Secure transmission method and sharing method of physical examination data

Abstract

The invention provides a security transmission method and sharing method for physical examination data, belongs to the technical field of data processing, and aims to reduce the risk of privacy disclosure of a user. The method is applied to a first terminal in a group capable of sharing data, the group further comprises a second terminal and a third terminal, and the method comprises the steps that the first terminal obtains physical examination data of a first user; the first terminal extracts first physical examination data from the physical examination data of the first user, data except the first physical examination data in the physical examination data of the first user is second physical examination data, and the first physical examination data is sent to the management equipment by the second terminal; the first terminal sends the physical examination data set to the management equipment; the physical examination data set comprises the second physical examination data and partial physical examination data of the second user, and the partial physical examination data of the second user is acquired from the third terminal in advance.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a method for securely transmitting and sharing physical examination data. Background Art

[0002] With the rapid development of Internet of Things technology, its application in the field of medical health is becoming more and more extensive. Internet of Things technology connects various medical devices, sensors and terminals to realize real-time data collection, transmission and processing, thus providing a more intelligent and efficient solution for the field of medical health. Taking physical examination as an example, the physical examination terminal can be networked in the form of Internet of Things to transmit the user's physical examination data to the server in real time. Physical examination terminals usually include various sensors and devices, such as electrocardiographs, blood pressure monitors, blood glucose meters, etc. These devices can be connected to the network through Internet of Things technology to transmit the collected physical examination data to the server. The server can store, analyze and process this data to provide users with more accurate and personalized health management services.

[0003] However, the user's physical examination data involves user privacy, and how to ensure the security of data transmission is a current research issue. Summary of the invention

[0004] The embodiments of the present application provide a method for securely transmitting and sharing physical examination data to reduce the risk of privacy leakage of users.

[0005] In order to achieve the above objectives, this application adopts the following technical solutions:

[0006] In a first aspect, a secure transmission method and sharing method for physical examination data are provided, which is applied to a first terminal in a group that can share data, and the group also includes a second terminal and a third terminal. The method includes: the first terminal obtains the physical examination data of a first user; the first terminal extracts the first physical examination data from the physical examination data of the first user, and the data other than the first physical examination data in the physical examination data of the first user is the second physical examination data, and the first physical examination data is sent by the second terminal to a management device; the first terminal sends a collection of physical examination data to the management device; the collection of physical examination data includes the second physical examination data and part of the physical examination data of the second user, and the part of the physical examination data of the second user is obtained in advance from the third terminal.

[0007] Optionally, the physical examination data of the first user is data of M bits in length, where M is an integer greater than 2, and the first terminal extracts the first physical examination data from the physical examination data of the first user, including: the first terminal generates a first random integer within a preset value range, the preset value range is greater than 0 and less than M, and the first random integer is an integer with a value of k1; the first terminal extracts the first physical examination data from the physical examination data of the first user according to the value of k1+x1, where x1 is a positive integer with a preset value; if the value of k1+x1 is less than or equal to M, the first physical examination data is the data from the k1th bit to the k1+x1th bit in the physical examination data of the first user; if the value of k1+x1 is greater than M, the first physical examination data is the data from the k1th bit to the Mth bit in the physical examination data of the first user.

[0008] Optionally, the physical examination data of the user obtained by each terminal in the preconfigured group are data of M bits in length; the first terminal obtains the physical examination data of the first user, including: the first terminal obtains the actual physical examination data of the first user from the terminal used to collect physical examination data; if the length of the actual physical examination data of the first user is N, and N is an integer greater than 1 and less than M, then the first terminal fills the end or front end of the actual physical examination data of the first user with a bit string for filling; or; if the length of the actual physical examination data of the first user is N, and N is equal to M, then the first terminal determines the actual physical examination data of the first user as the physical examination data of the first user; wherein the bit string used for filling is a specific bit string that can be distinguished from the actual physical examination data of the first user.

[0009] Optionally, the bit string used for padding is padded after the last bit of the actual physical examination data of the first user, and the bit string used for padding is padded before the first bit of the actual physical examination data of the first user.

[0010] Optionally, MN is an integer greater than or equal to 3, and the bit string used for filling is any one of the following: the bit string used for filling is the first MN bits of the actual physical examination data of the first user; the bit string used for filling is the inverted value of each bit in the first MN bits of the actual physical examination data of the first user; the bit string used for filling is the last MN bits of the actual physical examination data of the first user; the bit string used for filling is the inverted value of each bit in the last MN bits of the actual physical examination data of the first user; the bit string used for filling is the binary expression of the value of s1mods2; wherein, s1 is greater than s2, if s1 is the decimal expression of the first MN bits of the actual physical examination data of the first user, then s2 is the decimal expression of the last MN bits of the actual physical examination data of the first user; or, if s1 is the decimal expression of the last MN bits of the actual physical examination data of the first user, then s2 is the decimal expression of the first MN bits of the actual physical examination data of the first user.

[0011] Optionally, the method also includes: the first terminal uses the security mechanism of the PC5 connection to encrypt the first physical examination data and the first random integer, and sends them to the second terminal through the PC5 connection between the first terminal and the second terminal, and the first random integer is then sent by the second terminal to the management device; a PC5 connection is established between any two terminals in the group.

[0012] Optionally, the method also includes: the first terminal determines a collection of physical examination data based on the second physical examination data and partial physical examination data of the second user.

[0013] Optionally, the bit length of the partial physical examination data of the second user is L1 bits, and the second physical examination data is L2 bits, L1 and L2 are both integers greater than 2, and L1 is less than L2; on this basis, the first terminal determines a physical examination data collection based on the second physical examination data and the partial physical examination data of the second user, including: the first terminal divides the partial physical examination data of the second user into P1 segment data in sequence, and divides the second physical examination data into P2 segment data in sequence, in a manner in which the length of each segment increases by a power of 2, P1 and P2 are both integers greater than 1, and P1 is less than P2; wherein, in the P1 segment data: the first segment data is 1 bit, the second segment data is 2 bits, and so on, the P1 segment data is bits; in the P2 segment data: the first segment data is 1 bit, the second segment data is 2 bits, and so on, the P2 segment data is bits; the first terminal embeds the P1 segment data between the P2 segment data respectively to obtain a collection of physical examination data.

