Secret-related data processing method and device based on medical image, equipment and medium

Abstract

The embodiment of the invention provides a confidential data processing method and device based on a medical image, equipment and a medium, and relates to the technical field of medical image processing, and the method comprises the steps: controlling an imaging system to transmit generated image data to a storage server through a first encryption channel; when it is detected that image data transmission is completed, the imaging system is controlled to erase the image data; controlling the storage server to store the image data based on the set storage rule; sending an analysis instruction to a storage server to instruct the storage server to send the image data copy to an image analysis system for analysis and generate an analysis result; transmitting the detected analysis results to a storage server through a second encryption channel, and controlling the image analysis system to erase the image data copies and the analysis results; based on a set storage rule, controlling a storage server to store the analysis result; the possibility of data leakage is fundamentally reduced, and the storage security is improved.

Description

Technical Field

[0001] The present application relates to the technical field of medical image processing, and more specifically, to a method, apparatus, device and medium for processing confidential data based on medical images. Background Art

[0002] Currently, a variety of imaging devices are commonly used in hospitals, especially in interventional catheterization rooms. These devices usually store the generated medical image data locally and upload it to the cloud storage platform or local storage platform designated by the hospital when necessary. However, the existing data management methods have the following problems: Data retention risk: The backup data stored in the device needs to be cleared manually, which is prone to omissions or operational errors, resulting in confidential data leakage; Remote operation risk: Imaging equipment supports remote upgrade functions, which brings more possibilities for potential confidential data leakage. Summary of the invention

[0003] The purpose of the embodiments of the present application is to provide a confidential data processing method, device, equipment and medium based on medical images, so as to solve the problem that data clearing is prone to omissions or operational errors in existing medical image data management methods, resulting in confidential data leakage.

[0004] In a first aspect, an embodiment of the present application provides a method for processing confidential data based on medical images, comprising:

[0005] Controlling the imaging system to transmit the generated image data to the storage server through the first encrypted channel;

[0006] Detecting that the image data transmission is completed, controlling the imaging system to erase the image data;

[0007] Based on the set storage rules, control the storage server to store image data;

[0008] Sending an analysis instruction to the storage server to instruct the storage server to send a copy of the image data to the image analysis system for analysis and generating analysis results;

[0009] The analysis results are detected and transmitted to the storage server through the second encrypted channel, and the image analysis system is controlled to erase the image data copy and the analysis results;

[0010] Based on the set storage rules, control the storage server to store the analysis results.

[0011] In the above implementation process, the imaging system is controlled to transmit the generated image data to the storage server through the first encrypted channel; when it is detected that the image data transmission is completed, the imaging system is controlled to erase the image data; based on the set storage rules, the storage server is controlled to store the image data; an analysis instruction is sent to the storage server to instruct the storage server to send a copy of the image data to the image analysis system for analysis and generate analysis results; when it is detected that the analysis results are transmitted to the storage server through the second encrypted channel, the image analysis system is controlled to erase the copy of the image data and the analysis results; based on the set storage rules, the storage server is controlled to store the analysis results; confidential data is encrypted, stored and transmitted throughout the process, and through unique storage and centralized management, comprehensive control of confidential data is ensured, and data clearing is performed automatically, which fundamentally reduces the possibility of data leakage and improves storage security.

[0012] Furthermore, the controlling the imaging system to transmit the generated image data to the storage server through the first encrypted channel includes:

[0013] The transport layer security protocol is used to establish the first encrypted channel, and the imaging system and the storage server are bidirectionally authenticated before the transmission begins;

[0014] It is detected that the imaging system generates image data, and the image data is encrypted by an encryption algorithm;

[0015] transmitting the encrypted image data to an authorized storage server through a first encryption channel;

[0016] The detection and analysis results are transmitted to the storage server through the second encrypted channel, including:

[0017] The transport layer security protocol is used to establish a second encrypted channel, and the storage server and the image analysis system are bidirectionally authenticated before the transmission begins;

[0018] When the storage server receives the analysis instruction, it encrypts the copy of the image data using an encryption algorithm;

[0019] transmitting the encrypted copy of the image data to the image analysis system through a second encrypted channel via the storage server;

[0020] The image analysis system transmits the obtained analysis result to the storage server through a second encrypted channel;

[0021] Among them, the encryption algorithm uses a dynamically updated key.

