Medical information security risk management system
By designing a multi-layer identity authentication and real-time monitoring mechanism for medical information security risk management system, the problem of insufficient information privacy and security in medical information systems is solved, and higher information privacy and security are achieved, reducing the risk of information leakage.
Patent Information
- Application Number
- CN202411799140.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-09
- Publication Date
- 2025-03-28
AI Technical Summary
Existing medical information systems have risks in terms of operational stability and information security, and the privacy of patient information is low, which can easily lead to information leakage.
A medical information security risk management system is designed, including preliminary information authentication, deep information authentication, monitoring system, alarm system and information storage. Through segmented hidden information, multi-layer identity authentication and real-time monitoring, the privacy and security of information are improved.
It effectively improves the privacy of patient information, prevents information leakage, and enhances information security through multi-layer authentication and real-time monitoring, and reduces the risk of information leakage.
Smart Images

Figure CN119720274A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of medical information security technology, and in particular to a medical information security risk management system. Background Art
[0002] Medical information systems can help medical institutions realize the process and standardized management of medical services and improve the level of medical services. At the same time, they have also become an important means for medical institutions to conduct scientific and efficient management. At the same time, the informatization of medical services is an international development trend. With the rapid development of information technology, more and more hospitals in China are accelerating the overall construction of HIS systems based on information platforms to improve the service level and core competitiveness of hospitals. Informatization not only improves the work efficiency of doctors, but also medical informatization, that is, the digitization, networking and informatization of medical services. It refers to the use of computer science and modern network communication technology and database technology to provide patient information and management information collection, storage, processing, extraction and data exchange between hospitals and between departments of hospitals, and meet the functional requirements of all authorized users. It can facilitate the query of patient diagnosis records and medication information, and at the same time facilitate the storage of patient medication records, making it more convenient for doctors to query and collect patient information in real time.
[0003] However, there are some risks in the operational stability of the existing medical information system and the security of medical information. The privacy of patient information is low, and patients cannot be effectively protected, which can easily lead to patient information leakage. Summary of the invention
[0004] The purpose of the present invention is to provide a medical information security risk management system to solve the problem in the above background technology that the privacy of patient information is low, the patient cannot be effectively protected, and the patient's information is easily leaked.
[0005] To achieve the above-mentioned object, the present invention provides the following technical solutions: a system for medical information security risk management, comprising a display device, preliminary information authentication, a protection system, deep information authentication and information storage;
[0006] Preliminary information authentication includes: information input, information identification system, information database and basic information display;
[0007] The protection system includes: monitoring system and alarm system;
[0008] Deep information authentication includes: identity authentication, database, comparison and inspection system, deep information display and end command;
[0009] Information storage includes: historical information and automatic locking commands;
[0010] Input the queried information on the surface of the display device, and the information recognition system can verify the information. When the verification is successful, the information is transmitted to the inside of the information database, and the information inside the information database is extracted. At this time, the searched information can be excerpted, so that the excerpted information forms basic information, and the basic information is displayed on the surface of the display device;
[0011] After the information recognition system fails to verify the information, it can transmit the failed information to the monitoring system, and the user is tested by the monitoring system, and the preliminary information authentication is input again. After multiple failures, the monitoring system transmits the information to the alarm system, so that the alarm system reminds the user;
[0012] When the user wants to obtain more information, he needs to pass identity authentication. After the identity authentication, the data is transmitted to the database through face or fingerprint recognition. The user's information is searched in the database, and the user's information is identified through the comparison and inspection system. After the identification is successful, the deep information is displayed through the display device. After the information query is completed, the end command is used;
[0013] After the basic information is displayed, the basic information shows that the information of this authentication is passed to the historical information, and the information is stored through the historical information. At the same time, the deep information shows that the information of this authentication is passed to the historical information and stored. After the historical information is queried many times, the historical information can pass the information to the automatic locking command, and the information is locked through the automatic locking command.
[0014] Preferably, the basic identity information of the inquirer needs to be input in the information input. The information input in the information input is more comprehensive, which can make the basic information display more diverse.
[0015] Preferably, after the information recognition system and the comparison inspection system detect, they both transmit the information to the monitoring system, and the user is photographed through the monitoring system.
[0016] Preferably, during the identity authentication, facial recognition of the user is performed through the monitoring system, or fingerprints or other identification methods are performed on the user.
[0017] Preferably, the information input, basic information display and deep information display are all displayed through a display device, and the information is viewed through the display device.
[0018] Preferably, the historical information can store the information input by the user and the photos taken for identity authentication, and leave browsing records to facilitate subsequent inquiries.
[0019] Preferably, after the comparison and inspection system fails to identify the photo or fingerprint, the comparison and inspection system controls the monitoring system to take a photo of the user through the monitoring system.
