Mobile medical electronic signature system based on electronic authentication

Abstract

The present invention provides a mobile medical electronic signature system based on electronic authentication, comprising: a certificate issuance module for importing doctor user information into edge front-end internal control and synchronizing it to cloud master control; and, at the same time, issuing a user certificate based on the doctor user information according to the cloud master control and mobile client; an electronic signature module for receiving the original document to be signed based on the edge front-end internal control after the user certificate is issued, and generating data to be electronically signed based on the cloud master control; and, at the same time, executing the electronic signature based on the data to be electronically signed by the mobile client terminal; and a verification module for verifying the original document to be signed and the signature result based on the edge front-end internal control, and generating a verification result. This ensures the security, trustworthiness, reliability, and efficiency of mobile medical electronic signatures.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and in particular to a mobile medical electronic signature system based on electronic authentication. Background Art

[0002] Currently, electronic signatures in the medical field generally use hardware server cryptographic products combined with hardware smart cryptographic keys (USB-keys), which is a common electronic signature solution.

[0003] However, as the medical field grows, more requirements are being placed on electronic signatures that are tailored to the specific needs of the industry. General-purpose solutions often cannot fully meet the specific needs of the medical field. Furthermore, general-purpose solutions require the support of hardware server cryptographic products, resulting in high construction costs and hindering their implementation and promotion.

[0004] Therefore, in order to overcome the above-mentioned defects, the present invention provides a mobile medical electronic signature system based on electronic authentication. Summary of the Invention

[0005] The present invention provides a mobile medical electronic signature system based on electronic authentication, which is used to receive doctor user information through edge front-end internal control and synchronize it to the cloud master control, so as to facilitate the review of medical user information, ensure the accuracy and reliability of the user certificate finally issued, realize the security authorization control of the access of medical business system applications, and ensure that the source of the business initiator is within the trusted system. Secondly, after obtaining the user certificate, the original text to be signed is received, and the data to be electronically signed is generated through the cloud master control, so that the doctor can perform effective electronic signature operations on the electronic signature data through the mobile client terminal, ensuring the effect and reliability of the electronic signature. Finally, the original text to be signed and the signature result are verified, so as to ensure the reliability of the mobile medical electronic signature, and ensure that the mobile medical electronic signature is safe, trustworthy, reliable and efficient.

[0006] The present invention provides a mobile medical electronic signature system based on electronic authentication, comprising:

[0007] The certificate issuance module is used to import doctor user information into the edge front-end internal control and synchronize it to the cloud master control. At the same time, the cloud master control and mobile client issue user certificates based on the doctor user information;

[0008] The electronic signature module is used to receive the original document to be signed based on the edge front-end internal control after the user certificate is issued, and generate the data to be electronically signed based on the cloud master control. At the same time, the mobile client terminal executes the electronic signature based on the data to be electronically signed;

[0009] The verification module is used to verify the original text to be signed and the signature result based on the edge front-end internal control and generate the verification result.

[0010] Preferably, a mobile medical electronic signature system based on electronic authentication includes:

[0011] Medical business system, edge front-end internal control, cloud-based master control and mobile client, among which,

[0012] The medical business system is connected to the edge front-end internal control, and the medical business and edge front-end internal control constitute the hospital's internal network;

[0013] The cloud-based master control is connected to the hospital’s internal network;

[0014] The mobile client is connected to the cloud control system.

[0015] Preferably, a mobile medical electronic signature system based on electronic authentication, a certificate issuance module, includes:

[0016] An information import unit, used to import doctor user information based on edge front-end internal control;

[0017] Synchronization unit, used to synchronize doctor user information to the cloud master control;

[0018] Audit unit, used to audit doctor user information based on cloud-based master control;

[0019] The login and confirmation unit is used to log in to the mobile client based on the user account when the review is passed, and to confirm the application for issuance of a digital certificate based on the mobile client;

[0020] The certificate application unit is used to call the hardware cryptographic device based on the cloud master control to generate the target signature public-private key pair, and send the signature public key to the preset agency according to the interface request. At the same time, it applies for the issuance and obtains the user certificate in the preset agency.

[0021] Preferably, a mobile medical electronic signature system based on electronic authentication, the audit unit includes:

[0022] An information processing subunit is used to:

[0023] Obtain the doctor user information obtained, and determine the review dimensions of the doctor user information based on the information review standards;

[0024] Extract the dimensional features of each audit dimension, and split the doctor user information into dimensions based on the dimensional features to obtain a multi-dimensional doctor user information set;

[0025] Information review unit, used to:

[0026] Extract basic identity parameters based on the multi-dimensional doctor user information set, and at the same time, access the preset trusted identity information database, and based on the access results, perform similarity matching between the basic identity parameters and the trusted identity information in the preset trusted identity information database in sequence;

[0027] Determine the first-level review result of the doctor user information based on the similarity matching result, and after the first-level review result is passed, start the second-level review mechanism of the doctor user certification information;

[0028] Based on the results of the second-level review mechanism, key information parameters corresponding to the multi-dimensional doctor user information set are extracted respectively, and the multi-dimensional doctor user information set is reviewed and prioritized based on the key information parameters;

[0029] Based on the dimensional features, the format of the multi-dimensional doctor user information set is standardized. At the same time, based on the audit priority sorting results, the corresponding auxiliary supporting materials are crawled from the network according to big data, and the multi-dimensional doctor user information set after the format standardization is respectively mapped with the corresponding auxiliary supporting materials;

[0030] Determine the completeness of the doctor user information based on the text mapping result, and when the completeness does not meet the preset threshold, determine that the doctor user information is missing, and suspend the review process of the doctor user information based on the determination result, and at the same time, record the current review node;

[0031] Based on the judgment result, a material supplement notification is sent to the doctor user terminal, and the doctor user's online material supplement channel permission is opened simultaneously, and the doctor user's supplementary information is received in real time based on the permission opening result;

[0032] Based on the received results, the review process of the doctor user information is resumed, and the multi-dimensional doctor user information set is re-checked based on the review node to obtain the second-level review result of the doctor user information;

[0033] The result determination subunit is used to complete the review of the doctor user information based on the second-level review results.

