End-to-end medical record privacy data elimination method and system

Abstract

The present invention belongs to the field of medical data processing technology, and specifically relates to an end-to-end medical record privacy data elimination method and system. It includes the following steps: S1. The server obtains and stores medical data; S2. The user sends a medical data transmission request; S3. The server confirms the identity of the user; S4. The server sends the medical data to the data processing module of the server; S5. Cover the privacy data with a pattern watermark; S6. The privacy data is divided to obtain a privacy data strip; S7. The digital code corresponding to the pattern watermark and the privacy data code are combined to obtain the original code, and the original code is input as a starting item into the formula corresponding to the formula code to calculate the password of the privacy data strip; S8. The user combines the privacy data strip according to the pattern watermark, and uses the password to remove the watermark pattern after the combination is correct; S9. The password will be automatically revoked after exceeding the preset time. The logic adopted by the method of the present invention is simple and has high security.

Description

Technical Field

[0001] The present invention relates to the technical field of medical data processing, and in particular to an end-to-end medical record privacy data elimination method and system. Background Art

[0002] The description of the background technology in the present invention belongs to the related technology related to the present invention, which is only used to illustrate and facilitate the understanding of the invention content of the present invention, and should not be understood as the applicant explicitly believes or inferred that the applicant believes that it is the prior art of the present invention on the filing date of the first application.

[0003] With the development of society and the continuous improvement of people's living standards, people's requirements for medical care are getting higher and higher. The rapid development of the Internet has made data sharing possible. In the medical field, if data sharing is achieved, the efficiency and effectiveness of medical care can be greatly improved.

[0004] Data sharing is a double-edged sword. While it provides convenience for medical treatment, it also brings up the problem of privacy data leakage. The transmission of privacy data requires higher confidentiality than general data transmission. This not only involves the confidentiality of the server and user ends, but the transmission path and data traces are also an important aspect. Therefore, the end-to-end processing of medical privacy data should be extremely secure.

[0005] At present, emerging technologies such as blockchain are generally used to achieve this. However, if medical data is shared on a large scale, a very high level of confidentiality is actually required. However, emerging technologies are not only immature, but many servers are located abroad, and their security is questionable. In order to solve the above problems, a transmission method that can use existing conventional technologies but has high security is urgently needed. Summary of the invention

[0006] The purpose of the embodiments of the present invention is to provide an end-to-end method and system for eliminating privacy data in medical records. The method of the present invention ensures the security of data from multiple angles. After the transmission of privacy data is completed, the password of the pattern watermark will be invalidated within a time limit, so that the pattern watermark is permanently covered, which is equivalent to directly eliminating the medical privacy data, ensuring the security of the data transmission process. The various steps of the method of this application adopt traditional technology, but confidentiality measures are taken in many links, such as pattern splicing, non-transmission of coded data, and replacement of formula database at any time, etc., which cuts off the possibility of password theft on the Internet from multiple angles and aspects.

[0007] The purpose of the embodiment of the present invention is achieved through the following technical solutions:

[0008] An end-to-end method for eliminating privacy data in medical records comprises the following steps:

[0009] S1. The server obtains and stores the medical data and then disconnects from the Internet. The server includes multiple servers. The server randomly stores the medical data in multiple servers. Each server is equipped with a digital code. The multiple digital codes correspond to the pattern watermarks one by one. The server and the user both store the one-to-one correspondence between the digital codes and the pattern watermarks.

[0010] S2. The user sends a medical data transmission request;

[0011] S3. The server confirms the identity of the user;

[0012] S4. The server automatically disconnects from the Internet and sends a medical data transmission instruction to the server through a temporary local area network; the server sends the medical data to the data processing module of the server;

[0013] S5. The data processing module divides the medical data into private data and non-private data; encodes the private data to obtain a private data code; and covers the private data with the pattern watermark;

[0014] S6. After the private data is segmented, private data strips are obtained. Each private data strip is accompanied by a randomly selected formula code. The formula code corresponds one-to-one with the formula in the formula database. Both the server and the user have the formula database.

