Medical data processing method and device, electronic equipment and storage medium

Abstract

The invention discloses a medical data processing method which can be applied to a hospital end, and the method comprises the steps: obtaining medical insurance related data issued by a medical insurance center, and storing the medical insurance related data in a trusted computing device, the medical insurance related data comprising user personal information and user account information; acquiring expense settlement data of the target user; in the trusted computing device, according to the target user information and user personal information in the trusted computing device, determining whether the medical insurance related data of the target user is stored in the trusted computing device; if yes, determining the user personal cost and the medical insurance account cost in the trusted computing device according to the cost settlement data and the user account information; and issuing the user personal cost and the medical insurance account cost to the target user.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a medical data processing method, device, electronic equipment and storage medium. Background Art

[0002] The existing medical system usually requires users to queue up to pay after registering, queue up to pay when undergoing examinations, and queue up to pay when picking up medicines. Each payment is usually separated, making it very inconvenient for users to seek medical treatment. Summary of the invention

[0003] The present invention provides a medical data processing method, device, electronic device and storage medium, which can generate fee settlement information after the user registers, consults, checks, tests and picks up medicine, realize the medical treatment process of seeing a doctor first and then paying the fee, and facilitate the user's medical treatment.

[0004] In order to solve the above-mentioned technical problems, the present invention is achieved as follows: In a first aspect, the present application provides a medical data processing method that can be applied on the hospital side, the method comprising: obtaining medical insurance related data issued by a medical insurance center, and storing the medical insurance related data in a trusted computing device, the medical insurance related data including user personal information and user account information, the trusted computing device being built based on a trusted execution environment; obtaining the cost settlement data of the target user, the cost settlement data including the target user information and the cost incurred by at least one of registration, consultation, examination, testing, and medication; in the trusted computing device, determining whether the medical insurance related data of the target user is stored in the trusted computing device based on the target user information and the user personal information in the trusted computing device; if so, determining the user's personal expenses and the medical insurance account expenses in the trusted computing device based on the cost settlement data and the user account information; if not, uploading the target user information to the medical insurance center to obtain the medical insurance related data of the target user, and storing it in the trusted computing device; issuing the user's personal expenses and the medical insurance account expenses to the target user, so that the target user pays according to the user's personal expenses, and obtaining confirmation information of the medical insurance account expenses, so as to apply for settlement to the medical insurance center based on the confirmation information.

[0005] Preferably, the medical insurance center is used to: obtain the first public key of the hospital side, and use the first public key to encrypt the medical insurance related data, and then send the encrypted medical insurance related data to the hospital side; the step of the hospital side obtaining the user account information includes: obtaining the first private key corresponding to the first public key in the trusted computing device, and decrypting the user account information in the encrypted medical insurance related data based on the first private key.

[0006] Preferably, the hospital side determines whether the medical insurance-related data of the target user is stored in the trusted computing device based on the target user information and the user personal information in the trusted computing device, including: obtaining the first public key on the hospital side, and using the first public key to encrypt the target user information; matching the target user information encrypted with the first public key and the user personal information encrypted with the first public key in the trusted computing device to determine whether the medical insurance-related data of the target user is stored in the trusted computing device.

[0007] Preferably, the obtaining of the first public key of the hospital side, and using the first public key to encrypt the medical insurance related data, and then sending the encrypted medical insurance related data to the hospital side, includes: obtaining the first public key of the hospital side, and using the first public key to encrypt the medical insurance related data; obtaining the second public key of the supervision center, and using the second public key to encrypt the medical insurance related data encrypted by the first public key, and then sending the encrypted medical insurance related data to the hospital side.