[0014] Optionally, the first terminal embeds the P1 segment data between the P2 segment data respectively to obtain a physical examination data collection, including: the first terminal embeds the first segment data in the P1 segment data between the first segment data and the second segment data in the P2 segment data, embeds the second segment data in the P1 segment data between the second segment data and the third segment data in the P2 segment data, and so on; until the P1th segment data in the P1 segment data is embedded between the P1th segment data and the P1+1th segment data in the P2 segment data, to obtain a physical examination data collection; or; the first terminal embeds the P1th segment data in the P1 segment data between the first segment data and the second segment data in the P2 segment data, embeds the P1-1th segment data in the P1 segment data between the second segment data and the third segment data in the P2 segment data, and so on; until the first segment data in the P1 segment data is embedded between the P1th segment data and the P1+1th segment data in the P2 segment data, to obtain a physical examination data collection.

[0015] In a second aspect, a secure transmission method and sharing system for physical examination data are provided, the system includes a group that can share data, the group includes a first terminal, a second terminal and a third terminal, the system is configured as follows: the first terminal obtains the physical examination data of the first user; the first terminal extracts the first physical examination data from the physical examination data of the first user, the data in the physical examination data of the first user other than the first physical examination data is the second physical examination data, and the first physical examination data is sent by the second terminal to a management device; the first terminal sends a collection of physical examination data to the management device; the collection of physical examination data includes the second physical examination data and part of the physical examination data of the second user, and the part of the physical examination data of the second user is obtained in advance from the third terminal.

[0016] Optionally, the physical examination data of the first user is data of M bits in length, where M is an integer greater than 2, and the first terminal extracts the first physical examination data from the physical examination data of the first user, including: the first terminal generates a first random integer within a preset value range, the preset value range is greater than 0 and less than M, and the first random integer is an integer with a value of k1; the first terminal extracts the first physical examination data from the physical examination data of the first user according to the value of k1+x1, where x1 is a positive integer with a preset value; if the value of k1+x1 is less than or equal to M, the first physical examination data is the data from the k1th bit to the k1+x1th bit in the physical examination data of the first user; if the value of k1+x1 is greater than M, the first physical examination data is the data from the k1th bit to the Mth bit in the physical examination data of the first user.

[0017] Optionally, the physical examination data of the user obtained by each terminal in the preconfigured group are data of M bits in length; the first terminal obtains the physical examination data of the first user, including: the first terminal obtains the actual physical examination data of the first user from the terminal used to collect physical examination data; if the length of the actual physical examination data of the first user is N, and N is an integer greater than 1 and less than M, then the first terminal fills the end or front end of the actual physical examination data of the first user with a bit string for filling; or; if the length of the actual physical examination data of the first user is N, and N is equal to M, then the first terminal determines the actual physical examination data of the first user as the physical examination data of the first user; wherein the bit string used for filling is a specific bit string that can be distinguished from the actual physical examination data of the first user.

[0018] Optionally, the bit string used for padding is padded after the last bit of the actual physical examination data of the first user, and the bit string used for padding is padded before the first bit of the actual physical examination data of the first user.

[0019] Optionally, MN is an integer greater than or equal to 3, and the bit string used for filling is any one of the following: the bit string used for filling is the first MN bits of the actual physical examination data of the first user; the bit string used for filling is the inverted value of each bit in the first MN bits of the actual physical examination data of the first user; the bit string used for filling is the last MN bits of the actual physical examination data of the first user; the bit string used for filling is the inverted value of each bit in the last MN bits of the actual physical examination data of the first user; the bit string used for filling is the binary expression of the value of s1mods2; wherein, s1 is greater than s2, if s1 is the decimal expression of the first MN bits of the actual physical examination data of the first user, then s2 is the decimal expression of the last MN bits of the actual physical examination data of the first user; or, if s1 is the decimal expression of the last MN bits of the actual physical examination data of the first user, then s2 is the decimal expression of the first MN bits of the actual physical examination data of the first user.

[0020] Optionally, the system is also configured as follows: the first terminal uses the security mechanism of the PC5 connection to encrypt the first physical examination data and the first random integer, and sends them to the second terminal via the PC5 connection between the first terminal and the second terminal, and the first random integer is then sent by the second terminal to the management device; a PC5 connection is established between any two terminals in the group.

[0021] Optionally, the system is further configured as follows: the first terminal determines a collection of physical examination data based on the second physical examination data and part of the physical examination data of the second user.

[0022] Optionally, the bit length of the partial physical examination data of the second user is L1 bits, and the second physical examination data is L2 bits, L1 and L2 are both integers greater than 2, and L1 is less than L2; on this basis, the first terminal determines a physical examination data collection based on the second physical examination data and the partial physical examination data of the second user, including: the first terminal divides the partial physical examination data of the second user into P1 segment data in sequence, and divides the second physical examination data into P2 segment data in sequence, in a manner in which the length of each segment increases by a power of 2, P1 and P2 are both integers greater than 1, and P1 is less than P2; wherein, in the P1 segment data: the first segment data is 1 bit, the second segment data is 2 bits, and so on, the P1 segment data is bits; in the P2 segment data: the first segment data is 1 bit, the second segment data is 2 bits, and so on, the P2 segment data is bits; the first terminal embeds the P1 segment data between the P2 segment data respectively to obtain a collection of physical examination data.

