Mobile medical electronic signature system based on electronic authentication

Abstract

The invention provides a mobile medical electronic signature system based on electronic authentication, and the system comprises a certificate issuing module which is used for importing doctor user information into an edge front internal controller, synchronizing the information to a cloud master controller, and issuing a user certificate based on the doctor user information according to the cloud master controller and a mobile client; the electronic signature module is used for receiving a to-be-signed original text based on the edge preposition internal control and generating to-be-electronically signed data based on the cloud general control after the user certificate is signed and issued, and meanwhile, the mobile client terminal executes the electronic signature according to the to-be-electronically signed data; and the verification module is used for verifying the to-be-signed original text and the signature result based on the edge preposition internal control and generating a verification result. And the security, credibility, reliability and high efficiency of the mobile medical electronic signature are ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and in particular to a mobile medical electronic signature system based on electronic authentication. Background Art

[0002] At present, electronic signatures in the medical field generally adopt the solution of hardware server password products combined with hardware smart password keys (USB-key), which is a universal electronic signature solution; However, with the development of medical business, more requirements have been put forward for electronic signatures in line with the industry. In this case, general solutions often cannot fully meet the specific needs of the medical industry. At the same time, general solutions require the support of hardware server cryptographic products, resulting in high construction costs, which is not conducive to implementation and promotion. Therefore, in order to overcome the above defects, the present invention provides a mobile medical electronic signature system based on electronic authentication. Summary of the invention

[0003] The present invention provides a mobile medical electronic signature system based on electronic authentication, which is used to receive doctor user information through edge front-end internal control and synchronize it to cloud master control, so as to facilitate the review of medical user information, ensure the accuracy and reliability of the user certificate finally issued, realize the security authorization control of the access of medical business system application, and ensure that the source of the business initiator is within the trusted system. Secondly, after obtaining the user certificate, the original text to be signed is received, and the data to be electronically signed is generated through the cloud master control, so that the doctor can perform effective electronic signature operation on the electronic signature data through the mobile client terminal, and ensure the effect and reliability of the electronic signature. Finally, the original text to be signed and the signature result are verified, so as to ensure the reliability of the mobile medical electronic signature, and ensure the safety, trustworthiness, reliability and efficiency of the mobile medical electronic signature.

[0004] The present invention provides a mobile medical electronic signature system based on electronic authentication, comprising: The certificate issuance module is used to import doctor user information into the edge front-end internal control and synchronize it to the cloud master control. At the same time, the cloud master control and mobile client issue user certificates based on the doctor user information; The electronic signature module is used to receive the original text to be signed based on the edge front-end internal control after the user certificate is issued, and generate the data to be electronically signed based on the cloud master control. At the same time, the mobile client terminal executes the electronic signature according to the data to be electronically signed; The verification module is used to verify the original text to be signed and the signature result based on the edge front-end internal control, and generate the verification result.

[0005] Preferably, a mobile medical electronic signature system based on electronic authentication comprises: Medical business system, edge front-end internal control, cloud master control and mobile client, among which, The medical business system is connected to the edge front-end internal control, and the medical business and edge front-end internal control constitute the hospital's internal network; The cloud master control is connected to the hospital’s internal network; The mobile client is connected to the cloud master control.

[0006] Preferably, a mobile medical electronic signature system based on electronic authentication, a certificate issuance module, includes: An information import unit, used to import doctor user information based on edge front-end internal control; Synchronization unit, used to synchronize doctor user information to the cloud master control; Audit unit, used to audit doctor user information based on cloud-based master control; A login and confirmation unit is used to log in to the mobile client based on the user account when the review is passed, and to confirm the application for issuance of a digital certificate based on the mobile client; The certificate application unit is used to call the hardware cryptographic device based on the cloud master control to generate the target signature public-private key pair, and send the signature public key to the preset agency according to the interface request. At the same time, apply for the issuance of and obtain the user certificate in the preset agency.

[0007] Preferably, a mobile medical electronic signature system based on electronic authentication, the audit unit comprises: The information processing subunit is used to: Obtain the doctor user information obtained, and determine the review dimension of the doctor user information based on the information review standard; Extract the dimensional features of each audit dimension, and split the doctor user information into dimensions based on the dimensional features to obtain a multi-dimensional doctor user information set; Information review unit, used to: Extracting basic identity parameters based on a multi-dimensional doctor user information set, accessing a preset trusted identity information database, and matching the basic identity parameters with the trusted identity information in the preset trusted identity information database in sequence based on the access results; Determine the first-level review result of the doctor user information based on the similarity matching result, and start the second-level review mechanism for the doctor user certification information after the first-level review result is passed; Based on the results of the second-level audit mechanism, key information parameters corresponding to the multi-dimensional doctor user information set are extracted respectively, and the multi-dimensional doctor user information set is sorted by audit priority based on the key information parameters; Based on the dimensional features, the formats of the multi-dimensional doctor user information sets are standardized. At the same time, based on the audit priority sorting results, the corresponding auxiliary certification materials are crawled from the network according to big data, and the multi-dimensional doctor user information sets after the format standardization are text-mapped with the corresponding auxiliary certification materials. Determine the completeness of the doctor user information based on the text mapping result, and when the completeness does not meet the preset threshold, determine that the doctor user information is missing, and suspend the review process of the doctor user information based on the determination result, and at the same time, record the current review node; Send a material supplement notification to the doctor user terminal based on the determination result, and simultaneously open the doctor user's online material supplement channel authority, and receive the doctor user's supplementary information in real time based on the authority opening result; Based on the received results, the review process of the doctor user information is resumed, and the multi-dimensional doctor user information set is re-checked based on the review node to obtain the second-level review result of the doctor user information; The result determination subunit is used to complete the review of the doctor user information based on the second-level review results.

