Medical data transmission encryption method

Abstract

The invention discloses a medical data transmission encryption method, which combines the characteristics of multi-terminal data transmission, one-way data transmission of a part of terminals and two-way data transmission of other terminals in a medical scene, designs data transmission modes matched with the terminals related to different data transmission modes for the terminals related to the different data transmission modes, so as to ensure the security of data access and modification. Besides, the technical scheme in the specification also adopts a mode of combining software and hardware, so that not only is the security of data transmission improved through a data encryption mode realized by software, but also the security verification of the opposite end is realized by setting the hardware such as the distributed short-range verification terminal. Especially for a terminal needing bidirectional data transmission, such as an inquiry terminal, verification needs to be assisted by a user terminal in a non-medical data encryption system, and even if the terminal in the medical data encryption system is an illegal terminal, the terminal can be identified in time.

Description

Technical Field

[0001] The present application relates to the technical field of data processing suitable for management, supervision or prediction purposes, and in particular to a method for encrypting medical data transmission. Background Art

[0002] With the continuous development of various medical technologies and the increasing popularity of various medical resources, medical data has gradually become a unique data type. For an individual patient, medical data can reflect the individual's health status; for all patients visiting the same hospital, medical data constitutes big data, which can reflect the laws underlying things. Whether from the perspective of protecting personal privacy or from the perspective of preventing cyber attackers from illegally obtaining information, adequate risk prevention and control should be done for medical data.

[0003] However, the diagnosis and treatment process involves many links and equipment, which provides opportunities for cyber attackers to steal medical data. It can be seen that how to protect medical data in combination with the characteristics of medical scenarios has become an urgent problem to be solved. Summary of the invention

[0004] The embodiment of the present application provides a medical data transmission encryption method to at least partially solve the above technical problems.

[0005] The present application embodiment adopts the following technical solutions:

[0006] In a first aspect, an embodiment of the present application provides a medical data transmission encryption method, the method is based on a medical data encryption system, the system includes a data storage terminal, a consultation terminal, a detection terminal, a distributed short-range verification terminal, and a master control terminal; a user terminal is communicatively connected to the medical data encryption system; the user terminal, the consultation terminal, and the detection terminal are all configured with a short-range verification module, the method includes:

[0007] The user terminal receives first information; the first information is generated by the master control terminal based on a first request sent by the user terminal and a unique identifier of the user terminal; the first request is generated based on the user's registration information;

[0008] When the user is tested, the short-range verification terminal triggers the detection terminal for testing to send the first medical data to the data storage terminal for storage if the user terminal passes the verification in a short-range communication manner; the first medical data is encrypted based on the first original data collected from the user and the first information corresponding to the user;

[0009] When conducting a medical consultation for a user, the short-range verification terminal triggers the medical consultation terminal to obtain the first medical data from the data storage terminal when the user terminal passes the verification in a short-range communication manner;

[0010] After obtaining the consultation result based on the first medical data, the short-range verification terminal sends the consultation result to the data storage end for storage when the consultation terminal passes the verification in a short-range communication manner; the consultation result is obtained by encrypting the second original data of the consultation and the first information corresponding to the user;

[0011] When the consultation terminal needs to obtain the consultation result from the data storage end, or obtain the first medical data again, the data storage end returns the corresponding data to the consultation terminal if the short-range verification terminal passes the verification of the consultation terminal by short-range communication.

[0012] In an optional embodiment of the present specification, triggering the detection terminal for detection to send the first medical data to the data storage terminal for storage includes:

[0013] The short-range verification terminal obtains the first information of the user terminal as the information to be verified by means of short-range communication;

[0014] The short-range verification terminal initiates a query to the master control terminal according to the unique identifier of the user terminal, and if the query result matches the first information, it is determined that the user terminal has passed the verification;

[0015] After the detection terminal generates the first medical data, the detection terminal initiates verification to the short-range verification terminal through short-range communication;

[0016] The short-range verification terminal verifies the portion of the first medical data corresponding to the first information, and if it matches the first information provided by the user terminal, it is determined that the detection terminal has passed the verification;

[0017] When the detection terminal passes the verification, the short-range verification terminal sends a temporary interface for communicating with the data storage terminal to the detection terminal, so that the detection terminal sends the first medical data to the data storage terminal for storage.