[0023] Optionally, the first terminal embeds the P1 segment data between the P2 segment data respectively to obtain a physical examination data collection, including: the first terminal embeds the first segment data in the P1 segment data between the first segment data and the second segment data in the P2 segment data, embeds the second segment data in the P1 segment data between the second segment data and the third segment data in the P2 segment data, and so on; until the P1th segment data in the P1 segment data is embedded between the P1th segment data and the P1+1th segment data in the P2 segment data, to obtain a physical examination data collection; or; the first terminal embeds the P1th segment data in the P1 segment data between the first segment data and the second segment data in the P2 segment data, embeds the P1-1th segment data in the P1 segment data between the second segment data and the third segment data in the P2 segment data, and so on; until the first segment data in the P1 segment data is embedded between the P1th segment data and the P1+1th segment data in the P2 segment data, to obtain a physical examination data collection.

[0024] In a third aspect, a device is provided. The communication device comprises: a processor, the processor is coupled to a memory, and the processor is used to execute a computer program stored in the memory, so that the communication device executes the method described in the first aspect.

[0025] In a possible design solution, the device described in the third aspect may further include a transceiver. The transceiver may be a transceiver circuit or an interface circuit. The transceiver may be used for the device described in the third aspect to communicate with other devices.

[0026] In the present application, the device described in the third aspect may be a terminal device, or a chip (system) or other parts or components, or a device including the terminal device. Among them, the above-mentioned chip (system) or other parts or components may be set in the terminal device.

[0027] In a fourth aspect, a computer-readable storage medium is provided, comprising: a computer program or instructions; when the computer program or instructions are executed on a computer, the computer executes the communication method described in the first aspect.

[0028] According to a fifth aspect, a computer program product is provided, comprising a computer program or instructions, which, when executed on a computer, causes the computer to execute the communication method according to the first aspect.

[0029] In summary, by establishing a group that can share data, such as a group that includes at least a first terminal, a second terminal and a third terminal, for any of the terminals, such as taking the first terminal as an example. After the first terminal collects the physical examination data of the first user, the first terminal can extract the first physical examination data from the physical examination data of the first user, and the data in the physical examination data of the first user other than the first physical examination data is the second physical examination data. At this time, the first physical examination data is sent to the management device by the second terminal, and the first terminal can be responsible for sending a collection of physical examination data to the management device, and the collection of physical examination data includes the second physical examination data and part of the physical examination data of the second user, and part of the physical examination data of the second user is obtained from the third terminal in advance. In other words, each terminal can only send part of the user's physical examination data, and the other part of the user's physical examination data is shared with other terminals in the group and sent by other terminals. Therefore, even if a terminal is attacked, the attacker cannot obtain all the user's data, which can reduce the risk of privacy leakage of the user. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 A schematic diagram of the architecture of the Internet of Things system provided in an embodiment of the present application;

[0031] Figure 2 A schematic diagram of the process of securely transmitting and sharing physical examination data provided in an embodiment of the present application;

[0032] Figure 3 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0033] The present application will present various aspects, embodiments or features around a system that may include multiple devices, components, modules, etc. It should be understood and appreciated that each system may include additional devices, components, modules, etc., and / or may not include all of the devices, components, modules, etc. discussed in conjunction with the figures. In addition, combinations of these schemes may also be used.

[0034] In addition, in the embodiments of the present application, words such as "exemplarily" and "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" in the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of the word "exemplary" is intended to present concepts in a concrete way.

[0035] First, in this application, "used to indicate" may include being used to indicate directly or indirectly. When describing that a certain "information" is used to indicate A, it may include that the information directly indicates A or indirectly indicates A, but it does not mean that the information must contain A.

[0036] The information indicated by a piece of information is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, the information to be indicated can be directly indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated can also be indirectly indicated by indicating other information, wherein there is an association between the other information and the information to be indicated. It is also possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information can also be achieved with the help of the arrangement order of each piece of information agreed in advance (for example, stipulated by the protocol), thereby reducing the indication overhead to a certain extent. At the same time, the common parts of each piece of information can also be identified and indicated uniformly to reduce the indication overhead caused by indicating the same information separately.

[0037] In addition, the specific indication method may also be various existing indication methods, such as but not limited to the above-mentioned indication methods and various combinations thereof. The specific details of the various indication methods can refer to the prior art and will not be repeated herein. As can be seen from the above, for example, when it is necessary to indicate multiple information of the same type, different indication methods may be used for different information. In the specific implementation process, the desired indication method can be selected according to specific needs. The embodiment of the present application does not limit the selected indication method. In this way, the indication method involved in the embodiment of the present application should be understood to cover various methods that can enable the party to be indicated to obtain the information to be indicated.

[0038] The information to be indicated can be sent as a whole or divided into multiple sub-information and sent separately, and the sending period and / or sending time of these sub-information can be the same or different. The specific sending method is not limited in this application. Among them, the sending period and / or sending time of these sub-information can be pre-defined, for example, pre-defined according to a protocol, or can be configured by the transmitting end device by sending configuration information to the receiving end device.

[0039] Second, in the embodiments shown below, the first, second and various digital numbers are only used for the convenience of description and are not used to limit the scope of the embodiments of the present application. For example, to distinguish different indication information.

[0040] Third, "pre-set", "pre-defined", or "pre-configured" can be implemented by pre-saving corresponding codes, tables or other methods that can be used to indicate relevant information in a device (for example, including a terminal device and a network device), or can be pre-specified in a protocol. The present application does not limit its specific implementation method. Among them, "save" can mean saving in one or more memories. The one or more memories can be set separately or integrated in an encoder or decoder, a processor, or a communication device. The one or more memories can also be partially set separately and partially integrated in a decoder, a processor, or a communication device. The type of memory can be any form of storage medium, which is not limited by the present application.

[0041] The network architecture and business scenarios described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0042] The network architecture and business scenarios described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0043] To facilitate understanding of the embodiments of the present application, first Figure 1 The communication system shown in the example is used to describe in detail the Internet of Things system applicable to the embodiment of the present application. Figure 1 A schematic diagram of the architecture of an Internet of Things system applicable to the method provided in an embodiment of the present application.

[0044] Figure 1 This is a schematic diagram of the architecture of the Internet of Things system, which mainly includes: multiple terminals and management devices.