[0008] Preferably, a mobile medical electronic signature system based on electronic authentication, an electronic signature module, comprises: A calling unit, used to call the edge front-end internal control based on the business medical system, and determine the original document to be signed and the doctor user number based on the business medical system; A summary calculation unit is used to send the original document to be signed and the doctor number in the business medical system to the edge front-end internal control, and perform summary calculation on the original document to be signed based on the edge front-end internal control system; The unit for generating data to be signed and confirmed is used to send the summary calculation result to the cloud master control and generate data to be signed and confirmed based on the cloud master control; The signature unit is used to read the signature confirmation data based on the mobile client and input the digital certificate password, and electronically sign the signature confirmation data based on the input result to obtain the signature result; The synchronization unit is used to perform data signature calculation on the signature result based on the cloud master control calling the data certificate key, and send the signature calculation result value to the edge front-end internal control. After the edge front-end internal control receives the signature calculation result value, it is synchronously sent to the medical information business system.

[0009] Preferably, a mobile medical electronic signature system based on electronic authentication, a summary calculation unit, comprises: The result acquisition subunit is used to acquire the original document to be signed and the doctor's number in the business medical system, and determine the data types of the original document to be signed and the doctor's number; The transmission preparation subunit is used to determine the data transmission protocol for the original text to be signed and the doctor's number based on the data type, and format the original text to be signed and the doctor's number respectively based on the data transmission protocol; The data transmission subunit is used to: Based on the data transmission protocol, independent temporary transmission channels are respectively constructed, and parameters of the independent temporary transmission channels are adapted; Based on the parameter adaptation results, the format-encoded original text to be signed and the doctor's code will be transmitted to the edge front-end internal control respectively through an independent temporary transmission channel.

[0010] Preferably, a mobile medical electronic signature system based on electronic authentication, a verification module, comprises: Verification unit for: Based on the medical information business system, the edge front-end internal control is called, and the original document to be signed and the doctor's user number to be verified are sent to the edge front-end internal control; Based on the edge front-end internal control, signature verification calculation is performed on the original text to be signed and the doctor's user number, and the verification result is fed back to the medical information business system.

[0011] Preferably, a mobile medical electronic signature system based on electronic authentication, the verification unit comprises: The verification result acquisition subunit is used to obtain the signature verification calculation result of the original document to be signed and the doctor user number, and extract the key information of the verification calculation result; The verification result processing subunit is used to: Based on key information, the verification calculation results are divided into a verification pass set and a verification fail set, and a verification result record report is created; The verification passed set and the verification failed set are recorded in the verification result record report respectively, and the record results are fed back to the medical information business system; The optimization subunit is used to extract the abnormal verification parameters that have not passed the centralized verification based on the feedback results, and iteratively optimize the signature verification calculation mechanism of the edge front-end internal control for the original text to be signed and the doctor user number based on the abnormal verification parameters.

[0012] Preferably, a mobile medical electronic signature system based on electronic authentication, a verification module, comprises: A log creation unit is used to create a work log and interface the work log with the edge front-end internal control; Parameter registration unit, used for: Based on the interface docking results, the edge front-end internal control receives the verification operation of the original text to be signed and the signature result in real time, and obtains the timestamp information corresponding to the current verification operation when there is a verification operation; Based on the development order of the timestamp information, the verification parameters corresponding to different times are recorded and archived in the work log.

[0013] Preferably, a mobile medical electronic signature system based on electronic authentication, an electronic signature module, comprises: A parameter acquisition unit is used to collect the total number of times the electronic signature is executed, and read the first processing time of the edge front-end internal control on the original document to be signed each time the electronic signature is executed, the second processing time when the cloud master control generates the electronic signature to be signed, and the third processing time when the mobile client executes the electronic signature according to the data to be signed; A first calculation unit, configured to calculate an average rate of completing electronic signatures based on a first processing time, a second processing time, and a third processing time each time the electronic signature is executed; ; in, Indicates the average rate at which electronic signatures are completed; Indicates the total number of times electronic signatures were executed; A serial number value indicating the number of electronic signatures; Indicates The first amount of data processed by the edge front-end internal control when executing the electronic signature for the first time; Indicates When executing electronic signature for the first time, the edge front-end internal control first processes the original document to be signed; Indicates The delay of the edge front-end internal control in processing the original document to be signed when executing the electronic signature for the first time; Indicates When the electronic signature is executed for the first time, the cloud master control generates a second amount of data to be processed when the electronic signature is executed; Indicates The second processing time when the cloud master control generates the electronic signature to be executed for the first time; Indicates The delay in the cloud master control generating the pending electronic signature when executing the electronic signature for the first time; Indicates The third amount of data processed by the mobile client when executing the electronic signature for the first time according to the data to be electronically signed; Indicates The third processing time when the mobile client executes the electronic signature according to the data to be electronically signed when the electronic signature is executed for the first time; Indicates The delay when the mobile client executes the electronic signature based on the data to be electronically signed when executing the electronic signature for the first time; A second calculation unit is used to read the number of correct electronic signatures and the number of incorrect electronic signatures from the total number of times the electronic signature is executed, and calculate the accuracy rate of the execution of the electronic signature according to the number of correct electronic signatures and the number of incorrect electronic signatures; ; in, Indicates the accuracy of executing electronic signatures; Indicates the number of correct electronic signatures among the total number of electronic signatures executed; Indicates the number of electronic signature errors among the total number of electronic signature executions; A third calculation unit, used to calculate the efficiency of executing the electronic signature according to the average rate of the electronic signature and the accuracy of executing the electronic signature; ; in, Indicates the efficiency of executing electronic signatures; Indicates the preset rate threshold; The weight representing the influence of the average rate of electronic signatures on the efficiency of executing electronic signatures; The weight representing the influence of the accuracy of executing electronic signature on the efficiency of executing electronic signature; Qualification determination unit, used for: Obtaining a preset benchmark efficiency for executing the electronic signature, and comparing the efficiency for executing the electronic signature with the benchmark efficiency; If the efficiency of executing the electronic signature is equal to or greater than the benchmark efficiency, the execution of the electronic signature is determined to be qualified; Otherwise, the electronic signature is judged to be unqualified and an alarm is issued.