[0018] In an optional embodiment of the present specification, triggering the consultation terminal to obtain the first medical data from the data storage terminal includes:

[0019] The short-range verification terminal obtains the first information of the user terminal as the information to be verified by means of short-range communication;

[0020] The short-range verification terminal initiates a query to the master control terminal according to the unique identifier of the user terminal, and if the query result matches the first information, it is determined that the user terminal has passed the verification;

[0021] The short-range verification terminal initiates short-range communication verification to the nearest inquiry terminal detected by it, so as to obtain designated information from the inquiry terminal; the designated information is used to identify the ownership or authority of the inquiry terminal;

[0022] If the designated information matches the first information provided by the user terminal, it is determined that the consultation terminal has passed the verification;

[0023] When the consultation terminal passes the verification, a temporary interface for communicating with the data storage end is sent to the consultation terminal, so that the consultation terminal obtains the first medical data from the data storage end.

[0024] In an optional embodiment of the present specification, the designated information includes at least one of the following: the department to which the consultation terminal belongs, and identification information of the doctor who currently logs into the consultation system with the consultation terminal.

[0025] In an optional embodiment of the present specification, sending the medical consultation result to the data storage terminal for storage includes:

[0026] The short-range verification terminal initiates short-range communication verification to the consultation terminal according to a preset period;

[0027] When the short-range communication verification is passed for a specified number of consecutive times, if a request for sending the consultation result generated by the consultation terminal is detected, a temporary interface for communicating with the data storage end is sent to the consultation terminal, so that the consultation terminal sends the consultation result to the data storage end for storage.

[0028] In an optional embodiment of the present specification, the specified number of times is obtained from the main control terminal; the specified number of times is positively correlated with the preset risk level corresponding to the specified information, the specified number of times when there is a medical record in the user's history is greater than the specified number of times when there is no medical record in the user's history, and the specified number of times when the medical records in the user's history are generated by the same consultation terminal is greater than the specified number of times when the medical records in the user's history are generated by different consultation terminals.

[0029] In an optional embodiment of the present specification, the medical consultation result carries designated information of a medical consultation terminal that generates the medical consultation result; the method further includes:

[0030] When other consultation terminals need to obtain the consultation result or the first medical data from the data storage terminal, the proximity verification terminal will query the consultation result from the data storage terminal as a pending result according to the first information carried in the request of the other consultation terminal;

[0031] If the short-range verification terminal detects that the designated information carried in the pending result does not match the designated information of the other consultation terminals, it sends a collaborative verification request to the master control terminal;

[0032] The master control terminal sends a secondary verification request to the inquiry terminal that generates the inquiry result in response to the collaborative verification request;

[0033] If the master control terminal receives a receipt from the inquiry terminal in response to the secondary verification request, it sends a collaborative verification pass message to the short-range verification terminal; the receipt is generated by the inquiry terminal based on manual operation;

[0034] In response to the collaborative verification pass message, the short-range verification terminal sends a temporary interface for communicating with the data storage terminal to the other consultation terminal.

[0035] In an optional embodiment of the present specification, the first information is encrypted using hash function encryption; other data is encrypted using asymmetric encryption.

[0036] In an optional embodiment of this specification, the method further includes:

[0037] The master control end queries the corresponding medical inquiry result in response to the collaborative verification request, and sends a secondary verification request to the medical inquiry terminal that generates the medical inquiry result if the second original data in the medical inquiry result is not empty;

[0038] In the case where the second original data in the medical consultation result is empty, the master control terminal marks the other medical consultation terminals as risk terminals;

[0039] When it is detected again that the risk terminal accesses the medical inquiry result whose second original data is empty, the master control terminal prohibits the risk terminal from communicating with the short-range verification terminal.

[0040] In a second aspect, an embodiment of the present application further provides a medical data transmission encryption device, which is used to implement the method in the first aspect.