[0020] Compared with the prior art, the beneficial effects of the present invention are: the medical information security risk management system:
[0021] 1. Preliminary information authentication and deep information authentication are set up to hide the patient's information in sections, improve the patient's privacy, and prevent the patient's privacy from being leaked. Through the preliminary information authentication, when the preliminary information of the patient who has successfully authenticated the preliminary information needs to be authenticated for deep information authentication, the identity of the tester needs to be identified, and the information of both is stored at the same time for subsequent inquiries;
[0022] 2. A monitoring system and an alarm system are set up. When information is input incorrectly for multiple times, the monitoring system can be controlled to take a photo of the user. At the same time, during identity authentication, the user of the monitoring system is required to take a photo to verify the user's identity, and the user can leave detection information. After the detection fails, it can be broadcast through the alarm system and the information can be passed to the historical information. BRIEF DESCRIPTION OF THE DRAWINGS
[0023] Figure 1 It is a schematic diagram of the composition structure of the present invention;
[0024] Figure 2 It is a schematic diagram of the inspection process structure of the present invention;
[0025] Figure 3 This is a schematic diagram of the preliminary information authentication structure of the present invention. DETAILED DESCRIPTION
[0026] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0027] See also Figure 1-3 ,The present invention provides a technical solution: a system for medical information security risk management, including a display device, preliminary information authentication, a protection system, deep information authentication and information storage;
[0028] Preliminary information authentication includes: information input, information identification system, information database and basic information display;
[0029] The protection system includes: monitoring system and alarm system;
[0030] Deep information authentication includes: identity authentication, database, comparison and inspection system, deep information display and end command;
[0031] Information storage includes: historical information and automatic locking commands;
[0032] Input the queried information on the surface of the display device, and the information recognition system can verify the information. When the verification is successful, the information is transmitted to the inside of the information database, and the information inside the information database is extracted. At this time, the searched information can be excerpted, so that the excerpted information forms basic information, and the basic information is displayed on the surface of the display device;
[0033] After the information recognition system fails to verify the information, it can transmit the failed information to the monitoring system, and the user is tested by the monitoring system, and the preliminary information authentication is input again. After multiple failures, the monitoring system transmits the information to the alarm system, so that the alarm system reminds the user;
[0034] When the user wants to obtain more information, he needs to pass identity authentication. After the identity authentication, the data is transmitted to the database through face or fingerprint recognition. The user's information is searched in the database, and the user's information is identified through the comparison and inspection system. After the identification is successful, the deep information is displayed through the display device. After the information query is completed, the end command is used;
[0035] After the basic information is displayed, the basic information shows that the information of this authentication is passed to the historical information, and the information is stored through the historical information. At the same time, the deep information shows that the information of this authentication is passed to the historical information and stored. After the historical information is queried many times, the historical information can pass the information to the automatic locking command, and the information is locked through the automatic locking command.
[0036] Information can be inputted in the input box through the display device, and the basic condition of the patient can be filled in. At this time, the information input transmits the information to the information recognition system, and the information recognition system recognizes the input information and verifies the information at the same time. The information recognition system transmits the data to the inside of the information database, and searches for the content of the information in the information database. When the information recognition system detects that the information is in the information database, the information can be transmitted to the basic information display. The basic information display can perform authentication detection on the information. At this time, the commonly used information can be selected through the basic information display, so that the deep information can be hidden, and the basic information display can summarize the basic information, transmit the basic information to the display device, and display the basic condition of the patient. When the information recognition system detects that the information is not in the information database, the information recognition system detects and transmits the signal to the monitoring system, and the inputter is observed through the monitoring system. When multiple inputs fail, the monitoring system can control the alarm system to start and warn the user.
[0037] When basic information is displayed, the basic information display can transfer the displayed information to the historical information. At the same time, the basic information display can transfer the input data to the historical information to facilitate subsequent inquiries.
[0038] When it is necessary to further understand the patient, the identity authentication can be performed on the surface of the display device. The identity authentication transmits the information to the monitoring system. At this time, the monitoring system can take a photo of the user, and the user's fingerprint can be identified through the monitoring system. At this time, the signal can be transmitted to the identity authentication. At this time, the identity authentication can retrieve the information inside the database, and the comparison and inspection system can detect whether the user is inside the database. When the comparison and inspection system detects that the user's data is the same as that inside the database, the signal can be transmitted to the deep information display, and the patient's private information can be retrieved through the deep information display. At this time, the query is ended through the end command on the surface of the display device;
[0039] When the comparison inspection system detects that the user's data is different from that in the database, the comparison inspection system can transmit a signal to the monitoring system, and the monitoring system can take a photo of the user, or the identity authentication can directly transmit the data image to the historical information. At this time, the historical information can store the user information. At the same time, the monitoring system transmits a signal to the alarm system, and the alarm system warns the user.
