Maternal and child identity verification management method and management system for smart medical treatment

Abstract

The invention relates to the technical field of verification management, in particular to a maternal and child identity verification management method and management system for smart medical treatment, and the method comprises the steps: determining a target verification stage based on an identity verification demand when the identity verification demand is detected, and the target verification stage comprises admission delivery, delivery and issuing of birth proof; determining an initial verification form based on the target verification stage; positioning target input data from an input database based on an identity verification demand, and performing differential privacy processing on the target input information based on a target verification stage to obtain privacy input information; determining a secondary verification form based on the initial verification form and the privacy input information; and positioning the to-be-accessed block based on the target verification stage and the secondary verification form, and after the access permission of the to-be-accessed block is satisfied, updating the secondary verification form based on the block chain storage data corresponding to the to-be-accessed block to obtain a target verification form. According to the invention, the security in the maternal and child identity verification process can be improved.

Description

Technical Field

[0001] The present application relates to the field of verification management technology, and in particular to a method and management system for verifying the identity of women and children for smart medical care. Background Art

[0002] Maternal and child health is one of the key targets of medical services, and the security and accuracy of the maternal and child identity verification process is of vital importance. Traditional maternal and child identity verification methods, such as manual verification of certificate information and paper records, are inefficient and vulnerable to human factors. This is especially true in maternal and child health service places such as maternal and child health hospitals and community medical institutions, which need to receive a large number of maternal and child populations every day. Under the pressure of greater identity verification needs, traditional maternal and child identity verification methods may not meet the needs of efficient verification processing.

[0003] In order to meet the needs of patients for efficient verification and processing, a smart medical system with complete medical information, cross-service departments and patient-centered has been gradually built. That is, through the smart medical system, medical information interconnection, sharing and collaboration, clinical innovation, diagnostic science and other functions can be realized, providing pregnant women with a full range of efficient health management services. However, in the process of data interconnection and sharing, it also faces important challenges of data security and privacy protection. Summary of the invention

[0004] In order to improve the security of the maternal and child identity verification process, the present application provides a maternal and child identity verification management method and management system for smart medical care.

[0005] In the first aspect, the present application provides a maternal and child identity verification management method for smart medical care, which adopts the following technical solutions: A maternal and child identity verification management method for smart medical care, comprising: When an identity verification requirement is detected, a target verification stage is determined based on the identity verification requirement, the target verification stage including hospitalization for delivery, delivery, and issuance of a birth certificate; Determining an initial verification form based on the target verification stage, the initial verification form including vacant positions for sensitive data and vacant positions for non-sensitive data; Locating target input data from an input database based on the identity verification requirement, and performing differential privacy processing on the target input information based on the target verification stage to obtain private input information; Determining a secondary verification form based on the initial verification form and the privacy input information, wherein the secondary verification form includes blank locations for sensitive data; The block to be accessed is located based on the target verification stage and the secondary verification form. After the access rights of the block to be accessed are met, the secondary verification form is updated based on the blockchain storage data corresponding to the block to be accessed, the target verification form is obtained, and the target verification form is fed back.

[0006] By adopting the above technical solution, by formulating different verification forms for different target verification stages, it is convenient to reduce the acquisition of more redundant data or invalid data during the identity verification process, and it is also convenient to avoid the leakage of unnecessary identity data. By performing differential privacy processing on the target input information, it is convenient to complete the addition of non-sensitive data in the initial verification form while protecting the personal privacy of pregnant women. By automatically identifying vacant positions and automatically filling them in, it is convenient to reduce errors caused by manual entry, thereby facilitating the improvement of the accuracy of identity verification results. In addition, since different access blocks are set with access rights, the corresponding sensitive data can only be accessed if the corresponding access rights are met, and the blockchain has the characteristic of being tamper-proof. Therefore, by accessing the block to be accessed in the blockchain to complete the vacant positions of sensitive data in the secondary verification form, it is convenient to ensure the integrity and authenticity of the sensitive data in the target verification form, and it is also convenient to prevent unauthorized access and modification, thereby facilitating the improvement of security in the identity verification process.

[0007] In a possible implementation, performing differential privacy processing on the target input information based on the target verification stage to obtain the privacy input information includes: Identifying the input sensitive data and the input sensitive features of each input sensitive data contained in the target input information; Based on the input sensitive feature and the preset noise mapping relationship, determining the differential noise corresponding to each input sensitive data, wherein the preset noise mapping relationship is the corresponding relationship between the input sensitive feature and the differential noise; Based on the differential noise corresponding to each input sensitive data, differential privacy processing is performed on each sensitive data to obtain the privacy input information.

[0008] By adopting the above technical solution, by analyzing the sensitive features of each input sensitive data, it is easy to understand the privacy attributes and potential risks of each input sensitive data, so as to provide more targeted privacy protection for subsequent differential privacy processing. According to the preset noise mapping relationship, the corresponding differential noise is accurately matched for each input sensitive data, instead of using fixed differential noise to protect the privacy of input sensitive data with different privacy attributes, so as to maximize the availability of the target input data while protecting privacy.