[0014] Compared with the prior art, the present invention has the following beneficial effects: 1. Receive doctor user information through edge front-end internal control and synchronize it to cloud master control, which is convenient for reviewing medical user information, ensuring the accuracy and reliability of the user certificate finally issued, realizing the security authorization control of medical business system application access, and ensuring that the source of the business initiator is within the trusted system. Secondly, after obtaining the user certificate, receive the original text to be signed, and generate the data to be electronically signed through the cloud master control, which is convenient for doctors to perform effective electronic signature operations on the electronic signature data through mobile client terminals, ensuring the effectiveness and reliability of the electronic signature. Finally, verify the original text to be signed and the signature result, ensuring the reliability of mobile medical electronic signatures, and ensuring that mobile medical electronic signatures are safe, trustworthy, reliable and efficient.

[0015] 2. By determining the audit dimensions of doctor user information according to the information audit standards, the doctor user information can be split according to the audit dimensions, so as to facilitate the rigorous and effective audit of the doctor user information according to the audit requirements of different dimensions. Secondly, the basic identity parameters of the doctor user information are extracted according to the dimension splitting results, and the basic identity parameters are audited to ensure that the current doctor user does exist in the medical system. At the same time, after the basic identity parameters are audited, the corresponding auxiliary certification materials are crawled from the network through big data, and the doctor user information is matched with the crawled auxiliary certification materials one by one for audit, ensuring the qualification of the doctor user. Finally, the completeness of the doctor user information is detected in real time during the audit process, and when the completeness does not meet the preset threshold, a reminder to supplement the materials is sent to the doctor user terminal in real time, and the doctor user information is audited again after the materials are supplemented. Finally, the reliability of the audit of the doctor user information is ensured and the validity of the issuance of digital certificates is improved.

[0016] 3. By collecting the total number of times the electronic tag is executed, and obtaining the first processing time, the second processing time and the third processing time respectively, the average rate of the electronic signature can be effectively calculated, and the accuracy of the electronic signature can be calculated, and then the efficiency of the electronic signature can be effectively and accurately calculated through the average rate of completing the electronic signature and the accuracy of the electronic signature. Then, the eligibility of the electronic signature can be effectively determined through the benchmark efficiency, which effectively guarantees the monitoring of the electronic signature during execution, and then when it is unqualified, an alarm operation is performed, which is conducive to timely grasping the unqualified status of the electronic signature, and is conducive to optimizing the medical electronic signature, thereby ensuring the effectiveness of the medical electronic signature.

[0017] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures specifically pointed out in this application document.

[0018] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0020] Figure 1 This is a structural diagram of a mobile medical electronic signature system based on electronic authentication in an embodiment of the present invention; Figure 2A schematic diagram of the connection between various components in a mobile medical electronic signature system based on electronic authentication in an embodiment of the present invention; Figure 3 This is a schematic diagram of a digital certificate issuance principle in a mobile medical electronic signature system based on electronic authentication in an embodiment of the present invention; Figure 4 This is a schematic diagram of an electronic signature principle in a mobile medical electronic signature system based on electronic authentication in an embodiment of the present invention; Figure 5 The present invention is a schematic diagram of information verification in a mobile medical electronic signature system based on electronic authentication in an embodiment of the present invention. DETAILED DESCRIPTION

[0021] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0022] Embodiment 1: This embodiment provides a mobile medical electronic signature system based on electronic authentication, such as Figure 1 As shown, including: The certificate issuance module is used to import doctor user information into the edge front-end internal control and synchronize it to the cloud master control. At the same time, the cloud master control and mobile client issue user certificates based on the doctor user information; The electronic signature module is used to receive the original text to be signed based on the edge front-end internal control after the user certificate is issued, and generate the data to be electronically signed based on the cloud master control. At the same time, the mobile client terminal executes the electronic signature according to the data to be electronically signed; The verification module is used to verify the original text to be signed and the signature result based on the edge front-end and generate the verification result.

[0023] In this embodiment, the doctor user information may be the doctor's name, age, department, and other information.

[0024] In this embodiment, the edge front-end internal control is a component in the mobile medical electronic signature system, which is used to receive doctor user information and verify the original text to be signed and the electronic signature.

[0025] In this embodiment, cloud control is another component in the mobile medical electronic signature system, which is used for information review and generation of data to be electronically signed.

[0026] In this embodiment, the user certificate may be a certificate that can characterize the identity of the doctor user, that is, to ensure that each doctor user is a reliable and valid doctor.

[0027] In this embodiment, the original document to be signed may be a report or data that requires an electronic signature from a doctor, such as diagnosis information and a hospitalization report.

[0028] In this embodiment, the data to be electronically signed may be data information that can be directly signed, which is obtained after the cloud master controller performs information review and format conversion on the original document to be signed.

[0029] In this embodiment, the electronic signature can be a doctor user signing the data to be electronically signed through the mobile client terminal, thereby ensuring the effectiveness of the data to be electronically signed.

[0030] The working principle and beneficial effects of the above technical solution are: receiving doctor user information through edge front-end internal control and synchronizing it to the cloud master control, which is convenient for reviewing medical user information, ensuring the accuracy and reliability of the user certificate finally issued, realizing the security authorization control of the access to the medical business system application, and ensuring that the source of the business initiator is within the trusted system system; secondly, after obtaining the user certificate, receiving the original text to be signed, and generating the data to be electronically signed through the cloud master control, which is convenient for doctors to perform effective electronic signature operations on the electronic signature data through the mobile client terminal, ensuring the effect and reliability of the electronic signature; finally, verifying the original text to be signed and the signature result, ensuring the reliability of the mobile medical electronic signature, and ensuring the security, trustworthiness, reliability and efficiency of the mobile medical electronic signature.

[0031] Embodiment 2: Based on Example 1, this example provides a mobile medical electronic signature system based on electronic authentication, such as Figure 2 As shown, including: Medical business system, edge front-end internal control, cloud master control and mobile client, among which, The medical business system is connected to the edge front-end internal control, and the medical business and edge front-end internal control constitute the hospital's internal network; The cloud master control is connected to the hospital’s internal network; The mobile client is connected to the cloud master control.

