A blockchain technology-based safe sharing of maritime medical record management method and system

Abstract

The application provides a safe sharing maritime medical record management method and system based on blockchain technology. Wherein, access authorization of specific patient medical data is obtained from a maritime medical institution; a patient medical record abstract is created and processed to generate a tamper-proof distributed ledger entry with a timestamped evidence, obtaining a protected medical record abstract entry; the correctness and safety of the smart contract rules are checked, the access conditions and permissions are defined, and the safety smart contract rules specific to each medical record are generated; the access request of other maritime medical institutions is evaluated and processed to obtain a safety shared medical record; after each successful access and modification of the safety shared medical record, the detailed interaction is immediately recorded in the blockchain to form an unchangeable history record. The technical scheme provided by the application improves the safety sharing and privacy protection level of medical data, and ensures the transparency and responsibility traceability.

Description

Technical Field

[0001] This application relates to the field of maritime medical data management and secure sharing technology, and in particular to a secure sharing method and system for maritime medical record management based on blockchain technology. Background Technology

[0002] In a maritime environment, medical facilities can be geographically distant and communication is often limited. Therefore, managing medical records at sea requires an efficient and secure approach to ensure authorized access, updating, and sharing of patient data across different entities. Medical record management systems in this environment must handle complex access controls and provide robust privacy protections to meet the demands of rapid response in emergency situations, while simultaneously ensuring data security and integrity.

[0003] Currently, traditional medical record sharing relies primarily on centralized database systems or paper documents. While these methods are sufficient for land-based medical institutions, they are clearly inadequate for maritime environments. Furthermore, some emerging solutions are attempting to incorporate blockchain technology to enhance the security and transparency of medical data, but these are typically limited to simple transaction records or static information storage, failing to address the issues of dynamic access control and privacy protection.

[0004] However, traditional methods not only struggle to meet the demands of maritime medical services but also prove particularly vulnerable to large-scale emergencies. Centralized systems are prone to becoming single points of failure, and attacks could lead to the leakage of vast amounts of sensitive information. While existing blockchain-based solutions improve security, they often neglect support for real-time access control and lack effective mechanisms to ensure the protection of personal privacy in practical applications. Furthermore, most solutions fail to adequately consider the maintenance of long-term health records, which is crucial for patients' subsequent treatment. The novel approach mentioned above, by combining multiple advanced technologies such as blockchain, smart contracts, attribute encryption, proxy re-encryption, and differential privacy, aims to overcome the limitations of existing systems and provide a comprehensive and efficient solution for the secure sharing of maritime medical records. Summary of the Invention

[0005] This application provides a secure sharing method and system for managing maritime medical records based on blockchain technology, in order to solve the problems of poor security sharing and privacy protection of medical data in the prior art.

[0006] In a first aspect, embodiments of this application provide a secure, shared method for managing maritime medical records based on blockchain technology, including:

[0007] Obtain access authorization for specific patient medical data from maritime medical institutions to ensure that only legally authorized entities can access, update, and share medical information;

[0008] Based on the access authorization and in conjunction with a secure hash algorithm, the patient's medical record summary is created to generate an immutable distributed ledger entry with timestamp evidence. Ring signature technology is then applied to anonymize the creator of the entry, resulting in a privacy-protected medical record summary entry.

[0009] Based on the privacy-protected medical record summary entries, the correctness and security of the smart contract rules are checked through a formal verification system, and access conditions and permissions are defined using a dynamic access control algorithm to generate secure smart contract rules specific to each medical record.

[0010] By utilizing attribute-based encryption and proxy re-encryption techniques, access requests from other maritime medical institutions are evaluated and processed according to the rules of the secure smart contract. Temporary access is granted when preset conditions are met, and differential privacy technology is used to protect sensitive personal information during the sharing process, thereby obtaining securely shared medical records.

[0011] Each successful access to and modification of the securely shared medical records is immediately recorded in the blockchain, forming an immutable historical record to ensure transparency and accountability, while maintaining the integrity of the patient's long-term health records.

[0012] Optionally, based on the access authorization and in conjunction with a secure hash algorithm, the patient's medical record summary is created to generate an immutable distributed ledger entry with timestamped evidence. Ring signature technology is then applied to anonymize the entry's creator, resulting in a privacy-protected medical record summary entry, including:

[0013] Using the access authorization, medical data related to a specific patient is obtained from a maritime medical institution, and the medical data is extracted and processed to obtain a medical record summary formed from key information;

[0014] Based on the medical record summary, a secure hash algorithm is used to process the medical record summary to generate a unique corresponding hash value, ensuring the integrity of the medical record summary content and preventing unauthorized changes, thus obtaining a securely hashed medical record summary.

[0015] Based on the securely hashed medical record summary, the current timestamp information is added as evidence of the creation time to ensure that the creation time and order of the medical record summary are traceable, and a medical record summary with timestamp evidence is generated.

[0016] Using blockchain technology, a new distributed ledger entry is created based on the medical record summary with timestamp evidence. This distributed ledger entry is then appended to the blockchain-based distributed ledger, arranged in chronological order and immutable, thus obtaining the distributed ledger entry.

[0017] By applying ring signature technology, a group of signers is selected, but the identity of the actual signers is not revealed, and the distributed ledger entries are signed to anonymize the creators of the entries, thus obtaining anonymized distributed ledger entries.

[0018] Based on the anonymized distributed ledger entries, these anonymized distributed ledger entries are used as the final privacy-protected medical record summary entries, ensuring the security and privacy of the medical record summary.

[0019] Optionally, the step of processing the medical record digest using a secure hash algorithm to generate a unique corresponding hash value, ensuring the integrity of the medical record digest content and preventing unauthorized alteration, to obtain a securely hashed medical record digest, includes:

[0020] By using medical record summaries obtained from maritime medical institutions and processed through extraction, key information elements in the medical record summaries are identified and selected to obtain key information for verifying the core part of the patient's medical records.

[0021] Based on the key information, the medical record summary is preprocessed to standardize and remove unnecessary characters or format differences that affect the consistency of the hash results, thereby obtaining a standardized medical record summary.

[0022] Based on the standardized medical record summary, a secure hash algorithm is used to calculate and process the standardized medical record summary to generate a fixed-length, uniquely corresponding hash value. The hash value serves as the digital fingerprint of the medical record summary. Any slight data change will cause a significant change in the hash value, thus ensuring the integrity and authenticity of the medical record summary content.

[0023] The generated hash value is used to perform a consistency check to ensure that the same medical record summary will produce the same hash value no matter how it is processed, thus confirming the integrity and tamper-proof status of the medical record summary content.