[0009] In a possible implementation, the locating the block to be accessed based on the target verification stage and the secondary verification form, and updating the secondary verification form based on the blockchain storage data corresponding to the block to be accessed after satisfying the access rights of the block to be accessed, includes: Determining an initial access block from a preset blockchain based on the target verification stage; Identify the missing position of the sensitive data in the secondary verification form, and locate the block to be accessed from the initial access block based on the missing position of the sensitive data and the storage structure corresponding to the preset blockchain; Obtaining access rights corresponding to the block to be accessed, generating verification request information based on the access rights, and feeding back the verification request information; When the verification information fed back by the user is received, it is determined whether the verification information satisfies the access permission. If so, the secondary verification form is updated based on the blockchain storage data corresponding to the block to be accessed.

[0010] By adopting the above technical solution, the initial access block is determined from the preset blockchain during the target verification stage, and then the block to be accessed is accurately located in combination with the vacant position of sensitive data in the secondary verification form and the storage structure of the blockchain, so as to avoid invalid data traversal and search, and improve data access efficiency. In addition, by obtaining the access rights corresponding to the block to be accessed and generating verification request information based on the access rights, it is ensured that only users or systems that meet the access rights can access sensitive data. This strict access rights control mechanism is conducive to effectively preventing data leakage and illegal access, thereby facilitating the improvement of the security of user personal information during the identity verification process.

[0011] In a possible implementation, when an access request is detected, the method further includes: Acquire access behavior within a first preset time period, and determine an access behavior baseline based on the access behavior and the access identity corresponding to the access request; Acquire the real-time access behavior within a second preset time period, and determine whether there is abnormal access behavior in the real-time access behavior based on the access behavior baseline, wherein the abnormal access behavior deviates from the access behavior baseline; If so, an abnormal warning message is generated.

[0012] By adopting the above technical solution, by analyzing the access behavior of relevant visitors within the first preset time period, it is convenient to predict the access purpose of the relevant visitors, and then limit the scope of access of the relevant visitors by access identity, that is, the access behavior baseline. Finally, the access behavior of the relevant visitors in the second preset time period is monitored through the access behavior baseline, so as to timely discover abnormal access behavior that deviates from the access behavior baseline. By immediately generating early warning information after detecting abnormal access behavior, the relevant management personnel are notified to take necessary countermeasures, so as to timely prevent potential security incidents and protect the security of resources and data.

[0013] In a possible implementation manner, after determining that there is abnormal access behavior in the real-time access behavior, the method further includes: Determining a degree of access deviation based on the abnormal access behavior and the access behavior baseline; Acquire the abnormal access frequency corresponding to the abnormal time, determine the abnormal type corresponding to the abnormal access behavior based on the access deviation degree and the abnormal access frequency, the abnormal type includes malicious abnormality and non-malicious abnormality, and the abnormal time is the time when the abnormal access behavior is determined; When the abnormal type of the abnormal access behavior is a malicious abnormality, a locking instruction is generated, and the accessed content is hidden; When the abnormal type of the abnormal access behavior is a non-malicious abnormality, centralized verification request information is determined based on the degree of access deviation, and the centralized verification request information is fed back to the visitor. If the visitor's feedback information meets the centralized access verification corresponding to the verification request information, a jump guide is generated based on the abnormal access behavior and the access behavior baseline.

[0014] By adopting the above technical solution, by analyzing the access deviation degree and abnormal access frequency of abnormal access behavior, it is convenient to distinguish the abnormal types of abnormal access behavior, and provide different abnormal solutions based on different abnormal types, so as to improve the stability of the identity verification process by accurately and quickly resolving existing abnormal situations.

[0015] In one possible implementation, the method further includes: Obtaining target verification forms corresponding to all identity verification requirements within a third preset time period, and identifying isolated data in the input database based on all target verification forms; Identify the island feature corresponding to each isolated data, and obtain the authorization status corresponding to each isolated data, wherein the authorization status includes authorized and unauthorized; Based on the island feature and authorization status of each island data, over-collected data is determined and fed back, wherein the over-collected data is island data whose island feature is a preset sensitive feature and whose authorization status is unauthorized.

[0016] By adopting the above technical solution, by identifying the isolated data in the input database and further identifying the isolated characteristics and authorization status of each isolated data, it is convenient to accurately locate the excessively collected data. In addition, by timely feedback of excessively collected data, it is convenient to avoid the abuse or leakage of users' unnecessary personal information. By timely processing the excessively collected data, it is also convenient to improve the effectiveness of the input database, thereby facilitating the improvement of the accuracy of the maternal and child identity verification process.

[0017] In a second aspect, the present application provides a management system, which adopts the following technical solution: A management system, the management system comprising: at least one processor; Memory; At least one application, wherein the at least one application is stored in a memory and configured to be executed by at least one processor, and the at least one application is configured to: execute the above-mentioned maternal and child identity verification management method for smart medical care.

[0018] In a third aspect, the present application provides a computer-readable storage medium, which adopts the following technical solution: A computer-readable storage medium, comprising: storing a computer program that can be loaded by a processor and execute the above-mentioned maternal and child identity verification management method for smart medical care.