[0032] In this embodiment, the edge front-end internal control is the edge front-end internal control system, the cloud master control is the cloud master control system, and the mobile client is the mobile client module.

[0033] The working principle and beneficial effects of the above technical solution are: by limiting the connection relationship between the medical business system, edge front-end internal control, cloud master control and mobile client, it is convenient to accurately and effectively execute the mobile medical electronic signature process according to the limited results, thereby improving the efficiency and effect of mobile medical electronic signature.

[0034] Embodiment 3: Based on Example 1, this example provides a mobile medical electronic signature system based on electronic authentication, such as Figure 3 As shown, the certificate issuance module includes: An information import unit, used to import doctor user information based on edge front-end internal control; Synchronization unit, used to synchronize doctor user information to the cloud master control; Audit unit, used to audit doctor user information based on cloud-based master control; A login and confirmation unit is used to log in to the mobile client based on the user account when the review is passed, and to confirm the application for issuance of a digital certificate based on the mobile client; The certificate application unit is used to call the hardware cryptographic device based on the cloud master control to generate the target signature public-private key pair, and send the signature public key to the preset agency according to the interface request. At the same time, apply for the issuance of and obtain the user certificate in the preset agency.

[0035] In this embodiment, the preset organization may be a third-party compliant electronic certification service organization, referred to as a CA organization.

[0036] In this embodiment, the target signature public-private key pair may be an SM2 signature public-private key pair.

[0037] In this embodiment, the doctor user information may include: name, ID card, and mobile phone number.

[0038] In this embodiment, the mobile client can be logged in based on the user account: the individual doctor user uses his own mobile terminal to log in to the system through the mobile client module using the mobile phone number as the account (SMS verification code authorization verification).

[0039] In this embodiment, the doctor's user information (name, ID card, mobile phone number) is imported through the edge front-end internal control system, and the data is synchronized to the cloud master control system. The cloud master control system is used to review the doctor's user information (manual review or verification using a trusted identity data source); the individual doctor uses his own mobile terminal through the mobile client module using the mobile phone number as the account to log in to the system (SMS verification code authorization verification), and at the same time confirms the application for issuance of a digital certificate. The cloud master control system calls the hardware cryptographic device to generate an SM2 signature public-private key pair, and sends the signature public key to the CA agency through an interface request to apply for issuance and obtain a digital certificate. At this point, the entire doctor user certificate issuance process is completed.

[0040] The working principle and beneficial effects of the above technical solution are: by obtaining the doctor user information of the doctor user from the medical business system, the security authorization control of the access to the medical business system application is realized, ensuring that the source of the business initiator is within the trusted system system; secondly, the doctor user information is reviewed through the remote master control to ensure the accuracy and reliability of the doctor user information, and after the review is passed, the doctor user is reminded to confirm the application for the issuance of the digital certificate through the mobile client, thereby facilitating the issuance of the digital certificate; finally, the target signature public-private key pair is generated through the cloud master control, and the user certificate is encrypted and issued through the target signature public-private key pair, ensuring the reliability of the digital certificate.

[0041] Embodiment 4: Based on Example 3, this embodiment provides a mobile medical electronic signature system based on electronic authentication, and the review unit includes: The information processing subunit is used to: Obtain the doctor user information obtained, and determine the review dimension of the doctor user information based on the information review standard; Extract the dimensional features of each audit dimension, and split the doctor user information into dimensions based on the dimensional features to obtain a multi-dimensional doctor user information set; Information review unit, used to: Extracting basic identity parameters based on a multi-dimensional doctor user information set, accessing a preset trusted identity information database, and matching the basic identity parameters with the trusted identity information in the preset trusted identity information database in sequence based on the access results; Determine the first-level review result of the doctor user information based on the similarity matching result, and start the second-level review mechanism for the doctor user certification information after the first-level review result is passed; Based on the results of the second-level audit mechanism, key information parameters corresponding to the multi-dimensional doctor user information set are extracted respectively, and the multi-dimensional doctor user information set is sorted by audit priority based on the key information parameters; Based on the dimensional features, the formats of the multi-dimensional doctor user information sets are standardized. At the same time, based on the audit priority sorting results, the corresponding auxiliary certification materials are crawled from the network according to big data, and the multi-dimensional doctor user information sets after the format standardization are text-mapped with the corresponding auxiliary certification materials. Determine the completeness of the doctor user information based on the text mapping result, and when the completeness does not meet the preset threshold, determine that the doctor user information is missing, and suspend the review process of the doctor user information based on the determination result, and at the same time, record the current review node; Send a material supplement notification to the doctor user terminal based on the determination result, and simultaneously open the doctor user's online material supplement channel authority, and receive the doctor user's supplementary information in real time based on the authority opening result; Based on the received results, the review process of the doctor user information is resumed, and the multi-dimensional doctor user information set is re-checked based on the review node to obtain the second-level review result of the doctor user information; The result determination subunit is used to complete the review of the doctor user information based on the second-level review results.

[0042] In this embodiment, the information review standard is known in advance and is used to characterize the type of review of the doctor user information and the review mechanism for each review type.

[0043] In this embodiment, the audit dimension may be the type of audit performed on the doctor user information, including basic identity information (name, age, and ID number, etc.) and auxiliary certification information (qualification certificates, professional experience, etc.).

[0044] In this embodiment, the dimension feature may be a dimension characteristic that characterizes each audit dimension, such as the information type and value characteristics corresponding to the basic identity information.

[0045] In this embodiment, the multi-dimensional doctor user information set may be the result of classifying the doctor user information according to dimensional features, where each dimension is a data category.

[0046] In this embodiment, the preset trusted identity information database is known in advance, and records the basic information of the authorized and trusted doctors in the medical system.

[0047] In this embodiment, the first level review result is to review the basic information parameters of the doctor user, and the second level review will be conducted only after the first level review result is passed.

[0048] In this embodiment, the doctor user certification information may be auxiliary certification materials related to the doctor user, including qualification certificates, professional experience and other information.

[0049] In this embodiment, the key information parameter may be a data segment in the multi-dimensional doctor user information set that can characterize the data subject of the doctor user information in the current dimension.