[0045] Multiple terminals and management devices can all be understood as terminal devices.

[0046] The terminal device may be a terminal with data processing and transmission functions, or may be a chip or chip system provided in the terminal device. The terminal device may also be called user equipment (UE), access terminal, subscriber unit, subscriber station, mobile station (MS), mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication device, user agent or user device. The terminal device in the embodiments of the present application can be a mobile phone, a cellular phone, a smartphone, a tablet computer, a wireless data card, a personal digital assistant (PDA), a wireless modem, a handset, a laptop computer, a machine type communication (MTC) terminal, a computer with wireless transceiver function, a virtual reality (VR) terminal, an augmented reality (AR) terminal, a smart home device (for example, a refrigerator, a television, an air conditioner, an electric meter, etc.), an intelligent robot, a robotic arm, a workshop equipment, a wireless terminal in unmanned driving, a wireless terminal in industrial control, a wireless terminal in self-driving, a wireless terminal in telemedicine, a wireless terminal in a smart grid, a wireless terminal in transportation safety, a wireless terminal in a smart city, a wireless terminal in a smart home, a vehicle-mounted terminal, a roadside unit with terminal function, and a wireless terminal in a smart city. unit, RSU), etc., flying equipment (for example, intelligent robots, hot air balloons, drones, airplanes), etc. The terminal device of the present application may also be an on-board module, on-board module, on-board component, on-board chip or on-board unit built into the vehicle as one or more components or units. The terminal device may also be other devices with terminal functions. For example, the terminal device may also be a device that serves as a terminal function in D2D communication. The embodiments of the present application do not limit the device form of the terminal device. The device for realizing the function of the terminal may be a terminal device; it may also be a device that can support the terminal to realize the function, such as a chip system. The device may be installed in the terminal or used in combination with the terminal. In the embodiments of the present application, the chip system may be composed of chips, or may include chips and other discrete devices.

[0047] It can be understood that the multiple terminals may include a first terminal, a second terminal, and a third terminal, etc. These terminals may constitute a group that can share data, that is, the terminals in the group may share data with each other, and the terminals outside the group do not have the authority to share data with the terminals in the group. These terminals may respectively collect the user's physical examination data and share the physical examination data with other terminals in the group. For details, please refer to the relevant introduction of the method embodiment.

[0048] It should be understood that the secure transmission method and sharing method of physical examination data provided in the embodiments of the present application can be applied to Figure 1 The specific implementation of the devices in the system shown, such as the terminal and the management device, can refer to the following method embodiments, which will not be repeated here. It should also be understood that Figure 1 The schematic diagram is only a simplified diagram for ease of understanding. The system may also include other devices. Figure 1 Not drawn.

[0049] The following will be combined Figure 2 The interaction process between the devices in the above system is specifically introduced through a method embodiment. The method provided in the embodiment of the present application can be applied to the above system, such as the interaction between the first terminal and the management device, which is specifically introduced below.

[0050] like Figure 2 As shown, the process of the communication method is as follows:

[0051] S201: A first terminal obtains physical examination data of a first user.

[0052] The user's physical examination data may include at least one of the following items of the first user: basic information (age, gender, occupation, family medical history, living habits (such as smoking, drinking, etc.)), physical examination data (height, weight, chest circumference difference, waist circumference and hip circumference, blood pressure, pulse, heart and lung auscultation, chest and abdominal visual touch and percussion, etc.), laboratory examination data (blood routine: red blood cells, white blood cells, platelets, etc., urine routine: white blood cells, red blood cells, protein, etc., biochemical examination: liver function (such as alanine aminotransferase, aspartate aminotransferase, bilirubin, etc.), kidney function (such as blood creatinine, urea nitrogen, etc.), blood lipids (such as total cholesterol, triglycerides, high-density lipoprotein cholesterol ... The following are the data of medical examinations: (1) blood sugar, (2) tumor markers (such as alpha-fetoprotein, carcinoembryonic antigen, etc.), (3) genetic disease testing (such as thalassemia gene testing, G6PD testing), (4) STD testing (such as mycoplasma, chlamydia, gonococcus, etc.), (5) imaging examination data (chest X-ray, electrocardiogram, B-ultrasound (such as liver, gallbladder, pancreas, spleen, kidney, thyroid, breast, etc.), CT scan, MRI (such as head MRI)) or specialist examination data (internal medicine examination, surgical examination, ophthalmology examination, otolaryngology examination, stomatology examination, gynecological examination (female) andrology examination (male)), etc.

[0053] In an embodiment of the present application, the physical examination data of the user obtained by each terminal in the preconfigured group is M bits in length. The first terminal obtains the actual physical examination data of the first user from the terminal for collecting physical examination data, and the actual physical examination data is converted into a binary expression, i.e., a bit string, on an electronic device (such as the first terminal). For example, the age is 0-99, i.e., represented by a 7-bit bit string, such as 0000000 for age 0, 0000001 for age 1, 0000010 for age 2, 0000011 for age 3, and so on.

[0054] If the length of the actual physical examination data of the first user is N, and N is equal to M, the first terminal determines the actual physical examination data of the first user as the physical examination data of the first user.

[0055] Alternatively, if the length of the actual physical examination data of the first user is N, and N is an integer greater than 1 and less than M, the first terminal fills the bit string used for filling at the end or front end of the actual physical examination data of the first user, for example, the bit string used for filling is filled after the last bit of the actual physical examination data of the first user, and the bit string used for filling is filled before the first bit of the actual physical examination data of the first user. The bit string used for filling is a specific bit string that can be distinguished from the actual physical examination data of the first user.