[0015] S7. Combining the digital code corresponding to the pattern watermark and the privacy data code to obtain the original code, inputting the original code as the starting item into the formula corresponding to the formula code to obtain the password of the privacy data strip; the password is used to remove the pattern watermark;

[0016] S8. After receiving the private data strip, the user terminal combines the private data strip with the pattern watermark, and uses the password to remove the pattern watermark after the combination is correct;

[0017] S9. The password will be automatically invalidated after exceeding the preset time, and the pattern watermark will no longer be removed; after the password removes the pattern watermark, the pattern watermark recovery time limit is set. After the pattern watermark recovery time limit is reached, the pattern watermark will re-cover the privacy data strip, and the re-covered pattern watermark will be permanently covered.

[0018] Furthermore, in step S1, each server is equipped with a digital code having a digit number greater than 5.

[0019] Furthermore, step S3 includes at least the following steps: the server first obtains whether the location information and physical address of the user terminal are compliant; if both the location information and the physical address are compliant, random verification information is sent to the user terminal, and the random verification information is the verification information in the verification information library previously uploaded by the user terminal to the cloud; then a biometric information verification request is sent to the user terminal, and the biometric information verification includes fingerprint verification, face recognition and voice recognition.

[0020] Further, step S5 at least includes the following steps:

[0021] The data processing module divides the medical data into private data and non-private data;

[0022] Encoding the private data to obtain a private data code, wherein the private data code is a digital code of no less than five digits; and covering the private data with the pattern watermark;

[0023] The non-private data is encrypted and stored in the cloud. The non-private data is accompanied by the corresponding private data code, which is used for data splicing after the user end obtains the private data and the non-private data.

[0024] Furthermore, step S6 at least includes the following steps: the privacy data is segmented to obtain privacy data strips, and the pattern watermark is segmented together, and each privacy data strip is attached with a randomly extracted formula code; the formula code corresponds one-to-one to the formula in the formula database, and both the server and the user have the formula database; the formula databases of the server and the user are updated synchronously, and the formula database will be updated once the medical data is transmitted.

[0025] Furthermore, step S8 specifically includes the following steps: after receiving the privacy data strip, the user end assembles the privacy data strip according to the pattern watermark, and uses the password to remove the pattern watermark after the assembling is correct; the original code is input into the formula corresponding to each formula code to calculate the result as a sub-password, and when each sub-password is verified to be consistent with the sub-password of the corresponding privacy data strip, the pattern watermark is removed.

[0026] An end-to-end medical record privacy data elimination system, comprising:

[0027] The server includes multiple servers. The server randomly stores the medical data in multiple servers. Each server is equipped with a digital code. The multiple digital codes correspond to the pattern watermarks one by one. The server and the user both store the one-to-one correspondence between the digital codes and the pattern watermarks.

[0028] User end;

[0029] A data processing module, wherein the data processing module divides the medical data into private data and non-private data; encodes the private data to obtain private data encoding; and covers the private data with the pattern watermark;

[0030] A formula database stores formulas and formula codes, and the formula codes correspond to the formulas one by one. Both the server and the user have the formula database.

[0031] The embodiments of the present invention have the following beneficial effects:

[0032] The method of the present invention is to perform multiple numbering on the server number, data number, and data strip number, wherein a lot of data does not need to be transmitted. The server number corresponds to the pattern watermark. After transmission, as long as the user end combines the patterns of multiple segmented privacy data strips according to the original stored pattern, the server number is known, and the medical data number and the encoding of the privacy data are required to be retrieved by the user end itself, which is known by the user end. The server number and the privacy data encoding together constitute the starting data, and each data strip is unlocked separately according to the formula corresponding to the data strip number. After a complete match, the pattern watermark is released. Since many complex data do not need to be transmitted, the password security level is very high. Since the data transmission process is very short, once the user end receives the medical data and starts unlocking, the password will be completely invalidated. Even if there are data traces in the transmission, it is only a pattern watermark, and the medical privacy data cannot be obtained. Once the user end successfully unlocks, the time limit for browsing the data is set. After the time limit is reached, the pattern watermark is covered again. After the second covering, it is a permanent covering that can be unlocked without a password, which is equivalent to replacing the medical data with the pattern watermark. Of course, it is best to shred the data. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 A schematic diagram of an operating system for an end-to-end medical record privacy data elimination method of the present invention. DETAILED DESCRIPTION

[0034] The present application is introduced in some embodiments of the present invention in conjunction with embodiments below.

[0035] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, in the following description, different "one embodiment" or "embodiment" does not necessarily refer to the same embodiment. Different embodiments can be replaced or combined, and for ordinary technicians in this field, other implementation methods can be obtained based on these embodiments without creative work.