[0050] In this embodiment, the format standardization process may be to unify the format of the doctor user information set under the same dimension, thereby facilitating the corresponding review operation.

[0051] In this embodiment, the auxiliary certification materials are specific data that can prove the doctor user information, including qualification certificates, academic certificates, and graduation schools.

[0052] In this embodiment, the text mapping may be to perform one-to-one text verification of the multi-dimensional doctor user information set and the corresponding auxiliary certification materials, thereby achieving effective review of the doctor user information.

[0053] In this embodiment, the preset threshold is set in advance and is used as a standard to measure whether the doctor user information is complete, and can be adjusted.

[0054] In this embodiment, the audit node may be a specific location where the current audit process terminates.

[0055] In this embodiment, the re-examination may be to continue to review the doctor user information according to the review node after receiving the supplementary information of the doctor user, until all information corresponding to the types to be reviewed are completed.

[0056] The working principle and beneficial effects of the above technical solution are: by determining the audit dimension of the doctor user information according to the information audit standard, the doctor user information is split according to the audit dimension, so as to facilitate the rigorous and effective audit of the doctor user information according to the audit requirements of different dimensions. Secondly, the basic identity parameters of the doctor user information are extracted according to the dimension splitting results, and the basic identity parameters are audited to ensure that the current doctor user does exist in the medical system. At the same time, after the basic identity parameters are audited, the corresponding auxiliary certification materials are crawled from the network through big data, and the doctor user information is matched with the crawled auxiliary certification materials one by one for audit, ensuring the qualification of the doctor user. Finally, the completeness of the doctor user information is detected in real time during the audit process, and when the completeness does not meet the preset threshold, a reminder to supplement the materials is sent to the doctor user terminal in real time, and the doctor user information is audited again after the materials are supplemented. Finally, the reliability of the audit of the doctor user information is ensured and the validity of the issuance of digital certificates is improved.

[0057] Embodiment 5: Based on Example 1, this example provides a mobile medical electronic signature system based on electronic authentication, such as Figure 4 As shown, the electronic signature module includes: A calling unit, used to call the edge front-end internal control based on the business medical system, and determine the original document to be signed and the doctor user number based on the business medical system; A summary calculation unit is used to send the original document to be signed and the doctor number in the business medical system to the edge front-end internal control, and perform summary calculation on the original document to be signed based on the edge front-end internal control system; The unit for generating data to be signed and confirmed is used to send the summary calculation result to the cloud master control and generate data to be signed and confirmed based on the cloud master control; The signature unit is used to read the signature confirmation data based on the mobile client and input the digital certificate password, and electronically sign the signature confirmation data based on the input result to obtain the signature result; The synchronization unit is used to perform data signature calculation on the signature result based on the cloud master control calling the data certificate key, and send the signature calculation result value to the edge front-end internal control. After the edge front-end internal control receives the signature calculation result value, it is synchronously sent to the medical information business system.

[0058] In this embodiment, the cloud master control calls the data certificate key to perform data signature calculation, which can be that the cloud master control system calls the digital certificate key corresponding to the doctor user to perform SM2 data signature calculation (the calculation result includes the signed digital certificate).

[0059] In this embodiment, when the edge front-end internal control system performs summary calculation on the original text to be signed, the calculation result does not include the original text data to be signed.

[0060] In this embodiment, performing digest calculation on the original text to be signed may be performing SM3 digest calculation on the original text to be signed.

[0061] In this embodiment, the medical business system calls the edge front-end internal control system and sends the original text to be signed and the doctor's user number to the edge front-end internal control system. The edge front-end internal control system performs SM3 summary calculation on the signature original text (the calculation result does not include the original clear text data to be signed), and sends the summary calculation result to the cloud-based master control system to form confirmation data to be signed; the doctor's personal user operates the mobile terminal to view the data to be signed through the mobile client module, and enters the digital certificate password to confirm the operation to electronically sign the data. The cloud-based master control system calls the digital certificate key corresponding to the doctor user to perform SM2 data signature calculation (the calculation result includes the signed digital certificate), and sends the signature calculation result value to the edge front-end internal control system. After receiving the data, the edge front-end internal control system sends it to the medical information business system synchronously. At this point, the entire process of executing the electronic signature is completed.

[0062] In this embodiment, the signature calculation result value may be a result obtained by executing the SM2 data signature calculation through the digital certificate key, that is, the signature result is encrypted through the digital certificate key.

[0063] The working principle and beneficial effects of the above technical solution are: obtaining the original text to be signed and the doctor's user number through the edge front-end internal control, and performing summary calculation on the original text to be signed, so as to facilitate the rapid and effective determination of the data parameters that need to be signed, and secondly, sending the summary calculation result to the cloud master control to realize the generation of confirmation data to be signed through the cloud master control, and at the same time, reading the confirmation data to be signed and entering the digital certificate password through the mobile client, so as to realize the safe and reliable electronic signature of the confirmation data to be signed according to the input result, and finally, sending the electronic signature calculation result value synchronously to the medical information business system, thereby ensuring the effectiveness, reliability and security of the electronic signature of the confirmation data to be signed.

[0064] Embodiment 6: Based on Example 5, this embodiment provides a mobile medical electronic signature system based on electronic authentication, and the summary calculation unit includes: The result acquisition subunit is used to acquire the original document to be signed and the doctor's number in the business medical system, and determine the data types of the original document to be signed and the doctor's number; The transmission preparation subunit is used to determine the data transmission protocol for the original text to be signed and the doctor's number based on the data type, and format the original text to be signed and the doctor's number respectively based on the data transmission protocol; The data transmission subunit is used to: Based on the data transmission protocol, independent temporary transmission channels are respectively constructed, and parameters of the independent temporary transmission channels are adapted; Based on the parameter adaptation results, the format-encoded original text to be signed and the doctor's code will be transmitted to the edge front-end internal control respectively through an independent temporary transmission channel.

[0065] In this embodiment, the data type may be the data type corresponding to the original document to be signed and the doctor number, so as to facilitate determining the corresponding transmission method according to the data type.