[0041] In a third aspect, an embodiment of the present application further provides an electronic device, including:

[0042] Processor; and

[0043] A memory arranged to store computer executable instructions which, when executed, cause the processor to perform the method steps described in the first aspect.

[0044] In a fourth aspect, an embodiment of the present application further provides a computer-readable storage medium, which stores one or more programs. When the one or more programs are executed by an electronic device including multiple applications, the electronic device executes the method steps described in the first aspect.

[0045] At least one of the above technical solutions adopted in the embodiments of the present application can achieve the following beneficial effects:

[0046] The medical data transmission encryption method provided by the present application combines the characteristics of multi-terminal data transmission in medical scenarios, one-way data transmission for some terminals, and two-way data transmission for other terminals, and designs data transmission methods that are compatible with the terminals involved in different data transmission methods to ensure the security of data access and modification. In addition, the technical solution in this specification also adopts a combination of software and hardware, which not only improves the security of data transmission by means of data encryption implemented by software, but also verifies the security of the terminal by setting distributed short-range verification terminals and other hardware. In particular, for terminals that require two-way data transmission, such as consultation terminals, user terminals in non-medical data encryption systems are required to assist in verification, so that even if the terminal in the medical data encryption system is an illegal terminal, it can be identified more promptly. Even if a network attacker wants to launch an attack on the system in this specification, it is necessary to break through multiple terminals, which makes the attack more difficult and is conducive to improving the security of data. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0048] Figure 1 A schematic diagram of a medical data transmission encryption method provided in an embodiment of this specification;

[0049] Figure 2 It is a schematic diagram of the structure of an electronic device in an embodiment of this specification. DETAILED DESCRIPTION

[0050] The present invention is further described in detail below by specific embodiments in conjunction with the accompanying drawings. Wherein similar elements in different embodiments adopt associated similar element numbers. In the following embodiments, many detailed descriptions are for making the present application better understood. However, those skilled in the art can easily recognize that some features can be omitted in different situations, or can be replaced by other elements, materials, methods. In some cases, some operations related to the present application are not shown or described in the specification, and this is to avoid the core part of the present application being overwhelmed by too much description, and for those skilled in the art, it is not necessary to describe these related operations in detail, and they can fully understand the related operations according to the description in the specification and the general technical knowledge in the art.

[0051] In addition, the features, operations or characteristics described in the specification can be combined in any appropriate manner to form various implementations. At the same time, the steps or actions in the method description can also be interchanged or adjusted in a manner that is obvious to those skilled in the art. Therefore, the various sequences in the specification and the drawings are only for the purpose of clearly describing a certain embodiment and are not meant to be a required sequence, unless otherwise specified that a certain sequence must be followed.

[0052] The serial numbers of the components in this document, such as "first", "second", etc., are only used to distinguish the objects described and do not have any order or technical meaning. The "connection" and "coupling" mentioned in this application, unless otherwise specified, include direct and indirect connections (couplings).

[0053] The technical solutions provided by various embodiments of the present application are described in detail below in conjunction with the accompanying drawings.

[0054] The method in this specification is based on a medical data encryption system. The medical data encryption system is composed of multiple terminals set up in a medical institution, and at least some of the terminals can perform unidirectional or bidirectional data transmission. The terminals included in the medical data encryption system are: a data storage terminal (used to store data generated during the medical process, with limited access, and can be a cloud server. The main goal of the technical solution in this specification is to protect the data in the data storage terminal from attack), a consultation terminal (a terminal used by doctors during consultations, such as a computer. Doctors can access the data in the data storage terminal through the consultation terminal to make a diagnosis based on the data. The consultation terminal may not be unique. For ease of expression, the following only uses "consultation terminal" to exemplify one of the multiple consultation terminals, and uses "other consultation terminals" to exemplify another of the multiple consultation terminals), and a detection terminal (a terminal used by doctors to test patients, such as color ultrasound, X-ray detection, etc. Detection The terminal may not be unique), distributed short-range verification terminals (short-range verification terminals are set up in a one-to-one correspondence with the consultation terminal and the detection terminal. The short-range verification terminal has relatively loose permissions to communicate with the data storage terminal, but can only access limited data stored in the data storage terminal, or certain fields of certain data. The possibility of directly attacking the data storage terminal through the short-range verification terminal is small, and the corresponding risk is also small. Moreover, the short-range verification terminal can only access the data storage terminal after passing the short-range verification. In other words, it can only be attacked on the spot by the short-range verification terminal, and the possibility of such an attack being launched is also small), and the master control terminal (the master control terminal is used to coordinate communications between terminals, but does not have the ability to directly obtain data from the data storage terminal).