[0022] In the above implementation process, the data transmission process is carried out through an encrypted channel to protect the confidentiality and integrity of the data during the transmission process; the communicating parties pass a two-way authentication before the transmission begins to ensure the legitimacy of the data transmission; in addition, in order to prevent the risks brought by the long-term use of a single key, a dynamic key update mechanism is supported in the transmission session.

[0023] Further, controlling the storage server to store the image data based on the set storage rule includes:

[0024] Filter out confidential data from image data;

[0025] Symmetric encryption of confidential data using the Advanced Encryption Standard and randomly generated session keys;

[0026] When receiving an access request, if the user has access rights, the access request is approved;

[0027] Among them, the keys are managed by a hardware security module or a distributed key management system, and the confidential data is stored in the form of block encryption. Each block of confidential data is encrypted separately and its corresponding verification code is stored.

[0028] In the above implementation process, confidential data of image data is stored in the form of block encryption, each block of data is encrypted separately and its corresponding check code is stored to support data integrity verification; the data is stored in a read-only partition to avoid unauthorized write operations.

[0029] Further, the controlling the storage server to store the analysis results based on the set storage rules includes:

[0030] Filter out confidential data from analysis results;

[0031] Use the Advanced Encryption Standard and randomly generated session keys to symmetric encrypt confidential data, and store confidential data in the form of block encryption. Each block of confidential data is encrypted separately and its corresponding checksum is stored.

[0032] When an access request is received, if the user has access rights, the access request is approved.

[0033] In the above implementation process, the advanced encryption standard is used to symmetric encrypt confidential data to ensure that the encryption strength meets the current highest security standards. Data encryption uses randomly generated session keys to further enhance the dynamic nature of data protection. The confidential data of the analysis results is stored in the form of block encryption. Each block of data is encrypted separately and its corresponding check code is stored to support data integrity verification; the data is stored in a read-only partition to avoid unauthorized write operations.

[0034] Furthermore, it also includes:

[0035] Filter out confidential data from image data, image copy data, and analysis results;

[0036] Before the imaging system transmits the image data, a first verification code is generated for the confidential data of the image data by using an encrypted hash algorithm;

[0037] When the storage server receives the image data, verify whether the first verification code is consistent to compare the integrity of the data;

[0038] Before the storage server transmits the copy of the image data, a second verification code is generated in the storage server for the confidential data of the copy of the image data by using an encrypted hash algorithm;

[0039] When the image analysis system receives the copy of the image data, it verifies whether the second check code is consistent, and generates a third check code for the confidential data of the analysis result through an encrypted hash algorithm;

[0040] When the storage server receives the analysis result, it verifies whether the third check code is consistent to compare the integrity of the data.

[0041] In the above implementation process, the data before and after transmission is encrypted by an encryption algorithm to compare whether the data is complete and whether the data receiving end verifies the consistency of the checksum to ensure that the data has not been tampered with during transmission and to prevent middle attacks and data interception.

[0042] Furthermore, it also includes:

[0043] In the process of transmitting various types of data, key data in each type of data is screened out respectively, and a digital signature is generated for the key data for verification; wherein the various types of data include: image data, image copy data and analysis results.

[0044] In the above implementation process, a digital signature is generated for the key data block to verify the authenticity and integrity of the data source.

[0045] Furthermore, it also includes:

[0046] Remove non-confidential content from the storage server.

[0047] In the above implementation process, the storage server only retains the necessary encrypted storage content and does not retain the decrypted plaintext data, ensuring comprehensive control over confidential data.

[0048] In a second aspect, an embodiment of the present application provides a confidential data processing device based on medical images, comprising:

[0049] An image generation module, used for controlling the imaging system to transmit the generated image data to the storage server through a first encrypted channel;

[0050] An image erasing module, used to detect that the image data transmission is completed and control the imaging system to erase the image data;

[0051] A first storage module, used to control the storage server to store image data based on a set storage rule;

[0052] An image analysis module, used to send an analysis instruction to the storage server to instruct the storage server to send a copy of the image data to the image analysis system for analysis and to generate an analysis result;

[0053] A result erasing module, used to detect that the analysis results are transmitted to the storage server through the second encrypted channel, and control the image analysis system to erase the image data copy and the analysis results;

[0054] The second storage module is used to control the storage server to store the analysis results based on the set storage rules.

[0055] In a third aspect, an embodiment of the present application provides an electronic device, including:

[0056] A processor, a memory and a bus, wherein the processor is connected to the memory via the bus, and the memory stores computer-readable instructions. When the computer-readable instructions are executed by the processor, they are used to implement the confidential data processing method based on medical images as described above.