[0036] Combination Figure 1 , an end-to-end medical record privacy data elimination method, comprising the following steps:

[0037] S1. The server 1 obtains and stores the medical data and then disconnects from the Internet. The server 1 includes multiple servers 5. The server 1 randomly stores the medical data in the multiple servers 5. Each server 5 is equipped with a digital code. The multiple digital codes correspond to the pattern watermark 6 one by one. The server 1 and the user end 2 both store the one-to-one correspondence between the digital code and the pattern watermark 6.

[0038] S2. User terminal 2 sends a medical data transmission request;

[0039] S3. Server 1 confirms the identity of client 2;

[0040] S4. The server 1 automatically disconnects from the Internet and sends a medical data transmission instruction to the server 5 through a temporary LAN; the server 5 sends the medical data to the data processing module of the server 1;

[0041] S5. The data processing module divides the medical data into private data and non-private data; encodes the private data to obtain a private data encoding; and covers the private data with the pattern watermark 6;

[0042] S6. After the private data is segmented, private data strips are obtained. Each private data strip is attached with a randomly selected formula 4 code. The formula 4 code corresponds one-to-one with the formula 4 in the formula database 3. Both the server 1 and the user 2 have the formula database 3.

[0043] S7. The digital code corresponding to the pattern watermark 6 and the privacy data code are combined to obtain the original code, and the original code is input as the starting item into the formula 4 corresponding to the code to obtain the password of the privacy data strip; the password is used to remove the pattern watermark;

[0044] S8. After receiving the private data strip, the user terminal 2 combines the private data strip with the pattern watermark 6, and after the combination is correct, the pattern watermark is removed with a password;

[0045] S9. The password will be automatically invalidated after exceeding the preset time, and the pattern watermark 6 will no longer be removed; after the password removes the pattern watermark, the pattern watermark recovery time limit is performed. After the pattern watermark recovery time limit is reached, the pattern watermark 6 re-covers the privacy data strip, and the re-covered pattern watermark 6 will be permanently covered.

[0046] The method of the present invention is to perform multiple numbering on the server 5 number, the data number, and the data strip number, among which a lot of data does not need to be transmitted. The server 5 number corresponds to the pattern watermark 6. After transmission, as long as the user end 2 combines the patterns of multiple segmented privacy data strips according to the original stored pattern, the server 5 number is known, and the medical data number, and the encoding of the privacy data is what the user end 2 needs to retrieve, which it knows. The server 5 number and the privacy data encoding together constitute the starting data, and each data strip is unlocked separately according to the formula 4 corresponding to the data strip number. After a complete match, the pattern watermark 6 is The watermark 6 is removed. Since many complex data do not need to be transmitted, the password security level is very high. Since the data transmission process is very short, once the user terminal 2 receives the medical data and unlocks it, all passwords will be invalid. Even if there are data traces in the transmission, it is only a pattern watermark, and the medical privacy data cannot be obtained. Once the user terminal 2 successfully unlocks the data, the time limit for browsing the data is set. After the time limit is reached, the pattern watermark 6 is covered again. After the second covering, it is a permanent covering that can be unlocked without a password, which is equivalent to replacing the medical data with the pattern watermark 6. Of course, it is best to shred the data.

[0047] In some embodiments of the present invention, each server 5 in step S1 is equipped with a digital code with a digit number greater than 5. It can be understood that the longer the length of the number, the more difficult it is to decrypt.

[0048] In some embodiments of the present invention, step S3 includes at least the following steps: the server 1 first obtains whether the location information and physical address of the user terminal 2 are compliant; if the location information and the physical address are both compliant, random verification information is sent to the user terminal 2, and the random verification information is the verification information in the verification information library previously uploaded to the cloud by the user terminal 2; then a biometric information verification request is sent to the user terminal 2, and the biometric information verification includes fingerprint verification, face recognition and voice recognition.

[0049] There are many ways to verify. Generally, face recognition and voice recognition are identification of the operator, while physical address and location information are confirmation of the user. Multi-faceted confirmation can ensure that the operator and the platform used are authenticated before sending data; of course, there are other verification methods, such as directly verifying the setting information of a random user of a server or client, and this information is randomly selected, such as the server asking random questions, the question is: what is the birthday stored by a certain operating member of the server operator group? Of course, this birthday can be fictitious by the storage, and it is not necessarily true, but the stored information is known to both parties.