[0008] Preferably, the step of obtaining a first private key corresponding to a first public key in a trusted computing device and decrypting the user account information in the encrypted medical insurance-related data based on the first private key includes: obtaining a first private key corresponding to the first public key in a trusted computing device; sending a decryption request for the encrypted medical insurance-related data to a regulatory center, and the regulatory center, after verifying the hardware measurement value and the program measurement value of the trusted computing device, issues a second private key corresponding to the second public key, the program corresponding to the program measurement value being used to generate a decryption request for the medical insurance-related data after the target user information matches the user personal information; and decrypting the user account information in the encrypted medical insurance-related data based on the first private key and the second private key.

[0009] Preferably, the decryption request for the encrypted medical insurance-related data is sent to the supervision center, and the supervision center issues the second private key corresponding to the second public key after verifying the hardware measurement value and the program measurement value of the trusted computing device, including: obtaining the facial information of the target user, the hardware measurement value of the trusted computing device, and the program measurement value of the program run by the trusted computing device, and generating a decryption request; wherein the hardware measurement value is obtained by hashing based on the hardware information, and the program measurement value is obtained by hashing based on the information of the program run by the trusted computing device; sending a decryption request to the supervision center, and the supervision center issues the second private key corresponding to the second public key after verifying the facial information of the target user, the hardware measurement value and the program measurement value of the trusted computing device based on pre-stored verification information.

[0010] Preferably, the hospital side obtains the first public key of the hospital side, and uses the first public key to encrypt the target user information; based on the target user information encrypted with the first public key and the user personal information encrypted with the first public key in the trusted computing device, the steps of determining whether the medical insurance related data of the target user is stored in the trusted computing device include: obtaining the first public key of the hospital side and the second public key of the supervision center, and using the first public key and the second public key to encrypt the target user information; based on the target user information encrypted with the first public key and the second public key and the user personal information encrypted with the first public key and the second public key in the trusted computing device, the steps of determining whether the medical insurance related data of the target user is stored in the trusted computing device.

[0011] In a second aspect, the present application provides a medical data processing device that can be used on the hospital side, and the device includes: a medical insurance data acquisition module, which is used to obtain medical insurance related data issued by a medical insurance center, and store the medical insurance related data in a trusted computing device, wherein the medical insurance related data includes user personal information and user account information, and the trusted computing device is built based on a trusted execution environment; a cost data acquisition module, which is used to obtain the cost settlement data of the target user, wherein the cost settlement data includes the target user information and the cost generated by at least one of registration, consultation, examination, testing, and medication; a cost data calculation module, which is used to determine in the trusted computing device whether the medical insurance related data of the target user is stored in the trusted computing device based on the target user information and the user personal information in the trusted computing device; if so, in the trusted computing device, determine the user's personal expenses and the medical insurance account expenses based on the cost settlement data and the user account information; if not, upload the target user information to the medical insurance center to obtain the medical insurance related data of the target user, and store it in the trusted computing device; a cost data sending module, which is used to send the user's personal expenses and the medical insurance account expenses to the target user, so that the target user pays according to the user's personal expenses, and obtains the confirmation information of the medical insurance account expenses, so as to apply for settlement to the medical insurance center based on the confirmation information.

[0012] In a third aspect, the present application provides an electronic device comprising: a memory and at least one processor; the memory is used to store computer-executable instructions; the at least one processor is used to execute the computer-executable instructions stored in the memory, so that the at least one processor executes the method described in the first aspect.

[0013] In a fourth aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the method described in the first aspect.