[0019] In a fourth aspect, the present application provides a computer program product, which adopts the following technical solution: A computer program product includes a computer program, which, when executed by a processor, implements the above-mentioned maternal and child identity verification and management method for smart medical care.

[0020] In summary, the present application includes at least one of the following beneficial technical effects: By formulating different verification forms for different target verification stages, it is convenient to reduce the acquisition of redundant data or invalid data during the identity verification process, and it is also convenient to avoid unnecessary identity data leakage. By performing differential privacy processing on the target input information, it is convenient to complete the addition of non-sensitive data in the initial verification form while protecting the personal privacy of pregnant women. By automatically identifying vacant positions and automatically filling them in, it is convenient to reduce errors caused by manual entry, thereby facilitating the improvement of the accuracy of identity verification results. In addition, since different access blocks are set with access rights, the corresponding sensitive data can only be accessed if the corresponding access rights are met, and the blockchain has the characteristic of being tamper-proof. Therefore, by accessing the block to be accessed in the blockchain to complete the vacant positions of sensitive data in the secondary verification form, it is convenient to ensure the integrity and authenticity of the sensitive data in the target verification form, and it is also convenient to prevent unauthorized access and modification, thereby facilitating the improvement of security in the identity verification process.

[0021] By analyzing the access deviation degree and abnormal access frequency of abnormal access behavior, it is easy to distinguish the abnormal types of abnormal access behavior, and provide different abnormal solutions based on different abnormal types. By accurately and quickly resolving existing abnormal situations, the stability of the identity verification process is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 It is a flowchart of a method for verifying and managing maternal and child identities for smart medical care in an embodiment of the present application; Figure 2 This is a schematic diagram of a process flow for handling abnormal access behavior in an embodiment of the present application; Figure 3 It is a structural diagram of a management system in an embodiment of the present application. DETAILED DESCRIPTION

[0023] The following is combined with Figures 1 to 3 This application is described in further detail.

[0024] After reading this specification, those skilled in the art may make non-creative modifications to this embodiment as needed, but such modifications are protected by patent law as long as they are within the scope of the claims of this application.

[0025] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0026] It should be noted that in the optional embodiments of the present application, the object information and other related data involved, when the embodiments in the present application are applied to specific products or technologies, need to obtain the permission or consent of the object, and the collection, use and processing of the relevant data need to comply with the relevant laws, regulations and standards of the relevant countries and regions. In other words, if the embodiments of the present application involve data related to the object, it needs to be obtained with the authorization and consent of the object, the authorization and consent of the relevant departments, and in compliance with the relevant laws, regulations and standards of the country and region. If personal information is involved in the embodiments, the acquisition of all personal information needs to obtain the consent of the individual. If sensitive information is involved, the separate consent of the information subject needs to be obtained. The embodiments also need to be implemented with the authorization and consent of the object.

[0027] Specifically, the embodiment of the present application provides a maternal and child identity verification management method for smart medical care, which is executed by a management system, which can be a server or a terminal device, wherein the server can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server providing cloud computing services. The terminal device can be a smart phone, a tablet computer, a laptop computer, a desktop computer, etc., but is not limited thereto. The terminal device and the server can be directly or indirectly connected via wired or wireless communication, which is not limited in the embodiment of the present application.

[0028] refer to Figure 1 , Figure 1 : is a flow chart of a method for maternal and child identity verification management for smart medical care in an embodiment of the present application, the method includes steps S110 to S150, wherein: Step S110: When an identity verification requirement is detected, a target verification stage is determined based on the identity verification requirement. The target verification stage includes hospitalization for delivery, delivery, and issuance of a birth certificate.

[0029] Specifically, the identity verification demand can be issued by relevant medical and health care personnel, relevant department staff, etc. Among them, relevant medical and health care personnel may be obstetricians, nurses, midwives, etc., who mainly verify the identity of women and children during the hospitalization and delivery stages. In order to ensure the true identity of pregnant women and prevent false medical treatment and delivery, thereby protecting the legitimate rights and interests and safety of mothers and children, the staff of relevant departments mainly verify the identity of women and children during the issuance of birth certificates. In order to ensure the authenticity and accuracy of birth medical certificates, forgery and fraud are prevented. The target verification stage includes but is not limited to hospitalization for delivery, delivery, and issuance of birth certificates. In addition, in order to combat violations and protect the legitimate rights and interests and safety of women and children, the identity of women and children also needs to be verified.

[0030] Different target verification stages correspond to different verification identifiers. The verification identifier can be identified from the identity verification requirements through a preset feature recognition algorithm, and then the target verification stage corresponding to the identity verification requirements can be determined based on the identified verification identifier.

[0031] Step S120: determining an initial verification form based on the target verification stage, wherein the initial verification form includes vacant positions for sensitive data and vacant positions for non-sensitive data.

[0032] Specifically, different target verification stages correspond to different verification contents. For example, when the target verification stage is hospitalization for delivery, the main verification contents may be the medical record number, name, wristband identification, etc. of the pregnant woman, so as to confirm the identity of the pregnant woman during the delivery process; when the target verification stage is the stage of issuing birth certificate, the main verification contents may be the basic information such as the newborn's name, gender, birth time, parents' names, ages, and ID number. Therefore, different target verification stages are processed separately to facilitate improving the speed and accuracy of the identity verification process.