[0034] Preferably, a mobile medical electronic signature system based on electronic authentication, the electronic signature module includes:

[0035] A calling unit is used to call the edge front-end internal control based on the business medical system, and determine the original document to be signed and the doctor user number based on the business medical system;

[0036] A summary calculation unit is used to send the original document to be signed and the doctor's number in the business medical system to the edge front-end internal control, and perform summary calculation on the original document to be signed based on the edge front-end internal control system;

[0037] The unit for generating data to be signed and confirmed is used to send the summary calculation result to the cloud master control and generate data to be signed and confirmed based on the cloud master control;

[0038] The signature unit is used to read the signature confirmation data based on the mobile client and input the digital certificate password, and electronically sign the signature confirmation data based on the input result to obtain a signature result;

[0039] The synchronization unit is used to perform data signature calculation on the signature result based on the cloud master control calling the data certificate key, and send the signature calculation result value to the edge front-end internal control. After the edge front-end internal control receives the signature calculation result value, it is synchronously sent to the medical information business system.

[0040] Preferably, a mobile medical electronic signature system based on electronic authentication, the summary calculation unit includes:

[0041] The result acquisition subunit is used to obtain the original document to be signed and the doctor's number from the business medical system and determine the data type of the original document to be signed and the doctor's number;

[0042] The transmission preparation subunit is used to determine the data transmission protocol for the original document to be signed and the doctor's number based on the data type, and format the original document to be signed and the doctor's number respectively based on the data transmission protocol;

[0043] The data transmission subunit is used to:

[0044] Building independent temporary transmission channels based on the data transmission protocol and adapting parameters of the independent temporary transmission channels;

[0045] Based on the parameter adaptation results, the format-encoded original text to be signed and the doctor's code will be transmitted to the edge front-end internal control separately through independent temporary transmission channels.

[0046] Preferably, a mobile medical electronic signature system based on electronic authentication, the verification module includes:

[0047] Verification unit, used to:

[0048] Based on the medical information business system, the edge front-end internal control is called and the original document to be signed and the doctor's user number to be verified are sent to the edge front-end internal control;

[0049] Based on the edge front-end internal control, signature verification calculation is performed on the original text to be signed and the doctor's user number, and the verification results are fed back to the medical information business system.

[0050] Preferably, a mobile medical electronic signature system based on electronic authentication, the verification unit includes:

[0051] The verification result acquisition subunit is used to obtain the signature verification calculation results of the original document to be signed and the doctor's user number, and extract key information of the verification calculation results;

[0052] The verification result processing subunit is used to:

[0053] Based on key information, the verification calculation results are divided into a verification pass set and a verification fail set, and a verification result record report is created;

[0054] Record the verification pass set and the verification fail set in the verification result record report respectively, and feed the record results back to the medical information business system;

[0055] The optimization subunit is used to extract the abnormal verification parameters that have not passed the centralized verification based on the feedback results, and iteratively optimize the signature verification calculation mechanism of the edge front-end internal control for the original text to be signed and the doctor user number based on the abnormal verification parameters.

[0056] Preferably, a mobile medical electronic signature system based on electronic authentication, the verification module includes:

[0057] The log creation unit is used to create work logs and interface the work logs with the edge front-end internal control;

[0058] Parameter registration unit, used for:

[0059] Based on the interface docking results, the edge front-end internal control receives the verification operations of the original text to be signed and the signature results in real time, and obtains the timestamp information corresponding to the current verification operation when there is a verification operation;

[0060] Based on the development order of the timestamp information, the verification parameters corresponding to different times are recorded and archived in the work log.

[0061] Preferably, a mobile medical electronic signature system based on electronic authentication, the electronic signature module includes:

[0062] a parameter acquisition unit, configured to collect the total number of electronic signature executions and read, for each electronic signature execution, a first processing time of the edge front-end internal control on the original document to be signed, a second processing time when the cloud master control generates the electronic signature to be signed, and a third processing time when the mobile client executes the electronic signature based on the data to be signed;

[0063] a first calculating unit, configured to calculate an average rate of completing electronic signatures based on a first processing time, a second processing time, and a third processing time each time an electronic signature is executed;

[0064] ;

[0065] in, Indicates the average rate at which electronic signatures are completed; Indicates the total number of electronic signatures executed; A serial number indicating the number of electronic signatures; Indicates the The first amount of data processed by the edge front-end internal control when executing the electronic signature for the first time; Indicates the The first processing time of the original document to be signed by the edge front-end internal control when executing the electronic signature for the first time; Indicates the The delay of the edge front-end internal control in processing the original document to be signed when executing the electronic signature for the first time; Indicates the When the electronic signature is executed for the first time, the cloud master control generates a second amount of data to be processed when the electronic signature is executed; Indicates the The second processing time when the cloud master control generates the electronic signature to be executed for the first time; Indicates the The delay when the cloud master control generates the electronic signature to be executed for the first time; Indicates the The third amount of data processed by the mobile client when executing the electronic signature based on the data to be electronically signed when executing the electronic signature for the first time; Indicates the The third processing time when the mobile client executes the electronic signature based on the data to be electronically signed when executing the electronic signature for the first time; Indicates the The delay when the mobile client executes the electronic signature based on the data to be electronically signed when executing the electronic signature for the first time;

[0066] a second calculating unit, configured to read the number of correct electronic signatures and the number of incorrect electronic signatures from the total number of times the electronic signatures are executed, and calculate the accuracy rate of the execution of the electronic signatures based on the number of correct electronic signatures and the number of incorrect electronic signatures;

[0067] ;

[0068] in, Indicates the accuracy of executing electronic signatures; Indicates the number of correct electronic signatures among the total number of electronic signatures executed; Indicates the number of electronic signature errors in the total number of electronic signature executions;

[0069] a third calculation unit, configured to calculate the efficiency of executing the electronic signature according to the average rate of the electronic signature and the accuracy of executing the electronic signature;

[0070] ;

[0071] in, Indicates the efficiency of executing electronic signatures; Indicates the preset rate threshold; The weight representing the influence of the average rate of electronic signatures on the efficiency of executing electronic signatures; The weight of the impact of the accuracy of electronic signature execution on the efficiency of electronic signature execution;

[0072] Qualification determination unit, used for:

[0073] Obtaining a preset benchmark efficiency for executing electronic signatures, and comparing the efficiency of executing electronic signatures with the benchmark efficiency;

[0074] If the efficiency of executing the electronic signature is equal to or greater than the benchmark efficiency, the execution of the electronic signature is determined to be qualified;

[0075] Otherwise, the electronic signature is judged to be unqualified and an alarm is issued.