[0040] After the historical information is detected and multiple queries are unified into patient information, the historical information detection can transmit the signal to the automatic locking command, and the patient's information is divided through the automatic locking command to reduce the leakage of the patient's information.
[0041] The basic identity information of the inquirer needs to be entered during information input. The information entered in the information input is more comprehensive, which can make the basic information display more diverse;
[0042] When entering the patient's information, more comprehensive information will appear in the basic information display as the information filled in becomes more comprehensive.
[0043] After the information recognition system and the comparison inspection system detect, the information will be transmitted to the monitoring system, and the user will be photographed through the monitoring system;
[0044] The information recognition system transmits the signal to the monitoring system, which takes a facial image of the user and a facial device, or verifies the user's identity through fingerprint recognition;
[0045] During identity authentication, the user's face is recognized through the monitoring system, or the user's fingerprint or other identification methods are performed;
[0046] During identity authentication, the information of the inquirer can be confirmed in different ways, which can improve the installability of patient information.
[0047] Information input, basic information display and deep information display are all performed through the display device, and the information is viewed through the display device;
[0048] At the information input point, it can be fixed by a display device, and the display device can be used to facilitate the inquirer to view and query.
[0049] The historical information can store the information entered by the user and the photos taken for identity authentication, and leave browsing records for easy subsequent query;
[0050] Historical information can save the information of the inquirer, which is convenient for protecting the patient's information and preventing the leakage of patient information.
[0051] After the comparison inspection system fails to identify the photo or fingerprint, the comparison inspection system controls the monitoring system to take a photo of the user through the monitoring system;
[0052] The comparison inspection system performs facial recognition and fingerprint recognition to confirm the identity of the inquirer. If the inspection fails, the inquirer can be photographed again and identified again.
[0053] Working principle: When using this medical information security risk management system, a protection system, deep information authentication and information storage are set up to improve patient privacy and increase overall practicality.
[0054] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.
Claims
1. A medical information security risk management system, including a display device, preliminary information authentication, a protection system, deep information authentication and information storage; Initial information certification includes: Information input, information recognition system, information database and basic information display; The protection system includes: monitoring system and alarm system; Deep information authentication includes: identity authentication, database, comparison and inspection system, deep information display and end command; Information storage includes: historical information and automatic locking commands; Input the queried information on the surface of the display device, and the information recognition system can verify the information. When the verification is successful, the information is transmitted to the inside of the information database, and the information inside the information database is extracted. At this time, the searched information can be excerpted, so that the excerpted information forms basic information, and the basic information is displayed on the surface of the display device; After the information recognition system fails to verify the information, it can transmit the failed information to the monitoring system, and the user is tested by the monitoring system, and the preliminary information authentication is input again. After multiple failures, the monitoring system transmits the information to the alarm system, so that the alarm system reminds the user; When the user wants to obtain more information, he needs to pass identity authentication. After the identity authentication, the data is transmitted to the database through face or fingerprint recognition. The user's information is searched in the database, and the user's information is identified through the comparison and inspection system. After the identification is successful, the deep information is displayed through the display device. After the information query is completed, the end command is used; After the basic information is displayed, the basic information shows that the information of this authentication is passed to the historical information, and the information is stored through the historical information. At the same time, the deep information shows that the information of this authentication is passed to the historical information and stored. After the historical information is queried many times, the historical information can pass the information to the automatic locking command, and the information is locked through the automatic locking command.
2. A medical information security risk management system according to claim 1, characterized in that: The information input requires input of basic identity information of the inquirer. The information inputted in the information input is more comprehensive, which can make the basic information display more diverse.
3. A medical information security risk management system according to claim 1, characterized in that: After the information recognition system and the comparison inspection system detect, the information is transmitted to the monitoring system, and the user is photographed through the monitoring system.
4. A medical information security risk management system according to claim 1, characterized in that: During the identity authentication, the user's face is recognized through the monitoring system, or the user's fingerprint or other identification methods are performed.
5. The medical information security risk management system according to claim 1, characterized in that: The information input, basic information display and deep information display are all displayed through the display device, and the information is viewed through the display device.
6. A medical information security risk management system according to claim 1, characterized in that: The historical information can store the information input by the user and the photos taken for identity authentication, and leave a browsing record to facilitate subsequent query.
7. A medical information security risk management system according to claim 1, characterized in that: After the comparison and inspection system fails to identify the photo or fingerprint, the comparison and inspection system controls the monitoring system to take a photo of the user through the monitoring system.