[0033] The initial verification form contains the verification content corresponding to the target verification stage, and uses the form to verify or display the identity verification results, so that relevant readers can quickly browse and understand the verification results. The initial verification form contains blank positions for sensitive data and blank positions for non-sensitive data, and also contains auxiliary content. The auxiliary content may include form title, form description, verification items, data format, etc., which are used to assist in forming the verification form. The initial verification form can be regarded as a verification template. The final verification result can only be obtained after the sensitive data and non-sensitive data related to pregnant women are filled in. Among them, sensitive data can be identity card number, home address, contact information, etc., and non-sensitive data can be name, gender, etc. In the initial verification form, data identifiers associated with the sensitive data to be written will be displayed or added near the blank positions of sensitive data, and data identifiers associated with the non-sensitive data to be written will also be displayed or added near the blank positions of non-sensitive data, so as to improve the accuracy of writing sensitive data and non-sensitive data.

[0034] Step S130: locating target input data from the input database based on the identity verification requirement, and performing differential privacy processing on the target input information based on the target verification stage to obtain private input information.

[0035] Specifically, the entry database contains the medical record data, prenatal examination data, identity data, etc. of the pregnant woman in the hospital information system, as well as the insured identity information, medical expense information, payment information, etc. in the medical insurance information system. In addition, it also includes the home address and marital status of the pregnant woman. The identity verification of the pregnant woman can be completed based on the entry database. Different identity verification requirements correspond to different target verification stages, and different target entry data are required for different target verification stages. The target entry data is part of the entry data in the entry database. Based on the target entry data, it is convenient to quickly and accurately complete the identity verification corresponding to the target verification stage. When conducting identity verification, not all the entry data in the entry database are involved in the analysis every time. Instead, part of the entry data is selected from the entry database for data analysis based on the identity verification requirements to avoid leakage of irrelevant entry data.

[0036] Perform differential privacy processing on the target input information, that is, add a certain amount of random noise to the target input information to distort the target input information, so as to protect the privacy while maintaining the availability of data as much as possible. The specific processing process can be: Identify the input sensitive data contained in the target input information and the input sensitive features of each input sensitive data; determine the differential noise corresponding to each input sensitive data based on the input sensitive features and the preset noise mapping relationship, and the preset noise mapping relationship is the correspondence between the input sensitive features and the differential noise; based on the differential noise corresponding to each input sensitive data, perform differential privacy processing on each sensitive data to obtain privacy input information.

[0037] Specifically, based on a preset feature recognition algorithm, the input sensitive data and the input sensitive features corresponding to each input sensitive data are identified from the target input information, where the input sensitive features can be unique features, value features, irreversible features, etc. For example, the input sensitive features corresponding to input sensitive data such as identity card number and passport number are unique features, and the input sensitive features corresponding to input sensitive data such as personal property and commercial secrets are value features. The specific input sensitive features are not specifically limited in the embodiments of the present application, and can be determined by relevant staff based on historical verification data and uploaded to the management system.

[0038] Different input sensitive features correspond to different differential noises, that is, different encryption methods are used for different input sensitive data, so as to further improve the security of input sensitive data. The preset noise mapping relationship includes differential noises corresponding to different input sensitive features. The specific content of the preset noise mapping relationship is not specifically limited in the embodiment of the present application. The differential noise can be Laplace noise, selected exponential noise, etc., and encryption processing is performed based on the differential noise corresponding to the input sensitive data to obtain privacy input information, rather than using a fixed query noise to protect the privacy of input sensitive data with different privacy attributes, so as to maximize the availability of the target input data while protecting privacy. It is worth noting that the input sensitive data contained in the target input data is not in a corresponding relationship with the sensitive data contained in the initial verification form.

[0039] Step S140: Determine a secondary verification form based on the initial verification form and the privacy input information, wherein the secondary verification form includes blank positions for sensitive data.

[0040] Specifically, since all the input sensitive data in the privacy input information has been encrypted, when the secondary verification form is determined based on the initial verification form and the privacy input information, the actual content completed is the writing of the non-sensitive data in the initial verification form, and the writing of the sensitive data cannot be completed. The writing of the non-sensitive data in the initial verification form, that is, obtaining the non-sensitive input information corresponding to the non-sensitive data in the initial verification form from the privacy input information, and then filling the non-sensitive input information into the vacant position of the non-sensitive data in the initial verification form, the obtained secondary verification form no longer contains the vacant position of the non-sensitive data, that is, the non-sensitive data in the initial verification form has been filled.

[0041] Step S150: Locate the block to be accessed based on the target verification stage and the secondary verification form. After the access rights of the block to be accessed are met, update the secondary verification form based on the blockchain storage data corresponding to the block to be accessed, obtain the target verification form, and feedback the target verification form.

