Medical data security monitoring method and system based on Internet

Abstract

The invention provides a medical data security monitoring method and system based on the Internet. The method comprises the steps that medical data are stored in a segmented mode according to a preset data size threshold value T1; assigning different storage priorities to the data segments stored in the first storage area of the local server and the second storage area of the cloud server; judging whether the storage duration t of the data segment is greater than a preset migration threshold T2, if so, migrating the data segment stored in the first storage area of the local server to a third storage area of the cloud server, or migrating the data segment from the second storage area of the cloud server to a fourth storage area of the local server; and performing data integrity verification on the migrated data segments. Through the scheme of the invention, the difficulty of illegal statistic behaviors can be improved.

Description

Technical Field

[0001] The present application relates to the field of medical data processing technology, and specifically to a medical data security monitoring method and system based on the Internet. Background Art

[0002] Internet-based medical data security monitoring aims to protect the privacy and integrity of data in medical institutions. In addition, by building a multi-level security protection system, it can effectively identify and prevent various risk factors in network transmission, storage and access, and ensure that doctor and patient information is not leaked or tampered with. However, there are also some problems in practical applications, such as how to monitor illegal prescription behavior. Due to the complexity and variability of statistical data in the medical environment, there is no absolutely clear boundary between normal operational analysis and suspicious data aggregation; without affecting the daily work efficiency of the hospital, accurately capturing abnormal activities requires more sophisticated design and higher technical requirements. Summary of the invention

[0003] In view of this, the present invention provides an Internet-based medical data security monitoring method and system, which at least partially solve the problems existing in the prior art.

[0004] The present application provides an Internet-based medical data security monitoring method, comprising: The medical data is segmented and stored according to a preset data volume threshold value T1, wherein the data segments whose data volume is less than or equal to the threshold value T1 are stored in the first storage area of ​​the local server, and the data segments whose data volume is greater than the threshold value T1 are stored in the second storage area of ​​the cloud server; Different storage priorities are assigned to the data segments stored in the first storage area of ​​the local server and the second storage area of ​​the cloud server, wherein the data segment priority P1 in the first storage area of ​​the local server is higher than the data segment priority P2 in the second storage area of ​​the cloud server, and when a data access request is detected, the access verification is performed on the data segment with a higher priority first; Determine whether the storage time t of the data segment is greater than a preset migration threshold T2. If so, migrate the data segment stored in the first storage area of ​​the local server to the third storage area of ​​the cloud server, or migrate from the second storage area of ​​the cloud server to the fourth storage area of ​​the local server; Perform data integrity check on the migrated data segments to monitor and trace illegal behaviors.

[0005] Furthermore, the migration threshold T2 is set according to the security level and update frequency of the data.

[0006] Further, data integrity verification of the migrated data segment includes comparing whether the hash value H of the data segment is equal to the pre-stored standard hash value H0. If they are not equal, it is determined that there is a risk of data tampering, a security alarm is triggered, and relevant data information is recorded.

[0007] Further, after the step of storing the medical data in segments according to a preset data volume size threshold T1, the following steps are also included: Determine the storage density D of the data segment; Classify the data segments according to the storage density D. The data segments with a storage density greater than the preset density threshold D0 are stored in the fifth storage area of the local server, and the data segments with a storage density less than or equal to the preset density threshold D0 are stored in the sixth storage area of the cloud server; Assign different storage redundancies R to the data segments stored in the fifth storage area of the local server and the sixth storage area of the cloud server. The redundancy of the data segments in the fifth storage area of the local server is R1, and the redundancy of the data segments in the sixth storage area of the cloud server is R2, and R1 < R2. When a data loss risk is detected, data recovery is performed according to the redundancy; Judge whether the storage frequency f of the data segment is greater than the preset frequency threshold F1. If so, migrate the data segment stored in the fifth storage area of the local server to the seventh storage area of the cloud server, or migrate it from the sixth storage area of the cloud server to the eighth storage area of the local server.

[0008] Further, after the step of assigning different storage priorities to the data segments stored in the first storage area of the local server and the second storage area of the cloud server, the following steps are also included: Calculate the access popularity H of the data segment; Sort the data segments according to the access popularity H, and the data segments with high access popularity are preferentially processed in the data access request queue; Set the storage validity period E of the data segment. When the storage duration t is greater than the storage validity period E, upgrade the encryption intensity of the data segment, and the data segment after the encryption intensity upgrade is stored in the ninth storage area of the local server or the tenth storage area of the cloud server; Judge whether the access source O of the data segment belongs to the preset trusted source set Ω. If it belongs to the trusted source set, normal data access verification is performed. If it does not belong to the trusted source set, increase the difficulty coefficient K of the data access verification.

[0009] Further, after the step of judging whether the storage duration t of the data segment is greater than the preset migration threshold T2, the following steps are also included: Calculate the storage cost C of the data segment; Data segments are screened based on the storage cost C. Data segments with storage costs higher than the preset cost threshold C0 are migrated first. Back up the migrated data segment, and store the backup data in the eleventh storage area of ​​the local server and the twelfth storage area of ​​the cloud server. The synchronization update cycle of the backup data and the original data is T3; It is determined whether the access frequency change rate of the data segment is greater than a preset change rate threshold F2. If so, the storage location and storage priority of the data segment are adjusted.