[0076] Compared with the prior art, the present invention has the following beneficial effects:

[0077] 1. Receive doctor user information through edge front-end internal control and synchronize it to the cloud master control, which facilitates the review of medical user information, ensures the accuracy and reliability of the user certificate finally issued, realizes the security authorization control of access to medical business system applications, and ensures that the source of the business initiator is within the trusted system system. Secondly, after obtaining the user certificate, receive the original text to be signed, and generate the data to be electronically signed through the cloud master control, which facilitates the doctor to perform effective electronic signature operations on the electronic signature data through the mobile client terminal, ensuring the effectiveness and reliability of the electronic signature. Finally, verify the original text to be signed and the signature result to ensure the reliability of mobile medical electronic signatures, and ensure that mobile medical electronic signatures are safe, trustworthy, reliable and efficient.

[0078] 2. By determining the audit dimensions of doctor user information according to the information audit standards, the doctor user information can be dimensionally split according to the audit dimensions, so as to facilitate rigorous and effective audit of doctor user information according to the audit requirements of different dimensions. Secondly, the basic identity parameters of the doctor user information are extracted according to the dimension splitting results, and the basic identity parameters are audited to ensure that the current doctor user does exist in the medical system. At the same time, after the basic identity parameters are audited, the corresponding auxiliary certification materials are crawled from the network through big data, and the doctor user information is matched with the crawled auxiliary certification materials one by one for audit to ensure the qualification of the doctor user. Finally, the completeness of the doctor user information is detected in real time during the audit process, and when the completeness does not meet the preset threshold, a material supplement reminder is sent to the doctor user terminal in real time, and the doctor user information is audited again after the materials are supplemented. Ultimately, the reliability of the audit of doctor user information is ensured and the validity of the issuance of digital certificates is improved.

[0079] 3. By collecting the total number of times the electronic tag is executed and obtaining the first processing time, the second processing time and the third processing time respectively, the average rate of the electronic signature is effectively calculated. By calculating the accuracy of the electronic signature execution, the efficiency of the electronic signature execution is effectively and accurately calculated through the average rate of completing the electronic signature and the accuracy of the electronic signature execution. Then, the eligibility of the electronic signature execution is effectively determined through the benchmark efficiency, which effectively guarantees the monitoring during the execution of the electronic signature. When it is unqualified, an alarm operation is performed, which is conducive to timely grasping the unqualified status of the electronic signature, and is conducive to optimizing the medical electronic signature, thereby ensuring the effectiveness of the medical electronic signature.

[0080] Other features and advantages of the present invention will be described in the following description, and in part will become apparent from the description, or will be understood by practicing the present invention. The purpose and other advantages of the present invention can be achieved and obtained through the structures specifically pointed out in this application document.

[0081] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0082] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0083] Figure 1 This is a structural diagram of a mobile medical electronic signature system based on electronic authentication in an embodiment of the present invention;

[0084] Figure 2Schematic diagram of the connection between various components in a mobile medical electronic signature system based on electronic authentication in an embodiment of the present invention;

[0085] Figure 3 This is a schematic diagram of a digital certificate issuance principle in a mobile medical electronic signature system based on electronic authentication in an embodiment of the present invention;

[0086] Figure 4 This is a schematic diagram of an electronic signature principle in a mobile medical electronic signature system based on electronic authentication in an embodiment of the present invention;

[0087] Figure 5 This is a diagram showing the principle of information verification in a mobile medical electronic signature system based on electronic authentication in an embodiment of the present invention. DETAILED DESCRIPTION

[0088] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0089] Example 1:

[0090] This embodiment provides a mobile medical electronic signature system based on electronic authentication, such as Figure 1 As shown, including:

[0091] The certificate issuance module is used to import doctor user information into the edge front-end internal control and synchronize it to the cloud master control. At the same time, the cloud master control and mobile client issue user certificates based on the doctor user information;

[0092] The electronic signature module is used to receive the original document to be signed based on the edge front-end internal control after the user certificate is issued, and generate the data to be electronically signed based on the cloud master control. At the same time, the mobile client terminal executes the electronic signature based on the data to be electronically signed;

[0093] The verification module is used to verify the original text to be signed and the signature result based on the edge front-end and generate the verification result.

[0094] In this embodiment, the doctor user information may be the doctor's name, age, department, and other information.

[0095] In this embodiment, the edge front-end internal control is a component in the mobile medical electronic signature system, which is used to receive doctor user information and verify the original text to be signed and the electronic signature.

[0096] In this embodiment, cloud control is another component in the mobile medical electronic signature system, which is used to perform information review and generate data to be electronically signed.

[0097] In this embodiment, the user certificate may be a certificate that can characterize the identity of the doctor user, that is, to ensure that each doctor user is a reliable and valid doctor.

[0098] In this embodiment, the original document to be signed may be a report or data that requires a doctor's electronic signature, such as diagnosis information and hospitalization report.

[0099] In this embodiment, the data to be electronically signed may be data information that can be directly signed, obtained after the cloud master controller performs information review and format conversion on the original document to be signed.

[0100] In this embodiment, the electronic signature can be a signature of the data to be electronically signed by the doctor user through the mobile client terminal, thereby ensuring the effectiveness of the data to be electronically signed.

[0101] The working principle and beneficial effects of the above technical solution are: receiving doctor user information through edge front-end internal control and synchronizing it to the cloud master control, which facilitates the review of medical user information, ensures the accuracy and reliability of the user certificate finally issued, and realizes the security authorization control of access to medical business system applications, ensuring that the source of the business initiator is within a trusted system system; secondly, after obtaining the user certificate, the original text to be signed is received, and the data to be electronically signed is generated through the cloud master control, which facilitates the doctor to perform effective electronic signature operations on the electronic signature data through the mobile client terminal, ensuring the effectiveness and reliability of the electronic signature; finally, the original text to be signed and the signature result are verified to ensure the reliability of mobile medical electronic signatures, and ensure that mobile medical electronic signatures are safe, trustworthy, reliable and efficient.

