] An information evaluation module, used to obtain target medical information, and perform information security level evaluation on the target medical information to obtain a security level evaluation result of the target medical information;
[0135] A display scheduling module, used to schedule the display of the target medical information according to the security level assessment result, and obtain information display content corresponding to a number of information display scenes;
[0136] An information encryption module, used to perform information encryption processing on the plurality of information display contents in sequence to obtain an information encryption database having a plurality of information encryption levels;
[0137] An information scheduling module, used to generate a key according to the information display scene corresponding to the information display content contained in the information encryption level, and encapsulate the generated key to obtain an information scheduling port corresponding to each of the information encryption levels;
[0138] A scheduling allocation module, used for designing a plan for port allocation according to each of the information scheduling ports, and obtaining a key parsing port for receiving external interaction information to generate a port scheduling key;
[0139] The information integration module is used to integrate the key parsing port, each of the information scheduling ports and the information encryption database to obtain the medical encryption information of the target medical information.
[0140] In this embodiment, for the specific implementation of each module in the above system embodiment, please refer to the above method embodiment, which will not be repeated here.
[0141] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection scope of the present invention.
Claims
1. An information security encryption method based on smart medical care, characterized in that: include: Acquiring target medical information, and performing an information security level assessment on the target medical information to obtain a security level assessment result of the target medical information; Performing information display scheduling processing on the target medical information according to the security level assessment result to obtain information display content corresponding to a number of information display scenarios; Performing information encryption processing on the plurality of information display contents in sequence to obtain an information encryption database having a plurality of information encryption levels; Generate a key according to the information display scene corresponding to the information display content contained in the information encryption level, and encapsulate the generated key to obtain an information scheduling port corresponding to each information encryption level; A plan for port allocation is designed according to each of the information scheduling ports to obtain a key parsing port for receiving external interaction information to generate a port scheduling key; Integrate the key parsing port, each of the information dispatching ports and the information encryption database to obtain the medical encryption information of the target medical information; The steps of obtaining target medical information and performing information security level assessment on the target medical information to obtain the security level assessment result of the target medical information include: Performing corresponding information extraction processing on the target original data collected through multiple channels to obtain the target medical information fed back by the target original data collected through each channel; Convert the target medical information into a medical information matrix according to a preset information expression format to obtain a medical information matrix having a plurality of medical information; Performing analysis and processing on the information sensitivity of the medical information on the medical information matrix to obtain a first evaluation list for providing information sensitivity feedback on each piece of medical information in the medical information matrix; Performing analysis and processing on the information leakage impact of medical information on the medical information matrix to obtain a second evaluation list for providing information leakage impact feedback on each piece of medical information in the medical information matrix; Performing a comprehensive assessment of the security level of each piece of medical information in the medical information matrix according to the first assessment list and the second assessment list to obtain the security level of each piece of medical information; The security level of each piece of medical information in the medical information matrix is taken together as the security level evaluation result of the target medical information.
2. The information security encryption method based on smart medical care according to claim 1, characterized in that: The step of performing information display scheduling processing on the target medical information according to the security level assessment result to obtain information display content corresponding to a plurality of information display scenarios comprises: Generate corresponding information display scenes according to predefined user roles; wherein the user roles include doctor users, patient users, researcher users and administrative staff users, and the information display scenes include doctor scenes, patient scenes, researcher scenes and administrative staff scenes; According to each of the information display scenarios, the corresponding medical information security level allocation processing is performed respectively to obtain the information security level allocation strategy corresponding to each of the information display scenarios; wherein the information security level allocation strategy is used to describe the information security level corresponding to the target medical information and the information display scenario; Perform information disassembly processing on the target medical information according to each of the information security level allocation strategies and the security level assessment results to obtain a subset of medical information corresponding to each of the information security level allocation strategies; Extract key expression information from each of the medical information subsets according to each of the user roles to obtain medical information expression content suitable for each of the user roles; The expression format of each medical information expression content is converted according to each user role to obtain information display content corresponding to each information display scene.