[0010] Furthermore, the method further comprises: When the storage density D is greater than or equal to the preset density threshold D0 and the storage time t is greater than the preset time threshold T4, the data segment is stored in the thirteenth storage area of ​​the local server, otherwise it is stored in the fourteenth storage area of ​​the cloud server; Different storage access restrictions L are respectively assigned to the data segments stored in the thirteenth storage area of ​​the local server and the fourteenth storage area of ​​the cloud server, where the data segment access restriction in the thirteenth storage area of ​​the local server is L1, and the data segment access restriction in the fourteenth storage area of ​​the cloud server is L2, and L1>L2; It is determined whether the number of storage location changes M of the data segment is greater than a preset change number threshold M0. If so, the data encryption algorithm of the data segment is upgraded.

[0011] Furthermore, the method further comprises: Different preset density thresholds De0 are set for data segments of different departments. When the storage density D is greater than or equal to the corresponding preset density threshold De0, the data segment is stored in the fifteenth storage area of ​​the local server, otherwise it is stored in the sixteenth storage area of ​​the cloud server; Different storage audit levels A are assigned to the data segments stored in the fifteenth storage area of ​​the local server and the sixteenth storage area of ​​the cloud server, respectively. The audit level of the data segments in the fifteenth storage area of ​​the local server is A1, and the audit level of the data segments in the sixteenth storage area of ​​the cloud server is A2, and A1>A2; Determine whether the authority level Pd of the doctor to whom the data segment belongs is greater than or equal to the preset authority condition Pd0. If so, the data segment is allowed to perform some sensitive data operations, otherwise, sensitive data operations are prohibited.

[0012] The present application discloses an Internet-based medical data security monitoring system, comprising: A segmentation module is used to store the medical data in segments according to a preset data volume threshold value T1, wherein data segments whose data volume is less than or equal to the threshold value T1 are stored in a first storage area of ​​the local server, and data segments whose data volume is greater than the threshold value T1 are stored in a second storage area of ​​the cloud server; A priority determination module is used to assign different storage priorities to the data segments stored in the first storage area of ​​the local server and the second storage area of ​​the cloud server, wherein the data segment priority P1 of the first storage area of ​​the local server is higher than the data segment priority P2 of the second storage area of ​​the cloud server, and when a data access request is detected, the access verification is performed preferentially on the data segment with a high priority; A judgment module, used to judge whether the storage time t of the data segment is greater than a preset migration threshold T2, and if so, migrate the data segment stored in the first storage area of ​​the local server to the third storage area of ​​the cloud server, or migrate from the second storage area of ​​the cloud server to the fourth storage area of ​​the local server; The integrity check module is used to perform data integrity check on the migrated data segments in order to monitor and trace illegal behaviors.

[0013] The present invention provides a method and system for monitoring medical data security based on the Internet, the method comprising: storing medical data in segments according to a preset data volume threshold value T1; assigning different storage priorities to data segments stored in a first storage area of ​​a local server and a second storage area of ​​a cloud server; judging whether the storage duration t of the data segment is greater than a preset migration threshold value T2, if so, migrating the data segment stored in the first storage area of ​​the local server to a third storage area of ​​the cloud server, or migrating from the second storage area of ​​the cloud server to a fourth storage area of ​​the local server; and performing data integrity verification on the migrated data segment. Through the scheme of the present invention, the difficulty of illegal party behavior can be increased. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] In order to more clearly illustrate the technical solutions of the exemplary implementation methods of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the embodiments of the present disclosure and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0015] Figure 1 It is a flow chart of the Internet-based medical data security monitoring method of the present application; Figure 2 It is a flowchart of the steps after the medical data is segmented and stored according to the preset data volume threshold value T1; Figure 3 is a flow chart of the steps after assigning different storage priorities to the data segments stored in the first storage area of ​​the local server and the second storage area of ​​the cloud server; Figure 4is a flowchart of the steps after determining whether the storage time t of the data segment is greater than the preset migration threshold T2; Figure 5 is a flow chart of a method for Internet-based medical data security monitoring according to another embodiment of the present application; Figure 6 is a flow chart of a medical data security monitoring method based on the Internet according to another embodiment of the present application; Figure 7 It is a structural block diagram of the Internet-based medical data security monitoring system of the present application. DETAILED DESCRIPTION

[0016] In order to make the purpose, technical solutions and advantages of the embodiments of the present disclosure more clear, the embodiments of the present disclosure are further described in detail in combination with the embodiments and drawings. The schematic implementation methods of the embodiments of the present disclosure and their descriptions are only used to explain the embodiments of the present disclosure and are not intended to limit the embodiments of the present disclosure.

[0017] Next, with reference to the accompanying drawings, the Internet-based medical data security monitoring method of the present invention is described. This method realizes effective monitoring of illegal prescription behavior by performing multiple key steps such as segmented storage, priority setting, dynamic migration and integrity verification of medical data. These measures can improve the security and integrity of data, ensure that key information within hospitals or medical institutions is not abused, and especially prevent the occurrence of illegal prescription (i.e., counting doctors' prescriptions for commercial promotion or other non-medical purposes).

[0018] In addition, it should be understood that in the present application, storage areas belonging to the local server, such as the first storage area, the fourth storage area, etc., can be different storage areas, or they can be subsets. For example, the fourth storage area can be a subset of the first storage area, or it can be a separate storage area. The storage area of ​​the cloud server is similar.

[0019] First, refer to Figure 1 , describing the Internet-based medical data security monitoring method of the present application.

[0020] S101: The medical data is segmented and stored according to a preset data size threshold T1, wherein data segments with a data size less than or equal to the threshold T1 are stored in a first storage area of ​​the local server, and data segments with a data size greater than the threshold T1 are stored in a second storage area of ​​the cloud server.