[0024] Based on the hash value after the consistency check, the generated hash value is associated with the original medical record summary to form an indivisible whole, resulting in a securely hashed medical record summary.

[0025] Optionally, the privacy-protected medical record summary entries are used to verify the correctness and security of the smart contract rules through a formal verification system. Access conditions and permissions are defined using a dynamic access control algorithm to generate secure smart contract rules specific to each medical record, including:

[0026] Using the privacy-protected medical record summary entries, the privacy-protected medical record summary entries are submitted as input to a formal verification system to automatically check and verify the smart contract code, ensuring that the smart contract code logic behavior meets expectations and that there are no security vulnerabilities or errors, thus obtaining verified smart contract rules.

[0027] Based on the verified smart contract rules and combined with the dynamic permission control algorithm, access conditions and permissions are defined and processed. Access permissions are dynamically adjusted according to different usage scenarios and user roles to ensure that specific operations, including viewing, editing or sharing medical records, can only be performed when preset conditions are met, thus generating predefined access conditions and permissions.

[0028] Based on the defined access conditions and permissions, secure smart contract rules specific to each medical record are encoded and generated to ensure that the secure smart contract rules are transparent and tamper-proof, and comply with relevant laws, regulations and industry standards to ensure that all operations are legal and compliant.

[0029] Optionally, based on the verified smart contract rules and combined with a dynamic access control algorithm, access conditions and permissions are defined and processed. Access permissions are dynamically adjusted according to different usage scenarios and user roles to ensure that specific operations, including viewing, editing, or sharing medical records, can only be performed when preset conditions are met. This generates predefined access conditions and permissions, including:

[0030] Using the verified smart contract rules as a basis, and combining them with a dynamic permission control algorithm, the access conditions and permissions are defined and processed. Based on different use cases and user roles, precise and flexible access control strategies are formulated, and a preliminary draft of access conditions and permissions is generated.

[0031] Based on the specific use case and user role, the required access permission level and type are identified and processed in different situations to obtain use case and user role information;

[0032] Based on the aforementioned usage scenarios and user role information, the preliminary draft of access conditions and permissions is further refined and improved, specifying which roles perform specific operations under what conditions, thus forming an access conditions and permissions framework.

[0033] By applying a dynamic access control algorithm, based on the access conditions and permission framework, the access conditions are further refined, and the access permissions are automatically adjusted according to real-time environmental changes to ensure that the access conditions always meet the current security requirements and regulatory requirements, thus obtaining refined access conditions and permissions.

[0034] The refined access conditions and permissions are tested multiple times to simulate various operational scenarios, ensuring that all preset conditions can correctly trigger the corresponding permission control mechanism. Based on the test results, necessary optimizations are made to generate stable and reliable well-defined access conditions and permissions.

[0035] Optionally, the verified smart contract rules are used as a basis to define access conditions and permissions in conjunction with a dynamic access control algorithm. Based on different use cases and user roles, precise and flexible access control strategies are formulated, generating a preliminary draft of access conditions and permissions, including:

[0036] By utilizing the verified smart contract rules, all subsequent operations are ensured to comply with the verified security and correctness standards, thus obtaining the verified smart contract rules.

[0037] Based on the verified smart contract rules and combined with the dynamic permission control algorithm, the definition and processing of access conditions and permissions are initiated, resulting in the permission definition and processing mechanism after initiation.

[0038] By utilizing the post-startup permission definition and processing mechanism, specific usage scenarios and user roles are analyzed, and the required access permission levels and types under different circumstances are identified and classified to obtain usage scenario and user role information.

[0039] Based on the usage scenarios and user role information, precise and flexible access control policies are formulated for each usage scenario and user role, clearly specifying which roles perform specific operations under what conditions, thus forming access control policies;

[0040] Based on the access control policy, a preliminary draft of access conditions and permissions is generated, which specifies the access permissions for different roles under different circumstances.

[0041] Optionally, the method utilizes attribute-based encryption and proxy re-encryption techniques to evaluate and process access requests from other maritime medical institutions according to the secure smart contract rules, granting temporary access when preset conditions are met, and employing differential privacy technology to protect sensitive personal information during the sharing process, thereby obtaining securely shared medical records, including:

[0042] Using attribute-based encryption technology, according to the access conditions and permissions defined in the secure smart contract rules, the patient's medical data is encrypted to generate encrypted data with specific attribute tags, ensuring that only entities with the corresponding decryption attributes can decrypt and access this data to obtain the encrypted medical data.

[0043] Based on the encrypted medical data, and combined with proxy re-encryption technology, when other maritime medical institutions make access requests, the encrypted medical data is re-encrypted through an authorized proxy server to obtain the re-encrypted medical data.

[0044] According to the security smart contract rules, access requests from other maritime medical institutions are evaluated and processed. The smart contract automatically checks whether the request meets the preset access conditions and grants temporary access rights when all conditions are met, thus obtaining the evaluated access rights.

[0045] Based on the assessed access permissions and the re-encrypted medical data, differential privacy technology is used to protect sensitive personal information during the sharing process. By adding appropriate random noise to the query results, the impact of individual data points is masked, resulting in privacy-protected shared data.

[0046] Based on the privacy-protected shared data, secure and shared medical records are ultimately generated, ensuring effective access and use of medical data throughout the entire data sharing process, and strictly protecting patient privacy and sensitive personal information.

[0047] Secondly, embodiments of this application provide a secure, shared maritime medical record management system based on blockchain technology, comprising:

[0048] The acquisition module is used to obtain access authorization for specific patient medical data from maritime medical institutions, ensuring that only legally authorized entities can access, update, and share medical information;

[0049] The generation module is used to create a patient medical record summary based on the access authorization and in combination with a secure hash algorithm, generate an immutable distributed ledger entry with timestamp evidence, and apply ring signature technology to anonymize the creator of the entry, thus obtaining a privacy-protected medical record summary entry.

[0050] The inspection module is used to check the correctness and security of smart contract rules based on the privacy-protected medical record summary entries through a formal verification system, define access conditions and permissions using a dynamic access control algorithm, and generate secure smart contract rules specific to each medical record.

[0051] The evaluation module is used to evaluate access requests from other maritime medical institutions according to the rules of the secure smart contract, using attribute-based encryption and proxy re-encryption technologies. When preset conditions are met, temporary access is granted, and differential privacy technology is used to protect sensitive personal information during the sharing process, so as to obtain securely shared medical records.