[0102] Example 2:

[0103] Based on Example 1, this embodiment provides a mobile medical electronic signature system based on electronic authentication, such as Figure 2 As shown, including:

[0104] Medical business system, edge front-end internal control, cloud-based master control and mobile client, among which,

[0105] The medical business system is connected to the edge front-end internal control, and the medical business and edge front-end internal control constitute the hospital's internal network;

[0106] The cloud-based master control is connected to the hospital’s internal network;

[0107] The mobile client is connected to the cloud control system.

[0108] In this embodiment, the edge front-end internal control is the edge front-end internal control system, the cloud master control is the cloud master control system, and the mobile client is the mobile client module.

[0109] The working principle and beneficial effects of the above technical solution are: by limiting the connection relationship between the medical business system, edge front-end internal control, cloud master control and mobile client, it is convenient to accurately and effectively execute the mobile medical electronic signature process according to the limitation results, thereby improving the efficiency and effect of mobile medical electronic signature.

[0110] Example 3:

[0111] Based on Example 1, this embodiment provides a mobile medical electronic signature system based on electronic authentication, such as Figure 3 As shown, the certificate issuance module includes:

[0112] An information import unit, used to import doctor user information based on edge front-end internal control;

[0113] Synchronization unit, used to synchronize doctor user information to the cloud master control;

[0114] Audit unit, used to audit doctor user information based on cloud-based master control;

[0115] The login and confirmation unit is used to log in to the mobile client based on the user account when the review is passed, and to confirm the application for issuance of a digital certificate based on the mobile client;

[0116] The certificate application unit is used to call the hardware cryptographic device based on the cloud master control to generate the target signature public-private key pair, and send the signature public key to the preset agency according to the interface request. At the same time, it applies for the issuance and obtains the user certificate in the preset agency.

[0117] In this embodiment, the preset organization may be a third-party compliant electronic certification service organization, referred to as a CA organization.

[0118] In this embodiment, the target signature public-private key pair may be an SM2 signature public-private key pair.

[0119] In this embodiment, the doctor user information may include: name, ID card, and mobile phone number.

[0120] In this embodiment, the user account-based login to the mobile client can be: the individual doctor user uses his own mobile terminal to log in to the system through the mobile client module using the mobile phone number as the account (SMS verification code authorization verification).

[0121] In this embodiment, the doctor's user information (name, ID card, mobile phone number) is imported through the edge front-end internal control system, and the data is synchronized to the cloud-based master control system. The cloud-based master control system is used to review the doctor's user information (manual review or verification using a trusted identity data source); the individual doctor uses his or her own mobile terminal to log in to the system through the mobile client module using the mobile phone number as the account (SMS verification code authorization verification), and at the same time confirms the application for issuance of a digital certificate. The cloud-based master control system calls the hardware cryptographic device to generate an SM2 signature public-private key pair, and sends the signature public key to the CA organization through an interface request to apply for issuance and obtain a digital certificate. At this point, the entire doctor user certificate issuance process is completed.

[0122] The working principle and beneficial effects of the above technical solution are: by obtaining the doctor user information of the doctor user from the medical business system, the security authorization control of the application access to the medical business system is realized, ensuring that the source of the business initiator is within the trusted system system; secondly, the doctor user information is reviewed through the remote master control to ensure the accuracy and reliability of the doctor user information, and after the review is passed, the doctor user is reminded to confirm the application for the issuance of the digital certificate through the mobile client, thereby facilitating the issuance of the digital certificate; finally, the target signature public-private key pair is generated through the cloud master control, and the user certificate is encrypted and issued through the target signature public-private key pair, ensuring the reliability of the digital certificate.

[0123] Example 4:

[0124] Based on Example 3, this embodiment provides a mobile medical electronic signature system based on electronic authentication, wherein the review unit includes:

[0125] An information processing subunit is used to:

[0126] Obtain the doctor user information obtained, and determine the review dimensions of the doctor user information based on the information review standards;

[0127] Extract the dimensional features of each audit dimension, and split the doctor user information into dimensions based on the dimensional features to obtain a multi-dimensional doctor user information set;

[0128] Information review unit, used to:

[0129] Extract basic identity parameters based on the multi-dimensional doctor user information set, and at the same time, access the preset trusted identity information database, and based on the access results, perform similarity matching between the basic identity parameters and the trusted identity information in the preset trusted identity information database in sequence;

[0130] Determine the first-level review result of the doctor user information based on the similarity matching result, and after the first-level review result is passed, start the second-level review mechanism of the doctor user certification information;

[0131] Based on the results of the second-level review mechanism, key information parameters corresponding to the multi-dimensional doctor user information set are extracted respectively, and the multi-dimensional doctor user information set is reviewed and prioritized based on the key information parameters;

[0132] Based on the dimensional features, the format of the multi-dimensional doctor user information set is standardized. At the same time, based on the audit priority sorting results, the corresponding auxiliary supporting materials are crawled from the network according to big data, and the multi-dimensional doctor user information set after the format standardization is respectively mapped with the corresponding auxiliary supporting materials;

[0133] Determine the completeness of the doctor user information based on the text mapping result, and when the completeness does not meet the preset threshold, determine that the doctor user information is missing, and suspend the review process of the doctor user information based on the determination result, and at the same time, record the current review node;

[0134] Based on the judgment result, a material supplement notification is sent to the doctor user terminal, and the doctor user's online material supplement channel permission is opened simultaneously, and the doctor user's supplementary information is received in real time based on the permission opening result;

[0135] Based on the received results, the review process of the doctor user information is resumed, and the multi-dimensional doctor user information set is re-checked based on the review node to obtain the second-level review result of the doctor user information;

[0136] The result determination subunit is used to complete the review of the doctor user information based on the second-level review results.

[0137] In this embodiment, the information review standard is known in advance and is used to characterize the review type of the doctor user information and the review mechanism for each review type.

[0138] In this embodiment, the audit dimension may be the type of audit performed on the doctor user information, including basic identity information (name, age, and ID number, etc.) and auxiliary certification information (qualification certificates, professional experience, etc.).

[0139] In this embodiment, the dimension feature may be a dimension characteristic that characterizes each audit dimension, such as the information type and value characteristics corresponding to the basic identity information.

[0140] In this embodiment, the multi-dimensional doctor user information set may be the result of classifying the doctor user information according to dimensional features, where each dimension is a data category.

[0141] In this embodiment, the preset trusted identity information database is known in advance and records the basic information of authorized and trustworthy doctors in the medical system.