[0050] In some embodiments of the present invention, step S5 at least includes the following steps:

[0051] The data processing module divides the medical data into private data and non-private data;

[0052] Encoding the private data to obtain a private data code, wherein the private data code is a digital code of no less than five digits; covering the private data with the pattern watermark 6;

[0053] The non-private data is encrypted and stored in the cloud. The non-private data is accompanied by the corresponding private data code, which is used for data splicing after the user terminal 2 obtains the private data and the non-private data.

[0054] In some embodiments of the present invention, step S6 includes at least the following steps: the privacy data is segmented to obtain privacy data strips, and the pattern watermark 6 is segmented together, and each privacy data strip is attached with a randomly selected formula 4 code; the formula 4 code corresponds one-to-one to the formula 4 in the formula database 3, and both the server 1 and the user 2 have the formula database 3; the formula database 3 of the server 1 and the user 2 is updated synchronously, and the formula database 3 will be updated once after a medical data transmission.

[0055] In some embodiments of the present invention, step S8 specifically includes the following steps: after receiving the privacy data strip, the user terminal 2 assembles the privacy data strip according to the pattern watermark 6, and uses a password to remove the pattern watermark after the assembly is correct; the original code is input into the formula 4 corresponding to each formula 4 code to calculate the result as a sub-password, and when each sub-password is verified to be consistent with the sub-password of the corresponding privacy data strip, the pattern watermark 6 is removed.

[0056] The following is a simple example for easy understanding (for ease of understanding, the applicant uses relatively simple numbers to explain, but this simple method is generally not used. It is for the convenience of understanding of this solution): For example, in one embodiment: there are 8 servers. When the client sends a request, the data is stored in server No. 1. The number of server No. 1 is 12345, and the code of the requested medical data is 67890. Then the string composed of the two is 1234567890. During transmission, Figure 1 The pattern watermark shown in the figure (a specific server corresponds to a specific pattern, and the pattern should be as follows Figure 1 The medical privacy data covered with the pattern watermark is randomly cut. After cutting, a formula code is randomly extracted from each data strip. For example, the formulas 23456, 34567, 45678 and 56789 are extracted respectively. The four formulas are: password = 3X + 8, password = E X +6, password = ln(X+3) and password = 0.3X6 , substitute the initial data 1234567890 into the four formulas respectively, and the user can unlock the four data strips in the password area respectively, and the pattern watermark will be removed; it should be understood that the above data and formulas are explained in an extremely simple way. In fact, there can be many complex data and formulas that are difficult to be cracked in a short time. It is easy for users to use computers to automatically obtain passwords on the premise of knowing all the data and formulas. These data and formulas do not need to be transmitted. As long as there is no problem with the saved database, they will not be leaked, preventing the cracking of the password during the transmission process. Even if it is stolen, the pattern draft can be stored in a non-electronic pattern, which is difficult to be stolen by the network; after stealing the formulas and data, it is also difficult to spell out irregular patterns in a short time (because many of the patterns used are reasonable in any way, but the correct result is unique, unlike a portrait puzzle that is easy to crack); in this way, if it cannot be cracked in a short time, the client has been unlocked, and the password will be invalid after use. In order to prevent it from being obtained without being changed for a long time, the formula database can be updated synchronously on the server and the client after each use, ensuring the uniqueness of the password acquisition process each time.

[0057] Combined with Figure 1 , an end-to-end medical record privacy data elimination system, comprising:

[0058] The server 1 includes a plurality of servers 5. The server 1 randomly stores the medical data in the plurality of servers 5. Each server 5 is provided with a digital code. The plurality of digital codes correspond to the pattern watermark 6 one by one. The server 1 and the user end 2 both store the one-to-one correspondence between the digital code and the pattern watermark 6.

[0059] User terminal 2;

[0060] A data processing module, the data processing module divides the medical data into private data and non-private data; encodes the private data to obtain private data encoding; and covers the private data with the pattern watermark 6;

[0061] Formula database 3, formula database 3 stores formula 4 and formula 4 code, formula 4 code corresponds to formula 4 one by one, and both server 1 and user end 2 have the formula database 3.