[0056] In one possible manner, MN is an integer greater than or equal to 3, that is, a larger M can be set so that no matter how the length of the actual physical examination data changes, it differs from M by at least 3 bits to ensure the uniqueness of the bit string used for padding. For example, the bit string used for padding is any of the following:

[0057] 1) The bit string used for padding is the first MN bits of the actual physical examination data of the first user, that is, generally speaking, the probability of two consecutive groups of MN-length bit strings being the same is low (e.g., MN=4, the consecutive MN bits can be the same as 10011001), so as to ensure the uniqueness of the bit string used for padding as much as possible. After receiving the physical examination data of the first user, the management device can strip the bit string used for padding according to whether there are two consecutive groups of bit strings (each group has MN bits) that are the same at the end or the front end, and obtain the actual data.

[0058] 2) The bit string used for padding is to invert the value of each bit in the first MN bits of the actual physical examination data of the first user. For example, if the first MN bits are 11001, the bit string used for padding is 00110. After receiving the physical examination data of the first user, the management device can invert the bit values ​​of two consecutive groups of bit strings (each group of MN bits) at the end or the front end, and strip the bit string used for padding to obtain the actual data. Compared with the above-mentioned method of repeating bits, inverting the values ​​can further ensure the uniqueness of the bit string used for padding.

[0059] 3) The bit string used for padding is the last MN bits of the actual physical examination data of the first user. The specific principle is the same as above and will not be repeated here.

[0060] 4) The bit string used for padding is obtained by inverting the value of each bit in the last MN bits of the actual physical examination data of the first user. The specific principle is the same as above and will not be repeated here.

[0061] 5) The bit string used for filling is the binary expression of the value of s1mods2. Wherein, s1 is greater than s2. If s1 is the decimal expression of the first MN bits of the actual physical examination data of the first user, then s2 is the decimal expression of the last MN bits of the actual physical examination data of the first user; or, if s1 is the decimal expression of the last MN bits of the actual physical examination data of the first user, then s2 is the decimal expression of the first MN bits of the actual physical examination data of the first user. For example, the first MN bits of the actual physical examination data of the first user are 01011, and its decimal expression is 14, and the last MN bits of the actual physical examination data of the first user are 00111, and its decimal expression is 8, 14mod8=6, that is, the bit string used for filling is 00101. If the bit string used for padding is padded at the end, after receiving the physical examination data of the first user, the management device can try to use the front and rear bits to perform the same calculation as the terminal side, such as first using the first 3 bits and the last 6 bits for modulo calculation to calculate the decimal expression of the first 3 bits, and then taking the modulo of the decimal expression of the first 3 bits of the last 6 bits, and judging whether the result is the decimal expression of the last 3 bits of the last 6 bits. If so (that is, the modulo result matches), that is, the last 3 bits of the last 6 bits are the bit string used for padding, and it is stripped off. If not (that is, the modulo result does not match), then use the first 4 bits and the last 8 bits for modulo calculation, and so on, until the modulo result matches. In this way, the uniqueness of the bit string used for padding can be further guaranteed.

[0062] S202: The first terminal extracts first physical examination data from the physical examination data of the first user.

[0063] The data other than the first physical examination data in the physical examination data of the first user is the second physical examination data, and the first physical examination data is sent by the second terminal to the management device.

[0064] For example, the physical examination data of the first user is data of M bits in length, where M is an integer greater than 2. The first terminal generates a first random integer within a preset value range, where the preset value range is greater than 0 and less than M, and the first random integer is an integer with a value of k1. The first terminal extracts the first physical examination data from the physical examination data of the first user according to the value of k1+x1, where x1 is a positive integer with a preset value. If the value of k1+x1 is less than or equal to M, the first physical examination data is data from the k1th bit to the k1+x1th bit in the physical examination data of the first user, and if the value of k1+x1 is greater than M, the first physical examination data is data from the k1th bit to the Mth bit in the physical examination data of the first user. For example, M=16, the physical examination data of the first user is 1001000111100100, and if k1=6, x1=5, that is, the 6th bit to the 11th bit, the first physical examination data is 01111. Of course, the value of x1 needs to be set reasonably to ensure that the first physical examination data is not too much, such as the amount of data is less than 1 / 2 of the physical examination data of the first user.

[0065] The first terminal can use the security mechanism of the PC5 connection to encrypt the first physical examination data and the first random integer, and send them to the second terminal through the PC5 connection between the first terminal and the second terminal (specifically, it is the prior art and will not be repeated here), and the first random integer is then sent by the second terminal to the management device. A PC5 connection is established between any two terminals in the above group. The management device and the first terminal synchronize the value of x1 in advance. Based on the acquisition of the first random integer, the management device can know how many bits of data are extracted to facilitate data restoration and obtain the actual physical examination data of the first user.

[0066] S203: The first terminal sends a collection of physical examination data to the management device.

[0067] The physical examination data collection includes the second physical examination data and partial physical examination data of the second user, where the partial physical examination data of the second user is acquired in advance from a third terminal.

[0068] For example, the first terminal determines a collection of physical examination data based on the second physical examination data and part of the physical examination data of the second user.

[0069] Specifically, the bit length of the partial physical examination data of the second user is L1 bits, and the bit length of the second physical examination data is L2 bits, L1 and L2 are both integers greater than 2, and L1 is smaller than L2; on this basis, the first terminal can divide the partial physical examination data of the second user into P1 segments of data in sequence, and divide the second physical examination data into P2 segments of data in sequence, in a manner in which the length of each segment increases by a power of 2, and P1 and P2 are both integers greater than 1, and P1 is smaller than P2.

[0070] Among them, in the P1 segment data: the first segment data is 1 bit, the second segment data is 2 bits, and so on, the P1 segment data is bits; in the P2 segment data: the first segment data is 1 bit, the second segment data is 2 bits, and so on, the P2 segment data is bits.