[0057] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a server, the method for processing confidential data based on medical images as described above is implemented. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments of the present application will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0059] Figure 1 A schematic diagram of a process for processing confidential data based on medical images provided in an embodiment of the present application;

[0060] Figure 2 It is a structural schematic diagram of a confidential data processing device based on medical images provided in an embodiment of the present application;

[0061] Figure 3 It is a structural schematic diagram of a confidential data processing system based on medical images provided in an embodiment of the present application;

[0062] Figure 4 It is a structural schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0063] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.

[0064] It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings. At the same time, in the description of this application, the terms "first", "second", etc. are only used to distinguish the description and cannot be understood as indicating or implying relative importance.

[0065] Please see Figure 1 , Figure 1 A schematic flow chart of a method for processing confidential data based on medical images provided in an embodiment of the present application. The method for processing confidential data based on medical images includes:

[0066] 100. Control the imaging system to transmit the generated image data to the storage server through the first encryption channel.

[0067] It is understandable that the imaging system is usually used to capture, process and generate image data, which may contain sensitive or private information. Therefore, in the process of transmitting data from the imaging system to the storage server, security measures must be taken to prevent data leakage. Specifically, the control system controls the imaging system to transmit the generated image data to the storage server through the first encrypted channel.

[0068] Among them, the imaging system first captures or generates image data, which can be obtained through a camera, scanner or other image acquisition device.

[0069] 110. Use the transport layer security protocol to establish a first encryption channel, and perform two-way authentication on the imaging system and the storage server before the transmission begins.

[0070] Exemplarily, the Transport Layer Security Protocol (TLS1.3) is used to establish a first encrypted channel to protect the confidentiality and integrity of data during transmission; the communicating parties (imaging system and storage server) conduct two-way authentication (such as authentication based on digital certificates) before the transmission begins to ensure the legitimacy of data transmission.

[0071] Exemplarily, for authentication based on digital certificates, a key pair is first generated: an asymmetric encryption algorithm (such as RSA) is used to generate a pair of keys, including a public key and a private key, the public key is used to encrypt data, and the private key is used to decrypt data; a certificate signing request (CSR) is created: the imaging system submits a CSR to a certificate authority (CA), which includes the imaging system's public key and some identification information; the certificate is verified and signed: after receiving the CSR, the CA verifies the identity information of the imaging system. After the verification is successful, the CA signs the CSR with its own private key to generate a digital certificate containing the user's public key and signature; the certificate is distributed: the CA distributes the signed digital certificate to the requesting imaging system, and the imaging system can use this certificate to prove its identity; the certificate is verified: when the imaging system communicates with the storage server, it sends its own digital certificate. After receiving the certificate, the storage server uses the CA's public key to verify the signature of the certificate. If the verification is successful, the storage server can confirm the identity of the imaging system.

[0072] 120. Detect that the imaging system generates image data, and encrypt the image data using an encryption algorithm, wherein the encryption algorithm uses a dynamically updated key.

[0073] Exemplarily, after the imaging system generates data, the image data is immediately encrypted using an encryption algorithm (AES-256); at the same time, in order to prevent the risks brought by long-term use of a single key, the control system supports a dynamic key update mechanism (Perfect Forward Secrecy, PFS) in the transmission session, and updates the key according to a set period to enhance security, where the set period can be one hour.

[0074] It should be noted that if the key is lost or abnormal, the automatic rollback and security review mechanism will be triggered immediately.

[0075] 130. Transmit the encrypted image data to an authorized storage server through a first encryption channel.

[0076] Exemplarily, the encrypted data is transmitted to the authorized storage server through an encrypted channel (TLS1.3), eliminating man-in-the-middle attacks and data interception.

[0077] Therefore, the data transmission process is carried out through an encrypted channel to protect the confidentiality and integrity of the data during the transmission process; the communicating parties undergo two-way authentication before the transmission begins to ensure the legitimacy of the data transmission; in addition, in order to prevent the risks brought by the long-term use of a single key, a dynamic key update mechanism is supported in the transmission session.

[0078] 200. Upon detecting that image data transmission is completed, the imaging system is controlled to erase the image data.

[0079] Among them, after completing the encrypted transmission of image data, the imaging system immediately clears the local cache to ensure zero storage on the imaging system end.

[0080] 300. Based on a set storage rule, control a storage server to store image data.