[0042] Specifically, before encrypting the target input data, the input sensitive data in the target input data can be written into the blockchain. By allocating corresponding blocks to different input sensitive data and setting the access rights of the corresponding blocks based on the sensitivity level corresponding to the input sensitive data, it is convenient to improve the security of data transmission or data access. The higher the sensitivity level, the higher the corresponding access rights. In order to accurately locate each sensitive input data, an access mapping relationship between the data features of the sensitive input data and the blocks can be established. Based on the access mapping relationship, the block to be accessed corresponding to any data feature can be quickly and accurately located from the blockchain. The data features of the input sensitive data are different from the input sensitive features. The input sensitive features are used to characterize the data type of the input sensitive data, while the data features can be used to characterize the content of the input sensitive data. At the same time, the data identifier associated with the sensitive data to be written will be displayed or added near the vacant position of the sensitive data. Therefore, based on the access mapping relationship, the block to be accessed corresponding to each sensitive data in the secondary verification form can be located.

[0043] Furthermore, in order to improve the security of user personal information during the identity verification process, the block to be accessed is located based on the target verification stage and the secondary verification form. After the access rights of the block to be accessed are met, the secondary verification form is updated based on the blockchain storage data corresponding to the block to be accessed. Specifically, it may include: Based on the target verification stage, the initial access block is determined from the preset blockchain; the vacant position of the sensitive data in the secondary verification form is identified, and based on the vacant position of the sensitive data and the storage structure corresponding to the preset blockchain, the block to be accessed is located from the initial access block; the access rights corresponding to the block to be accessed are obtained, verification request information is generated based on the access rights, and the verification request information is fed back; when the verification information fed back by the user is received, it is determined whether the verification information satisfies the access rights, and if so, the secondary verification form is updated based on the blockchain storage data corresponding to the block to be accessed.

[0044] Specifically, the range of accessible blocks corresponding to different target verification stages is different. Therefore, all initial access blocks can be determined from the preset blockchain based on the target verification stage, and then each block to be accessed can be determined from the initial access block. When locating the block to be accessed corresponding to the sensitive data in the secondary verification form from the initial access block, it can be determined based on the storage structure, data identification and data characteristics corresponding to the preset blockchain. Directed traceability can be achieved based on the storage structure corresponding to the preset blockchain, that is, the shortest traceability route is used to quickly locate the block to be accessed, so as to avoid invalid data traversal and search. With the development of the blockchain network, new blocks may be added to the preset blockchain. Therefore, the storage structure of the preset blockchain is scalable and can adapt to future changes.

[0045] For any block to be accessed, verification request information can be generated based on the access rights corresponding to the block to be accessed, which is used to obtain the verification qualifications of the relevant verification personnel. After the relevant verification personnel feedback the verification information, it can be determined based on the verification information whether the verification personnel can retrieve or use the input sensitive data in the block to be accessed. When the verification personnel can retrieve or use the input sensitive data in the block to be accessed, the corresponding input sensitive data will be written into the vacant position of the sensitive data in the secondary verification form to update the secondary verification form. By obtaining the access rights corresponding to the block to be accessed and generating verification request information based on the access rights, it is ensured that only users or systems that meet the access rights can access sensitive data. This strict access rights control mechanism is convenient for effectively preventing data leakage and illegal access, thereby facilitating the improvement of the security of user personal information during identity verification.

[0046] The target verification form obtained after updating the secondary verification form based on the blockchain storage data corresponding to the block to be accessed no longer contains empty positions, and the target verification form can be fed back to the terminal device of the relevant verification personnel for review by the relevant verification personnel.

[0047] For the embodiment of the present application, by formulating different verification forms for different target verification stages, it is convenient to reduce the acquisition of more redundant data or invalid data during the identity verification process, and it is also convenient to avoid the leakage of unnecessary identity data. By performing differential privacy processing on the target input information, it is convenient to complete the addition of non-sensitive data in the initial verification form while protecting the personal privacy of pregnant women. By automatically identifying vacant positions and automatically filling them in, it is convenient to reduce errors caused by manual entry, thereby facilitating the improvement of the accuracy of the identity verification results. In addition, since different access blocks are set with access rights, the corresponding sensitive data can only be accessed if the corresponding access rights are met, and the blockchain has the characteristic of being tamper-proof. Therefore, by accessing the block to be accessed in the blockchain to complete the vacant positions of the sensitive data in the secondary verification form, it is convenient to ensure the integrity and authenticity of the sensitive data in the target verification form, and it is also convenient to prevent unauthorized access and modification, thereby facilitating the improvement of security in the identity verification process.

[0048] Furthermore, in order to prevent potential security incidents in a timely manner and protect the security of resources and data, when an access request is detected, the method provided in the embodiment of the present application further includes: Obtain access behavior within a first preset time period, and determine an access behavior baseline based on the access behavior and the access identity corresponding to the access request; obtain real-time access behavior within a second preset time period, and determine whether there is abnormal access behavior in the real-time access behavior based on the access behavior baseline, and whether the abnormal access behavior deviates from the access behavior baseline; if so, generate abnormal warning information.