[0142] In this embodiment, the first-level review result is to review the basic information parameters of the doctor user, and the second-level review will be performed only after the first-level review result is passed.

[0143] In this embodiment, the doctor user certification information may be auxiliary certification materials related to the doctor user, including qualification certificates, professional experience and other information.

[0144] In this embodiment, the key information parameter may be a data segment in the multi-dimensional doctor user information set that can characterize the data subject of the doctor user information in the current dimension.

[0145] In this embodiment, the format standardization process may be to unify the formats of the doctor user information sets under the same dimension, thereby facilitating corresponding review operations.

[0146] In this embodiment, the auxiliary certification materials are specific data that can prove the doctor user information, including qualification certificates, academic certificates, and graduation schools.

[0147] In this embodiment, the text mapping may be to perform one-to-one text verification on the multi-dimensional doctor user information set and the corresponding auxiliary certification materials, thereby achieving effective review of the doctor user information.

[0148] In this embodiment, the preset threshold is set in advance and is used as a standard to measure whether the doctor user information is complete, and can be adjusted.

[0149] In this embodiment, the audit node may be the specific location where the current audit process ends.

[0150] In this embodiment, the re-examination may be to continue to review the doctor user information according to the review node after receiving the supplementary information of the doctor user, until all information corresponding to the types to be reviewed is completed.

[0151] The working principle and beneficial effects of the above technical solution are: by determining the audit dimension of doctor user information according to the information audit standard, the doctor user information is split according to the audit dimension, so as to facilitate the rigorous and effective audit of the doctor user information according to the audit requirements of different dimensions. Secondly, the basic identity parameters of the doctor user information are extracted according to the dimension splitting results, and the basic identity parameters are audited to ensure that the current doctor user does exist in the medical system. At the same time, after the basic identity parameters are audited, the corresponding auxiliary certification materials are crawled from the network through big data, and the doctor user information is matched with the crawled auxiliary certification materials one by one for audit to ensure the qualification of the doctor user. Finally, the completeness of the doctor user information is detected in real time during the audit process, and when the completeness does not meet the preset threshold, a material supplement reminder is sent to the doctor user terminal in real time, and the doctor user information is audited again after the materials are supplemented. Ultimately, the reliability of the audit of the doctor user information is ensured and the validity of the digital certificate issuance is improved.

[0152] Example 5:

[0153] Based on Example 1, this embodiment provides a mobile medical electronic signature system based on electronic authentication, such as Figure 4 As shown, the electronic signature module includes:

[0154] A calling unit is used to call the edge front-end internal control based on the business medical system, and determine the original document to be signed and the doctor user number based on the business medical system;

[0155] A summary calculation unit is used to send the original document to be signed and the doctor's number in the business medical system to the edge front-end internal control, and perform summary calculation on the original document to be signed based on the edge front-end internal control system;

[0156] The unit for generating data to be signed and confirmed is used to send the summary calculation result to the cloud master control and generate data to be signed and confirmed based on the cloud master control;

[0157] The signature unit is used to read the signature confirmation data based on the mobile client and input the digital certificate password, and electronically sign the signature confirmation data based on the input result to obtain a signature result;

[0158] The synchronization unit is used to perform data signature calculation on the signature result based on the cloud master control calling the data certificate key, and send the signature calculation result value to the edge front-end internal control. After the edge front-end internal control receives the signature calculation result value, it is synchronously sent to the medical information business system.

[0159] In this embodiment, the cloud master control calls the data certificate key to perform data signature calculation, which can be that the cloud master control system calls the digital certificate key corresponding to the doctor user to perform SM2 data signature calculation (the calculation result includes the signed digital certificate).

[0160] In this embodiment, when the edge front-end internal control system performs a summary calculation on the original text to be signed, the calculation result does not include the original text data to be signed.

[0161] In this embodiment, performing digest calculation on the original text to be signed may be performing SM3 digest calculation on the original text to be signed.

[0162] In this embodiment, the medical business system calls the edge front-end internal control system and sends the original text to be signed and the doctor's user number to the edge front-end internal control system. The edge front-end internal control system performs SM3 summary calculation on the original signature (the calculation result does not include the original clear text data to be signed), and sends the summary calculation result to the cloud-based master control system to form the confirmation data to be signed; the doctor's personal user operates the mobile terminal to view the data to be signed through the mobile client module, and enters the digital certificate password to confirm the operation to electronically sign the data. The cloud-based master control system calls the digital certificate key corresponding to the doctor user to perform SM2 data signature calculation (the calculation result includes the signed digital certificate), and sends the signature calculation result value to the edge front-end internal control system. After receiving the data, the edge front-end internal control system sends it to the medical information business system synchronously. At this point, the entire process of executing electronic signatures is completed.

[0163] In this embodiment, the signature calculation result value may be a result obtained by executing the SM2 data signature calculation using the digital certificate key, that is, performing an encryption operation on the signature result using the digital certificate key.

[0164] The working principle and beneficial effects of the above technical solution are: the original text to be signed and the doctor's user number are obtained through the edge front-end internal control, and the summary of the original text to be signed is calculated, so as to facilitate the rapid and effective determination of the data parameters that need to be signed. Secondly, the summary calculation result is sent to the cloud master control to realize the generation of the confirmation data to be signed through the cloud master control. At the same time, the confirmation data to be signed is read and the digital certificate password is entered through the mobile client to realize the safe and reliable electronic signature of the confirmation data to be signed based on the input result. Finally, the electronic signature calculation result value is synchronously sent to the medical information business system, thereby ensuring the effectiveness, reliability and security of the electronic signature of the confirmation data to be signed.

[0165] Example 6:

[0166] Based on Example 5, this embodiment provides a mobile medical electronic signature system based on electronic authentication, wherein the digest calculation unit includes:

[0167] The result acquisition subunit is used to obtain the original document to be signed and the doctor's number from the business medical system and determine the data type of the original document to be signed and the doctor's number;

[0168] The transmission preparation subunit is used to determine the data transmission protocol for the original document to be signed and the doctor's number based on the data type, and format the original document to be signed and the doctor's number respectively based on the data transmission protocol;

[0169] The data transmission subunit is used to:

[0170] Building independent temporary transmission channels based on the data transmission protocol and adapting parameters of the independent temporary transmission channels;

[0171] Based on the parameter adaptation results, the format-encoded original text to be signed and the doctor's code will be transmitted to the edge front-end internal control separately through independent temporary transmission channels.