[0081] 310. Filter out confidential data from image data.

[0082] It is understandable that the screening requirements for confidential data can be set according to specific needs, such as which types of image data are confidential data, or which device modules collect image data that are confidential data, or the image data is initially screened based on confidential rules to obtain confidential data. Exemplarily, the present application embodiment classifies all the obtained image data as confidential data.

[0083] 320. Use the Advanced Encryption Standard and randomly generated session keys to symmetric encrypt confidential data.

[0084] Exemplarily, the Advanced Encryption Standard (AES-256) is used to perform symmetric encryption on confidential data to ensure that the encryption strength meets the current highest security standards; data encryption uses randomly generated session keys to further enhance the dynamic nature of data protection.

[0085] 330. When an access request is received, if the user has access rights, the access request is approved.

[0086] Among them, the keys are managed by a hardware security module or a distributed key management system, and the confidential data is stored in the form of block encryption. Each block of confidential data is encrypted separately and its corresponding verification code is stored.

[0087] It is understandable that the embodiments of the present application use a hardware security module (HSM) or a distributed key management system (KMS) to ensure the security of key generation, distribution and storage. Among them, the keys are centrally managed by authorized managers, and unauthorized users cannot access or operate the keys. In addition, confidential data is stored in the form of block encryption, each block of data is encrypted separately and its corresponding check code is stored, supporting data integrity verification; data is stored in a read-only partition to avoid unauthorized write operations.

[0088] 400. Send an analysis instruction to a storage server to instruct the storage server to send a copy of the image data to an image analysis system for analysis and to generate an analysis result.

[0089] Specifically, after the storage server receives the image data from the imaging system and stores it, if the image data needs to be analyzed, the control system sends an analysis instruction to the storage server, thereby instructing the storage server to send a copy of the image data to the image analysis system. After the image analysis system receives the copy of the image data, it analyzes it to obtain the analysis result.

[0090] 500. It is detected that the analysis results are transmitted to the storage server through the second encrypted channel, and the image analysis system is controlled to erase the image data copy and the analysis results.

[0091] Among them, after the image analysis system completes the analysis results of the image data copy, it encrypts the analysis results through an encryption algorithm (AES-256) and transmits them to the authorized storage server through a second encryption channel (TLS1.3); in addition, after completing the encrypted transmission of the analysis results, the image analysis system immediately clears the local cache to ensure zero storage on the imaging system end.

[0092] 510. Use the transport layer security protocol to establish a second encryption channel, and perform two-way authentication on the storage server and the image analysis system before the transmission begins.

[0093] Exemplarily, the Transport Layer Security Protocol (TLS1.3) is used to establish a secondary encryption channel to protect the confidentiality and integrity of data during transmission; the communicating parties (storage server and image analysis system) conduct two-way authentication (such as authentication based on digital certificates) before the transmission begins to ensure the legitimacy of data transmission.

[0094] 520. When the storage server receives the analysis instruction, the image data copy is encrypted by an encryption algorithm, wherein the encryption algorithm uses a dynamically updated key.

[0095] Exemplarily, when the storage server receives an analysis instruction, it immediately encrypts a copy of the image data using an encryption algorithm (AES-256); at the same time, to prevent the risks of long-term use of a single key, the control system supports a dynamic key update mechanism (Perfect Forward Secrecy, PFS) in the transmission session, updates the key according to a set period, and enhances security, where the set period can be two hours.

[0096] It should be noted that if the key is lost or abnormal, the automatic rollback and security review mechanism will be triggered immediately.

[0097] Specifically, during normal operation, the key is backed up regularly or in real time to ensure that there is an available backup key when the key is lost or abnormal; when key loss or abnormality is detected, the backup key is automatically or manually used to restore normal operation, such as loading the backup key into the corresponding hardware or software module and updating the key status; after the key is restored, the operation previously performed using the abnormal key is rolled back to ensure data consistency and security.

[0098] Specifically, when key loss or abnormality is detected, the incident is immediately reported to the system, and relevant logs, metadata and other information are provided for analysis; users conduct risk assessments on incidents to determine whether there are potential security risks and assess the impact of these risks; based on the results of the risk assessment, a comprehensive security review of the control system is conducted, including checking whether there are loopholes or deficiencies in the system's configuration, access control, encryption policies, etc.; based on the results of the security review, appropriate measures are formulated to eliminate potential security risks, including strengthening system access control, updating encryption policies, strengthening key management, etc.; after implementing the measures, the system's operating status is continuously tracked and monitored to ensure the security and stability of the system.