[0021] Specifically, it is necessary to first evaluate the data volume of medical data, which can be done by data byte length or other appropriate data volume measurement methods. Then, the data segments with a data volume less than or equal to the threshold T1 are stored in the first storage area of ​​the local server, and the data segments with a data volume greater than the threshold T1 are stored in the second storage area of ​​the cloud server. The setting of the preset data volume threshold T1 is the key, which is determined according to the type and importance of the medical data. For example, for some conventional patient basic information data, such as name, age, gender, etc., the data volume is relatively small and the importance is relatively low. A smaller T1 value can be set to store this part of the data in the first storage area of ​​the local server. For some complex medical imaging data, genetic testing data, etc., the data volume is huge and contains important diagnostic information. A larger T1 value is set to store this data in the second storage area of ​​the cloud server. Through such a differentiated storage method, it is more difficult for illegal unified party behaviors to obtain complete data. Because it is difficult for illegal unified party actors to obtain a large amount of data locally and in the cloud at the same time, and the decentralized storage of data also reduces the risk of data leakage.

[0022] For example, in one embodiment, the electronic medical record system of a hospital adopts this segmented storage method. For the patient's daily outpatient records, the data volume is small and is stored in the first storage area of ​​the local server. For the patient's surgical video records, the data volume is huge and is stored in the second storage area of ​​the cloud server. In this way, even if an illegal party actor obtains the data of the local server, it cannot obtain the complete medical data, thereby effectively protecting the privacy of the patient and the security of the medical data.

[0023] S102: Assign different storage priorities to the data segments stored in the first storage area of ​​the local server and the second storage area of ​​the cloud server, respectively, wherein the data segment priority P1 in the first storage area of ​​the local server is higher than the data segment priority P2 in the second storage area of ​​the cloud server, and when a data access request is monitored, access verification is performed preferentially on the data segment with a higher priority.

[0024] After completing the data segment storage, different storage priorities are assigned to the data segments stored in the first storage area of ​​the local server and the second storage area of ​​the cloud server. The data segment priority of the first storage area of ​​the local server is P1, and the data segment priority of the second storage area of ​​the cloud server is P2, and P1 is greater than P2. When a data access request is detected, the access verification of the high-priority data segment is prioritized. The purpose of this is to focus on protecting key data during data access by setting different storage priorities.

[0025] Specifically, the data segments stored in the local server are usually relatively important and frequently accessed data, so they are given a higher priority P1. When a data access request occurs, the system will give priority to access verification of these high-priority data segments to ensure that only legitimate access requests can obtain these key data. Although the data segments stored in the cloud server have a large amount of data, their importance and access frequency are relatively low, so they are given a lower priority P2. Through this priority setting, the security of key data can be more effectively protected under limited resource conditions. For example, in one embodiment, in a medical data storage system of a medical institution, the patient diagnosis report data segments stored in the local server are given a higher priority P1. When a doctor needs to review the patient's diagnosis report, the system will give priority to access verification of these data segments to ensure that the doctor can quickly obtain the required key data. The patient's historical imaging data segments stored in the cloud server are given a lower priority P2, and access verification will only be performed when necessary, thereby avoiding unnecessary waste of resources.

[0026] S103: Determine whether the storage duration t of the data segment is greater than the preset migration threshold T2. If so, migrate the data segment stored in the first storage area of ​​the local server to the third storage area of ​​the cloud server, or migrate from the second storage area of ​​the cloud server to the fourth storage area of ​​the local server.

[0027] Specifically, it is determined whether the storage time t of the data segment is greater than the preset migration threshold T2. If the storage time t of the data segment is greater than the preset migration threshold T2, the data segment stored in the first storage area of ​​the local server is migrated to the third storage area of ​​the cloud server, or from the second storage area of ​​the cloud server to the fourth storage area of ​​the local server. The preset migration threshold T2 is set according to the security level and update frequency of the data. By dynamically migrating the data and changing the storage location of the data, it is difficult for illegal party behaviors to predict the storage location of the data, thereby improving the accuracy of monitoring illegal party behaviors.

[0028] Specifically, when a data segment is stored in a local server for too long, the risk of data leakage may increase. At this time, migrating the data segment to the third storage area of ​​the cloud server can take advantage of the high security and large-scale storage advantages of the cloud server to further protect the security of the data. On the contrary, when a data segment is stored in a cloud server for too long, the access efficiency of the data may be reduced. At this time, migrating the data segment to the fourth storage area of ​​the local server can increase the access speed of the data and meet the needs of medical services. For example, in one embodiment, in a medical data storage system of a hospital, after the patient's daily examination data is stored in the local server for a period of time, if the storage time exceeds the preset migration threshold T2, it will be migrated to the third storage area of ​​the cloud server. In this way, even if the illegal unified prescription actor obtains the data of the local server, it cannot obtain complete medical data, thereby effectively improving the accuracy of monitoring illegal unified prescription behavior.

[0029] S104: Perform data integrity check on the migrated data segments to monitor and trace illegal unified party behaviors.