[0052] The recording module is used to immediately record the details of the interaction in the blockchain after each successful access to and modification of the securely shared medical records, forming an immutable historical record to ensure transparency and accountability, while maintaining the integrity of the patient's long-term health records.

[0053] Thirdly, embodiments of this application provide a computing device, including a processing component and a storage component; the storage component stores one or more computer instructions; the one or more computer instructions are to be invoked and executed by the processing component to implement a secure sharing maritime medical record management method based on blockchain technology as described in any of the first aspects.

[0054] Fourthly, embodiments of this application provide a computer storage medium storing a computer program, which, when executed by a computer, implements a secure sharing method for managing maritime medical records based on blockchain technology as described in any of the first aspects.

[0055] In this embodiment, access authorization for specific patient medical data is obtained from a maritime medical institution, ensuring that only legally authorized entities can access, update, and share medical information. Based on the access authorization and a secure hash algorithm, a summary of the patient's medical records is created, generating an immutable distributed ledger entry with timestamped evidence. Ring signature technology is applied to anonymize the creator of the entry, resulting in a privacy-protected medical record summary entry. Based on this privacy-protected medical record summary entry, a formal verification system checks the correctness and security of smart contract rules. A dynamic access control algorithm defines access conditions and permissions, generating secure smart contract rules specific to each medical record. Attribute-based encryption and proxy re-encryption technologies are used to evaluate access requests from other maritime medical institutions according to the secure smart contract rules. Temporary access is granted when preset conditions are met, and differential privacy technology is used to protect sensitive personal information during sharing, resulting in securely shared medical records. After each successful access to and modification of the securely shared medical record, the details of the interaction are immediately recorded in the blockchain, forming an unalterable historical record to ensure transparency and accountability, while maintaining the integrity of the patient's long-term health records.

[0056] The technical solution of this application has the following beneficial effects:

[0057] This application utilizes secure hash algorithms and distributed ledger technology to ensure the immutability of medical data, enhancing data security and trustworthiness. By employing ring signature and differential privacy technologies, it anonymizes entry creators and protects sensitive personal information, effectively preventing data leaks and privacy breaches. Combining dynamic access control algorithms and smart contract rules, it precisely defines and manages access permissions, ensuring that only legally authorized entities can access, update, and share medical information. All access and modification operations are meticulously recorded in the blockchain, ensuring that each interaction step is immutable, enhancing system transparency and accountability. Attribute-based encryption and proxy re-encryption technologies enable secure sharing of medical data between different medical institutions, promoting medical collaboration and efficient resource utilization. Records of each successful access and modification are stored in the blockchain, ensuring the integrity and consistency of patients' long-term health records and facilitating long-term health management.

[0058] Furthermore, to ensure the security and privacy of patient medical data, this embodiment first utilizes access authorization to obtain medical data related to a specific patient from a maritime medical institution and extracts key information to form a medical record summary. Then, a secure hash algorithm is used to process the medical record summary, generating a unique hash value to ensure its integrity and prevent unauthorized alteration. Based on this, a current timestamp is added as evidence of the creation time, generating a medical record summary with timestamp evidence. A new distributed ledger entry is then created using blockchain technology. This entry is appended to the blockchain-based distributed ledger, arranged chronologically and immutably. Ring signature technology is applied to anonymize the entry, ensuring the creator's identity is not revealed, ultimately forming a privacy-protected medical record summary entry. Subsequently, this entry is submitted to a formal verification system for automated checking and verification of the smart contract code, ensuring its logical behavior is as expected and free from security vulnerabilities or errors. Based on proven smart contract rules and combined with dynamic permission control algorithms, access conditions and permissions are defined for different use cases and user roles, generating secure smart contract rules specific to each medical record to ensure that all operations are legal, compliant, transparent and tamper-proof.

[0059] Through the above methods, the system not only improves the security and privacy protection of medical data, but also enhances data integrity and immutability. The application of timestamp evidence and blockchain technology ensures the traceability of the creation time and order of medical record summaries, while ring signature technology effectively protects the privacy of the creator. The combination of formal verification system and dynamic access control algorithm ensures the correctness and security of smart contract rules, while achieving precise access management and guaranteeing the legality and compliance of medical data during sharing and access. The overall solution promotes efficient collaboration between different medical institutions, while maintaining the integrity of patients' long-term health records and ensuring the transparency and traceability of the system. These or other aspects of this application will become more apparent from the following description of embodiments. Attached Figure Description

[0060] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0061] Figure 1 A flowchart illustrating a secure, shared maritime medical record management method based on blockchain technology, provided as an embodiment of this application;

[0062] Figure 2 A schematic diagram of a secure, shared maritime medical record management system based on blockchain technology is provided for embodiments of this application.

[0063] Figure 3 This is a schematic diagram of the structure of a computing device provided in an embodiment of this application. Detailed Implementation

[0064] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings.

[0065] In some of the processes described in the specification, claims, and accompanying drawings of this application, multiple operations appearing in a specific order are included. However, it should be clearly understood that these operations may not be executed in the order they appear herein, or may be executed in parallel. The operation numbers, such as 101, 102, etc., are merely used to distinguish different operations and do not themselves represent any execution order. Furthermore, these processes may include more or fewer operations, and these operations may be executed sequentially or in parallel. It should be noted that the descriptions such as "first," "second," etc., in this document are used to distinguish different messages, devices, modules, etc., and do not represent a chronological order, nor do they limit "first" and "second" to different types.

[0066] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0067] Figure 1 A flowchart illustrating a secure, shared maritime medical record management method based on blockchain technology is provided in this application embodiment. Figure 1 As shown, the method includes:

[0068] 101. Obtain access authorization for specific patient medical data from maritime medical institutions to ensure that only legally authorized entities can access, update, and share medical information;

[0069] Access authorization refers to ensuring, through a strict access control system, that only legally authorized entities (such as doctors, nurses, or emergency responders) can access, update, and share a specific patient's medical information. This includes authentication and authorization mechanisms to prevent unauthorized access, protect patient privacy, and ensure data security.

[0070] During implementation, the system first interfaces with the security authentication platform of the maritime medical institution to obtain access authorization for specific patients' medical data. This authorization is based on multi-factor authentication (such as username / password, biometrics, etc.) and uses smart contract rules for dynamic permission management to ensure that only requests that meet preset conditions are granted access.

[0071] For example, in a maritime emergency scenario, a doctor on a cruise ship needs to review a patient's medical records. The doctor sends an access request to the hospital's server via a mobile device. The server verifies the doctor's identity and checks if they have the appropriate access permissions. Once verification is successful, the doctor can securely access the necessary medical data, and the system records this access operation to ensure accountability.