[0071] The first terminal embeds the P1 segment data between the P2 segment data, respectively, to obtain a collection of physical examination data. For example, the first terminal embeds the first segment data in the P1 segment data between the first segment data and the second segment data in the P2 segment data, embeds the second segment data in the P1 segment data between the second segment data and the third segment data in the P2 segment data, and so on; until the P1 segment data in the P1 segment data is embedded between the P1 segment data and the P1+1 segment data in the P2 segment data, to obtain a collection of physical examination data. Or; the first terminal embeds the P1 segment data in the P1 segment data between the first segment data and the second segment data in the P2 segment data, embeds the P1-1 segment data in the P1 segment data between the second segment data and the third segment data in the P2 segment data, and so on; until the P1 segment data in the P1 segment data is embedded between the P1 segment data and the P1+1 segment data in the P2 segment data, to obtain a collection of physical examination data. That is to say, through data segmentation, the data of two users can be scrambled in the form of segment embedding, thereby improving the security of data transmission. Even if the data is stolen, because other user data is scrambled in it, if the scrambling mechanism is not stolen, the attacker cannot restore the original user data.

[0072] Since the management device can strip the bit string used for padding, it can know that the remaining data is N bits. On this basis, the management device also knows how many bits of data are extracted from the actual physical examination data of the user of each terminal (such as how many bits of data are extracted from N bits), and it can also know that there are multiple bits of data remaining after the extraction. In this way, the management device can also know that each segment consists of multiple bits of data according to the above-mentioned segmentation mechanism, so that each segment can be determined in the physical examination data collection, and then assembled separately to obtain the second physical examination data and part of the physical examination data of the second user. Then, the management device obtains the first physical examination data according to the data reported by the second terminal in the same way. Since the management device also knows the specific location where the data is extracted, it can perform the inverse process to obtain the actual physical examination data of the first user.

[0073] In summary, by establishing a group that can share data, such as a group that includes at least a first terminal, a second terminal and a third terminal, for any of the terminals, such as taking the first terminal as an example. After the first terminal collects the physical examination data of the first user, the first terminal can extract the first physical examination data from the physical examination data of the first user, and the data in the physical examination data of the first user other than the first physical examination data is the second physical examination data. At this time, the first physical examination data is sent to the management device by the second terminal, and the first terminal can be responsible for sending a collection of physical examination data to the management device, and the collection of physical examination data includes the second physical examination data and part of the physical examination data of the second user, and part of the physical examination data of the second user is obtained from the third terminal in advance. In other words, each terminal can only send part of the user's physical examination data, and the other part of the user's physical examination data is shared with other terminals in the group and sent by other terminals. Therefore, even if a terminal is attacked, the attacker cannot obtain all the user's data, which can reduce the risk of privacy leakage of the user.

[0074] Combination of the above Figure 2 The method provided by the embodiment of the present invention is described in detail. The following is a detailed description of a secure transmission method and sharing system for physical examination data for executing the method provided by the embodiment of the present invention, the system includes a group that can share data, the group includes a first terminal, a second terminal and a third terminal, the system is configured as follows: the first terminal obtains the physical examination data of the first user; the first terminal extracts the first physical examination data from the physical examination data of the first user, the data other than the first physical examination data in the physical examination data of the first user is the second physical examination data, and the first physical examination data is sent to the management device by the second terminal; the first terminal sends a collection of physical examination data to the management device; the collection of physical examination data includes the second physical examination data and part of the physical examination data of the second user, and the part of the physical examination data of the second user is obtained from the third terminal in advance.

[0075] Optionally, the physical examination data of the first user is data of M bits in length, where M is an integer greater than 2, and the first terminal extracts the first physical examination data from the physical examination data of the first user, including: the first terminal generates a first random integer within a preset value range, the preset value range is greater than 0 and less than M, and the first random integer is an integer with a value of k1; the first terminal extracts the first physical examination data from the physical examination data of the first user according to the value of k1+x1, where x1 is a positive integer with a preset value; if the value of k1+x1 is less than or equal to M, the first physical examination data is the data from the k1th bit to the k1+x1th bit in the physical examination data of the first user; if the value of k1+x1 is greater than M, the first physical examination data is the data from the k1th bit to the Mth bit in the physical examination data of the first user.

[0076] Optionally, the physical examination data of the user obtained by each terminal in the preconfigured group are data of M bits in length; the first terminal obtains the physical examination data of the first user, including: the first terminal obtains the actual physical examination data of the first user from the terminal used to collect physical examination data; if the length of the actual physical examination data of the first user is N, and N is an integer greater than 1 and less than M, then the first terminal fills the end or front end of the actual physical examination data of the first user with a bit string for filling; or; if the length of the actual physical examination data of the first user is N, and N is equal to M, then the first terminal determines the actual physical examination data of the first user as the physical examination data of the first user; wherein the bit string used for filling is a specific bit string that can be distinguished from the actual physical examination data of the first user.

[0077] Optionally, the bit string used for padding is padded after the last bit of the actual physical examination data of the first user, and the bit string used for padding is padded before the first bit of the actual physical examination data of the first user.

[0078] Optionally, MN is an integer greater than or equal to 3, and the bit string used for filling is any one of the following: the bit string used for filling is the first MN bits of the actual physical examination data of the first user; the bit string used for filling is the inverted value of each bit in the first MN bits of the actual physical examination data of the first user; the bit string used for filling is the last MN bits of the actual physical examination data of the first user; the bit string used for filling is the inverted value of each bit in the last MN bits of the actual physical examination data of the first user; the bit string used for filling is the binary expression of the value of s1mods2; wherein, s1 is greater than s2, if s1 is the decimal expression of the first MN bits of the actual physical examination data of the first user, then s2 is the decimal expression of the last MN bits of the actual physical examination data of the first user; or, if s1 is the decimal expression of the last MN bits of the actual physical examination data of the first user, then s2 is the decimal expression of the first MN bits of the actual physical examination data of the first user.

[0079] Optionally, the system is also configured as follows: the first terminal uses the security mechanism of the PC5 connection to encrypt the first physical examination data and the first random integer, and sends them to the second terminal via the PC5 connection between the first terminal and the second terminal, and the first random integer is then sent by the second terminal to the management device; a PC5 connection is established between any two terminals in the group.