3. The information security encryption method based on smart medical care according to claim 1, characterized in that: The step of sequentially performing information encryption processing on the plurality of information display contents to obtain an information encryption database having a plurality of information encryption levels comprises: Performing ordinal number distribution processing of encryption importance degree on each of the information display contents according to the information display scene, to obtain an encryption ordinal number of each of the information display contents; Sorting the corresponding information display contents according to the encryption sequence numbers to obtain an information sequence to be encrypted consisting of the information display contents arranged from small to large according to the encryption sequence numbers; Respectively retrieve the information encryption strategies corresponding to the information display contents in the information sequence to be encrypted; Executing the information encryption strategy from the information display content with the smallest encryption sequence number in the information sequence to be encrypted, and obtaining an information encryption level at which the information encryption strategy is executed; Starting from the information encryption level with the first encryption sequence number in the information sequence to be encrypted, extracting information features based on the information encryption level that completes the information encryption strategy, to obtain hierarchical information features; Generate a key according to the hierarchical information feature to obtain a hierarchical key, and use the hierarchical key in the execution of the information encryption strategy of the information encryption level with the next encryption sequence number in the information sequence to be encrypted to obtain the information encryption level with the next encryption sequence number, and return the next information encryption level to the step of extracting information features based on the information encryption level that has completed the execution of the information encryption strategy to obtain the hierarchical information feature, until all the information encryption levels that have completed the execution of the information encryption strategy are obtained; The information encryption levels are sequentially combined according to the arrangement order of the corresponding encryption ordinal numbers to obtain the information encryption database.
4. The information security encryption method based on smart medical care according to claim 1, characterized in that: The steps of generating a key according to the information display scene corresponding to the information display content contained in the information encryption level, and encapsulating the generated key to obtain the information scheduling port corresponding to each information encryption level include: Acquire the encryption steps performed by the corresponding information encryption level according to the information display scene; Reversely inferring the encryption steps executed at the information encryption level to obtain an information acquisition key for decrypting the corresponding information encryption level; generating a key scene label for describing the information display scene corresponding to the information acquisition key according to the information display scene corresponding to each information acquisition key; The key scenario tag is bound and combined with the information acquisition key to obtain the information scheduling port.
5. The information security encryption method based on smart medical care according to claim 1, characterized in that: The steps of designing a plan for port allocation according to each of the information scheduling ports to obtain a key parsing port for receiving external interaction information to generate a port scheduling key include: Performing correlation analysis on external interactive information according to the information display scenarios corresponding to the information scheduling ports, and obtaining a form set of external interactive information associated with the information scheduling ports; The form set of the external interaction information associated with the information scheduling port is collectively used as a port allocation plan of the information scheduling port; Generate a corresponding scheduling key generation port according to the port allocation plan of each information scheduling port; wherein the scheduling key generation port is used to parse the external interaction information according to the port allocation plan, and generate a port scheduling key of the port allocation plan corresponding to the external interaction information, and the port scheduling key is used to call the corresponding information scheduling port; An information collection port for receiving external interaction information is constructed, and the information collection port is combined with each of the scheduling key generation ports to obtain the key parsing port.
6. The information security encryption method based on smart medical care according to claim 1, characterized in that: The step of integrating the key parsing port, each of the information dispatching ports and the information encryption database to obtain the medical encryption information of the target medical information includes: Initializing network parameter configuration for the key parsing port, each of the information dispatching ports, and the information encryption database; Performing simulation debugging on the key parsing port, each of the information dispatching ports and the information encryption database after the initialization parameter configuration, and optimizing the network parameter configuration according to the simulation debugging results; A recording unit for data recording is provided based on the key parsing port, each of the information scheduling ports and the information encryption database; A monitoring unit for abnormal data flow monitoring is provided based on the recording unit to monitor the abnormal data flow between the key parsing port, each of the information dispatching ports and the information encryption database, so as to determine whether to block the information encryption database according to the monitoring result; The key parsing port, each of the information dispatching ports, the information encryption database, the recording unit and the monitoring unit are encapsulated to obtain medical encryption information.
7. An information security encryption system based on smart medical care, characterized in that: A method for implementing information security encryption based on smart medical care as described in any one of claims 1 to 6, comprising: An information evaluation module, used to obtain target medical information, and perform information security level evaluation on the target medical information to obtain a security level evaluation result of the target medical information; A display scheduling module, used to schedule the display of the target medical information according to the security level assessment result, and obtain information display content corresponding to a number of information display scenes; An information encryption module, used to perform information encryption processing on the plurality of information display contents in sequence to obtain an information encryption database having a plurality of information encryption levels; An information scheduling module, used to generate a key according to the information display scene corresponding to the information display content contained in the information encryption level, and encapsulate the generated key to obtain an information scheduling port corresponding to each of the information encryption levels; A scheduling allocation module, used for designing a plan for port allocation according to each of the information scheduling ports, and obtaining a key parsing port for receiving external interaction information to generate a port scheduling key; The information integration module is used to integrate the key parsing port, each of the information scheduling ports and the information encryption database to obtain the medical encryption information of the target medical information.
Citation Information
Patent Citations
Networked medical big data hierarchical transmission method and system
CN111770189A
Data security protection method, data security management platform, system and storage medium
CN116094696A