[0066] In this embodiment, the data transmission protocol may represent requirements for transmission methods and transmission formats of different data types.

[0067] In this embodiment, the independent temporary transmission channel may be a channel determined according to a data transmission protocol for transmitting the original text to be signed and the doctor's code respectively, and the two are independent of each other.

[0068] The working principle and beneficial effects of the above technical solution are: by determining the data type of the original text to be signed and the doctor's number, the data transmission protocol for the original text to be signed and the doctor's number can be determined according to the data type, thereby facilitating the effective transmission of the original text to be signed and the doctor's code after format encoding according to the data transmission protocol, ensuring the transmission reliability of the original text to be signed and the doctor's number, and providing reliable protection for electronic signatures.

[0069] Embodiment 7: Based on Example 1, this example provides a mobile medical electronic signature system based on electronic authentication, such as Figure 5 As shown, the verification module includes: Verification unit for: Based on the medical information business system, the edge front-end internal control is called, and the original document to be signed and the doctor's user number are sent to the edge front-end internal control; Based on the edge front-end internal control, signature verification calculation is performed on the original text to be signed and the doctor's user number, and the verification result is fed back to the medical information business system.

[0070] In this embodiment, the medical information business system calls the edge front-end internal control system and sends the original text and signature technical result value to be verified to the edge front-end internal control system. The edge front-end internal control system performs the SM2 signature verification calculation and returns the verification result to the medical information business system. At this point, the entire data signature verification process is completed.

[0071] The working principle and beneficial effect of the above technical solution are: through edge front-end internal control, signature verification calculation is performed on the original text to be signed and the doctor's user number, ensuring the compliance and reliability of the signature executed by the final original text to be signed and the doctor's user number.

[0072] Embodiment 8: Based on Example 7, this embodiment provides a mobile medical electronic signature system based on electronic authentication, wherein the verification unit includes: The verification result acquisition subunit is used to obtain the signature verification calculation result of the original document to be signed and the doctor user number, and extract the key information of the verification calculation result; The verification result processing subunit is used to: Based on key information, the verification calculation results are divided into a verification pass set and a verification fail set, and a verification result record report is created; The verification passed set and the verification failed set are recorded in the verification result record report respectively, and the record results are fed back to the medical information business system; The optimization subunit is used to extract the abnormal verification parameters that have not passed the verification based on the feedback results, and iteratively optimize the edge front-end internal control based on the abnormal verification parameters to perform signature verification calculation mechanism on the verification original text and doctor user number.

[0073] In this embodiment, the key information may be a main data segment that can distinguish the verification calculation result.

[0074] In this embodiment, the abnormal verification parameter may be abnormal data that exists in the verification failure set, including misjudgment of the verification mechanism and abnormality of the verification process, so as to facilitate optimization of the signature verification calculation mechanism.

[0075] The working principle and beneficial effects of the above technical solution are: by extracting information from the verification calculation results, the verification calculation results are divided into a verification pass set and a verification fail set according to the information extraction results, and recorded through the created verification result record report, so that the management terminal can effectively understand the verification calculation results. At the same time, the abnormal verification parameters in the verification fail set are extracted, and the signature verification calculation mechanism is iteratively optimized according to the abnormal verification parameters, thereby providing reliable data support for signature verification and ensuring the accuracy and reliability of signature verification.

[0076] Embodiment 9: Based on Example 1, this embodiment provides a mobile medical electronic signature system based on electronic authentication, and the verification module includes: A log creation unit is used to create a work log and interface the work log with the edge front-end internal control; Parameter registration unit, used for: Based on the interface docking results, the edge front-end internal control receives the verification operation of the original text to be signed and the signature result in real time, and obtains the timestamp information corresponding to the current verification operation when there is a verification operation; Based on the development order of the timestamp information, the verification parameters corresponding to different times are recorded and archived in the work log.

[0077] In this embodiment, the work log is used to record all verification data of the edge front-end internal control on the original text to be signed and the signature result, that is, to record all work parameters of the edge front-end internal control.

[0078] In this embodiment, the timestamp information may be specific time information corresponding to each verification operation.

[0079] The working principle and beneficial effect of the above technical solution are: by creating a work log, all verification operation data of the edge front-end internal control can be effectively recorded according to the work log, so that the management terminal can understand the operation status of the mobile medical electronic signature system in real time and effectively.

[0080] Embodiment 10: Based on Example 1, this embodiment provides a mobile medical electronic signature system based on electronic authentication, and the electronic signature module includes: A parameter acquisition unit is used to collect the total number of times the electronic signature is executed, and read the first processing time of the edge front-end internal control on the original document to be signed each time the electronic signature is executed, the second processing time when the cloud master control generates the electronic signature to be signed, and the third processing time when the mobile client executes the electronic signature according to the data to be signed; A first calculation unit, configured to calculate an average rate of completing electronic signatures based on a first processing time, a second processing time, and a third processing time each time the electronic signature is executed; ; in, Indicates the average rate at which electronic signatures are completed; Indicates the total number of times electronic signatures were executed; A serial number value indicating the number of electronic signatures; Indicates The first amount of data processed by the edge front-end internal control when executing the electronic signature for the first time; Indicates When executing electronic signature for the first time, the edge front-end internal control first processes the original document to be signed; Indicates The delay of the edge front-end internal control in processing the original document to be signed when executing the electronic signature for the first time; Indicates When the electronic signature is executed for the first time, the cloud master control generates a second amount of data to be processed when the electronic signature is executed; Indicates The second processing time when the cloud master control generates the electronic signature to be executed for the first time; Indicates The delay in the cloud master control generating the pending electronic signature when executing the electronic signature for the first time; Indicates The third amount of data processed by the mobile client when executing the electronic signature for the first time according to the data to be electronically signed; Indicates The third processing time when the mobile client executes the electronic signature according to the data to be electronically signed when the electronic signature is executed for the first time; Indicates The delay when the mobile client executes the electronic signature based on the data to be electronically signed when executing the electronic signature for the first time; A second calculation unit is used to read the number of correct electronic signatures and the number of incorrect electronic signatures from the total number of times the electronic signature is executed, and calculate the accuracy rate of the execution of the electronic signature according to the number of correct electronic signatures and the number of incorrect electronic signatures; ; in, Indicates the accuracy of executing electronic signatures; Indicates the number of correct electronic signatures among the total number of electronic signatures executed; Indicates the number of electronic signature errors among the total number of electronic signature executions; A third calculation unit, used to calculate the efficiency of executing the electronic signature according to the average rate of the electronic signature and the accuracy of executing the electronic signature; ; in, Indicates the efficiency of executing electronic signatures; Indicates the preset rate threshold; The weight representing the influence of the average rate of electronic signatures on the efficiency of executing electronic signatures; The weight representing the influence of the accuracy of executing electronic signature on the efficiency of executing electronic signature; Qualification determination unit, used for: Obtaining a preset benchmark efficiency for executing the electronic signature, and comparing the efficiency for executing the electronic signature with the benchmark efficiency; If the efficiency of executing the electronic signature is equal to or greater than the benchmark efficiency, the execution of the electronic signature is determined to be qualified; Otherwise, the electronic signature is judged to be unqualified and an alarm is issued.