[0055] The consultation terminal and the detection terminal in this specification are both equipped with a short-range verification module, which is a module with a short-range communication function, such as an RFID module, which has a sufficient identification distance and is a short-range communication module. The short-range verification module set on the user terminal can be an NFC module. In combination with different usage requirements, different types of short-range verification modules can be installed on the short-range verification terminal.

[0056] like Figure 1 As shown, the medical data transmission encryption method in this manual includes the following steps:

[0057] S100: The user terminal receives first information.

[0058] The first information is generated by the master control terminal based on the first request sent by the user terminal and the unique identifier of the user terminal. The first request is generated based on the registration information. The purpose of this step can be understood as the process of binding the unique identifier of the user terminal and the registration information. The result of the binding enables both the user terminal and the system to form a record. The subsequent verification performed by the short-range communication is also a verification of this binding relationship.

[0059] Nowadays, modern medical institutions have their own applications through which user terminals can receive first information.

[0060] S102: When the user is undergoing a test, the short-range verification terminal triggers the detection terminal for sending the first medical data to the data storage end for storage if the user terminal passes the verification in a short-range communication manner.

[0061] The test performed by the user can be a test item provided by a medical institution, such as a color photo. At this time, the short-range verification terminal can be a device for color ultrasound. The first medical data in this specification is encrypted based on the first original data collected from the user and the first information corresponding to the user. In an optional embodiment of this specification, the method used to encrypt the first information is hash function encryption; the method used to encrypt other data is asymmetric encryption. Different encryption methods are used for different data, mainly considering the different usage frequencies and leakage risks of different data. When the first information is known at one end, the ciphertext obtained by hashing it is consistent. However, if there is no secret key, even if the ciphertext is obtained, it may not be possible to decrypt it. In addition, even if the secret key is held, if the legal first information cannot be obtained, the ciphertext cannot be obtained. In this way, "triplet composite encryption" is achieved.

[0062] In an optional embodiment of the present specification, during the detection process, in order to prevent attacks from network attackers, on the one hand, it is necessary to ensure that there is no abnormality in the user; on the other hand, it is necessary to ensure that the first original data obtained through the detection is the data of the user (i.e., the patient); in addition, it is necessary to ensure the accuracy of the correspondence between the user and the first original data, and to ensure that the detection terminal is not aggressive.

[0063] Therefore, the short-range verification terminal obtains the first information of the user terminal as the information to be verified by means of short-range communication. The short-range verification terminal initiates a query to the master control terminal according to the unique identifier of the user terminal. If the query result matches the first information, the user terminal is determined to have passed the verification (to ensure the legitimacy of the user. Thereafter, the master control terminal sends the first information to the detection terminal so that the detection terminal can establish a connection between the data collected by it and the user). After the detection terminal generates the first medical data, the detection terminal initiates verification to the short-range verification terminal by means of short-range communication (to ensure that the detection terminal is legal. If the detection terminal is not near the short-range verification terminal, it is very likely that it is an illegal terminal in order to contaminate the data stored in the data storage terminal by means of one-way data transmission. Such an illegal terminal cannot pass the verification). The short-range verification terminal verifies the part of the first medical data corresponding to the first information. If it matches the first information provided by the user terminal, the detection terminal is determined to have passed the verification (that is, the first information is encrypted by a hash function. If the encryption results are consistent, the verification is passed). When the detection terminal passes the verification, a temporary interface for communicating with the data storage terminal is sent to the detection terminal, so that the detection terminal sends the first medical data to the data storage terminal for storage. Since the interface is a temporary interface, after the first medical data is stored, the detection terminal cannot transmit detection data to the user again to avoid illegal behavior.