[0014] This application can be applied in the scenario of seeing a doctor first and paying later. This solution can generate fee settlement information after the user registers, consults, checks, tests, and picks up medicine, and settles the fee in combination with the medical insurance-related data of the medical insurance center, so as to realize the medical treatment process of seeing a doctor first and paying later, which is convenient for users to seek medical treatment. This solution involves the hospital side, the medical insurance center, etc. The medical insurance center provides the hospital side with medical insurance-related data, and the hospital side sets up a trusted computing device to record and calculate the fees, so as to determine the user's personal fees and medical insurance account fees and apply for the corresponding fees respectively. Specifically, this solution can obtain the medical insurance related data issued by the medical insurance center, and store the medical insurance related data in the trusted computing device, the medical insurance related data includes user personal information and user account information, and the trusted computing device is built based on the trusted execution environment; after the target user receives medical treatment, the cost settlement data of the target user is obtained, the cost settlement data includes the target user information and the cost incurred by at least one of registration, consultation, examination, testing, and medication, and the user can apply for cost settlement after completing the complete medical treatment process; during the cost settlement process, the hospital side can determine whether the medical insurance related data of the target user is stored in the trusted computing device based on the target user information and the user personal information in the trusted computing device; if so, determine the user's personal expenses and medical insurance account expenses in the trusted computing device based on the cost settlement data and user account information; if not, upload the target user information to the medical insurance center to obtain the medical insurance related data of the target user, and store it in the trusted computing device; issue the user's personal expenses and medical insurance account expenses to the target user, so that the target user pays according to the user's personal expenses, and obtain the confirmation information of the medical insurance account expenses, so as to apply for settlement to the medical insurance center based on the confirmation information. This solution can set up a trusted computing device on the hospital side, receive data from the medical insurance center through the trusted computing device, and perform secure computing. On the one hand, it can reduce settlement problems caused by network and other influences, and on the other hand, it can prevent the user's privacy from being leaked outside the hospital, thereby improving data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings: Figure 1 is a flowchart of a medical data processing method according to an embodiment of the present application; Figure 2 It is a structural diagram of a medical data processing device according to an embodiment of the present application. DETAILED DESCRIPTION

[0016] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0017] This application can be applied in the scenario of seeing a doctor first and paying later. This solution can form fee settlement information after the user registers, consults, checks, tests, and picks up medicine, and settles the bill in combination with the medical insurance-related data of the medical insurance center, so as to realize the medical treatment process of seeing a doctor first and paying later, which is convenient for users to seek medical treatment. This solution involves the hospital side, medical insurance center, supervision center, etc. The medical insurance center provides medical insurance-related data to the hospital side. The hospital side sets up a trusted computing device to record and calculate the fees to determine the user's personal fees and medical insurance account fees and apply for corresponding fees respectively. The medical insurance center can use the public key of the hospital side and the public key of the supervision center to encrypt the medical insurance-related data and send it to the hospital side. When the hospital side needs to decrypt, it can send an application to the supervision center. The supervision center can authenticate the trusted computing device on the hospital side and feedback the decryption key to the supervision center after the authentication is passed to achieve the safe use of data.

[0018] This solution can obtain the medical insurance related data issued by the medical insurance center and store the medical insurance related data in a trusted computing device, wherein the medical insurance related data includes user personal information and user account information, and the trusted computing device is built based on a trusted execution environment; after the target user receives medical treatment, the cost settlement data of the target user is obtained, wherein the cost settlement data includes the target user information and the cost incurred by at least one of registration, consultation, examination, testing, and medication, and the user can apply for cost settlement after completing the complete medical treatment process; during the cost settlement process, the hospital can determine in the trusted computing device whether the medical insurance related data of the target user is stored in the trusted computing device based on the target user information and the user personal information in the trusted computing device; if so, determine the user's personal expenses and medical insurance account expenses in the trusted computing device based on the cost settlement data and user account information; if not, upload the target user information to the medical insurance center to obtain the medical insurance related data of the target user and store it in the trusted computing device; issue the user's personal expenses and medical insurance account expenses to the target user so that the target user pays according to the user's personal expenses, and obtain the confirmation information of the medical insurance account expenses, so as to apply for settlement to the medical insurance center based on the confirmation information. This solution can set up a trusted computing device on the hospital side, receive data from the medical insurance center through the trusted computing device, and perform secure computing. On the one hand, it can reduce settlement problems caused by network and other influences, and on the other hand, it can prevent the user's privacy from being leaked outside the hospital, thereby improving data security.