[0030] Specifically, the migrated data segment is subjected to data integrity verification. The specific method is to verify by comparing the hash value H of the data segment with the pre-stored standard hash value H0. If the hash value H is not equal to the pre-stored standard hash value H0, it is determined that there is a risk of data tampering, triggering a security alarm and recording relevant data information to monitor and trace illegal unified party behavior. The hash value is a string of fixed length, which is calculated by the data segment through a hash algorithm. When any slight change occurs to the data segment, its hash value will change greatly. Therefore, by comparing the hash value, it is possible to effectively detect whether the data has been tampered with. For example, in one embodiment, in a medical data storage system of a medical institution, after the patient's data segment is migrated to the third storage area of ​​the cloud server, the system will automatically calculate its hash value H and compare it with the pre-stored standard hash value H0. If it is found that the hash value H is not equal to the pre-stored standard hash value H0, the system will immediately trigger a security alarm and record relevant data information, such as the storage location of the data segment, access records, etc. In this way, even if illegal actors tamper with the data, it can be discovered and traced in time, thereby effectively protecting the security of medical data.

[0031] like Figure 2 As shown, in the present application, after the step of storing the medical data in segments according to the preset data volume threshold T1, the following steps are also included.

[0032] S201: Determine the storage density D of the data segment. In a specific embodiment, the storage density D can be calculated according to the formula D = S / V, where S represents the data volume of the data segment, usually in bytes (Byte), and the range can be from KB to TB, etc.; V represents the storage space volume of the data segment, usually measured by the number of storage units, etc. This formula is used to measure the tightness of data in the storage space, so as to perform more refined classification management on the data segment. For example, in one embodiment, the data volume S of a certain data segment is 10MB, and the storage space volume V is 10,000 storage units, then its storage density D = 10MB / 10,000 = 0.001MB / storage unit.

[0033] S202: Classify the data segments according to the storage density D. The data segments with a storage density greater than the preset density threshold D0 are stored in the fifth storage area of the local server, and the data segments with a storage density less than or equal to the preset density threshold D0 are stored in the sixth storage area of the cloud server.

[0034] Specifically, the preset density threshold D0 can be set according to the historical data storage situation and the performance of the storage device. For example, historical data shows that for data segments with a storage density above 0.002MB / storage unit, their storage efficiency and security need to be focused on. At the same time, considering factors such as the read and write speed and storage capacity of the storage device, D0 is determined comprehensively. The data segments with a storage density greater than D0 are stored in the fifth storage area of the local server, and those less than or equal to D0 are stored in the sixth storage area of the cloud server. For example, if D0 is set to 0.002MB / storage unit, the data segment with the calculated storage density D of 0.001MB / storage unit will be stored in the sixth storage area of the cloud server.

[0035] S203: Assign different storage redundancies R to the data segments stored in the fifth storage area of the local server and the sixth storage area of the cloud server. The redundancy of the data segments in the fifth storage area of the local server is R1, and the redundancy of the data segments in the sixth storage area of the cloud server is R2, and R1 < R2. When the risk of data loss is detected, data recovery is performed according to the redundancy.

[0036] Specifically, different storage redundancy degrees R are assigned to the data segments stored in the fifth storage area of the local server and the sixth storage area of the cloud server. The redundancy degree of the data segment in the fifth storage area of the local server is R1, and the redundancy degree of the data segment in the sixth storage area of the cloud server is R2, and R1 < R2. When the data loss risk is detected, data recovery is performed according to the redundancy degree. For example, the redundancy degree R1 of the data segment in the fifth storage area of the local server is set to 1, that is, only one data copy is retained; the redundancy degree R2 of the data segment in the sixth storage area of the cloud server is set to 3, that is, three data copies are retained. This setting is because the data segments stored in the local server usually have a relatively high access frequency and a relatively small data volume. To ensure access efficiency and storage cost, the redundancy degree is relatively low; the data segments stored in the cloud server have a large data volume and a relatively low access frequency. Through a higher redundancy degree, key data can be more effectively recovered in case of data loss, increasing the obstacle to illegal data access behavior.

[0037] S204: Determine whether the storage frequency f of the data segment is greater than a preset frequency threshold F1. If so, migrate the data segment stored in the fifth storage area of the local server to the seventh storage area of the cloud server, or migrate it from the sixth storage area of the cloud server to the eighth storage area of the local server.

[0038] Specifically, determine whether the storage frequency f of the data segment is greater than a preset frequency threshold F1. The frequency threshold F1 is set according to the usage frequency and importance of the data. For example, for some frequently accessed and important patient diagnosis data, its usage frequency is high and its importance is great, and F1 is set to 10 times a day; for some infrequently accessed patient historical physical examination data, F1 is set to 1 time a week. If the storage frequency f is greater than F1, migrate the data segment in the fifth storage area of the local server to the seventh storage area of the cloud server, or migrate it from the sixth storage area of the cloud server to the eighth storage area of the local server. For example, if the storage frequency f of a certain data segment is 15 times a day, which is greater than the preset frequency threshold F1 of 10 times a day, the data migration operation will be triggered. By migrating the data based on the storage frequency, it is difficult for illegal data access behavior to grasp the storage rule of the data, thereby improving the accuracy of monitoring illegal data access behavior.

[0039] In addition, as Figure 3 shown, in this application, after the step of assigning different storage priorities to the data segments stored in the first storage area of the local server and the second storage area of the cloud server, the following steps are further included.

[0040] S301: Calculate the access heat H of the data segment. After assigning different storage priorities to the data segments stored in the first storage area of ​​the local server and the second storage area of ​​the cloud server, the access heat H of the data segment needs to be calculated first. There are many methods for calculating the access heat H, for example, a comprehensive calculation can be performed based on parameters such as the number of accesses, access frequency, and access time interval of the data segment within a certain period of time. Specifically, a time window can be set to count the number of times the data segment is accessed within the time window, while considering the time interval of each access. The more accesses and the shorter the time interval, the higher the access heat H of the data segment. For example, in one embodiment, for a medical data segment A, it has been accessed 10 times in the past hour, and the average time interval between each access is 5 minutes, then its access heat H can be calculated as H=10 / 5=2. By calculating the access heat H, the popularity of the data segment can be quantitatively evaluated, providing a basis for subsequent sorting and access control.