[0064] S104: When conducting a medical consultation with the user, the short-range verification terminal triggers the medical consultation terminal to obtain the first medical data from the data storage terminal if the user terminal passes the verification in a short-range communication manner.

[0065] The consultation process is a process in which the user communicates with the doctor and the doctor draws a diagnosis result based on the first original data.

[0066] In an optional embodiment of the present specification, the short-range verification terminal (the short-range verification terminal is set near the consultation terminal, and is not the verification terminal set near the detection terminal as mentioned above. However, the number of verification terminals can be expanded and the setting position can be adjusted) obtains the first information of the user terminal as the information to be verified through short-range communication. The short-range verification terminal initiates a query to the main control terminal based on the unique identifier of the user terminal. If the result obtained by the query matches the first information, it is determined that the user terminal has passed the verification (to determine the legitimacy of the user). The short-range verification terminal initiates short-range communication verification to the nearest consultation terminal detected by it to obtain specified information from the consultation terminal; the specified information is used to identify the ownership or authority of the consultation terminal (the verification process is actively initiated by the short-range verification terminal to avoid attacks initiated by the consultation terminal. Since the data transmission between the consultation terminal and the data storage terminal is bidirectional, a more cautious verification method is required). If the designated information matches the first information provided by the user terminal (the designated information includes at least one of the following: the department to which the consultation terminal belongs, the identification information of the doctor who currently logs into the consultation system with the consultation terminal. That is, the department matches the registration information, or the attending physician matches the registration information), then it is determined that the consultation terminal has passed the verification. If the consultation terminal has passed the verification, a temporary interface for communicating with the data storage end is sent to the consultation terminal, so that the consultation terminal obtains the first medical data from the data storage end.

[0067] S106: After obtaining the consultation result based on the first medical data, the short-range verification terminal sends the consultation result to the data storage end for storage if the consultation terminal passes the verification in a short-range communication manner.

[0068] The medical consultation result in this specification is obtained by encrypting the second original data of the medical consultation (the second original data is used to characterize that the user suffers from a certain disease, etc.) and the first information corresponding to the user.

[0069] In an optional embodiment of the present specification, after the consultation terminal passes the verification of the short-range verification terminal, the short-range verification terminal initiates short-range communication verification to the consultation terminal according to a preset period; when the short-range communication verifications for the specified number of times closest to the current moment are passed (indicating that there is no abnormality in the consultation terminal during the time period of the specified number of times. Since the data transmission between the consultation terminal and the data storage end is two-way, a more cautious verification method is required), if a request for sending the consultation result generated by the consultation terminal is detected, a temporary interface for communicating with the data storage end is sent to the consultation terminal, so that the consultation terminal sends the consultation result to the data storage end for storage.

[0070] In addition, the risk level of medical data needs to be considered from different dimensions. The risk level of personal medical data is different from that of big data. The risk level when personal medical data is not systematic is lower than the risk level when medical data is systematic. Therefore, in another optional embodiment of the present specification, the specified number of times is obtained from the master control end (the master control end locally stores a correspondence table between the medical terminal and the short-range verification terminal. The existence of a correspondence means the existence of a verification relationship. After the short-range verification terminal determines that the medical terminal has passed the verification, the user's first information and the unique identifier of the short-range verification terminal are sent to the master control end. The master control end determines whether the registration information of the user to which the first information belongs and the medical terminal corresponding to the unique identifier of the short-range verification terminal match based on its local correspondence table. If so, the specified number is generated and returned to the short-range verification terminal). The specified number of times is positively correlated with the preset risk level corresponding to the specified information (the risk level is preset based on manual experience. For example, the risk level of the infectious disease department is higher than the risk level of the dental department. Dental diseases are not contagious), the specified number of times when there is a medical record in the user's history is greater than the specified number of times when there is no medical record in the user's history, and the specified number of times when the medical records in the user's history are generated by the same consultation terminal is greater than the specified number of times when the medical records in the user's history are generated by different consultation terminals (continuous detection and medical data have the conditions to become big data, and the more information they convey, the more cautious they should be).