[0072] 102. Based on the access authorization and in conjunction with a secure hash algorithm, the patient's medical record summary is created to generate an immutable distributed ledger entry with timestamp evidence. The ring signature technology is then applied to anonymize the creator of the entry, resulting in a privacy-protected medical record summary entry.

[0073] Secure hashing algorithms are a cryptographic technique that processes data to generate fixed-length hash values, ensuring data integrity and uniqueness. A distributed ledger entry is a unit of record in a blockchain, containing a timestamp, hash value, and other metadata, ensuring that the creation time and order of each entry are traceable and tamper-proof. Ring signature technology is used to anonymize the creator of entries, protecting personal privacy.

[0074] Based on the obtained access authorization, the system extracts key information from the patient's medical records, forms a summary, and generates a unique hash value using a secure hash algorithm. Subsequently, a current timestamp is added as evidence of the creation time. This hash value and timestamp are combined into a new distributed ledger entry, which is then appended to the distributed ledger using blockchain technology. Finally, ring signature technology is applied to sign the entry, anonymizing the creator's identity.

[0075] Continuing with the example above, after a doctor successfully accesses a patient's medical records, the system automatically generates a medical record summary, including key information such as the diagnosis and treatment plan. The system then uses the SHA-256 algorithm to calculate the hash value of the summary and adds a current timestamp, forming an immutable distributed ledger entry. This entry is appended to the blockchain, and ring signature technology is used to anonymize the creator (i.e., the doctor), ensuring privacy protection.

[0076] 103. Based on the privacy-protected medical record summary entries, the correctness and security of the smart contract rules are checked through a formal verification system, and access conditions and permissions are defined using a dynamic access control algorithm to generate secure smart contract rules specific to each medical record.

[0077] Formal verification systems are automated tools used to check whether the logic and behavior of smart contract code conform to expectations, ensuring that there are no security vulnerabilities or errors. Dynamic access control algorithms, on the other hand, dynamically adjust access permissions based on different use cases and user roles, ensuring that only users who meet preset conditions can perform specific operations, such as viewing, editing, or sharing medical records.

[0078] The system submits the generated privacy-protected medical record summaries to a formal verification system, which automatically checks the correctness and security of the smart contract code. After verification, combined with a dynamic access control algorithm, it defines access conditions and permissions for different use cases and user roles, generating secure smart contract rules specific to each medical record to ensure all operations are legal, compliant, transparent, and tamper-proof.

[0079] In the aforementioned emergency rescue case, the generated medical record summary entries were submitted to a formal verification system. The system automatically checked the smart contract code to ensure its logical behavior was correct and that there were no security vulnerabilities. After successful verification, the system dynamically adjusted access permissions based on the doctor's role and the needs of the emergency rescue scenario, ensuring that the doctor could only view and update the patient's medical information when necessary, and generated corresponding smart contract rules to guarantee the legality and compliance of the operations.

[0080] 104. Using attribute-based encryption and proxy re-encryption technologies, the access requests from other maritime medical institutions are evaluated and processed according to the rules of the secure smart contract. Temporary access is granted when preset conditions are met, and differential privacy technology is used to protect sensitive personal information during the sharing process, thereby obtaining securely shared medical records.

[0081] Attribute-based encryption and proxy re-encryption technologies allow the system to evaluate and process access requests from other maritime medical institutions according to secure smart contract rules, granting temporary access when preset conditions are met. Differential privacy technology protects sensitive personal information during data sharing, ensuring that individual privacy is not compromised even during data aggregation and analysis.

[0082] The system utilizes attribute-based encryption and proxy re-encryption techniques to evaluate access requests from other maritime medical institutions according to secure smart contract rules. If the request meets preset conditions, the system grants temporary access, allowing the other party to access specific medical data for a limited time. Simultaneously, differential privacy technology is employed to protect sensitive personal information during data sharing, ensuring privacy is not violated.

[0083] Suppose a doctor on another cruise ship needs to know the condition of the same patient in order to provide appropriate emergency care. The system evaluates the doctor's access request according to smart contract rules. Once the doctor's qualifications are confirmed, temporary access is granted, allowing them to view necessary medical information for a limited time. Throughout this process, differential privacy technology ensures that the patient's privacy remains strictly protected even as data is aggregated and analyzed.

[0084] 105. After each successful access to and modification of the securely shared medical records, the details of the interaction shall be immediately recorded in the blockchain to form an immutable historical record, ensuring transparency and accountability, while maintaining the integrity of the patient's long-term health records.

[0085] Blockchain is a decentralized distributed ledger technology that records all transactions and operational history, ensuring that every interaction step is immutable and enhancing the system's transparency and traceability. Long-term health record integrity refers to maintaining a patient's complete medical history by meticulously recording every successful access and modification, which facilitates long-term health management.

[0086] Each successful access to and modification of the securely shared medical records immediately records the details of the interaction on the blockchain, creating an immutable historical record. These records include not only the time, content, and type of operation, but also the operator's identity (anonymized) and the permissions used. In this way, the system ensures transparency and traceability of all operations, while maintaining the integrity of patients' long-term health records.

[0087] In the aforementioned emergency case, whenever a doctor successfully accessed or modified a patient's medical records, the system immediately recorded the details of this interaction on the blockchain. These records included not only the specific time, content, and type of operation, but also the operator's identity (anonymized) and the permissions used. In this way, the system ensured the transparency and traceability of all operations, while maintaining the integrity of the patient's long-term health records and providing a reliable basis for future medical decisions.

[0088] Through the implementation of steps 101 to 105, the system not only improves the security and privacy protection of medical data but also enhances data integrity and immutability. The application of timestamp evidence and blockchain technology ensures the traceability of the creation time and sequence of medical record summaries, while ring signature technology effectively protects the privacy of the creators. The combination of a formal verification system and a dynamic access control algorithm ensures the correctness and security of smart contract rules, while achieving precise access management and guaranteeing the legality and compliance of medical data during sharing and access. The overall solution promotes efficient collaboration between different medical institutions while maintaining the integrity of patients' long-term health records, ensuring system transparency and accountability.