[0049] Specifically, the access request may be issued by the relevant visitor, who may be a pregnant woman, a family member, a relevant medical staff or a relevant verification staff, or may be a malicious visit. Therefore, after detecting the access request of the relevant visitor, it is necessary to monitor the access behavior of the relevant visitor in order to detect abnormal behavior in time. The first preset time period is a period of time after the access request is detected. The duration corresponding to the first preset time period may be 2 minutes or 3 minutes. The specific duration is not specifically limited in the embodiment of the present application. The access behavior may include browsing pages, browsing paths, etc. Based on the access behavior corresponding to the relevant visitor in the first preset time period, the access purpose of the relevant visitor can be predicted. The access behavior baseline is used to supervise the relevant visitor while browsing or viewing the access purpose, that is, if the relevant visitor accesses the access purpose within the access range corresponding to the access behavior baseline, no abnormal situation will occur.

[0050] When determining the purpose of a visit based on the visit behavior of the relevant visitor within the first preset time period, the visit identity of the relevant visitor must also be considered. When the access behavior of two relevant visitors is the same but the access identity is different, the corresponding visit purposes may also be different. Different access identities correspond to different access behavior baselines. The higher the access identity level, the larger the access range of the corresponding access behavior baseline. The access range corresponding to the identity level of any access identity can be determined based on the preset range mapping relationship. The specific content of the preset range mapping relationship is not specifically limited in the embodiment of this application, and can be determined by relevant staff based on historical experimental data and uploaded to the management system.

[0051] The second preset time period is a period of time after the first preset time period. The duration corresponding to the second preset time period is not limited in the embodiment of the present application. After determining the access behavior baseline, the real-time access behavior generated by the relevant visitor within the second preset time period can be monitored based on the access behavior baseline. When it is detected that the real-time access behavior exceeds the access behavior baseline, for example, the access behavior baseline only allows the relevant visitor to access the secondary node a2 of node a, but the relevant visitor accesses the tertiary node a3 of node a, or the access behavior baseline allows the relevant visitor to access node c after accessing node b, but the relevant visitor directly accesses node d after accessing node b, once it is detected that the real-time access behavior exceeds the access behavior baseline, it can be determined that the real-time access behavior contains abnormal access behavior. By immediately generating an early warning message after detecting the abnormal access behavior, the relevant management personnel are notified to take necessary countermeasures, thereby facilitating the timely prevention of potential security incidents and protecting the security of resources and data.

[0052] Further, in order to accurately and quickly resolve the existing abnormal situation, after determining that there is abnormal access behavior in the real-time access behavior, the method provided by the embodiment of the present application also includes steps S210 to S240, such as Figure 2 As shown, where: Step S210: Determine the degree of access deviation based on the abnormal access behavior and the access behavior baseline.

[0053] Specifically, when determining the degree of access deviation, the abnormal access behavior can be compared and fitted with the access behavior baseline to determine the degree of access deviation corresponding to the abnormal access behavior. The specific method of determining the degree of access deviation is not specifically limited in the embodiment of the present application, and can also be determined by analyzing the node distance between the abnormal access node corresponding to the abnormal moment and the access behavior baseline. The determined degree of deviation can be displayed in numerical values ​​to facilitate intuitiveness when browsing or viewing.

[0054] Step S220: Acquire the abnormal access frequency corresponding to the abnormal time, and determine the abnormal type corresponding to the abnormal access behavior based on the access deviation degree and the abnormal access frequency. The abnormal type includes malicious abnormality and non-malicious abnormality. The abnormal time is the time when the abnormal access behavior is determined.

[0055] Specifically, the abnormal access frequency corresponding to the abnormal moment can be determined from the access log. The higher the abnormal access frequency, the higher the corresponding abnormality degree. The abnormal type of the abnormal access behavior is determined based on the deviation value corresponding to the access deviation degree and the abnormal access frequency. When the deviation value corresponding to the abnormal access behavior is higher than the preset deviation threshold, or the abnormal access frequency is higher than the preset frequency threshold, it can be determined that the abnormal type of the abnormal access behavior is a malicious abnormality, wherein the specific preset deviation threshold and preset frequency threshold are not specifically limited in the embodiments of the present application.

[0056] Step S230: When the abnormal type of the abnormal access behavior is a malicious abnormality, a locking instruction is generated, and the accessed content is hidden.

[0057] Specifically, if the exception type is a malicious exception, it indicates that the relevant visitor may be a malicious user, a malicious website, etc. At this time, a lock instruction can be directly generated to limit the access behavior of the relevant visitor and prevent the relevant visitor from accessing other input data. At the same time, the access IP address of the relevant visitor can be added to the blacklist of the firewall to prohibit it from accessing again. The accessed content is hidden to prevent malicious visitors from further obtaining sensitive information. When the accessed content is hidden, the accessed content can be encrypted and stored, or the access rights can be modified. The specific method is not specifically limited in the embodiments of this application.

[0058] Step S240: When the abnormal type of the abnormal access behavior is a non-malicious abnormality, the centralized verification request information is determined based on the degree of access deviation, and the centralized verification request information is fed back to the visitor. If the visitor's feedback information meets the centralized access verification corresponding to the verification request information, a jump guide is generated based on the abnormal access behavior and the access behavior baseline.