[0071] S108: When the consultation terminal needs to obtain the consultation result from the data storage end, or obtain the first medical data again, the data storage end returns the corresponding data to the consultation terminal if the short-range verification terminal passes the verification of the consultation terminal in a short-range communication manner.

[0072] The medical data transmission encryption method provided by the present application combines the characteristics of multi-terminal data transmission in medical scenarios, one-way data transmission for some terminals, and two-way data transmission for other terminals, and designs data transmission methods that are compatible with the terminals involved in different data transmission methods to ensure the security of data access and modification. In addition, the technical solution in this specification also adopts a combination of software and hardware, which not only improves the security of data transmission by means of data encryption implemented by software, but also verifies the security of the terminal by setting distributed short-range verification terminals and other hardware. In particular, for terminals that require two-way data transmission, such as consultation terminals, user terminals in non-medical data encryption systems are required to assist in verification, so that even if the terminal in the medical data encryption system is an illegal terminal, it can be identified more promptly. Even if a network attacker wants to launch an attack on the system in this specification, it is necessary to break through multiple terminals, which makes the attack more difficult and is conducive to improving the security of data.

[0073] In some cases, a disease of a certain user may require joint diagnosis by multiple departments or multiple doctors, and there may also be a certain span in time. At this time, the user may have left the hospital and cannot be verified with the assistance of the user's terminal. In an optional embodiment of the present specification, the consultation result carries the specified information of the consultation terminal that generated the consultation result. The method also includes: when other consultation terminals need to obtain the consultation result from the data storage end, or obtain the first medical data, the short-range verification terminal will query the consultation result from the data storage end as a pending result based on the first information carried in the request of the other consultation terminal. If the short-range verification terminal detects that the specified information carried in the pending result does not match the specified information of the other consultation terminal, it sends a collaborative verification request to the master control end. In response to the collaborative verification request, the master control end sends a secondary verification request to the consultation terminal that generates the consultation result. If the master control terminal receives a receipt from the consultation terminal in response to the secondary verification request, a collaborative verification pass message is sent to the short-range verification terminal; the receipt is generated by the consultation terminal based on manual operation (manually identifying whether collaboration has been initiated to other medical terminals). In response to the collaborative verification pass message, the short-range verification terminal sends a temporary interface for communication with the data storage terminal to the other consultation terminal, so that the other consultation terminal can participate in the diagnosis and treatment of the user.

[0074] It can be seen that if the other medical terminal wants to participate in the diagnosis and treatment of the user, the prerequisite is that it can obtain the first information of the user. Since the encryption method of the first information is different from that of other information, and the user himself also holds the first information, it is difficult to guarantee the leakage of the first information caused by the user's own negligence. In other words, the possibility of a network attacker obtaining the first information cannot be completely ruled out. However, if the other medical terminal participates in the diagnosis and treatment at the invitation of the aforementioned medical terminal, then the other medical terminal should understand the progress of the diagnosis and treatment, and at least be able to know whether the second original data has been formed in the historical diagnosis and treatment process.

[0075] Then in an optional embodiment of the present specification, the master control end queries the corresponding medical consultation result in response to the collaborative verification request, and when the second original data in the medical consultation result is not empty, a secondary verification request is issued to the medical consultation terminal that generates the medical consultation result. When the second original data in the medical consultation result is empty (the other medical terminal also requests to query the medical consultation result, obviously without communicating with the previous medical terminal, and there is a risky behavior), the master control end marks the other medical consultation terminal as a risk terminal. When the risk terminal is detected again for accessing the medical consultation result with the second original data being empty, the master control end prohibits the risk terminal from communicating with the short-range verification terminal. This is to prevent network attackers from stealing data.