[0089] To address potential data redundancy and processing efficiency issues during medical record summary generation, in some embodiments, step 102 involves creating a patient's medical record summary based on the access authorization and a secure hash algorithm. This generates an immutable, timestamped distributed ledger entry, and ring signature technology is applied to anonymize the entry's creator, resulting in a privacy-protected medical record summary entry. This includes:

[0090] Using the access authorization, medical data related to a specific patient is obtained from a maritime medical institution. This data is then extracted and processed to obtain a medical record summary containing key information. Based on this summary, a secure hashing algorithm is used to process it, generating a unique hash value to ensure the integrity of the summary content and prevent unauthorized alteration, resulting in a securely hashed medical record summary. Based on this securely hashed summary, a current timestamp is added as evidence of the creation time, ensuring the creation time and order of the medical record summary are traceable, generating a medical record summary with timestamp evidence. Blockchain is then used... Using blockchain technology, a new distributed ledger entry is created based on the timestamped medical record summary. This entry is appended to the blockchain-based distributed ledger, arranged chronologically and immutably, resulting in a distributed ledger entry. Ring signature technology is applied, selecting a group of signers without revealing their identities to sign the distributed ledger entry, anonymizing the entry's creator, resulting in an anonymized distributed ledger entry. Based on this anonymized entry, it serves as the final privacy-protected medical record summary entry, ensuring the security and privacy of the medical record summary.

[0091] In this embodiment, medical data extraction processing refers to screening and extracting key information from a large amount of raw medical data to form a concise and comprehensive medical record summary. This includes, but is not limited to, key data such as medical history, diagnosis results, and treatment plans, used to ensure the efficiency and accuracy of subsequent processing. A secure hash algorithm is an encryption technology that generates a fixed-length hash value by processing data, ensuring data integrity and uniqueness. The hash value can be used to verify whether data has been tampered with, and is an important means of ensuring data integrity. Timestamp evidence refers to adding current time information to the generated medical record summary as evidence of the creation time, ensuring that the creation time and order of each entry are traceable, preventing data tampering or forgery. A distributed ledger entry is a record unit in the blockchain, containing a timestamp, hash value, and other metadata, ensuring that the creation time and order of each entry are traceable and tamper-proof. Ring signature technology is a cryptographic method that allows any one of a group of signers to sign a message without revealing the identity of the actual signer, effectively protecting the privacy of the creator.

[0092] In this embodiment, firstly, through a legitimately authorized access request, the system extracts all medical data related to a specific patient from the secure database of a maritime medical institution. Secondly, the system uses predefined rules and algorithms to filter key information from the extracted medical data, such as medical history, diagnosis results, and treatment plans, forming a concise and comprehensive medical record summary. Next, the system processes the medical record summary using secure hash algorithms such as SHA-256 to generate a unique hash value, ensuring the integrity of the summary content and preventing unauthorized alteration. Further, the system adds the current timestamp information to the hash value as evidence of the creation time, ensuring the traceability of the creation time and order of each entry. Even further, the system appends the timestamped medical record summary to the blockchain, forming a new distributed ledger entry, arranged chronologically and immutable. Then, the system applies ring signature technology, selecting a group of signers (such as multiple doctors or nurses) without revealing the actual signers' identities, to sign the distributed ledger entry, anonymizing the entry's creator. Finally, the system uses the anonymized distributed ledger entries as the final privacy-preserving medical record summary entries, ensuring their security and privacy.

[0093] Here is a specific example:

[0094] Imagine a maritime emergency rescue scenario where a doctor on a cruise ship needs to quickly access a patient's medical history to provide emergency treatment. The doctor sends an access request to the hospital server via a mobile device. After the server verifies the doctor's identity and grants access, the system begins executing the steps described above:

[0095] First, the system retrieves all of the patient's medical records from the cruise ship's medical database, including medical history, diagnosis results, treatment plans, etc.

[0096] Secondly, the system uses predefined rules to filter out key information from the extracted medical data, forming a concise and comprehensive summary of medical records, such as the most recent physical examination report and a list of allergic drugs.

[0097] Next, the system uses the SHA-256 algorithm to process the medical record summary, generating a unique hash value to ensure the integrity of the summary content and prevent unauthorized alteration.

[0098] Furthermore, the system adds the current timestamp information to the hash value as evidence of the creation time, ensuring that the creation time and order of each entry are traceable.

[0099] Furthermore, the system appends summaries of medical records with timestamp evidence to the blockchain, forming a new distributed ledger entry that is chronologically ordered and immutable.

[0100] Then, the system applies ring signature technology, selects a group of signers (such as multiple doctors and nurses involved in emergency rescue), but does not reveal the identities of the actual signers, to sign the distributed ledger entries, thus anonymizing the creators of the entries.

[0101] Finally, the system uses the anonymized distributed ledger entries as the final privacy-preserving medical record summary entries, ensuring their security and privacy, for doctors' reference.

[0102] Through these steps, the system not only improves the security and privacy protection of medical data, but also ensures the integrity and immutability of the data, providing reliable data support for emergency care.

[0103] To address potential data inconsistencies during medical record summary processing and to further improve the accuracy and reliability of hash value generation, in one or more of the above embodiments, step 102 involves processing the medical record summary using a secure hash algorithm to generate a unique hash value, ensuring the integrity of the medical record summary content, preventing unauthorized alterations, and obtaining a securely hashed medical record summary. This includes:

[0104] Using medical record summaries obtained from maritime medical institutions and processed through extraction, key information elements in the medical record summaries are identified and selected to obtain key information for verifying the core part of the patient's medical records. Based on this key information, the medical record summaries undergo standardization preprocessing to remove unnecessary characters or format differences that affect the consistency of the hash result, resulting in a standardized medical record summary. Based on the standardized medical record summaries, a secure hash algorithm is used to calculate and process the standardized medical record summaries, generating a fixed-length, uniquely corresponding hash value. This hash value serves as the digital fingerprint of the medical record summaries; any slight data change will cause a significant change in the hash value, ensuring the integrity and authenticity of the medical record summaries. Using the generated hash value, a consistency check is performed to ensure that the same medical record summaries produce the same hash value regardless of processing, confirming the integrity and tamper-proof status of the medical record summaries. Based on the hash value after the consistency check, the generated hash value is associated with the original medical record summaries to form an inseparable whole, resulting in a securely hashed medical record summary.