[0059] Specifically, if the exception type is a non-malicious exception, it indicates that the relevant visitor may have deviated due to an operational error or unfamiliarity with the access process. At this time, there is no need to lock the access operation of the relevant visitor, and only the identity and authority of the relevant visitor need to be verified. The centralized verification request information corresponding to different access deviation degrees is different. The corresponding centralized verification request information can be determined based on the preset request mapping relationship and the deviation value corresponding to the access deviation degree. The preset request mapping relationship includes verification request information corresponding to different deviation values, and the specific content is not specifically limited in the embodiments of this application.

[0060] After receiving the feedback information from the relevant visitor, it is necessary to check whether the relevant visitor has completed the centralized access verification corresponding to the verification request information based on the feedback information. If the verification is completed, a jump guide can be generated based on the abnormal access behavior corresponding to the relevant visitor at the current moment. Through this jump guide, the relevant visitor can be guided back to the access range corresponding to the access behavior baseline. If the verification is not completed, a lock instruction is generated to restrict the visitor's access operation.

[0061] By analyzing the access deviation degree and abnormal access frequency of abnormal access behavior, it is easy to distinguish the abnormal types of abnormal access behavior, and provide different abnormal solutions based on different abnormal types. By accurately and quickly resolving existing abnormal situations, the stability of the identity verification process is improved.

[0062] Furthermore, in order to prevent unnecessary personal information of the user from being abused or leaked, the method provided in the embodiment of the present application also includes: Obtain target verification forms corresponding to all identity verification requirements within a third preset time period, and identify the island data entered into the database based on all target verification forms; identify the island features corresponding to each island data, and obtain the authorization status corresponding to each island data, the authorization status includes authorized and unauthorized; determine excessive collection of data based on the island features and authorization status of each island data, and provide feedback on the excessive collection of data, the excessive collection of data is island data whose island features are preset sensitive features, and whose authorization status is unauthorized.

[0063] Specifically, the duration corresponding to the third preset time period can be 7 days or 10 days, and the specific duration is not specifically limited in the embodiments of the present application. The island data in the input database generally refers to data that is not associated with or has a very low association with other input data in the input database. In the identity verification scenario, the island data may appear as personal information that is irrelevant to the identity verification or redundant. Therefore, the island data contained in the input database can be determined by performing data association analysis on the input database. The island features corresponding to the island data can be identified from the input database based on the preset feature recognition algorithm. The definition of identifying the island features is similar to the meaning of the input sensitive features in the above embodiments, and can be used to characterize the data type of the island data. The authorization status of each island data can be determined based on the input log information. When the authorization status of the island data is authorized, it indicates that the island data is collected and entered with the authorization of the party concerned. When the authorization status of the island data is unauthorized, it indicates that the island data is collected and entered without the authorization of the party concerned. When the island feature of the island data is a preset sensitive feature and the authorization status is unauthorized, the island data is characterized as over-collected data. The island feature and authorization status of the island data are used to comprehensively analyze whether the island data is over-collected data, so as to improve the accuracy of determining over-collected data. By timely feedback on over-collected data, it is convenient to avoid the abuse or leakage of users' unnecessary personal information. By timely processing the over-collected data, it is also convenient to improve the effectiveness of the data entry into the database, thereby improving the accuracy of the maternal and child identity verification process.

[0064] The present application embodiment provides a management system, such as Figure 3 As shown, Figure 3 The management system 300 shown includes: a processor 301 and a memory 303. The processor 301 and the memory 303 are connected, such as through a bus 302. Optionally, the management system 300 may also include a transceiver 304. It should be noted that in actual applications, the transceiver 304 is not limited to one, and the structure of the management system 300 does not constitute a limitation on the embodiments of the present application.

[0065] The processor 301 may be a CPU (Central Processing Unit), a general-purpose processor, a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array) or other programmable logic devices, transistor logic devices, hardware components or any combination thereof. It may implement or execute various exemplary logic blocks, modules and circuits described in conjunction with the disclosure of this application. The processor 301 may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc.

[0066] The bus 302 may include a path to transmit information between the above components. The bus 302 may be a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus. The bus 302 may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 3 The fact that only one line is used in the diagram does not mean that there is only one bus or only one type of bus.

[0067] The memory 303 may be a ROM (Read Only Memory) or other types of static storage devices that can store static information and instructions, a RAM (Random Access Memory) or other types of dynamic storage devices that can store information and instructions, or an EEPROM (Electrically Erasable Programmable Read Only Memory), a CD-ROM (Compact Disc Read Only Memory) or other optical disk storage, optical disk storage (including compressed optical disk, laser disk, optical disk, digital versatile disk, Blu-ray disk, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto.

[0068] The memory 303 is used to store the application code for executing the solution of the present application, and the execution is controlled by the processor 301. The processor 301 is used to execute the application code stored in the memory 303 to implement the contents shown in the above method embodiment.

[0069] The management system includes but is not limited to: mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), vehicle terminals (such as vehicle navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. It can also be a server, etc. Figure 3 The management system shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0070] An embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer-readable storage medium is run on a computer, the computer can execute the corresponding content in the aforementioned method embodiment.

[0071] An embodiment of the present application provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the method in any of the above embodiments is implemented.