[0019] Specifically, the present application embodiment provides a medical data processing method, which can be applied in a hospital, such as Figure 1 As shown, the method includes: Step 102, obtain the medical insurance related data issued by the medical insurance center, and store the medical insurance related data in a trusted computing device, the medical insurance related data includes user personal information and user account information, and the trusted computing device is built based on a trusted execution environment. The trusted execution environment is a computing environment built based on the hardware capabilities of the chip, which can make it impossible for the outside to determine the calculation process of the data and the storage location of the data. In this solution, after the user registers at the hospital, the hospital can request the corresponding medical insurance related data from the medical insurance center and store it in a trusted computing device, so that the user can directly perform fast calculations locally when settling without occupying bandwidth. In order to protect the user's privacy, after obtaining the user's permission, the hospital can hash the user's unique identifier (such as an ID card) and upload it to the medical insurance center. After the medical insurance center hashes the local unique identifier, it matches the two hash results to determine the user who needs to send the medical insurance related data. By sending the hash value instead of the original plaintext data, the user's data can be avoided from being leaked. In addition, the medical insurance center can also use other methods to issue medical insurance-related data. For example, after obtaining the user's permission, if the user takes a taxi or drives to the hospital, the medical insurance center can issue the user's data to the hospital so that the hospital can process the data quickly.

[0020] Step 104: Obtain the target user's fee settlement data, which includes the target user information and the fees incurred in at least one of registration, consultation, examination, testing, and medication collection. The user can initiate fee settlement after completing the medical treatment, or the hospital can automatically perform the settlement process after confirming that the user has collected medicine or left the hospital. In addition, during the user's medical treatment, this solution can send the user the fee information required for each process for the user to confirm and check.

[0021] Step 106: In the trusted computing device, determine whether the target user's medical insurance-related data is stored in the trusted computing device based on the target user information and the user's personal information in the trusted computing device; if so, determine the user's personal expenses and medical insurance account expenses in the trusted computing device based on the expense settlement data and the user's account information; if not, upload the target user information to the medical insurance center to obtain the target user's medical insurance-related data and store it in the trusted computing device.

[0022] Step 108: Send the user's personal expenses and medical insurance account expenses to the target user, so that the target user pays according to the user's personal expenses and obtains the confirmation information of the medical insurance account expenses, so as to apply for settlement with the medical insurance center based on the confirmation information. The confirmation information may include the user's facial information and confirmation instructions, and the facial information can be used to determine that the user is seeking medical treatment in person and applying for medical insurance.

[0023] This application can be applied in the scenario of seeing a doctor first and paying later. This solution can generate fee settlement information after the user registers, consults, checks, tests, and picks up medicine, and settles the fee in combination with the medical insurance-related data of the medical insurance center, so as to realize the medical treatment process of seeing a doctor first and paying later, which is convenient for users to seek medical treatment. This solution involves the hospital side, the medical insurance center, etc. The medical insurance center provides the hospital side with medical insurance-related data, and the hospital side sets up a trusted computing device to record and calculate the fees, so as to determine the user's personal fees and medical insurance account fees and apply for the corresponding fees respectively. Specifically, this solution can obtain the medical insurance related data issued by the medical insurance center, and store the medical insurance related data in the trusted computing device, the medical insurance related data includes user personal information and user account information, and the trusted computing device is built based on the trusted execution environment; after the target user receives medical treatment, the cost settlement data of the target user is obtained, the cost settlement data includes the target user information and the cost incurred by at least one of registration, consultation, examination, testing, and medication, and the user can apply for cost settlement after completing the complete medical treatment process; during the cost settlement process, the hospital side can determine whether the medical insurance related data of the target user is stored in the trusted computing device based on the target user information and the user personal information in the trusted computing device; if so, determine the user's personal expenses and medical insurance account expenses in the trusted computing device based on the cost settlement data and user account information; if not, upload the target user information to the medical insurance center to obtain the medical insurance related data of the target user, and store it in the trusted computing device; issue the user's personal expenses and medical insurance account expenses to the target user, so that the target user pays according to the user's personal expenses, and obtain the confirmation information of the medical insurance account expenses, so as to apply for settlement to the medical insurance center based on the confirmation information. This solution can set up a trusted computing device on the hospital side, receive data from the medical insurance center through the trusted computing device, and perform secure computing. On the one hand, it can reduce settlement problems caused by network and other influences, and on the other hand, it can prevent the user's privacy from being leaked outside the hospital, thereby improving data security.