[0105] In this embodiment, key information element identification and selection refers to filtering out key information from the medical record summary to verify the core parts of the patient's medical record. This key information includes, but is not limited to, medical history, diagnostic results, and treatment plans, ensuring the efficiency and accuracy of subsequent processing. Standardization preprocessing is the process of formatting and cleaning the medical record summary, removing unnecessary characters or format differences that affect the consistency of the hash result. This step ensures that data from different sources can generate the same hash value after processing, thereby improving the consistency and reliability of the hash value. Secure hashing algorithms are a type of encryption technology that generates fixed-length hash values ​​by processing data, ensuring the integrity and uniqueness of the data. Hash values ​​can be used to verify whether data has been tampered with, and are an important means of ensuring data integrity. Consistency checking refers to confirming the integrity and tamper-free status of the medical record summary content by comparing hash values ​​generated at different times or locations. Any small data change will cause a significant change in the hash value; therefore, consistency checking can effectively detect data tampering. Digital fingerprinting refers to the generated hash value serving as a unique identifier for the medical record summary, similar to a human fingerprint. Any small data change will cause a significant change in the hash value, ensuring the integrity and authenticity of the data.

[0106] In this embodiment, the system first identifies and selects key information from the core portion of the medical record summary, such as medical history, diagnosis results, and treatment plans, to ensure the efficiency and accuracy of subsequent processing. Secondly, the system performs standardized preprocessing on the selected key information, removing unnecessary spaces, punctuation marks, and other formatting differences to ensure that data from different sources produces the same hash value after processing. Next, the system uses secure hashing algorithms such as SHA-256 to calculate and process the standardized medical record summary, generating a fixed-length and unique hash value. This hash value serves as the digital fingerprint of the medical record summary; any minor data change will cause a significant change in the hash value, ensuring the integrity and authenticity of the data. Then, the system performs a consistency check, comparing hash values ​​generated at different times or locations to ensure that the same medical record summary produces the same hash value regardless of the processing method, confirming the integrity and tamper-proof status of its content. Finally, the system associates the consistency-checked hash value with the original medical record summary, forming an inseparable whole, to obtain the final securely hashed medical record summary, ensuring its security and privacy.

[0107] Here is a specific example:

[0108] Imagine a maritime emergency rescue scenario where a doctor on a cruise ship needs to quickly access a patient's medical history to provide emergency treatment. The doctor sends an access request to the hospital server via a mobile device. After the server verifies the doctor's identity and grants access, the system begins executing the steps described above:

[0109] First, the system identifies and selects key information from the medical record summary, such as the most recent physical examination report and a list of allergic drugs, to ensure the efficiency and accuracy of subsequent processing.

[0110] Secondly, the system performs standardized preprocessing on selected key information, removing unnecessary spaces, punctuation marks, and other formatting differences to ensure that data from different sources can produce the same hash value after processing. For example, all date formats are unified to "YYYY-MM-DD", and all units are unified to the International Standard Units (ISU).

[0111] Next, the system uses the SHA-256 algorithm to process the standardized medical record summary, generating a fixed-length and unique hash value. This hash value serves as the digital fingerprint of the medical record summary; any minor data change will cause a significant change in the hash value, ensuring the integrity and authenticity of the data.

[0112] Then, the system performs a consistency check, comparing hash values ​​generated at different times or locations to ensure that the same medical record summary produces the same hash value regardless of the processing method used, thus confirming the integrity of its content and its tamper-proof status. For example, the system compares the currently generated hash value with previously stored hash values ​​to ensure data consistency.

[0113] Finally, the system associates the hash value after consistency checking with the original medical record summary, forming an inseparable whole, resulting in the final securely hashed medical record summary. This ensures that the content and hash value of the medical record summary are completely consistent even when viewed on different devices or platforms, guaranteeing data security and privacy.

[0114] Through these steps, the system not only improves the security and consistency of medical data, but also ensures the integrity and immutability of the data, providing reliable data support for emergency care.

[0115] To address potential logical errors and security vulnerabilities in the smart contract rule verification process, and to further improve the flexibility and security of access control, in one or more of the above embodiments, the step 103, based on the privacy-protected medical record summary entry, uses a formal verification system to check the correctness and security of the smart contract rules. It then utilizes a dynamic access control algorithm to define access conditions and permissions, generating secure smart contract rules specific to each medical record, including:

[0116] Using the privacy-protected medical record summary entries, these entries are submitted as input to a formal verification system for automated inspection and verification of the smart contract code. This ensures that the smart contract code's logical behavior conforms to expectations and that there are no security vulnerabilities or errors, resulting in verified smart contract rules. Based on these verified smart contract rules, and combined with a dynamic access control algorithm, access conditions and permissions are defined. Access permissions are dynamically adjusted according to different usage scenarios and user roles, ensuring that specific operations, including viewing, editing, or sharing medical records, can only be performed under preset conditions, generating predefined access conditions and permissions. Based on these defined access conditions and permissions, secure smart contract rules specific to each medical record are encoded, ensuring that these rules are transparent, immutable, and comply with relevant laws, regulations, and industry standards, guaranteeing that all operations are legal and compliant.

[0117] In this embodiment, the formal verification system is an automated tool used to check whether the logical behavior of smart contract code conforms to expectations and ensures that it is free of security vulnerabilities or errors. This system provides rigorous verification results through techniques such as mathematical proofs and model checking. Smart contract rules refer to automatically executed contracts encoded on the blockchain, specifying the operational permissions and conditions for different roles in specific scenarios. These rules must be rigorously verified to ensure their correctness and security. A dynamic access control algorithm is a mechanism that dynamically adjusts access permissions based on different use cases and user roles. It can assess user permission needs in real time, ensuring that specific operations, such as viewing, editing, or sharing medical records, can only be performed when preset conditions are met. Access conditions and permissions refer to clearly defining which roles can perform specific operations under what conditions, based on different use cases and user roles. This includes, but is not limited to, specific permission settings for viewing, editing, or sharing medical records. Secure smart contract rules refer to verified and encoded smart contract rules that ensure their transparency and immutability, and comply with relevant laws, regulations, and industry standards, guaranteeing that all operations are legal and compliant.

[0118] In this embodiment, firstly, the system submits the generated privacy-protected medical record summary entries to a formal verification system. This system automatically checks the logical behavior of the smart contract code to ensure it meets expectations and is free of security vulnerabilities or errors. Through formal verification, the system can detect potential logical errors and security risks, ensuring the reliability and security of the smart contract. Secondly, based on the verified smart contract rules and combined with a dynamic access control algorithm, the system defines and processes the access conditions and permissions for different use cases and user roles. The dynamic access control algorithm can adjust permissions according to real-time conditions, ensuring that specific operations, such as viewing, editing, or sharing medical records, can only be performed when preset conditions are met. Finally, based on the defined access conditions and permissions, the system encodes and generates secure smart contract rules specific to each medical record. These rules are not only transparent and tamper-proof but also comply with relevant laws, regulations, and industry standards, ensuring that all operations are legal and compliant. Each medical record corresponds to a unique set of smart contract rules to adapt to different use cases and user role requirements.