[0041] S302: Sort the data segments according to the access heat H, and give priority to the data segments with high access heat in the data access request queue. After calculating the access heat H of the data segment, sort the data segments according to the access heat H. The specific operation is to arrange all the data segments from high to low according to their access heat H to form a sorted list. The data segments with high access heat are ranked in front in the sorted list, and the data segments with low access heat are ranked in the back. For example, in one embodiment, there are three data segments A, B, and C, and their access heat H are 2, 3, and 1 respectively, then the sorted order is B, A, C. By sorting the data segments, it can be determined which data segments are currently the most concerned, so that the data segments with high access heat are given priority in the data access request queue, thereby improving the efficiency and response speed of data access.

[0042] S303: Set the storage validity period E of the data segment. When the storage time t is greater than the storage validity period E, the encryption strength of the data segment is upgraded. The data segment after the encryption strength upgrade is stored in the ninth storage area of ​​the local server or the tenth storage area of ​​the cloud server. Next, set the storage validity period E of the data segment. The storage validity period E is a time value pre-set according to factors such as the type, importance and business needs of the data segment, which indicates the length of time the data segment is valid in the storage system. When the storage time t of the data segment is greater than the storage validity period E, it is considered that the data segment has exceeded its validity period. For example, in one embodiment, for the basic information data segment of a certain type of patient, the storage validity period E is set to 1 year. When the storage time of the data segment exceeds 1 year, it is necessary to upgrade its encryption strength. By setting the storage validity period E, the life cycle of the data segment can be managed to ensure the security and reliability of the data within the validity period, and at the same time provide a trigger condition for upgrading the encryption strength of the data.

[0043] S304: Determine whether the access source O of the data segment belongs to the preset trusted source set Ω. If it does, perform data access verification normally. If it does not, increase the difficulty coefficient K of data access verification. Finally, determine whether the access source O of the data segment belongs to the preset trusted source set Ω. The preset trusted source set Ω is a set of sources that are allowed to access the data segment in advance according to the security policy and business requirements of medical data, such as certain specific departments within the hospital, doctors' work terminals, etc. The specific operation is to compare the source of the access request with the trusted source set Ω. If the access source O belongs to the trusted source set Ω, perform data access verification normally and allow the access request to pass; if the access source O does not belong to the trusted source set Ω, increase the difficulty coefficient K of data access verification, such as adding additional verification steps, increasing the complexity of verification, etc., to prevent illegal access. For example, in one embodiment, the trusted source set Ω includes work terminals of departments such as internal medicine, surgery, and laboratory of the hospital. When an access request from an external network attempts to access a data segment, since its access source O does not belong to the trusted source set Ω, the system will increase the difficulty coefficient K of data access verification and require the visitor to provide more identity authentication information, thereby effectively preventing illegal party behavior.

[0044] like Figure 4 As shown, in the present application, after the step of determining whether the storage duration t of the data segment is greater than the preset migration threshold T2, the following steps are also included.

[0045] S401: Calculate the storage cost C of the data segment. Specifically, after determining whether the storage duration t of the data segment is greater than the preset migration threshold T2, first calculate the storage cost C of the data segment. The specific operation is to calculate by the formula C=c×S / B, where c represents the storage cost coefficient per unit data volume, which is usually determined according to factors such as the hardware cost and maintenance cost of the storage device, ranging from a few yuan to tens of yuan per GB, and the optimal value needs to be combined with market conditions and hospital budget; S is the data volume of the data segment, in bytes, ranging from KB to TB, etc.; B is the storage efficiency of the storage device, which is usually measured by the amount of data that can be read and written per second, ranging from MB / s to GB / s, etc. For example, in one embodiment, the data volume S of a data segment is 10GB, the storage efficiency B of the storage device is 100MB / s, and the storage cost coefficient c per unit data volume is 0.1 yuan / GB, then its storage cost C=0.1×10 / 100=0.01 yuan. This formula is used to quantify the cost consumption of data segments during the storage process so as to more reasonably screen and manage the data segments.

[0046] S402: Filter the data segments according to the storage cost C, and the data segments with storage costs higher than the preset cost threshold C0 are migrated first. Filter the data segments according to the calculated storage cost C. The specific operation is to filter out the data segments with storage costs higher than the preset cost threshold C0 and give priority to migration. The preset cost threshold C0 is set according to the hospital's storage budget and data management strategy. For example, if the hospital hopes to control the storage cost within 0.05 yuan per GB, C0 is set to 0.05 yuan. In this way, the data segment with the calculated storage cost C of 0.01 yuan will not be migrated temporarily because it is lower than the preset cost threshold C0; while the storage cost C of another data segment is 0.06 yuan, which is higher than the preset cost threshold C0, and it is migrated first. By filtering the data segments, data segments with higher storage costs can be processed first, the utilization of storage resources can be optimized, and the storage management efficiency of the hospital can be improved.