[0099] 530. Transmit the encrypted copy of the image data to the image analysis system through the second encryption channel via the storage server.

[0100] Exemplarily, the encrypted copy of the image data is transmitted to the image analysis system via an encrypted channel (TLS1.3), eliminating man-in-the-middle attacks and data interception.

[0101] 540. The image analysis system transmits the obtained analysis result to the storage server through the second encrypted channel.

[0102] It can be understood that after the image analysis system completes the analysis of the image data copy, the analysis result is encrypted using an encryption algorithm (AES-256); the encrypted analysis result is also transmitted to the storage server through an encrypted channel (TLS1.3).

[0103] Therefore, the data transmission process is carried out through an encrypted channel to protect the confidentiality and integrity of the data during the transmission process; the communicating parties undergo two-way authentication before the transmission begins to ensure the legitimacy of the data transmission; in addition, in order to prevent the risks brought by the long-term use of a single key, a dynamic key update mechanism is supported in the transmission session.

[0104] 600. Based on the set storage rules, control the storage server to store the analysis results.

[0105] 610. Filter out confidential data from the analysis results.

[0106] It is understandable that the screening requirements for confidential data of the analysis results can be set according to specific needs, such as which types of analysis results are confidential data, or the confidential data is obtained after preliminary screening of the analysis results based on confidential rules. Exemplarily, the data of the analysis results obtained in the embodiment of the present application are classified as confidential data.

[0107] 620. Use the Advanced Encryption Standard and a randomly generated session key to symmetrically encrypt the confidential data, and store the confidential data in the form of block encryption. Each block of confidential data is encrypted separately and its corresponding check code is stored.

[0108] Exemplarily, the Advanced Encryption Standard (AES-256) is used to perform symmetric encryption on confidential data to ensure that the encryption strength meets the current highest security standards; data encryption uses randomly generated session keys to further enhance the dynamic nature of data protection.

[0109] 630. When an access request is received, if the user has access rights, the access request is approved.

[0110] Among them, the keys are managed by a hardware security module or a distributed key management system, and the confidential data is stored in the form of block encryption. Each block of confidential data is encrypted separately and its corresponding verification code is stored.

[0111] It is understandable that the embodiments of the present application use a hardware security module (HSM) or a distributed key management system (KMS) to ensure the security of key generation, distribution and storage. Among them, the keys are centrally managed by authorized managers, and unauthorized users cannot access or operate the keys. In addition, confidential data is stored in the form of block encryption, each block of data is encrypted separately and its corresponding check code is stored, supporting data integrity verification; data is stored in a read-only partition to avoid unauthorized write operations.

[0112] As described above, the embodiment of the present application controls the imaging system to transmit the generated image data to the storage server through the first encrypted channel; upon detecting that the image data transmission is completed, controls the imaging system to erase the image data; based on the set storage rules, controls the storage server to store the image data; sends an analysis instruction to the storage server to instruct the storage server to send a copy of the image data to the image analysis system for analysis and generate analysis results; upon detecting that the analysis results are transmitted to the storage server through the second encrypted channel, controls the image analysis system to erase the copy of the image data and the analysis results; based on the set storage rules, controls the storage server to store the analysis results; confidential data is encrypted, stored and transmitted throughout the process, and through a unique storage and centralized management method, ensures comprehensive control of confidential data, and automatically clears data, fundamentally reduces the possibility of data leakage, and improves storage security.

[0113] On the basis of the above embodiments, the confidential data processing method based on medical images in the embodiments of the present application can also be embodied as follows:

[0114] 710. Filter out confidential data from image data, image copy data, and analysis results.

[0115] It is understandable that the screening requirements for confidential data can be set according to specific needs.

[0116] 720. Before the imaging system transmits the image data, a first verification code is generated for confidential data of the image data by using an encrypted hash algorithm.

[0117] 730. When the storage server receives the image data, verify whether the first verification code is consistent to compare the integrity of the data.

[0118] 740. Before the storage server transmits the copy of the image data, a second verification code is generated in the storage server for confidential data of the copy of the image data by using an encrypted hash algorithm.

[0119] 750. When the image analysis system receives the copy of the image data, it verifies whether the second verification code is consistent, and generates a third verification code for the confidential data of the analysis result through an encrypted hash algorithm.

[0120] 760. When the storage server receives the analysis result, it verifies whether the third check code is consistent to compare the integrity of the data.