[0119] Here is a specific example:

[0120] Imagine a maritime emergency rescue scenario where a doctor on a cruise ship needs to quickly access a patient's medical history to provide emergency treatment. The doctor sends an access request to the hospital server via a mobile device. After the server verifies the doctor's identity and grants access, the system begins executing the steps described above:

[0121] First, the system submits the generated privacy-protected medical record summary entries to a formal verification system. This system automatically checks the logical behavior of the smart contract code to ensure it meets expectations and is free of security vulnerabilities or errors. For example, the system verifies whether there are unhandled exceptions or potential logical errors in the contract, ensuring the reliability of the smart contract.

[0122] Secondly, based on verified smart contract rules and a dynamic access control algorithm, the system defines access conditions and permissions for different use cases and user roles. For example, doctors can view and update critical patient medical history information in emergency situations, but can only view non-sensitive information during routine examinations. The system also considers factors such as timestamps and geographical location to dynamically adjust permissions, ensuring both flexibility and security in permission settings.

[0123] Finally, based on the defined access conditions and permissions, the system encodes and generates secure smart contract rules specific to the patient's medical records. These rules are not only transparent and tamper-proof, but also comply with relevant laws, regulations, and industry standards to ensure that all operations are legal and compliant. For example, the system ensures that doctors can only access specific types of medical data within authorized time periods and records each access operation for subsequent auditing and accountability.

[0124] Through these steps, the system not only improves the correctness and security of smart contract rules but also achieves precise access control, ensuring the legal and compliant use of medical data and providing reliable data support for emergency care. Furthermore, the application of dynamic access control algorithms makes access settings more flexible, allowing for real-time adjustments based on actual circumstances, thus enhancing the system's adaptability and security.

[0125] To address the potential issues of insufficient flexibility and limited real-time adjustment capabilities in access management, and to further improve the accuracy and security of access control, in one or more of the above embodiments, step 103, based on the verified smart contract rules and combined with a dynamic access control algorithm, defines and processes access conditions and permissions. It dynamically adjusts access permissions according to different usage scenarios and user roles, ensuring that specific operations, including viewing, editing, or sharing medical records, can only be performed when preset conditions are met. This generates predefined access conditions and permissions, including:

[0126] Using the verified smart contract rules as a foundation, and combining them with a dynamic access control algorithm, the process begins to define access conditions and permissions. Based on different usage scenarios and user roles, precise and flexible access control strategies are formulated, generating a preliminary draft of access conditions and permissions. According to specific usage scenarios and user roles, the required access permission levels and types under different circumstances are identified, obtaining usage scenario and user role information. Based on this information, the preliminary draft of access conditions and permissions is further refined and improved, specifying which roles perform specific operations under what conditions, forming an access condition and permission framework. Applying the dynamic access control algorithm, based on this framework, the access conditions are further refined, automatically adjusting access permissions according to real-time environmental changes to ensure that access conditions always meet current security requirements and regulatory requirements, resulting in refined access conditions and permissions. The refined access conditions and permissions are tested multiple times, simulating various operational scenarios to ensure that all preset conditions correctly trigger the corresponding access control mechanism. Based on the test results, necessary optimizations are performed to generate stable and reliable predefined access conditions and permissions.

[0127] In this embodiment, smart contract rules refer to automatically executed contracts encoded on the blockchain, specifying the operational permissions and conditions for different roles in specific scenarios. These rules must undergo rigorous verification to ensure their correctness and security. A dynamic access control algorithm is a mechanism that dynamically adjusts access permissions based on different usage scenarios and user roles. It can assess user permission needs in real time, ensuring that specific operations, such as viewing, editing, or sharing medical records, can only be performed when preset conditions are met. Access control policies specify which roles can perform specific operations under what conditions, based on different usage scenarios and user roles. This includes, but is not limited to, specific permission settings for viewing, editing, or sharing medical records. The access conditions and permission framework is a complete access control system formed by refining the initial draft, clearly defining the specific permissions for each role under various circumstances. Multiple testing and optimization refer to conducting multiple simulation tests on the refined access conditions and permissions to ensure that all preset conditions correctly trigger the corresponding access control mechanism, and making necessary optimizations based on the test results to generate stable and reliable well-defined access conditions and permissions.

[0128] In this embodiment, firstly, the system, based on verified smart contract rules and combined with a dynamic access control algorithm, initiates the definition process for access conditions and permissions. According to different usage scenarios (such as emergency care, routine examinations, etc.) and user roles (such as doctors, nurses, patients, etc.), precise and flexible access control strategies are formulated, generating a preliminary draft of access conditions and permissions. Secondly, the system analyzes specific usage scenarios and user roles, identifying and classifying the required access permission levels and types under different circumstances, obtaining detailed usage scenario and user role information. For example, it distinguishes the different permission requirements of doctors in emergency care scenarios and routine examination scenarios. Next, based on the collected usage scenario and user role information, the system further refines and improves the preliminary draft of access conditions and permissions, clearly specifying which roles can perform specific operations under what conditions, forming a complete framework of access conditions and permissions. For example, it stipulates that in emergency care scenarios, doctors can view and update patients' emergency medical history information, but during routine examinations, they can only view non-sensitive information. Furthermore, the system applies a dynamic access control algorithm, based on the access conditions and permissions framework, to further refine the access conditions. This algorithm can automatically adjust access permissions based on real-time environmental changes (such as timestamps, geographical location, and changes in user roles) to ensure that access conditions always meet current security requirements and regulatory requirements. For example, the system can automatically adjust a doctor's access permissions based on their location and time, ensuring that they can only access specific types of medical data within authorized time periods. Finally, the system conducts multiple simulation tests on the refined access conditions and permissions, simulating various operational scenarios to ensure that all preset conditions correctly trigger the corresponding access control mechanisms. Based on the test results, the system makes necessary optimizations, ultimately generating stable and reliable predefined access conditions and permissions, ensuring their reliability and security in practical applications.

[0129] Here is a specific example:

[0130] Imagine a maritime emergency rescue scenario where a doctor on a cruise ship needs to quickly access a patient's medical history to provide emergency treatment. The doctor sends an access request to the hospital server via a mobile device. After the server verifies the doctor's identity and grants access, the system begins executing the steps described above:

[0131] First, based on verified smart contract rules and a dynamic access control algorithm, the system initiates the definition and processing of access conditions and permissions. According to the emergency scenario and the doctor's role, the system generates a preliminary draft of access conditions and permissions, stipulating that doctors can view and update patients' emergency medical history information in emergency situations, but can only view non-sensitive information during routine examinations.