[0080] Optionally, the system is further configured as follows: the first terminal determines a collection of physical examination data based on the second physical examination data and part of the physical examination data of the second user.

[0081] Optionally, the bit length of the partial physical examination data of the second user is L1 bits, and the second physical examination data is L2 bits, L1 and L2 are both integers greater than 2, and L1 is less than L2; on this basis, the first terminal determines a physical examination data collection based on the second physical examination data and the partial physical examination data of the second user, including: the first terminal divides the partial physical examination data of the second user into P1 segment data in sequence, and divides the second physical examination data into P2 segment data in sequence, in a manner in which the length of each segment increases by a power of 2, P1 and P2 are both integers greater than 1, and P1 is less than P2; wherein, in the P1 segment data: the first segment data is 1 bit, the second segment data is 2 bits, and so on, the P1 segment data is bits; in the P2 segment data: the first segment data is 1 bit, the second segment data is 2 bits, and so on, the P2 segment data is bits; the first terminal embeds the P1 segment data between the P2 segment data respectively to obtain a collection of physical examination data.

[0082] Optionally, the first terminal embeds the P1 segment data between the P2 segment data respectively to obtain a physical examination data collection, including: the first terminal embeds the first segment data in the P1 segment data between the first segment data and the second segment data in the P2 segment data, embeds the second segment data in the P1 segment data between the second segment data and the third segment data in the P2 segment data, and so on; until the P1th segment data in the P1 segment data is embedded between the P1th segment data and the P1+1th segment data in the P2 segment data, to obtain a physical examination data collection; or; the first terminal embeds the P1th segment data in the P1 segment data between the first segment data and the second segment data in the P2 segment data, embeds the P1-1th segment data in the P1 segment data between the second segment data and the third segment data in the P2 segment data, and so on; until the first segment data in the P1 segment data is embedded between the P1th segment data and the P1+1th segment data in the P2 segment data, to obtain a physical examination data collection.

[0083] Figure 3 The electronic device provided in the embodiment of the present invention is a schematic diagram of the structure of the electronic device. For example, the electronic device may be a network device, or a chip (system) or other components or assemblies that can be set in the network device. Figure 3 As shown, the electronic device 400 may include a processor 401. Optionally, the electronic device 400 may further include a memory 402 and / or a transceiver 403. The processor 401 is coupled with the memory 402 and the transceiver 403, such as being connected via a communication bus.

[0084] Combine the following Figure 3 The components of the electronic device 400 are described in detail:

[0085] The processor 401 is the control center of the electronic device 400, and may be a processor or a general term for multiple processing elements. For example, the processor 401 is one or more central processing units (CPUs), or may be application specific integrated circuits (ASICs), or may be one or more integrated circuits configured to implement the embodiments of the present invention, such as one or more microprocessors (digital signal processors, DSPs), or one or more field programmable gate arrays (FPGAs).

[0086] Optionally, the processor 401 can execute various functions of the electronic device 400 by running or executing the software program stored in the memory 402 and calling the data stored in the memory 402, such as executing the above Figure 2 The method shown.

[0087] In a specific implementation, as an embodiment, the processor 401 may include one or more CPUs, such as Figure 3 CPU0 and CPU1 are shown in FIG.

[0088] In a specific implementation, as an embodiment, the electronic device 400 may also include multiple processors. Each of these processors may be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). The processor here may refer to one or more devices, circuits, and / or processing cores for processing data (e.g., computer program instructions).

[0089] The memory 402 is used to store the software program for executing the solution of the present invention, and the execution is controlled by the processor 401. The specific implementation method can refer to the above method embodiment, which will not be repeated here.

[0090] Optionally, the memory 402 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 402 may be integrated with the processor 401, or may exist independently and access the computer through the interface circuit ( Figure 3 (not shown) is coupled to the processor 401, which is not specifically limited in this embodiment of the present invention.

[0091] The transceiver 403 is used for communication with other electronic devices. For example, if the electronic device 400 is a terminal, the transceiver 403 can be used to communicate with a network device, or with another terminal device. For another example, if the electronic device 400 is a network device, the transceiver 403 can be used to communicate with a terminal, or with another network device.

[0092] Optionally, the transceiver 403 may include a receiver and a transmitter ( Figure 3 The receiver is used to implement a receiving function, and the transmitter is used to implement a sending function.

[0093] Optionally, the transceiver 403 may be integrated with the processor 401, or may exist independently and communicate with the electronic device 400 through an interface circuit ( Figure 3 (not shown) is coupled to the processor 401, which is not specifically limited in this embodiment of the present invention.

[0094] Understandably, Figure 3 The structure of the electronic device 400 shown in the figure does not constitute a limitation on the electronic device, and the actual electronic device may include more or fewer components than those shown in the figure, or combine certain components, or arrange the components differently.

[0095] In addition, the technical effects of the electronic device 400 can refer to the technical effects of the methods described in the above method embodiments, which will not be repeated here.

[0096] It should be understood that the processor in the embodiment of the present invention may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0097] It should also be understood that the memory in the embodiments of the present invention may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0098] The above embodiments can be implemented in whole or in part by software, hardware (such as circuits), firmware or any other combination. When implemented by software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, the process or function described in the embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (for example, a floppy disk, a hard disk, a tape), an optical medium (for example, a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0099] It should be understood that the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. A and B can be singular or plural. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship, but it may also indicate an "and / or" relationship. Please refer to the context for specific understanding.

[0100] In the present invention, "at least one" means one or more, and "more than one" means two or more. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can be represented by: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0101] It should be understood that in various embodiments of the present invention, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0102] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0103] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0104] In the several embodiments provided by the present invention, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0105] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0106] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0107] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage media include: various media that can store program codes, such as USB flash drives, mobile hard disks, read-only memories (ROM), random access memories (RAM), magnetic disks or optical disks.