[0172] In this embodiment, the data type may be the data type corresponding to the original document to be signed and the doctor number, respectively, so as to facilitate determination of the corresponding transmission method according to the data type.

[0173] In this embodiment, the data transmission protocol may represent requirements for transmission methods and transmission formats of different data types.

[0174] In this embodiment, the independent temporary transmission channel may be a channel determined according to a data transmission protocol for transmitting the original text to be signed and the doctor's code respectively, and the two are independent of each other.

[0175] The working principle and beneficial effects of the above technical solution are: by determining the data type of the original text to be signed and the doctor's number, the data transmission protocol for the original text to be signed and the doctor's number can be determined according to the data type, thereby facilitating the effective transmission of the original text to be signed and the doctor's code after format encoding according to the data transmission protocol, ensuring the transmission reliability of the original text to be signed and the doctor's number, and providing reliable protection for electronic signatures.

[0176] Example 7:

[0177] Based on Example 1, this embodiment provides a mobile medical electronic signature system based on electronic authentication, such as Figure 5 As shown, the verification module includes:

[0178] Verification unit, used to:

[0179] Based on the medical information business system, the edge front-end internal control is called and the original document to be signed and the doctor's user number are sent to the edge front-end internal control;

[0180] Based on the edge front-end internal control, signature verification calculation is performed on the original text to be signed and the doctor's user number, and the verification results are fed back to the medical information business system.

[0181] In this embodiment, the medical information business system calls the edge front-end internal control system, sends the original text to be verified and the signature technical result value to the edge front-end internal control system, and the edge front-end internal control system performs the SM2 signature verification calculation and returns the verification result to the medical information business system. At this point, the entire data signature verification process is completed.

[0182] The working principle and beneficial effects of the above technical solution are: through edge front-end internal control, signature verification calculation is performed on the original text to be signed and the doctor's user number, ensuring the compliance and reliability of the signature execution of the final original text to be signed and the doctor's user number.

[0183] Example 8:

[0184] Based on Example 7, this embodiment provides a mobile medical electronic signature system based on electronic authentication, wherein the verification unit includes:

[0185] The verification result acquisition subunit is used to obtain the signature verification calculation results of the original document to be signed and the doctor's user number, and extract key information of the verification calculation results;

[0186] The verification result processing subunit is used to:

[0187] Based on key information, the verification calculation results are divided into a verification pass set and a verification fail set, and a verification result record report is created;

[0188] Record the verification pass set and the verification fail set in the verification result record report respectively, and feed the record results back to the medical information business system;

[0189] The optimization subunit is used to extract the abnormal verification parameters that have not passed the centralized verification based on the feedback results, and iteratively optimize the edge front-end internal control's signature verification calculation mechanism for the verification original text and the doctor's user number based on the abnormal verification parameters.

[0190] In this embodiment, the key information may be a main data segment that can distinguish and verify the calculation result.

[0191] In this embodiment, the abnormal verification parameter may be abnormal data that exists in the verification failure set, including misjudgment of the verification mechanism and abnormality of the verification process, so as to facilitate optimization of the signature verification calculation mechanism.

[0192] The working principle and beneficial effects of the above technical solution are: by extracting information from the verification calculation results, the verification calculation results are divided into a verification pass set and a verification fail set according to the information extraction results, and recorded through the created verification result record report, so that the management terminal can effectively understand the verification calculation results. At the same time, the abnormal verification parameters in the verification fail set are extracted, and the signature verification calculation mechanism is iteratively optimized according to the abnormal verification parameters, thereby providing reliable data support for signature verification and ensuring the accuracy and reliability of signature verification.

[0193] Example 9:

[0194] Based on Example 1, this embodiment provides a mobile medical electronic signature system based on electronic authentication, and the verification module includes:

[0195] The log creation unit is used to create work logs and interface the work logs with the edge front-end internal control;

[0196] Parameter registration unit, used for:

[0197] Based on the interface docking results, the edge front-end internal control receives the verification operations of the original text to be signed and the signature results in real time, and obtains the timestamp information corresponding to the current verification operation when there is a verification operation;

[0198] Based on the development order of the timestamp information, the verification parameters corresponding to different times are recorded and archived in the work log.

[0199] In this embodiment, the work log is used to record all verification data of the edge front-end internal control on the original text to be signed and the signature result, that is, to record all working parameters of the edge front-end internal control.

[0200] In this embodiment, the timestamp information may be specific time information corresponding to each verification operation.

[0201] The working principle and beneficial effects of the above technical solution are: by creating a work log, all verification operation data of the edge front-end internal control can be effectively recorded according to the work log, so that the management terminal can understand the operation status of the mobile medical electronic signature system in real time and effectively.

[0202] Example 10:

[0203] Based on Example 1, this embodiment provides a mobile medical electronic signature system based on electronic authentication, and the electronic signature module includes:

[0204] a parameter acquisition unit, configured to collect the total number of electronic signature executions and read, for each electronic signature execution, a first processing time of the edge front-end internal control on the original document to be signed, a second processing time when the cloud master control generates the electronic signature to be signed, and a third processing time when the mobile client executes the electronic signature based on the data to be signed;

[0205] a first calculating unit, configured to calculate an average rate of completing electronic signatures based on a first processing time, a second processing time, and a third processing time each time an electronic signature is executed;

[0206] ;

[0207] in, Indicates the average rate at which electronic signatures are completed; Indicates the total number of electronic signatures executed; A serial number indicating the number of electronic signatures; Indicates the The first amount of data processed by the edge front-end internal control when executing the electronic signature for the first time; Indicates the The first processing time of the original document to be signed by the edge front-end internal control when executing the electronic signature for the first time; Indicates the The delay of the edge front-end internal control in processing the original document to be signed when executing the electronic signature for the first time; Indicates the When the electronic signature is executed for the first time, the cloud master control generates a second amount of data to be processed when the electronic signature is executed; Indicates the The second processing time when the cloud master control generates the electronic signature to be executed for the first time; Indicates the The delay when the cloud master control generates the electronic signature to be executed for the first time; Indicates the The third amount of data processed by the mobile client when executing the electronic signature based on the data to be electronically signed when executing the electronic signature for the first time; Indicates the The third processing time when the mobile client executes the electronic signature based on the data to be electronically signed when executing the electronic signature for the first time; Indicates the The delay when the mobile client executes the electronic signature based on the data to be electronically signed when executing the electronic signature for the first time;