[0081] In this embodiment, the preset rate threshold may be a qualified rate for completing electronic signatures, which is artificially set through empirical experiments.

[0082] In this embodiment, the benchmark efficiency may be set in advance and used as a criterion for determining whether the execution of the electronic signature is qualified.

[0083] In this embodiment, the alarm operation may include one or more of sound, vibration and light.

[0084] The working principle and beneficial effects of the above technical solution are: by collecting the total number of times the electronic tag is executed, and obtaining the first processing time, the second processing time and the third processing time respectively, the average rate of the electronic signature is effectively calculated, and the accuracy of the electronic signature is calculated, and then the efficiency of the electronic signature is effectively and accurately calculated through the average rate of completing the electronic signature and the accuracy of the electronic signature, and then the qualification of the electronic signature is effectively determined through the benchmark efficiency, which effectively guarantees the monitoring during the execution of the electronic signature, and then when it is unqualified, an alarm operation is performed, which is conducive to timely grasping the unqualified status of the electronic signature, and is conducive to optimizing the medical electronic signature, thereby ensuring the effect of the medical electronic signature.

[0085] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A mobile medical electronic signature system based on electronic authentication, characterized in that: include: The certificate issuance module is used to import doctor user information into the edge front-end internal control and synchronize it to the cloud master control. At the same time, the cloud master control and mobile client issue user certificates based on the doctor user information; The electronic signature module is used to receive the original text to be signed based on the edge front-end internal control after the user certificate is issued, and generate the data to be electronically signed based on the cloud master control. At the same time, the mobile client terminal executes the electronic signature according to the data to be electronically signed; The verification module is used to verify the original text to be signed and the signature result based on the edge front-end internal control, and generate the verification result.

2. A mobile medical electronic signature system based on electronic authentication according to claim 1, characterized in that: include: Medical business system, edge front-end internal control, cloud master control and mobile client, among which, The medical business system is connected to the edge front-end internal control, and the medical business and edge front-end internal control constitute the hospital's internal network; The cloud master control is connected to the hospital’s internal network; The mobile client is connected to the cloud master control.

3. A mobile medical electronic signature system based on electronic authentication according to claim 1, characterized in that: Certificate issuance module, including: An information import unit, used to import doctor user information based on edge front-end internal control; Synchronization unit, used to synchronize doctor user information to the cloud master control; Audit unit, used to audit doctor user information based on cloud-based master control; A login and confirmation unit is used to log in to the mobile client based on the user account when the review is passed, and to confirm the application for issuance of a digital certificate based on the mobile client; The certificate application unit is used to call the hardware cryptographic device based on the cloud master control to generate the target signature public-private key pair, and send the signature public key to the preset agency according to the interface request. At the same time, apply for the issuance of and obtain the user certificate in the preset agency.

4. A mobile medical electronic signature system based on electronic authentication according to claim 3, characterized in that: Review unit, including: The information processing subunit is used to: Obtain the doctor user information obtained, and determine the review dimension of the doctor user information based on the information review standard; Extract the dimensional features of each audit dimension, and split the doctor user information into dimensions based on the dimensional features to obtain a multi-dimensional doctor user information set; Information review unit, used to: Extracting basic identity parameters based on a multi-dimensional doctor user information set, accessing a preset trusted identity information database, and matching the basic identity parameters with the trusted identity information in the preset trusted identity information database in sequence based on the access results; Determine the first-level review result of the doctor user information based on the similarity matching result, and start the second-level review mechanism for the doctor user certification information after the first-level review result is passed; Based on the results of the second-level audit mechanism, key information parameters corresponding to the multi-dimensional doctor user information set are extracted respectively, and the multi-dimensional doctor user information set is sorted by audit priority based on the key information parameters; Based on the dimensional features, the formats of the multi-dimensional doctor user information sets are standardized. At the same time, based on the audit priority sorting results, the corresponding auxiliary certification materials are crawled from the network according to big data, and the multi-dimensional doctor user information sets after the format standardization are text-mapped with the corresponding auxiliary certification materials. Determine the completeness of the doctor user information based on the text mapping result, and when the completeness does not meet the preset threshold, determine that the doctor user information is missing, and suspend the review process of the doctor user information based on the determination result, and at the same time, record the current review node; Send a material supplement notification to the doctor user terminal based on the determination result, and simultaneously open the doctor user's online material supplement channel authority, and receive the doctor user's supplementary information in real time based on the authority opening result; Based on the received results, the review process of the doctor user information is resumed, and the multi-dimensional doctor user information set is re-checked based on the review node to obtain the second-level review result of the doctor user information; The result determination subunit is used to complete the review of the doctor user information based on the second-level review results.