[0024] In order to ensure the user's data security, the medical insurance center can use the public key of the hospital to encrypt the data, and use the private key of the trusted computing device on the hospital side to decrypt it. Specifically, as an optional embodiment, the medical insurance center is used to: obtain the first public key of the hospital side, and use the first public key to encrypt the medical insurance related data, and then send the encrypted medical insurance related data to the hospital side; the step of the hospital side obtaining the user account information includes: obtaining the first private key corresponding to the first public key in the trusted computing device, and decrypting the user account information in the encrypted medical insurance related data based on the first private key.

[0025] Correspondingly, when matching the target user information based on the target user with the user personal information of the trusted computing device, this solution can also encrypt the target user with the first public key, and then the target user information and user personal information encrypted with the first public key can be obtained, so as to perform data matching in an encrypted state and improve data security. Among them, the encryption results obtained after the same data is encrypted with the same public key are the same. Specifically, as an optional embodiment, the hospital side determines whether the medical insurance-related data of the target user is stored in the trusted computing device based on the target user information and the user personal information in the trusted computing device, including: obtaining the first public key of the hospital side, and encrypting the target user information with the first public key; matching the target user information encrypted with the first public key and the user personal information encrypted with the first public key in the trusted computing device to determine whether the medical insurance-related data of the target user is stored in the trusted computing device.

[0026] This solution can also set up a supervision center, which can perform authentication and key management. The medical insurance center can double-encrypt data based on the second public key of the supervision center and the first public key of the hospital to improve data security. Specifically, as an optional embodiment, the obtaining of the first public key of the hospital and using the first public key to encrypt the medical insurance-related data, and then sending the encrypted medical insurance-related data to the hospital, includes: obtaining the first public key of the hospital and using the first public key to encrypt the medical insurance-related data; obtaining the second public key of the supervision center and using the second public key to encrypt the medical insurance-related data encrypted with the first public key, and then sending the encrypted medical insurance-related data to the hospital.

[0027] When the hospital needs to decrypt the medical insurance related data, it can initiate a request to the supervision center, and the supervision center will feedback the decryption key after authentication. Specifically, as an optional embodiment, the first private key corresponding to the first public key is obtained in the trusted computing device, and the user account information in the encrypted medical insurance related data is decrypted based on the first private key, including: obtaining the first private key corresponding to the first public key in the trusted computing device; sending a decryption request for the encrypted medical insurance related data to the supervision center, and the supervision center verifies the hardware measurement value and program measurement value of the trusted computing device, and then sends the second private key corresponding to the second public key, and the program corresponding to the program measurement value is used to generate a decryption request for the medical insurance related data after the target user information matches the user's personal information; decrypting the user account information in the encrypted medical insurance related data based on the first private key and the second private key. Specifically, as an optional embodiment, the decryption request of the encrypted medical insurance-related data is sent to the supervision center, and the supervision center issues the second private key corresponding to the second public key after verifying the hardware measurement value and program measurement value of the trusted computing device, including: obtaining the face information of the target user, the hardware measurement value of the trusted computing device, and the program measurement value of the program running on the trusted computing device, and generating a decryption request; wherein the hardware measurement value is obtained by hashing based on the hardware information, and the program measurement value is obtained by hashing based on the information of the program running on the trusted computing device; sending the decryption request to the supervision center, and the supervision center issues the second private key corresponding to the second public key after verifying the face information of the target user, the hardware measurement value and the program measurement value of the trusted computing device based on the pre-stored verification information. The supervision center can authenticate the hardware of the trusted computing device and the running program. If the hardware or program does not match the preset information, the device may fail, and the decryption key will not be issued to ensure data security. The supervision center can also authenticate the user's face, and the corresponding key will be issued only after the face verification is passed, which can prevent data from being misused.