[0121] Therefore, the data before and after transmission is encrypted through encryption algorithms to compare whether the data is complete, and the data receiving end verifies whether the checksum is consistent, ensuring that the data has not been tampered with during transmission and preventing middle attacks and data interception.

[0122] On the basis of the above embodiments, the confidential data processing method based on medical images in the embodiments of the present application can also be embodied as follows:

[0123] In the process of transmitting various types of data, key data in each type of data is screened out respectively, and a digital signature is generated for the key data for verification; wherein the various types of data include: image data, image copy data and analysis results.

[0124] Thus, a digital signature is generated for the key data block to verify the authenticity and integrity of the data source.

[0125] On the basis of the above embodiments, the confidential data processing method based on medical images in the embodiments of the present application can also be embodied as follows:

[0126] Remove non-confidential content from the storage server.

[0127] Therefore, the storage server only retains the necessary encrypted storage content and does not retain the decrypted plaintext data, ensuring comprehensive control over confidential data.

[0128] For example, after the imaging system of the embodiment of the present application generates an image, it is directly transmitted to the designated storage server through an encrypted channel; the data is centrally managed by the authorized party, and there is no backup or cache data on the imaging system device side. The imaging system and the image analysis system are physically isolated, and the data transmission part uses dynamic key encryption technology to ensure that the data cannot be intercepted or tampered with during the transmission process.

[0129] Among them, the data storage process: After the medical image is generated, it is encrypted using the AES-256 algorithm: the encrypted data is stored in blocks, and additional checksums are used for integrity verification: the data is stored in partitions and accessed by authorized managers through the key management system (KMS).

[0130] Among them, the data transmission process: medical image data is encrypted by AES-256 and then transmitted through a secure channel established by TLS1.3; an independent dynamic key is established for each transmission to ensure the uniqueness and security of the session data; after the transmission is completed, the sender and receiver confirm the data integrity through hash verification and digital signature.

[0131] Among them, dynamic key management: regularly update keys during transmission or storage, and key generation and distribution are carried out through hardware security modules (HSM); when the key is lost or abnormal, the automatic rollback and security review mechanism is immediately triggered.

[0132] As described above, the embodiments of the present application enhance data control capabilities: through unique storage and centralized management, comprehensive control of confidential data is ensured; compliance with data security regulations: meeting current and future more stringent data security and compliance requirements; reducing the risk of data leakage: through encrypted transmission, zero storage and physical isolation strategies, the possibility of data leakage is fundamentally reduced; storage security is improved: through AES-256 encryption and block storage, it is ensured that data storage cannot be decrypted even if it is physically stolen; comprehensive protection of the transmission process: TLS1.3 protocol combined with a dynamic key update mechanism can effectively prevent man-in-the-middle attacks, data interception and tampering; operational convenience: the key management system supports automated operations to reduce security risks caused by human factors; compliance is met: the design complies with international and domestic data security regulations (such as GDPR, HIPAA, etc.) and is suitable for data-sensitive scenarios.

[0133] The above steps are not to be performed in a strict order as described in the numbers, but should be understood as an overall solution.

[0134] In the second aspect, based on the above embodiments, Figure 2A schematic diagram of the structure of a confidential data processing device based on medical images provided in an embodiment of the present application. Figure 2 The confidential data processing device based on medical images provided in this embodiment specifically includes: an image generation module 201, an image erasing module 202, a first storage module 203, an image analysis module 204, a result erasing module 205 and a second storage module 206.

[0135] Among them, the image generation module 201 is used to control the imaging system to transmit the generated image data to the storage server through the first encrypted channel; the image erasure module 202 is used to detect that the image data transmission is completed and control the imaging system to erase the image data; the first storage module 203 is used to control the storage server to store the image data based on the set storage rules; the image analysis module 204 is used to send an analysis instruction to the storage server to instruct the storage server to send a copy of the image data to the image analysis system for analysis and generate an analysis result; the result erasure module 205 is used to detect that the analysis results are transmitted to the storage server through the second encrypted channel, and control the image analysis system to erase the copy of the image data and the analysis result; the second storage module 206 is used to control the storage server to store the analysis result based on the set storage rules.

[0136] For example, please refer to Figure 3 , shows a confidential data processing system based on medical images, in which the images generated by the imaging system are encrypted and transmitted to the storage server, and the data is erased after the transmission is completed; the storage server encrypts and stores the image data according to the set rules, and when analysis is required, encrypts and transmits a copy of the image data to the image analysis system for analysis. The image analysis system analyzes the copy of the image data and then encrypts and transmits it to the storage server and erases the data. The storage server stores the analysis results according to the required rules.