5. According to claim 1, a mobile medical electronic signature system based on electronic authentication is characterized in that: Electronic signature module, including: A calling unit, used to call the edge front-end internal control based on the business medical system, and determine the original document to be signed and the doctor user number based on the business medical system; A summary calculation unit is used to send the original document to be signed and the doctor number in the business medical system to the edge front-end internal control, and perform summary calculation on the original document to be signed based on the edge front-end internal control system; The unit for generating data to be signed and confirmed is used to send the summary calculation result to the cloud master control and generate data to be signed and confirmed based on the cloud master control; The signature unit is used to read the signature confirmation data based on the mobile client and input the digital certificate password, and electronically sign the signature confirmation data based on the input result to obtain the signature result; The synchronization unit is used to perform data signature calculation on the signature result based on the cloud master control calling the data certificate key, and send the signature calculation result value to the edge front-end internal control. After the edge front-end internal control receives the signature calculation result value, it is synchronously sent to the medical information business system.

6. A mobile medical electronic signature system based on electronic authentication according to claim 5, characterized in that: Summary calculation unit, including: The result acquisition subunit is used to acquire the original document to be signed and the doctor's number in the business medical system, and determine the data types of the original document to be signed and the doctor's number; The transmission preparation subunit is used to determine the data transmission protocol for the original text to be signed and the doctor's number based on the data type, and format the original text to be signed and the doctor's number respectively based on the data transmission protocol; The data transmission subunit is used to: Based on the data transmission protocol, independent temporary transmission channels are respectively constructed, and parameters of the independent temporary transmission channels are adapted; Based on the parameter adaptation results, the format-encoded original text to be signed and the doctor's code will be transmitted to the edge front-end internal control respectively through an independent temporary transmission channel.

7. A mobile medical electronic signature system based on electronic authentication according to claim 1, characterized in that: Verification modules, including: Verification unit for: Based on the medical information business system, the edge front-end internal control is called, and the original document to be signed, the signature result, and the doctor's user number are sent to the edge front-end internal control; Based on the edge front-end internal control, signature verification calculation is performed on the original text to be signed and the doctor's user number, and the verification result is fed back to the medical information business system.

8. A mobile medical electronic signature system based on electronic authentication according to claim 7, characterized in that: Verification unit, including: The verification result acquisition subunit is used to obtain the signature verification calculation result of the original document to be signed and the doctor user number, and extract the key information of the verification calculation result; The verification result processing subunit is used to: Based on key information, the verification calculation results are divided into a verification pass set and a verification fail set, and a verification result record report is created; The verification passed set and the verification failed set are recorded in the verification result record report respectively, and the record results are fed back to the medical information business system; The optimization subunit is used to extract the abnormal verification parameters that have not passed the centralized verification based on the feedback results, and iteratively optimize the signature verification calculation mechanism of the edge front-end internal control for the original text to be signed and the doctor user number based on the abnormal verification parameters.

9. A mobile medical electronic signature system based on electronic authentication according to claim 1, characterized in that: Verification modules, including: A log creation unit is used to create a work log and interface the work log with the edge front-end internal control; Parameter registration unit, used for: Based on the interface docking results, the edge front-end internal control receives the verification operation of the original text to be signed and the signature calculation result value in real time, and obtains the timestamp information corresponding to the current verification operation when there is a verification operation; Based on the development order of the timestamp information, the verification parameters corresponding to different times are recorded and archived in the work log.

10. A mobile medical electronic signature system based on electronic authentication according to claim 1, characterized in that: Electronic signature module, including: A parameter acquisition unit is used to collect the total number of times the electronic signature is executed, and read the first processing time of the edge front-end internal control on the original document to be signed each time the electronic signature is executed, the second processing time when the cloud master control generates the electronic signature to be signed, and the third processing time when the mobile client executes the electronic signature according to the data to be signed; A first calculation unit, configured to calculate an average rate of completing electronic signatures based on a first processing time, a second processing time, and a third processing time each time the electronic signature is executed; ； in, Indicates the average rate at which electronic signatures are completed; Indicates the total number of times electronic signatures were executed; A serial number value indicating the number of electronic signatures; Indicates The first amount of data processed by the edge front-end internal control when executing the electronic signature for the first time; Indicates When executing electronic signature for the first time, the edge front-end internal control first processes the original document to be signed; Indicates The delay of the edge front-end internal control in processing the original document to be signed when executing the electronic signature for the first time; Indicates When the electronic signature is executed for the first time, the cloud master control generates a second amount of data to be processed when the electronic signature is executed; Indicates The second processing time when the cloud master control generates the electronic signature to be executed for the first time; Indicates The delay in the cloud master control generating the pending electronic signature when executing the electronic signature for the first time; Indicates The third amount of data processed by the mobile client when executing the electronic signature for the first time according to the data to be electronically signed; Indicates The third processing time when the mobile client executes the electronic signature according to the data to be electronically signed when the electronic signature is executed for the first time; Indicates The delay when the mobile client executes the electronic signature based on the data to be electronically signed when executing the electronic signature for the first time; A second calculation unit is used to read the number of correct electronic signatures and the number of incorrect electronic signatures from the total number of times the electronic signature is executed, and calculate the accuracy rate of the execution of the electronic signature according to the number of correct electronic signatures and the number of incorrect electronic signatures; ； in, Indicates the accuracy of executing electronic signatures; Indicates the number of correct electronic signatures among the total number of electronic signatures executed; Indicates the number of electronic signature errors among the total number of electronic signature executions; A third calculation unit, used to calculate the efficiency of executing the electronic signature according to the average rate of the electronic signature and the accuracy of executing the electronic signature; ； in, Indicates the efficiency of executing electronic signatures; Indicates the preset rate threshold; The weight representing the influence of the average rate of electronic signatures on the efficiency of executing electronic signatures; The weight representing the influence of the accuracy of executing electronic signature on the efficiency of executing electronic signature; Qualification determination unit, used for: Obtaining a preset benchmark efficiency for executing the electronic signature, and comparing the efficiency for executing the electronic signature with the benchmark efficiency; If the efficiency of executing the electronic signature is equal to or greater than the benchmark efficiency, the execution of the electronic signature is determined to be qualified; Otherwise, the electronic signature is judged to be unqualified and an alarm is issued.

Images