[0047] S403: Back up the migrated data segments, and the backup data is stored in the eleventh storage area of ​​the local server and the twelfth storage area of ​​the cloud server. The synchronization update cycle of the backup data and the original data is T3. Specifically, a copy of the migrated data segment is stored in the designated storage areas locally and in the cloud, respectively. The synchronization update cycle of the backup data and the original data is T3, for example, T3 is set to once a day. In this way, when the original data is updated, the backup data will be synchronized and updated at a specified time every day to ensure the timeliness and accuracy of the backup data. Through data backup and synchronous update, it is possible to quickly restore the data when it is damaged by illegal unified prescription behavior, thereby ensuring the integrity and availability of medical data. For example, in one embodiment, the medical data of a hospital was backed up after migration. When it was found that the data was damaged by illegal unified prescription behavior, the original data was quickly restored through the backup data to ensure the normal operation of the hospital.

[0048] S404: Determine whether the access frequency change rate of the data segment is greater than the preset change rate threshold F2. If so, adjust the storage location and storage priority of the data segment. Specifically, calculate the access frequency change rate of the data segment within a certain period of time, for example, by comparing the current access frequency with the average access frequency in the past period of time, calculate the change rate. The preset change rate threshold F2 is set according to the hospital's business needs and data security policies, for example, F2 is set to 50%. When the access frequency change rate of the data segment is greater than F2, it is considered that there may be potential illegal unified prescription behavior. For example, the access frequency of a data segment averaged 10 times per day in the past week, and the current access frequency is 15 times per day. The change rate is (15-10) / 10=50%, which is equal to the preset change rate threshold F2, and the adjustment mechanism is triggered. By monitoring the access frequency change rate, potential illegal unified prescription behaviors can be discovered in a timely manner and measures can be taken to improve the hospital's data security protection capabilities.

[0049] In addition, when it is determined that the access frequency change rate of the data segment is greater than the preset change rate threshold F2, the storage location and storage priority of the data segment are adjusted. The specific operation is to migrate the data segment from the current storage location to other storage locations, such as migrating from a local server to a cloud server, or from a cloud server to a local server. At the same time, adjust the storage priority of the data segment, for example, adjust the storage priority from P1 to P2, or from P2 to P1. By adjusting the storage location and storage priority, the access path and access difficulty of the data segment can be changed, further increasing the difficulty of illegal unified prescription behavior. For example, in one embodiment, a data segment of a hospital was migrated from a local server to a cloud server because the access frequency change rate was greater than a preset threshold, and the storage priority was adjusted, effectively preventing the occurrence of illegal unified prescription behavior.

[0050] Next, refer to Figure 5 , describing another embodiment of the present application.

[0051] S501: When the storage density D is greater than or equal to the preset density threshold D0 and the storage time t is greater than the preset time threshold T4, the data segment is stored in the thirteenth storage area of ​​the local server, otherwise it is stored in the fourteenth storage area of ​​the cloud server. Specifically, the storage density D and storage time t of the data segment are first obtained, and then compared with the preset density threshold D0 and time threshold T4. For example, in one embodiment, the storage density D of a data segment is 0.002MB / storage unit, the preset density threshold D0 is 0.001MB / storage unit; the storage time t is 30 days, and the preset time threshold T4 is 15 days. Since D>D0 and t>T4, the data segment is stored in the thirteenth storage area of ​​the local server. By introducing the storage time factor, data storage can be arranged more reasonably, and the difficulty of obtaining long-term storage data by illegal unified behavior is increased.

[0052] S502: Assign different storage access restrictions L to the data segments stored in the thirteenth storage area of ​​the local server and the fourteenth storage area of ​​the cloud server, respectively. The data segment access restriction of the thirteenth storage area of ​​the local server is L1, and the data segment access restriction of the fourteenth storage area of ​​the cloud server is L2, and L1>L2. Specifically, according to the storage location of the data segment, the corresponding access restriction parameters are set. For example, in one embodiment, the data segment access restriction L1 of the thirteenth storage area of ​​the local server requires double identity authentication for each access, including entering a user name and password, and receiving a verification code via SMS; the data segment access restriction L2 of the fourteenth storage area of ​​the cloud server requires only entering a user name and password for each access. When a data access request is detected, corresponding access control is performed according to the access restriction. By setting different storage access restrictions, critical data can be protected more effectively.

[0053] S503: Determine whether the number of storage location changes M of the data segment is greater than the preset change number threshold M0. If so, upgrade the data encryption algorithm for the data segment. Specifically, record the number of location changes of the data segment during the storage process, and then compare it with the preset change number threshold M0. For example, in one embodiment, a data segment is migrated from the thirteenth storage area of ​​the local server to the fourteenth storage area of ​​the cloud server during the storage process, and then migrated from the fourteenth storage area of ​​the cloud server to the thirteenth storage area of ​​the local server. The number of storage location changes M is 2, and the preset change number threshold M0 is 1. Since M>M0, the data encryption algorithm is upgraded for the data segment. By frequently changing the storage location to trigger the encryption algorithm upgrade, the security of the data can be enhanced, making it more difficult for illegal unified party behaviors to obtain valid data. For example, in one embodiment, the data segment was originally encrypted using the AES-128 encryption algorithm. Since the number of storage location changes M is greater than the preset threshold M0, it is upgraded to the AES-256 encryption algorithm. This can further improve the security of the data and prevent illegal unified party behaviors from obtaining valid data.

[0054] Next, refer to Figure 6 , describing another embodiment of the present application.