[0137] As described above, the embodiment of the present application controls the imaging system to transmit the generated image data to the storage server through the first encrypted channel; upon detecting that the image data transmission is completed, controls the imaging system to erase the image data; based on the set storage rules, controls the storage server to store the image data; sends an analysis instruction to the storage server to instruct the storage server to send a copy of the image data to the image analysis system for analysis and generate analysis results; upon detecting that the analysis results are transmitted to the storage server through the second encrypted channel, controls the image analysis system to erase the copy of the image data and the analysis results; based on the set storage rules, controls the storage server to store the analysis results; confidential data is encrypted, stored and transmitted throughout the process, and through a unique storage and centralized management method, ensures comprehensive control of confidential data, and automatically clears data, fundamentally reduces the possibility of data leakage, and improves storage security.

[0138] The confidential data processing device based on medical images provided in the embodiment of the present application can be used to execute the confidential data processing method based on medical images provided in the above-mentioned embodiment, and has corresponding functions and beneficial effects.

[0139] In a third aspect, an embodiment of the present application further provides an electronic device that can integrate the medical image-based confidential data processing device provided in an embodiment of the present application. Figure 4 Schematic diagram of the structure of an electronic device provided by an embodiment of the present application. Figure 4 The electronic device includes: an input device 43, an output device 44, a memory 42 and one or more processors 41; the memory 42 is used to store one or more programs; when the one or more programs are executed by the one or more processors 41, the one or more processors 41 implement the confidential data processing method based on medical images as provided in the above embodiment. The input device 43, the output device 44, the memory 42 and the processor 41 can be connected via a bus or other means. Figure 4 The example of connecting through bus is taken in the following.

[0140] The processor 41 executes various functional applications and data processing of the device by running the software programs, instructions and modules stored in the memory 42, that is, realizes the above-mentioned confidential data processing method based on medical images.

[0141] The electronic device provided above can be used to execute the confidential data processing method based on medical images provided in the above embodiment, and has corresponding functions and beneficial effects.

[0142] In a fourth aspect, an embodiment of the present application also provides a computer-readable storage medium, which includes a stored computer program; wherein, when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute the confidential data processing method based on medical images as described above, and can achieve the same beneficial effects.

[0143] Of course, the storage medium containing computer executable instructions provided in an embodiment of the present application, whose computer executable instructions are not limited to the confidential data processing method based on medical images as described above, can also execute related operations in the confidential data processing method based on medical images provided in any embodiment of the present application.

[0144] In a fifth aspect, the embodiments of the present application also provide a computer program product, and the methods described in the various embodiments of the present application can be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs or instructions. When the computer program or instruction is loaded and executed on a computer, the process or function described in the various embodiments of the present application is executed in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, a network device, a user device, a core network device, an OAM (Open Application Model) or other programmable device.

[0145] The computer program or instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer program or instructions may be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired or wireless means. The computer-readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server or data center that integrates one or more available media. The available medium may be a magnetic medium, such as a floppy disk, a hard disk, or a magnetic tape; it may also be an optical medium, such as a digital video disk; it may also be a semiconductor medium, such as a solid-state drive. The computer-readable storage medium may be a volatile or non-volatile storage medium, or may include both volatile and non-volatile types of storage media.

[0146] In several embodiments provided in the present application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely schematic. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architecture, functions and operations of the devices, methods and computer program products according to multiple embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of a code, and the module, a program segment or a part of a code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart can be implemented with a dedicated hardware-based system that performs a specified function or action, or can be implemented with a combination of dedicated hardware and computer instructions.

[0147] In addition, the functional modules in the various embodiments of the present application may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.

[0148] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium, including several instructions for enabling an electronic device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0149] The above description is only an embodiment of the present application and is not intended to limit the scope of protection of the present application. For those skilled in the art, the present application may have various changes and variations. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application should be included in the scope of protection of the present application. It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in the subsequent drawings.