[0028] Furthermore, the program is used to generate a decryption request for medical insurance-related data after the target user information matches the user personal information, which can ensure that the user account information will be decrypted only when the encryption match of the user personal information is successful, further improving the security of the data. Furthermore, when the user personal information is double-encrypted using the first public key and the second public key, the corresponding target user information is also double-encrypted using the first public key and the second public key, and then the two double-encrypted information are securely matched, thereby improving the security of the data. Specifically, as an optional embodiment, the hospital side obtains the first public key of the hospital side, and uses the first public key to encrypt the target user information; according to the target user information encrypted using the first public key and the user personal information encrypted using the first public key in the trusted computing device, the steps of determining whether the medical insurance-related data of the target user is stored in the trusted computing device include: obtaining the first public key of the hospital side and the second public key of the supervision center, and using the first public key and the second public key to encrypt the target user information; according to the target user information encrypted using the first public key and the second public key and the user personal information encrypted using the first public key and the second public key in the trusted computing device, the steps of determining whether the medical insurance-related data of the target user is stored in the trusted computing device.

[0029] Based on the above embodiments, the present application also provides a medical data processing device, which can be used in a hospital, such as Figure 2 As shown, the device comprises: The medical insurance data acquisition module 202 is used to obtain the medical insurance related data issued by the medical insurance center and store the medical insurance related data in a trusted computing device. The medical insurance related data includes user personal information and user account information. The trusted computing device is built based on a trusted execution environment.

[0030] The cost data acquisition module 204 is used to acquire the cost settlement data of the target user, and the cost settlement data includes the target user information and the cost incurred by at least one of registration, consultation, examination, testing, and medication collection.

[0031] The cost data calculation module 206 is used to determine whether the target user's medical insurance-related data is stored in the trusted computing device based on the target user information and the user's personal information in the trusted computing device; if so, determine the user's personal expenses and medical insurance account expenses in the trusted computing device based on the cost settlement data and the user's account information; if not, upload the target user information to the medical insurance center to obtain the target user's medical insurance-related data and store it in the trusted computing device.

[0032] The expense data sending module 208 is used to send the user's personal expenses and medical insurance account expenses to the target user, so that the target user pays according to the user's personal expenses and obtains the confirmation information of the medical insurance account expenses, so as to apply for settlement to the medical insurance center based on the confirmation information.

[0033] The implementation of the embodiment of the present application is similar to the implementation of the above-mentioned method embodiment. The specific implementation can refer to the specific implementation of the above-mentioned method embodiment, which will not be repeated here.