[0208] a second calculating unit, configured to read the number of correct electronic signatures and the number of incorrect electronic signatures from the total number of times the electronic signatures are executed, and calculate the accuracy rate of the execution of the electronic signatures based on the number of correct electronic signatures and the number of incorrect electronic signatures;

[0209] ;

[0210] in, Indicates the accuracy of executing electronic signatures; Indicates the number of correct electronic signatures among the total number of electronic signatures executed; Indicates the number of electronic signature errors in the total number of electronic signature executions;

[0211] a third calculation unit, configured to calculate the efficiency of executing the electronic signature according to the average rate of the electronic signature and the accuracy of executing the electronic signature;

[0212] ;

[0213] in, Indicates the efficiency of executing electronic signatures; Indicates the preset rate threshold; The weight representing the influence of the average rate of electronic signatures on the efficiency of executing electronic signatures; The weight of the impact of the accuracy of electronic signature execution on the efficiency of electronic signature execution;

[0214] Qualification determination unit, used for:

[0215] Obtaining a preset benchmark efficiency for executing electronic signatures, and comparing the efficiency of executing electronic signatures with the benchmark efficiency;

[0216] If the efficiency of executing the electronic signature is equal to or greater than the benchmark efficiency, the execution of the electronic signature is determined to be qualified;

[0217] Otherwise, the electronic signature is judged to be unqualified and an alarm is issued.

[0218] In this embodiment, the preset rate threshold may be a qualified rate for completing electronic signatures, which is artificially set through empirical experiments.

[0219] In this embodiment, the benchmark efficiency may be set in advance and used as a criterion for determining whether the execution of the electronic signature is qualified.

[0220] In this embodiment, the alarm operation may include one or more of sound, vibration, and light.

[0221] The working principle and beneficial effects of the above technical solution are: by collecting the total number of times the electronic tag is executed, and obtaining the first processing time, the second processing time and the third processing time respectively, the average rate of the electronic signature is effectively calculated, and the accuracy of the electronic signature is calculated, and then the efficiency of the electronic signature is effectively and accurately calculated by the average rate of completing the electronic signature and the accuracy of the electronic signature, and then the qualification of the electronic signature is effectively determined through the benchmark efficiency, which effectively guarantees the monitoring during the execution of the electronic signature, and then when it is unqualified, an alarm operation is performed, which is conducive to timely grasping the unqualified status of the electronic signature, and is conducive to optimizing the medical electronic signature, thereby ensuring the effectiveness of the medical electronic signature.

[0222] Obviously, those skilled in the art may make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if such changes and modifications fall within the scope of the claims and their equivalents, the present invention is intended to include such changes and modifications.

Claims

1. A mobile medical electronic signature system based on electronic authentication, characterized in that: include: The certificate issuance module is used to import doctor user information into the edge front-end internal control and synchronize it to the cloud master control. At the same time, the cloud master control and mobile client issue user certificates based on the doctor user information; The electronic signature module is used to receive the original document to be signed based on the edge front-end internal control after the user certificate is issued, and generate the data to be electronically signed based on the cloud master control. At the same time, the mobile client terminal executes the electronic signature based on the data to be electronically signed; The verification module is used to verify the original document to be signed and the signature result based on the edge front-end internal control and generate the verification result; The certificate issuance module includes the review of doctor user information based on cloud-based master control, including the following steps: Obtain the doctor user information obtained, and determine the review dimensions of the doctor user information based on the information review standards; Extract the dimensional features of each audit dimension, and split the doctor user information into dimensions based on the dimensional features to obtain a multi-dimensional doctor user information set; Extract basic identity parameters based on the multi-dimensional doctor user information set, and at the same time, access the preset trusted identity information database, and based on the access results, perform similarity matching between the basic identity parameters and the trusted identity information in the preset trusted identity information database in sequence; Determine the first-level review result of the doctor user information based on the similarity matching result, and after the first-level review result is passed, start the second-level review mechanism of the doctor user certification information; Based on the results of the second-level review mechanism, key information parameters corresponding to the multi-dimensional doctor user information set are extracted respectively, and the multi-dimensional doctor user information set is reviewed and prioritized based on the key information parameters; Based on the dimensional features, the format of the multi-dimensional doctor user information set is standardized. At the same time, based on the audit priority sorting results, the corresponding auxiliary supporting materials are crawled from the network according to big data, and the multi-dimensional doctor user information set after the format standardization is respectively mapped with the corresponding auxiliary supporting materials; Determine the completeness of the doctor user information based on the text mapping result, and when the completeness does not meet the preset threshold, determine that the doctor user information is missing, and suspend the review process of the doctor user information based on the determination result, and at the same time, record the current review node; Based on the judgment result, a material supplement notification is sent to the doctor user terminal, and the doctor user's online material supplement channel permission is opened simultaneously, and the doctor user's supplementary information is received in real time based on the permission opening result; Based on the received results, the review process of the doctor user information is resumed, and the multi-dimensional doctor user information set is re-checked based on the review node to obtain the second-level review result of the doctor user information; The result determination subunit is used to complete the review of the doctor user information based on the second-level review results.

2. A mobile medical electronic signature system based on electronic authentication according to claim 1, characterized in that: include: Medical business system, edge front-end internal control, cloud-based master control and mobile client, among which, The medical business system is connected to the edge front-end internal control, and the medical business and edge front-end internal control constitute the hospital's internal network; The cloud-based master control is connected to the hospital's internal network; The mobile client is connected to the cloud control system.

3. A mobile medical electronic signature system based on electronic authentication according to claim 1, characterized in that: Certificate issuance module, including: An information import unit, used to import doctor user information based on edge front-end internal control; Synchronization unit, used to synchronize doctor user information to the cloud master control; Audit unit, used to audit doctor user information based on cloud-based master control; The login and confirmation unit is used to log in to the mobile client based on the user account when the review is passed, and to confirm the application for issuance of a digital certificate based on the mobile client; The certificate application unit is used to call the hardware cryptographic device based on the cloud master control to generate the target signature public-private key pair, and send the signature public key to the preset agency according to the interface request. At the same time, it applies for the issuance and obtains the user certificate in the preset agency.