[0062] It should be noted that the above embodiments can be freely combined as needed. The above description is only the preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention can have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. An end-to-end medical record privacy data elimination method, characterized in that: The steps include: S1. The server obtains and stores the medical data and then disconnects from the Internet. The server includes multiple servers. The server randomly stores the medical data in multiple servers. Each server is equipped with a digital code. The multiple digital codes correspond to the pattern watermarks one by one. The server and the user both store the one-to-one correspondence between the digital codes and the pattern watermarks. S2. The user sends a medical data transmission request; S3. The server confirms the identity of the user; S4. The server automatically disconnects from the Internet and sends a medical data transmission instruction to the server through a temporary local area network; the server sends the medical data to the data processing module of the server; S5. The data processing module divides the medical data into private data and non-private data; encodes the private data to obtain a private data code; and covers the private data with the pattern watermark; S6. After the private data is segmented, private data strips are obtained. Each private data strip is accompanied by a randomly selected formula code. The formula code corresponds one-to-one with the formula in the formula database. Both the server and the user have the formula database. S7. Combining the digital code corresponding to the pattern watermark and the privacy data code to obtain the original code, inputting the original code as the starting item into the formula corresponding to the formula code to obtain the password of the privacy data strip; the password is used to remove the pattern watermark; S8. After receiving the private data strip, the user terminal combines the private data strip with the pattern watermark, and uses the password to remove the pattern watermark after the combination is correct; S9. The password will be automatically invalidated after exceeding the preset time, and the pattern watermark will no longer be removed; after the password removes the pattern watermark, the pattern watermark recovery time limit is set. After the pattern watermark recovery time limit is reached, the pattern watermark will re-cover the privacy data strip, and the re-covered pattern watermark will be permanently covered.

2. The end-to-end medical record privacy data elimination method according to claim 1, characterized in that: In step S1, each server is equipped with a digital code having a number greater than 5.

3. The end-to-end medical record privacy data elimination method according to claim 2, characterized in that: Step S3 includes at least the following steps: the server first obtains the location information and physical address of the user terminal to see if they are compliant. If both the location information and the physical address are compliant, random verification information is sent to the user terminal, where the random verification information is the verification information in the verification information library previously uploaded by the user terminal to the cloud; then a biometric information verification request is sent to the user terminal, where the biometric information verification includes fingerprint verification, face recognition and voice recognition.

4. The end-to-end medical record privacy data elimination method according to claim 3, characterized in that: Step S5 at least includes the following steps: The data processing module divides the medical data into private data and non-private data; Encoding the private data to obtain a private data code, wherein the private data code is a digital code of no less than five digits; and covering the private data with the pattern watermark; The non-private data is encrypted and stored in the cloud. The non-private data is accompanied by the corresponding private data code, which is used for data splicing after the user end obtains the private data and the non-private data.

5. The end-to-end medical record privacy data elimination method according to claim 4, characterized in that: Step S6 at least includes the following steps: dividing the privacy data to obtain privacy data strips, dividing the privacy data strips together with the pattern watermark, and attaching a randomly extracted formula code to each privacy data strip; the formula code corresponds one-to-one to the formula in the formula database, and both the server and the user have the formula database; the formula databases of the server and the user are updated synchronously, and the formula database will be updated once the medical data is transmitted.

6. The end-to-end medical record privacy data elimination method according to claim 5, characterized in that: Step S8 specifically includes the following steps: after receiving the privacy data strip, the user end assembles the privacy data strip according to the pattern watermark, and uses the password to remove the pattern watermark after the assembly is correct; the original code is input into the formula corresponding to each formula code to calculate the result as a sub-password, and when each sub-password is verified to be consistent with the sub-password of the corresponding privacy data strip, the pattern watermark is removed.

7. An end-to-end medical record privacy data elimination system, characterized in that: The system is used to implement the end-to-end medical record privacy data elimination method of claim 1, and the medical record privacy data elimination system includes: The server includes multiple servers. The server randomly stores the medical data in multiple servers. Each server is equipped with a digital code. The multiple digital codes correspond to the pattern watermarks one by one. The server and the user both store the one-to-one correspondence between the digital codes and the pattern watermarks. User end; A data processing module, wherein the data processing module divides the medical data into private data and non-private data; encodes the private data to obtain private data encoding; and covers the private data with the pattern watermark; A formula database stores formulas and formula codes, and the formula codes correspond to the formulas one by one. Both the server and the user have the formula database.

Images