[0055] S601: Set different preset density thresholds De0 for data segments of different departments. When the storage density D is greater than or equal to the corresponding preset density threshold De0, the data segment is stored in the fifteenth storage area of ​​the local server, otherwise it is stored in the sixteenth storage area of ​​the cloud server. Specifically, the corresponding density threshold is determined according to the data characteristics and business needs of each department. For example, for the data segment of the imaging department, since its data volume is usually large and the storage density requirement is high, a higher preset density threshold De0 can be set; while for the data segment of the general internal medicine department, the data volume is relatively small and the storage density requirement is low, a lower preset density threshold De0 can be set. When the storage density D is greater than or equal to the corresponding preset density threshold De0, the data segment is stored in the fifteenth storage area of ​​the local server, otherwise it is stored in the sixteenth storage area of ​​the cloud server. For example, in one embodiment, the preset density threshold De0 of the imaging department is 0.002MB / storage unit, and the preset density threshold De0 of the general internal medicine department is 0.001MB / storage unit. By considering the department factors, storage optimization can be performed according to the data characteristics of different departments, and the difficulty of obtaining data of specific departments by illegal unified prescription behavior is increased.

[0056] S602: Assign different storage audit levels A to the data segments stored in the fifteenth storage area of ​​the local server and the sixteenth storage area of ​​the cloud server, respectively. The audit level of the data segments in the fifteenth storage area of ​​the local server is A1, and the audit level of the data segments in the sixteenth storage area of ​​the cloud server is A2, and A1>A2. Specifically, the corresponding audit level is set according to the storage location of the data segment. For example, in one embodiment, the audit level A1 of the data segment in the fifteenth storage area of ​​the local server is a high-level audit, the audit cycle is once a day, and the audit content includes data access records, data modification records, etc.; the audit level A2 of the data segment in the sixteenth storage area of ​​the cloud server is an intermediate audit, the audit cycle is once a week, and the audit content includes data access records, etc. When performing a data audit, an audit operation of corresponding intensity is performed according to the audit level. By setting different storage audit levels, data can be more effectively supervised to prevent illegal unified party behavior.

[0057] S603: Determine whether the authority level Pd of the doctor to whom the data segment belongs is greater than or equal to the preset authority condition Pd0. If so, the data segment is allowed to perform some sensitive data operations, otherwise sensitive data operations are prohibited. Specifically, determine whether the authority level Pd of the doctor to whom the data segment belongs is greater than or equal to the preset authority condition Pd0. The specific operation is to obtain the doctor's authority level information and compare it with the preset authority condition. For example, in one embodiment, the preset authority condition Pd0 is a high-level authority, and only doctors with high-level authority can perform some sensitive data operations. If the doctor's authority level Pd is greater than or equal to the preset authority condition Pd0, the data segment is allowed to perform some sensitive data operations, otherwise sensitive data operations are prohibited. For example, the authority level Pd of a doctor is a high-level authority, which is greater than or equal to the preset authority condition Pd0, so the doctor can perform sensitive data operations on the data segment, such as data modification, data deletion, etc. Through authority level control, it can be ensured that only authorized personnel can perform specific data operations, reducing the risk of illegal prescription behavior.

[0058] In addition, if Figure 7 As shown, the present application also provides an Internet-based medical data security monitoring system 700, including: Segmentation module 701, used for segmenting and storing medical data according to a preset data volume threshold value T1, wherein data segments with a data volume less than or equal to the threshold value T1 are stored in a first storage area of ​​the local server, and data segments with a data volume greater than the threshold value T1 are stored in a second storage area of ​​the cloud server; The priority determination module 702 is used to assign different storage priorities to the data segments stored in the first storage area of ​​the local server and the second storage area of ​​the cloud server, wherein the data segment priority P1 of the first storage area of ​​the local server is higher than the data segment priority P2 of the second storage area of ​​the cloud server, and when a data access request is detected, the access verification is performed preferentially on the data segment with a higher priority; The judgment module 703 is used to judge whether the storage time t of the data segment is greater than the preset migration threshold T2. If so, the data segment stored in the first storage area of ​​the local server is migrated to the third storage area of ​​the cloud server, or from the second storage area of ​​the cloud server to the fourth storage area of ​​the local server; The integrity check module 704 is used to perform data integrity check on the migrated data segments so as to monitor and trace illegal behaviors.

[0059] The functions and implementation methods of each module of the Internet-based medical data security monitoring system 700 have been described above with reference to the accompanying drawings and will not be repeated here.

[0060] The specific implementation methods described above further illustrate the purpose, technical solutions and beneficial effects of the embodiments of the present disclosure. It should be understood that the above description is only the specific implementation method of the embodiments of the present disclosure and is not intended to limit the protection scope of the embodiments of the present disclosure. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the embodiments of the present disclosure should be included in the protection scope of the embodiments of the present disclosure.

Claims

1. A medical data security monitoring method based on the Internet, characterized in that: Including: Segment and store medical data according to a preset data volume threshold T1. Among them, the data segments with a data volume less than or equal to the threshold T1 are stored in the first storage area of the local server, and the data segments with a data volume greater than the threshold T1 are stored in the second storage area of the cloud server; Assign different storage priorities to the data segments stored in the first storage area of the local server and the second storage area of the cloud server respectively. Among them, the priority P1 of the data segments in the first storage area of the local server is higher than the priority P2 of the data segments in the second storage area of the cloud server. And when a data access request is detected, access verification is preferentially performed on the data segments with a higher priority; Judge whether the storage duration t of the data segment is greater than a preset migration threshold T2. If so, migrate the data segment stored in the first storage area of the local server to the third storage area of the cloud server, or migrate it from the second storage area of the cloud server to the fourth storage area of the local server; Perform data integrity verification on the migrated data segments to monitor and trace illegal statistical practice behaviors.

2. The Internet-based medical data security monitoring method according to claim 1, characterized in that: The migration threshold T2 is set according to the security level and update frequency of the data.