[0034] This application can be applied in the scenario of seeing a doctor first and paying later. This solution can generate fee settlement information after the user registers, consults, checks, tests, and picks up medicine, and settles the fee in combination with the medical insurance-related data of the medical insurance center, so as to realize the medical treatment process of seeing a doctor first and paying later, which is convenient for users to seek medical treatment. This solution involves the hospital side, the medical insurance center, etc. The medical insurance center provides the hospital side with medical insurance-related data, and the hospital side sets up a trusted computing device to record and calculate the fees, so as to determine the user's personal fees and medical insurance account fees and apply for the corresponding fees respectively. Specifically, this solution can obtain the medical insurance related data issued by the medical insurance center, and store the medical insurance related data in the trusted computing device, the medical insurance related data includes user personal information and user account information, and the trusted computing device is built based on the trusted execution environment; after the target user receives medical treatment, the cost settlement data of the target user is obtained, the cost settlement data includes the target user information and the cost incurred by at least one of registration, consultation, examination, testing, and medication, and the user can apply for cost settlement after completing the complete medical treatment process; during the cost settlement process, the hospital side can determine whether the medical insurance related data of the target user is stored in the trusted computing device based on the target user information and the user personal information in the trusted computing device; if so, determine the user's personal expenses and medical insurance account expenses in the trusted computing device based on the cost settlement data and user account information; if not, upload the target user information to the medical insurance center to obtain the medical insurance related data of the target user, and store it in the trusted computing device; issue the user's personal expenses and medical insurance account expenses to the target user, so that the target user pays according to the user's personal expenses, and obtain the confirmation information of the medical insurance account expenses, so as to apply for settlement to the medical insurance center based on the confirmation information. This solution can set up a trusted computing device on the hospital side, receive data from the medical insurance center through the trusted computing device, and perform secure computing. On the one hand, it can reduce settlement problems caused by network and other influences, and on the other hand, it can prevent the user's privacy from being leaked outside the hospital, thereby improving data security.

[0035] Based on the above embodiments, the present application also provides an electronic device, comprising: a memory and at least one processor; the memory is used to store computer execution instructions; the at least one processor is used to execute the computer execution instructions stored in the memory, so that the at least one processor executes the method described in the above embodiments.

[0036] The embodiment of the present invention also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, each process of the above-mentioned data processing method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it is not repeated here. The computer-readable storage medium is, for example, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0037] It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0038] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0039] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0040] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0041] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0042] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0043] Computer-readable media include permanent and non-permanent, removable and non-removable media that can be used to store information by any method or technology. Information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. According to the definition in this article, computer-readable media does not include temporary computer-readable media (transitory media), such as modulated data signals and carrier waves.

[0044] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0045] It should be understood by those skilled in the art that the embodiments of the present invention may be provided as methods, systems or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware aspects. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0046] The above are only embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent substitution, improvement, etc. made within the spirit and principle of the present invention should be included in the scope of the claims of the present invention.

Claims

1. A medical data processing method, characterized in that: Applicable to hospitals, the method includes: Obtain medical insurance related data issued by the medical insurance center and store the medical insurance related data in a trusted computing device, wherein the medical insurance related data includes user personal information and user account information. The trusted computing device is built based on a trusted execution environment; Acquire the cost settlement data of the target user, wherein the cost settlement data includes the target user information and the cost incurred by at least one of registration, consultation, examination, testing, and medication collection; In the trusted computing device, based on the target user information and the user personal information in the trusted computing device, determine whether the target user's medical insurance related data is stored in the trusted computing device; if so, in the trusted computing device, determine the user's personal expenses and medical insurance account expenses based on the expense settlement data and the user account information; if not, upload the target user information to the medical insurance center to obtain the target user's medical insurance related data and store it in the trusted computing device; Send the user's personal expenses and medical insurance account expenses to the target user so that the target user can pay according to the user's personal expenses and obtain the confirmation information of the medical insurance account expenses, so as to apply for settlement from the medical insurance center based on the confirmation information.

2. The method according to claim 1, characterized in that The medical insurance center is used to: Obtain the first public key of the hospital, and use the first public key to encrypt the medical insurance related data, and then send the encrypted medical insurance related data to the hospital; The steps for the hospital to obtain user account information include: A first private key corresponding to the first public key is obtained in a trusted computing device, and user account information in the encrypted medical insurance-related data is decrypted based on the first private key.

3. The method according to claim 2, characterized in that The steps of determining whether the target user's medical insurance-related data is stored in the trusted computing device based on the target user information and the user's personal information in the trusted computing device include: Obtain the first public key of the hospital and use it to encrypt the target user information; By matching the target user information encrypted with the first public key with the user personal information encrypted with the first public key in the trusted computing device, it is determined whether the medical insurance related data of the target user is stored in the trusted computing device.