4. A mobile medical electronic signature system based on electronic authentication according to claim 1, characterized in that: Electronic signature module, including: A calling unit is used to call the edge front-end internal control based on the business medical system, and determine the original document to be signed and the doctor user number based on the business medical system; A summary calculation unit is used to send the original document to be signed and the doctor's number in the business medical system to the edge front-end internal control, and perform summary calculation on the original document to be signed based on the edge front-end internal control system; The unit for generating data to be signed and confirmed is used to send the summary calculation result to the cloud master control and generate data to be signed and confirmed based on the cloud master control; The signature unit is used to read the signature confirmation data based on the mobile client and input the digital certificate password, and electronically sign the signature confirmation data based on the input result to obtain a signature result; The synchronization unit is used to perform data signature calculation on the signature result based on the cloud master control calling the data certificate key, and send the signature calculation result value to the edge front-end internal control. After the edge front-end internal control receives the signature calculation result value, it is synchronously sent to the medical information business system.

5. A mobile medical electronic signature system based on electronic authentication according to claim 4, characterized in that: Summary calculation unit, including: The result acquisition subunit is used to obtain the original document to be signed and the doctor's number from the business medical system and determine the data type of the original document to be signed and the doctor's number; The transmission preparation subunit is used to determine the data transmission protocol for the original document to be signed and the doctor's number based on the data type, and format the original document to be signed and the doctor's number respectively based on the data transmission protocol; The data transmission subunit is used to: Building independent temporary transmission channels based on the data transmission protocol and adapting parameters of the independent temporary transmission channels; Based on the parameter adaptation results, the format-encoded original text to be signed and the doctor's code will be transmitted to the edge front-end internal control separately through independent temporary transmission channels.

6. A mobile medical electronic signature system based on electronic authentication according to claim 1, characterized in that: Verification modules, including: Verification unit, used to: Based on the medical information business system, the edge front-end internal control is called and the original document to be signed, the signature result, and the doctor's user number are sent to the edge front-end internal control; Based on the edge front-end internal control, signature verification calculation is performed on the original text to be signed and the doctor's user number, and the verification results are fed back to the medical information business system.

7. A mobile medical electronic signature system based on electronic authentication according to claim 6, characterized in that: Verification unit, including: The verification result acquisition subunit is used to obtain the signature verification calculation results of the original document to be signed and the doctor's user number, and extract key information of the verification calculation results; The verification result processing subunit is used to: Based on key information, the verification calculation results are divided into a verification pass set and a verification fail set, and a verification result record report is created; Record the verification pass set and the verification fail set in the verification result record report respectively, and feed the record results back to the medical information business system; The optimization subunit is used to extract the abnormal verification parameters that have not passed the centralized verification based on the feedback results, and iteratively optimize the signature verification calculation mechanism of the edge front-end internal control for the original text to be signed and the doctor user number based on the abnormal verification parameters.

8. A mobile medical electronic signature system based on electronic authentication according to claim 1, characterized in that: Verification modules, including: The log creation unit is used to create work logs and interface the work logs with the edge front-end internal control; Parameter registration unit, used for: Based on the interface docking results, the edge front-end internal control receives the verification operation of the original text to be signed and the signature calculation result value in real time, and obtains the timestamp information corresponding to the current verification operation when there is a verification operation; Based on the development order of the timestamp information, the verification parameters corresponding to different times are recorded and archived in the work log.

9. A mobile medical electronic signature system based on electronic authentication according to claim 1, characterized in that: Electronic signature module, including: a parameter acquisition unit, configured to collect the total number of electronic signature executions and read, for each electronic signature execution, a first processing time of the edge front-end internal control on the original document to be signed, a second processing time when the cloud master control generates the electronic signature to be signed, and a third processing time when the mobile client executes the electronic signature based on the data to be signed; a first calculating unit, configured to calculate an average rate of completing electronic signatures based on a first processing time, a second processing time, and a third processing time each time an electronic signature is executed; ； in, Indicates the average rate at which electronic signatures are completed; Indicates the total number of electronic signatures executed; A serial number indicating the number of electronic signatures; Indicates the The first amount of data processed by the edge front-end internal control when executing the electronic signature for the first time; Indicates the The first processing time of the original document to be signed by the edge front-end internal control when executing the electronic signature for the first time; Indicates the The delay of the edge front-end internal control in processing the original document to be signed when executing the electronic signature for the first time; Indicates the When the electronic signature is executed for the first time, the cloud master control generates a second amount of data to be processed when the electronic signature is executed; Indicates the The second processing time when the cloud master control generates the electronic signature to be executed for the first time; Indicates the The delay when the cloud master control generates the electronic signature to be executed for the first time; Indicates the The third amount of data processed by the mobile client when executing the electronic signature based on the data to be electronically signed when executing the electronic signature for the first time; Indicates the The third processing time when the mobile client executes the electronic signature based on the data to be electronically signed when executing the electronic signature for the first time; Indicates the The delay when the mobile client executes the electronic signature based on the data to be electronically signed when executing the electronic signature for the first time; a second calculating unit, configured to read the number of correct electronic signatures and the number of incorrect electronic signatures from the total number of electronic signature executions, and calculate the accuracy rate of the electronic signature execution based on the number of correct electronic signatures and the number of incorrect electronic signatures; ； in, Indicates the accuracy of executing electronic signatures; Indicates the number of correct electronic signatures among the total number of electronic signatures executed; Indicates the number of electronic signature errors in the total number of electronic signature executions; a third calculation unit, configured to calculate the efficiency of executing the electronic signature according to the average rate of the electronic signature and the accuracy of executing the electronic signature; ； in, Indicates the efficiency of executing electronic signatures; Indicates the preset rate threshold; The weight representing the influence of the average rate of electronic signatures on the efficiency of executing electronic signatures; The weight of the impact of the accuracy of electronic signature execution on the efficiency of electronic signature execution; Qualification determination unit, used for: Obtaining a preset benchmark efficiency for executing electronic signatures, and comparing the efficiency of executing electronic signatures with the benchmark efficiency; If the efficiency of executing the electronic signature is equal to or greater than the benchmark efficiency, the execution of the electronic signature is determined to be qualified.

Images