[0150] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0151] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

Claims

1. A method for processing confidential data based on medical images, characterized in that: The method comprises: Controlling the imaging system to transmit the generated image data to the storage server through the first encrypted channel; Detecting that the image data transmission is completed, controlling the imaging system to erase the image data; Based on the set storage rules, control the storage server to store image data; Sending an analysis instruction to the storage server to instruct the storage server to send a copy of the image data to the image analysis system for analysis and generating analysis results; The analysis results are detected and transmitted to the storage server through the second encrypted channel, and the image analysis system is controlled to erase the image data copy and the analysis results; Based on the set storage rules, control the storage server to store the analysis results.

2. The method for processing confidential data based on medical images according to claim 1, characterized in that: The controlling imaging system to transmit the generated image data to the storage server through the first encryption channel includes: The transport layer security protocol is used to establish the first encrypted channel, and the imaging system and the storage server are bidirectionally authenticated before the transmission begins; It is detected that the imaging system generates image data, and the image data is encrypted by an encryption algorithm; transmitting the encrypted image data to an authorized storage server through a first encryption channel; The detection and analysis results are transmitted to the storage server through the second encrypted channel, including: The transport layer security protocol is used to establish a second encrypted channel, and the storage server and the image analysis system are bidirectionally authenticated before the transmission begins; When the storage server receives the analysis instruction, it encrypts the copy of the image data using an encryption algorithm; transmitting the encrypted copy of the image data to the image analysis system through a second encrypted channel via the storage server; The image analysis system transmits the obtained analysis result to the storage server through a second encrypted channel; Among them, the encryption algorithm uses a dynamically updated key.

3. The method for processing confidential data based on medical images according to claim 1, characterized in that: The controlling the storage server to store the image data based on the set storage rule includes: Filter out confidential data from image data; Symmetric encryption of confidential data using the Advanced Encryption Standard and randomly generated session keys; When receiving an access request, if the user has access rights, the access request is approved; Among them, the keys are managed by a hardware security module or a distributed key management system, and the confidential data is stored in the form of block encryption. Each block of confidential data is encrypted separately and its corresponding verification code is stored.

4. The method for processing confidential data based on medical images according to claim 1, characterized in that: The controlling the storage server to store the analysis results based on the set storage rules includes: Filter out confidential data from analysis results; Use the Advanced Encryption Standard and randomly generated session keys to symmetric encrypt confidential data, and store confidential data in the form of block encryption. Each block of confidential data is encrypted separately and its corresponding checksum is stored. When an access request is received, if the user has access rights, the access request is approved.

5. The method for processing confidential data based on medical images according to claim 1, characterized in that: Also includes: Filter out confidential data from image data, image copy data, and analysis results; Before the imaging system transmits the image data, a first verification code is generated for the confidential data of the image data by using an encrypted hash algorithm; When the storage server receives the image data, verify whether the first verification code is consistent to compare the integrity of the data; Before the storage server transmits the copy of the image data, a second verification code is generated in the storage server for the confidential data of the copy of the image data by using an encrypted hash algorithm; When the image analysis system receives the copy of the image data, it verifies whether the second check code is consistent, and generates a third check code for the confidential data of the analysis result through an encrypted hash algorithm; When the storage server receives the analysis result, it verifies whether the third check code is consistent to compare the integrity of the data.

6. The method for processing confidential data based on medical images according to claim 1, characterized in that: Also includes: In the process of transmitting various types of data, key data in each type of data is screened out respectively, and a digital signature is generated for the key data for verification; wherein the various types of data include: image data, image copy data and analysis results.

7. The method for processing confidential data based on medical images according to claim 3 or 4, characterized in that: Also includes: Remove non-confidential content from the storage server.

8. A confidential data processing device based on medical images, characterized in that: include: An image generation module, used for controlling the imaging system to transmit the generated image data to the storage server through a first encrypted channel; An image erasing module, used to detect that the image data transmission is completed and control the imaging system to erase the image data; A first storage module, used to control the storage server to store image data based on a set storage rule; An image analysis module, used to send an analysis instruction to the storage server to instruct the storage server to send a copy of the image data to the image analysis system for analysis and to generate an analysis result; A result erasing module, used to detect that the analysis results are transmitted to the storage server through the second encrypted channel, and control the image analysis system to erase the image data copy and the analysis results; The second storage module is used to control the storage server to store the analysis results based on the set storage rules.

9. An electronic device, characterized in that: include: A processor, a memory and a bus, wherein the processor is connected to the memory via the bus, and the memory stores computer-readable instructions. When the computer-readable instructions are executed by the processor, they are used to implement the confidential data processing method based on medical images as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, which, when executed by a server, implements the confidential data processing method based on medical images as described in any one of claims 1-7.

Images