[0072] It should be understood that, although the steps in the flowchart of the accompanying drawings are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least a part of the steps in the flowchart of the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a part of the sub-steps or stages of other steps.

[0073] The above description is only a partial implementation method of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A maternal and child identity verification management method for smart medical care, characterized in that: include: When an identity verification requirement is detected, a target verification stage is determined based on the identity verification requirement, the target verification stage including hospitalization for delivery, delivery, and issuance of a birth certificate; Determining an initial verification form based on the target verification stage, the initial verification form including vacant positions for sensitive data and vacant positions for non-sensitive data; Locating target input data from an input database based on the identity verification requirement, and performing differential privacy processing on the target input information based on the target verification stage to obtain private input information; Determining a secondary verification form based on the initial verification form and the privacy input information, wherein the secondary verification form includes blank locations for sensitive data; The block to be accessed is located based on the target verification stage and the secondary verification form. After the access rights of the block to be accessed are met, the secondary verification form is updated based on the blockchain storage data corresponding to the block to be accessed, the target verification form is obtained, and the target verification form is fed back.

2. According to claim 1, a maternal and child identity verification management method for smart medical care is characterized in that: The step of performing differential privacy processing on the target input information based on the target verification stage to obtain the privacy input information includes: Identifying the input sensitive data and the input sensitive features of each input sensitive data contained in the target input information; Based on the input sensitive feature and the preset noise mapping relationship, determining the differential noise corresponding to each input sensitive data, wherein the preset noise mapping relationship is the corresponding relationship between the input sensitive feature and the differential noise; Based on the differential noise corresponding to each input sensitive data, differential privacy processing is performed on each sensitive data to obtain the privacy input information.

3. A maternal and child identity verification management method for smart medical care according to claim 1, characterized in that: The locating the block to be accessed based on the target verification stage and the secondary verification form, and updating the secondary verification form based on the blockchain storage data corresponding to the block to be accessed after satisfying the access rights of the block to be accessed, includes: Determining an initial access block from a preset blockchain based on the target verification stage; Identify the missing position of the sensitive data in the secondary verification form, and locate the block to be accessed from the initial access block based on the missing position of the sensitive data and the storage structure corresponding to the preset blockchain; Obtaining access rights corresponding to the block to be accessed, generating verification request information based on the access rights, and feeding back the verification request information; When the verification information fed back by the user is received, it is determined whether the verification information satisfies the access permission. If so, the secondary verification form is updated based on the blockchain storage data corresponding to the block to be accessed.

4. A maternal and child identity verification management method for smart medical care according to claim 1, characterized in that: When an access request is detected, it also includes: Acquire access behavior within a first preset time period, and determine an access behavior baseline based on the access behavior and the access identity corresponding to the access request; Acquire the real-time access behavior within a second preset time period, and determine whether there is abnormal access behavior in the real-time access behavior based on the access behavior baseline, wherein the abnormal access behavior deviates from the access behavior baseline; If so, an abnormal warning message is generated.

5. A maternal and child identity verification management method for smart medical care according to claim 4, characterized in that: After determining that there is abnormal access behavior in the real-time access behavior, the method further includes: Determining a degree of access deviation based on the abnormal access behavior and the access behavior baseline; Acquire the abnormal access frequency corresponding to the abnormal time, determine the abnormal type corresponding to the abnormal access behavior based on the access deviation degree and the abnormal access frequency, the abnormal type includes malicious abnormality and non-malicious abnormality, and the abnormal time is the time when the abnormal access behavior is determined; When the abnormal type of the abnormal access behavior is a malicious abnormality, a locking instruction is generated, and the accessed content is hidden; When the abnormal type of the abnormal access behavior is a non-malicious abnormality, centralized verification request information is determined based on the degree of access deviation, and the centralized verification request information is fed back to the visitor. If the visitor's feedback information meets the centralized access verification corresponding to the verification request information, a jump guide is generated based on the abnormal access behavior and the access behavior baseline.

6. A maternal and child identity verification management method for smart medical care according to claim 1, characterized in that: Also includes: Obtaining target verification forms corresponding to all identity verification requirements within a third preset time period, and identifying isolated data in the input database based on all target verification forms; Identify the island feature corresponding to each isolated data, and obtain the authorization status corresponding to each isolated data, wherein the authorization status includes authorized and unauthorized; Based on the island feature and authorization status of each island data, over-collected data is determined and fed back, wherein the over-collected data is island data whose island feature is a preset sensitive feature and whose authorization status is unauthorized.

7. A management system, characterized in that: The management system includes: at least one processor; Memory; At least one application, wherein the at least one application is stored in a memory and configured to be executed by at least one processor, and the at least one application is configured to: execute a method for maternal and child identity verification and management for smart medical care as described in any one of claims 1-6.

8. A computer-readable storage medium, characterized in that: include: A computer program is stored which can be loaded by a processor and executed according to any one of claims 1-6, comprising a method for verifying and managing maternal and child identities for smart medical care.

9. A computer program product, characterized in that It includes a computer program, which, when executed by a processor, implements the steps of a method for verifying and managing maternal and child identities for smart medical care as described in any one of claims 1 to 6.

Images