3. The Internet-based medical data security monitoring method according to claim 1, characterized in that: Performing data integrity verification on the migrated data segments includes comparing whether the hash value H of the data segment is equal to the pre-stored standard hash value H0. If not, it is determined that there is a risk of data tampering, triggering a security alarm and recording relevant data information.

4. The Internet-based medical data security monitoring method according to claim 1, characterized in that: After the step of segmenting and storing medical data according to a preset data volume threshold T1, it further includes: Determine the storage density D of the data segment; Classify the data segments according to the storage density D. The data segments with a storage density greater than the preset density threshold D0 are stored in the fifth storage area of the local server, and the data segments with a storage density less than or equal to the preset density threshold D0 are stored in the sixth storage area of the cloud server; Assign different storage redundancies R to the data segments stored in the fifth storage area of the local server and the sixth storage area of the cloud server respectively. The redundancy of the data segments in the fifth storage area of the local server is R1, and the redundancy of the data segments in the sixth storage area of the cloud server is R2, and R1 < R2. When a data loss risk is detected, data recovery is performed according to the redundancy; Judge whether the storage frequency f of the data segment is greater than a preset frequency threshold F1. If so, migrate the data segment stored in the fifth storage area of the local server to the seventh storage area of the cloud server, or migrate it from the sixth storage area of the cloud server to the eighth storage area of the local server.

5. The Internet-based medical data security monitoring method according to claim 1, characterized in that: After the step of assigning different storage priorities to the data segments stored in the first storage area of the local server and the second storage area of the cloud server respectively, it further includes: Calculate the access popularity H of the data segment; Sort the data segments according to the access popularity H, and the data segments with a higher access popularity are preferentially processed in the data access request queue; Set the storage validity period E of the data segment. When the storage duration t is greater than the storage validity period E, upgrade the encryption intensity of the data segment. The data segment after the encryption intensity upgrade is stored in the ninth storage area of the local server or the tenth storage area of the cloud server; Determine whether the access source O of the data segment belongs to the preset trusted source set Ω. If it does, perform data access verification normally. If it does not, increase the difficulty coefficient K of data access verification.

6. The Internet-based medical data security monitoring method according to claim 1, characterized in that: After the step of determining whether the storage time t of the data segment is greater than the preset migration threshold T2, the method further includes: Calculate the storage cost C of the data segment; Data segments are screened based on the storage cost C. Data segments with storage costs higher than the preset cost threshold C0 are migrated first. Back up the migrated data segment, and store the backup data in the eleventh storage area of ​​the local server and the twelfth storage area of ​​the cloud server. The synchronization update cycle of the backup data and the original data is T3; It is determined whether the access frequency change rate of the data segment is greater than a preset change rate threshold F2. If so, the storage location and storage priority of the data segment are adjusted.

7. The Internet-based medical data security monitoring method according to claim 4, characterized in that: The method further comprises: When the storage density D is greater than or equal to the preset density threshold D0 and the storage time t is greater than the preset time threshold T4, the data segment is stored in the thirteenth storage area of ​​the local server, otherwise it is stored in the fourteenth storage area of ​​the cloud server; Different storage access restrictions L are respectively assigned to the data segments stored in the thirteenth storage area of ​​the local server and the fourteenth storage area of ​​the cloud server, where the data segment access restriction in the thirteenth storage area of ​​the local server is L1, and the data segment access restriction in the fourteenth storage area of ​​the cloud server is L2, and L1>L2; It is determined whether the number of storage location changes M of the data segment is greater than a preset change number threshold M0. If so, the data encryption algorithm of the data segment is upgraded.

8. The Internet-based medical data security monitoring method according to claim 4, characterized in that: The method further comprises: Different preset density thresholds De0 are set for data segments of different departments. When the storage density D is greater than or equal to the corresponding preset density threshold De0, the data segment is stored in the fifteenth storage area of ​​the local server, otherwise it is stored in the sixteenth storage area of ​​the cloud server; Different storage audit levels A are assigned to the data segments stored in the fifteenth storage area of ​​the local server and the sixteenth storage area of ​​the cloud server, respectively. The audit level of the data segments in the fifteenth storage area of ​​the local server is A1, and the audit level of the data segments in the sixteenth storage area of ​​the cloud server is A2, and A1>A2; Determine whether the authority level Pd of the doctor to whom the data segment belongs is greater than or equal to the preset authority condition Pd0. If so, the data segment is allowed to perform some sensitive data operations, otherwise, sensitive data operations are prohibited.

9. An Internet-based medical data security monitoring system, characterized in that: include: A segmentation module is used to store the medical data in segments according to a preset data volume threshold value T1, wherein data segments whose data volume is less than or equal to the threshold value T1 are stored in a first storage area of ​​the local server, and data segments whose data volume is greater than the threshold value T1 are stored in a second storage area of ​​the cloud server; A priority determination module is used to assign different storage priorities to the data segments stored in the first storage area of ​​the local server and the second storage area of ​​the cloud server, wherein the data segment priority P1 of the first storage area of ​​the local server is higher than the data segment priority P2 of the second storage area of ​​the cloud server, and when a data access request is detected, the access verification is performed preferentially on the data segment with a high priority; A judgment module, used to judge whether the storage time t of the data segment is greater than a preset migration threshold T2, and if so, migrate the data segment stored in the first storage area of ​​the local server to the third storage area of ​​the cloud server, or migrate from the second storage area of ​​the cloud server to the fourth storage area of ​​the local server; The integrity check module is used to perform data integrity check on the migrated data segments in order to monitor and trace illegal behaviors.

Images