[0108] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A method for securely transmitting and sharing physical examination data, characterized in that: Applied to a first terminal in a group capable of sharing data, the group also including a second terminal and a third terminal, the method comprising: The first terminal obtains the physical examination data of the first user; The first terminal extracts first physical examination data from the physical examination data of the first user, data other than the first physical examination data in the physical examination data of the first user is second physical examination data, and the first physical examination data is sent by the second terminal to a management device; The first terminal sends a collection of physical examination data to the management device; the collection of physical examination data includes the second physical examination data and partial physical examination data of the second user, and the partial physical examination data of the second user is obtained in advance from the third terminal.

2. The method according to claim 1, characterized in that The physical examination data of the first user is data of M bits in length, where M is an integer greater than 2, and the first terminal extracts first physical examination data from the physical examination data of the first user, including: The first terminal generates a first random integer within a preset value range, the preset value range is greater than 0 and less than M, and the first random integer is an integer with a value of k1; The first terminal extracts the first physical examination data from the physical examination data of the first user according to the value of k1+x1, where x1 is a positive integer with a preset value; If the value of k1+x1 is less than or equal to M, the first physical examination data is the data from the k1th bit to the k1+x1th bit in the physical examination data of the first user; if the value of k1+x1 is greater than M, the first physical examination data is the data from the k1th bit to the Mth bit in the physical examination data of the first user.

3. The method according to claim 2, characterized in that Pre-configuring that the user's physical examination data acquired by each terminal in the group is data with a length of M bits; The first terminal obtains the physical examination data of the first user, including: The first terminal obtains actual physical examination data of the first user from a terminal for collecting physical examination data; If the length of the actual physical examination data of the first user is N, and N is an integer greater than 1 and less than M, the first terminal fills the end or front end of the actual physical examination data of the first user with a bit string for padding; or; If the length of the actual physical examination data of the first user is N, and N is equal to M, the first terminal determines the actual physical examination data of the first user as the physical examination data of the first user; The bit string used for filling is a specific bit string that can be distinguished from the actual physical examination data of the first user.

4. The method according to claim 3, characterized in that The bit string for padding is padded after the last bit of the actual physical examination data of the first user, and the bit string for padding is padded before the first bit of the actual physical examination data of the first user.

5. The method according to claim 4, characterized in that MN is an integer greater than or equal to 3, and the bit string used for padding is any of the following: The bit string used for filling is the first MN bits of the actual physical examination data of the first user; The bit string used for padding is obtained by inverting the value of each bit in the first MN bits of the actual physical examination data of the first user; The bit string used for padding is the last MN bits of the actual physical examination data of the first user; The bit string used for padding is obtained by inverting the value of each bit in the last MN bits of the actual physical examination data of the first user; The bit string used for padding is a binary expression of the value of s1mods2; Among them, s1 is greater than s2. If s1 is the decimal expression of the first MN bits of the actual physical examination data of the first user, then s2 is the decimal expression of the last MN bits of the actual physical examination data of the first user; or, if s1 is the decimal expression of the last MN bits of the actual physical examination data of the first user, then s2 is the decimal expression of the first MN bits of the actual physical examination data of the first user.

6. The method according to claim 2, characterized in that The method further comprises: The first terminal uses the security mechanism of the PC5 connection to encrypt the first physical examination data and the first random integer, and sends them to the second terminal through the PC5 connection between the first terminal and the second terminal. The first random integer is then sent by the second terminal to the management device; a PC5 connection is established between any two terminals in the group.

7. The method according to any one of claims 1 to 6, characterized in that The method further comprises: The first terminal determines the physical examination data collection according to the second physical examination data and part of the physical examination data of the second user.

8. The method according to claim 7, characterized in that The bit length of the partial physical examination data of the second user is L1 bits, and the second physical examination data is L2 bits, L1 and L2 are both integers greater than 2, and L1 is less than L2; on this basis, the first terminal determines the physical examination data set according to the second physical examination data and the partial physical examination data of the second user, including: The first terminal divides the partial physical examination data of the second user into P1 data segments in sequence, and divides the second physical examination data into P2 data segments in sequence, in a manner in which the length of each segment increases by a power of 2, where P1 and P2 are both integers greater than 1, and P1 is less than P2; Among them, in the P1 segment data: the first segment data is 1 bit, the second segment data is 2 bits, and so on, the P1 segment data is bits; in the P2 segment data: the first segment data is 1 bit, the second segment data is 2 bits, and so on, the P2 segment data is bits; The first terminal embeds the P1 segment data between the P2 segment data respectively to obtain the physical examination data collection.

9. The method according to claim 7, characterized in that: The first terminal embeds the P1 segment data between the P2 segment data respectively to obtain the physical examination data collection, including: The first terminal embeds the first segment of the P1 segment data between the first segment of the P1 segment data and the second segment of the P2 segment data, embeds the second segment of the P1 segment data between the second segment of the P2 segment data and the third segment of the P2 segment data, and so on; until the P1th segment of the P1 segment data is embedded between the P1th segment of the P2 segment data and the P1+1th segment of the P2 segment data, to obtain the physical examination data collection; or; The first terminal embeds the P1th segment data in the P1 segment data between the 1st segment data and the 2nd segment data in the P2 segment data, embeds the P1-1th segment data in the P1 segment data between the 2nd segment data and the 3rd segment data in the P2 segment data, and so on; until the 1st segment data in the P1 segment data is embedded between the P1th segment data and the P1+1th segment data in the P2 segment data, to obtain the physical examination data collection.

10. A method and system for securely transmitting and sharing physical examination data, characterized in that: The system includes a group capable of sharing data, the group including a first terminal, a second terminal and a third terminal, and the system is configured as follows: The first terminal obtains the physical examination data of the first user; The first terminal extracts first physical examination data from the physical examination data of the first user, data in the physical examination data of the first user other than the first physical examination data is second physical examination data, and the first physical examination data is sent by the second terminal to a management device; The first terminal sends a collection of physical examination data to the management device; the collection of physical examination data includes the second physical examination data and partial physical examination data of the second user, and the partial physical examination data of the second user is obtained in advance from the third terminal.

Images