[0076] In addition, there are also cases where the doctor needs the user to add additional test items after a simple judgment. At this time, since the doctor has not yet made a judgment on the condition, the second original data is also empty. At this time, the test has not been completed, and the query of the unformed consultation results is obviously risky.

[0077] In the above embodiments, if the verification fails, the verification can be re-initiated. If the verification fails for several times, the short-range verification terminal can issue an alarm to warn of the risk.

[0078] Figure 2 This is a schematic diagram of the structure of an electronic device according to an embodiment of the present application. Figure 2 At the hardware level, the electronic device includes a processor, and optionally also includes an internal bus, a network interface, and a memory. The memory may include a memory, such as a high-speed random access memory (RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage. Of course, the electronic device may also include hardware required for other services.

[0079] The processor, network interface and memory can be interconnected through an internal bus, which can be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 2 Only one bidirectional arrow is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0080] The memory is used to store the program. Specifically, the program may include a program code, and the program code includes a computer operation instruction. The memory may include a memory and a non-volatile memory, and provides instructions and data to the processor.

[0081] The processor reads the corresponding computer program from the non-volatile memory into the memory and then runs it, forming a medical data transmission encryption device at the logical level. The processor executes the program stored in the memory and is specifically used to execute any of the above-mentioned medical data transmission encryption methods.

[0082] The above application Figure 1A medical data transmission encryption method disclosed in the illustrated embodiment can be applied to a processor or implemented by a processor. The processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the processor or instructions in the form of software. The above processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present application can be directly embodied as a hardware decoding processor for execution, or a combination of hardware and software modules in the decoding processor for execution. The software module can be located in a storage medium mature in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0083] The electronic device may also perform Figure 1 A medical data transmission encryption method and implementation Figure 1 The functions of the illustrated embodiment will not be described in detail in the embodiments of the present application.

[0084] An embodiment of the present application also proposes a computer-readable storage medium, which stores one or more programs, and the one or more programs include instructions. When the instructions are executed by an electronic device including multiple applications, any one of the aforementioned medical data transmission encryption methods is executed.

[0085] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0086] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0087] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0088] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0089] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0090] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0091] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0092] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0093] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0094] The above is only an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. A medical data transmission encryption method, characterized in that: The method is based on a medical data encryption system, which includes a data storage terminal, a consultation terminal, a detection terminal, a distributed short-range verification terminal, and a master control terminal; a user terminal is communicatively connected with the medical data encryption system; the user terminal, the consultation terminal, and the detection terminal are all equipped with a short-range verification module, and the method includes: The user terminal receives first information; the first information is generated by the master control terminal based on a first request sent by the user terminal and a unique identifier of the user terminal; the first request is generated based on the user's registration information; When the user is tested, the short-range verification terminal triggers the detection terminal for testing to send the first medical data to the data storage terminal for storage if the user terminal passes the verification in the short-range communication mode; the first medical data is encrypted based on the first original data collected from the user and the first information corresponding to the user; When conducting a medical consultation for a user, the short-range verification terminal triggers the medical consultation terminal to obtain the first medical data from the data storage terminal when the user terminal passes the verification in a short-range communication manner; After obtaining the consultation result based on the first medical data, the short-range verification terminal sends the consultation result to the data storage end for storage when the consultation terminal passes the verification in a short-range communication manner; the consultation result is obtained by encrypting the second original data of the consultation and the first information corresponding to the user; When the consultation terminal needs to obtain the consultation result from the data storage end, or obtain the first medical data again, the data storage end returns the corresponding data to the consultation terminal if the short-range verification terminal passes the verification of the consultation terminal by short-range communication.

2. The method according to claim 1, characterized in that: Triggering the detection terminal for detection to send the first medical data to the data storage end for storage, including: The short-range verification terminal obtains the first information of the user terminal as the information to be verified by means of short-range communication; The short-range verification terminal initiates a query to the master control terminal according to the unique identifier of the user terminal, and if the query result matches the first information, it is determined that the user terminal has passed the verification; After the detection terminal generates the first medical data, the detection terminal initiates verification to the short-range verification terminal by means of short-range communication; The short-range verification terminal verifies the portion of the first medical data corresponding to the first information, and if it matches the first information provided by the user terminal, it is determined that the detection terminal has passed the verification; When the detection terminal passes the verification, the short-range verification terminal sends a temporary interface for communicating with the data storage terminal to the detection terminal, so that the detection terminal sends the first medical data to the data storage terminal for storage.