4. The method according to claim 3, characterized in that The obtaining of the first public key of the hospital side, and using the first public key to encrypt the medical insurance related data, and sending the encrypted medical insurance related data to the hospital side, includes: Obtain the first public key from the hospital and use it to encrypt medical insurance-related data; Obtain the second public key of the supervision center, and use the second public key to encrypt the medical insurance related data encrypted by the first public key, and then send the encrypted medical insurance related data to the hospital.

5. The method according to claim 4, characterized in that The step of obtaining a first private key corresponding to the first public key in the trusted computing device and decrypting the user account information in the encrypted medical insurance-related data based on the first private key includes: Obtaining a first private key corresponding to the first public key in a trusted computing device; Sending a decryption request for the encrypted medical insurance related data to the supervision center, the supervision center issues a second private key corresponding to the second public key after verifying the hardware measurement value and the program measurement value of the trusted computing device, and the program corresponding to the program measurement value is used to generate a decryption request for the medical insurance related data after the target user information matches the user personal information; The user account information in the encrypted medical insurance-related data is decrypted based on the first private key and the second private key.

6. The method according to claim 5, characterized in that The decryption request for the encrypted medical insurance related data is sent to the supervision center, and the supervision center issues the second private key corresponding to the second public key after verifying the hardware measurement value and program measurement value of the trusted computing device, including: Obtaining facial information of the target user, hardware measurement values ​​of the trusted computing device, and program measurement values ​​of the program running on the trusted computing device, and generating a decryption request; wherein the hardware measurement value is obtained by hashing the hardware information, and the program measurement value is obtained by hashing the information of the program running on the trusted computing device; A decryption request is sent to the supervision center. After verifying the target user's facial information, the hardware measurement value and the program measurement value of the trusted computing device based on the pre-stored verification information, the supervision center issues the second private key corresponding to the second public key.

7. The method according to claim 6, characterized in that The hospital obtains the first public key of the hospital and uses the first public key to encrypt the target user information; the steps of matching the target user information encrypted with the first public key with the user personal information encrypted with the first public key in the trusted computing device to determine whether the medical insurance-related data of the target user is stored in the trusted computing device include: Obtain the first public key of the hospital and the second public key of the supervision center, and use the first public key and the second public key to encrypt the target user information; By matching the target user information encrypted by the first public key and the second public key with the user personal information encrypted by the first public key and the second public key in the trusted computing device, it is determined whether the medical insurance related data of the target user is stored in the trusted computing device.

8. A medical data processing device, characterized in that: Applicable in hospitals, the device includes: The medical insurance data acquisition module is used to obtain the medical insurance related data issued by the medical insurance center and store the medical insurance related data in the trusted computing device. The medical insurance related data includes user personal information and user account information. The trusted computing device is built based on the trusted execution environment. A cost data acquisition module is used to acquire the cost settlement data of the target user, wherein the cost settlement data includes the target user information and the cost incurred by at least one of registration, consultation, examination, testing, and medication collection; The cost data calculation module is used to determine in the trusted computing device whether the target user's medical insurance related data is stored in the trusted computing device based on the target user information and the user's personal information in the trusted computing device; if so, determine the user's personal expenses and medical insurance account expenses in the trusted computing device based on the expense settlement data and the user's account information; if not, upload the target user information to the medical insurance center to obtain the target user's medical insurance related data and store it in the trusted computing device; The expense data sending module is used to send the user's personal expenses and medical insurance account expenses to the target user, so that the target user pays according to the user's personal expenses and obtains the confirmation information of the medical insurance account expenses, so as to apply for settlement from the medical insurance center based on the confirmation information.

9. An electronic device, characterized in that: include: memory and at least one processor; The memory is used to store computer-executable instructions; The at least one processor is configured to execute computer-executable instructions stored in the memory, so that the at least one processor executes the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images