3. The method according to claim 1, characterized in that: Triggering the consultation terminal to obtain the first medical data from the data storage terminal includes: The short-range verification terminal obtains the first information of the user terminal as the information to be verified by means of short-range communication; The short-range verification terminal initiates a query to the master control terminal according to the unique identifier of the user terminal, and if the query result matches the first information, it is determined that the user terminal has passed the verification; The short-range verification terminal initiates short-range communication verification to the nearest inquiry terminal detected by it, so as to obtain designated information from the inquiry terminal; the designated information is used to identify the ownership or authority of the inquiry terminal; If the designated information matches the first information provided by the user terminal, it is determined that the consultation terminal has passed the verification; When the consultation terminal passes the verification, a temporary interface for communicating with the data storage end is sent to the consultation terminal, so that the consultation terminal obtains the first medical data from the data storage end.

4. The method according to claim 3, characterized in that: The designated information includes at least one of the following: the department to which the consultation terminal belongs, and the identification information of the doctor who currently logs into the consultation system through the consultation terminal.

5. The method according to claim 3, characterized in that: Sending the medical consultation result to the data storage terminal for storage includes: The short-range verification terminal initiates short-range communication verification to the consultation terminal according to a preset period; When the short-range communication verification is passed for a specified number of consecutive times, if a request for sending the consultation result generated by the consultation terminal is detected, a temporary interface for communicating with the data storage end is sent to the consultation terminal, so that the consultation terminal sends the consultation result to the data storage end for storage.

6. The method according to claim 3, characterized in that: The specified number of times is obtained from the main control end; the specified number of times is positively correlated with the preset risk level corresponding to the specified information; the specified number of times when there is a medical record in the user's history is greater than the specified number of times when there is no medical record in the user's history; and the specified number of times when the medical records in the user's history are generated by the same consultation terminal is greater than the specified number of times when the medical records in the user's history are generated by different consultation terminals.

7. The method according to claim 3, characterized in that: The medical consultation result carries the designated information of the medical consultation terminal that generated the medical consultation result; the method further includes: When other consultation terminals need to obtain the consultation result or the first medical data from the data storage terminal, the proximity verification terminal will query the consultation result from the data storage terminal as a pending result according to the first information carried in the request of the other consultation terminal; If the short-range verification terminal detects that the designated information carried in the pending result does not match the designated information of the other consultation terminals, it sends a collaborative verification request to the master control terminal; The master control terminal sends a secondary verification request to the inquiry terminal that generates the inquiry result in response to the collaborative verification request; If the master control terminal receives a receipt from the inquiry terminal in response to the secondary verification request, it sends a collaborative verification pass message to the short-range verification terminal; the receipt is generated by the inquiry terminal based on manual operation; In response to the collaborative verification pass message, the short-range verification terminal sends a temporary interface for communicating with the data storage terminal to the other consultation terminal.

8. The method according to claim 1, characterized in that: The method used to encrypt the first information is hash function encryption; the method used to encrypt other data is asymmetric encryption.

9. The method according to claim 7, characterized in that: The method further comprises: The master control end queries the corresponding medical inquiry result in response to the collaborative verification request, and sends a secondary verification request to the medical inquiry terminal that generates the medical inquiry result if the second original data in the medical inquiry result is not empty; In the case where the second original data in the medical consultation result is empty, the master control terminal marks the other medical consultation terminals as risk terminals; When it is detected again that the risk terminal accesses the medical inquiry result whose second original data is empty, the master control terminal prohibits the risk terminal from communicating with the short-range verification terminal.

10. An electronic device, comprising: processor; as well as A memory arranged to store computer executable instructions, which when executed cause the processor to perform the method of any one of claims 1 to 9.

Images