[0132] Secondly, the system analyzes specific use cases (such as emergency scenarios) and user roles (such as doctors), identifying and classifying the required access permission levels and types under different circumstances. For example, the system distinguishes between the different permission requirements of doctors in emergency scenarios and routine examination scenarios, determining that doctors need higher access permissions during emergency situations.

[0133] Next, based on the collected usage scenarios and user role information, the system further refined and improved the initial draft of access conditions and permissions. It clearly stipulates that in emergency situations, doctors can view and update patients' emergency medical history information, but during routine examinations, they can only view non-sensitive information. In addition, the system also considered other factors, such as timestamps and geographical location, to further refine the permission settings.

[0134] Furthermore, the system applies a dynamic access control algorithm, refining access conditions based on the access criteria and permission framework. For example, the system can automatically adjust a doctor's access permissions based on their location and time, ensuring that they can only access specific types of medical data during authorized time periods. If a doctor attempts to access data outside of working hours, the system will automatically reject the request.

[0135] Finally, the system conducts multiple simulation tests on the refined access conditions and permissions, simulating various operational scenarios to ensure that all preset conditions correctly trigger the corresponding access control mechanisms. For example, the system simulates access requests from doctors at different times and locations to ensure the accuracy and reliability of the access control mechanisms. Based on the test results, the system makes necessary optimizations, ultimately generating stable and reliable predefined access conditions and permissions.

[0136] Through these steps, the system not only improves the flexibility and real-time adjustment capabilities of access management, but also ensures that access conditions and permissions always meet current security needs and regulatory requirements, providing reliable data support for emergency response. At the same time, the application of dynamic access control algorithms makes permission settings more flexible, enabling real-time adjustments based on actual circumstances, thus enhancing the system's adaptability and security.

[0137] To address potential issues of insufficient flexibility and accuracy in access control processes, and to further improve the adaptability and security of access control policies, in some embodiments, step 103 utilizes the verified smart contract rules. Based on these rules and combined with a dynamic access control algorithm, the definition of access conditions and permissions is initiated. According to different usage scenarios and user roles, precise and flexible access control policies are formulated, generating a preliminary draft of access conditions and permissions, including:

[0138] Using the verified smart contract rules, all subsequent operations are ensured to comply with verified security and correctness standards, resulting in verified smart contract rules. Based on these verified smart contract rules and combined with a dynamic access control algorithm, the definition and processing of access conditions and permissions are initiated, resulting in a post-initiation access definition and processing mechanism. Utilizing this mechanism, specific usage scenarios and user roles are analyzed to identify and classify the required access permission levels and types under different circumstances, yielding usage scenario and user role information. Based on this information, precise and flexible access control policies are formulated for each usage scenario and user role, clearly specifying which roles perform specific operations under what conditions, thus forming an access control policy. Based on this access control policy, a preliminary draft of access conditions and permissions is generated, specifying the access permissions for different roles under different circumstances.

[0139] In this embodiment, verified smart contract rules refer to smart contract code that has been checked by a formal verification system to ensure that its logical behavior conforms to expectations and that there are no security vulnerabilities or errors. These rules serve as the basis for subsequent operations, ensuring the security and correctness of all operations. The dynamic access control algorithm is a mechanism that dynamically adjusts access permissions based on different usage scenarios and user roles. It can assess user permission needs in real time, ensuring that specific operations, such as viewing, editing, or sharing medical records, can only be performed when preset conditions are met. The permission definition processing mechanism is an automated processing flow used to define access conditions and permissions after startup. This mechanism combines smart contract rules and the dynamic access control algorithm to ensure the accuracy and flexibility of permission settings. Usage scenario and user role information refers to identifying and classifying the required access permission levels and types under different circumstances based on different usage scenarios (such as emergency care, routine examinations, etc.) and user roles (such as doctors, nurses, patients, etc.). This helps to develop more precise access control policies. An access control policy is a set of rules that clearly specifies which roles can perform specific operations under what conditions. It ensures the accuracy and flexibility of permission settings, adapting to different usage scenarios and user role needs. The initial draft of access conditions and permissions is an initial document generated based on access control policies, specifying the access permissions for different roles under different circumstances. This draft provides the basic framework for the final access conditions and permissions.

[0140] In this embodiment, firstly, the system ensures that all subsequent operations are based on verified smart contract rules, guaranteeing that their logical behavior is as expected and free from security vulnerabilities or errors. This step provides a solid foundation for subsequent permission definitions. Secondly, the system, combining verified smart contract rules and dynamic permission control algorithms, initiates a permission definition processing mechanism. This mechanism analyzes specific use cases and user roles, identifying and classifying the required access permission levels and types under different circumstances. Next, through the initiated permission definition processing mechanism, the system analyzes specific use cases (such as emergency care, routine examinations, etc.) and user roles (such as doctors, nurses, patients, etc.), identifying and classifying the required access permission levels and types under different circumstances. For example, doctors require higher access permissions in emergency situations, while routine examinations only require viewing non-sensitive information. Further, based on the collected use case and user role information, the system formulates precise and flexible access control policies for each use case and user role. These policies clearly define which roles can perform specific operations under what conditions, such as viewing, editing, or sharing medical records. For example, it stipulates that doctors can view and update patients' emergency medical history information in emergency situations, but can only view non-sensitive information during routine examinations. Finally, based on the access control policy, the system generates a preliminary draft of access conditions and permissions. This draft specifies the access permissions for different roles under different circumstances, providing a basic framework for the final access conditions and permissions. For example, the draft clearly stipulates which types of medical data doctors can access within specific time periods and records each access operation for subsequent auditing and accountability.

[0141] Here is a specific example:

[0142] Imagine a maritime emergency rescue scenario where a doctor on a cruise ship needs to quickly access a patient's medical history to provide emergency treatment. The doctor sends an access request to the hospital server via a mobile device. After the server verifies the doctor's identity and grants access, the system begins executing the steps described above:

[0143] The system first ensures that all subsequent operations are based on verified smart contract rules, guaranteeing that their logical behavior conforms to expectations and that there are no security vulnerabilities or errors. For example, the system verifies whether there are any unhandled exceptions or potential logical errors in the contract, ensuring the reliability of the smart contract.

[0144] Secondly, the system combines validated smart contract rules and dynamic access control algorithms to initiate an access definition processing mechanism. This mechanism is responsible for analyzing specific use cases and user roles, identifying and classifying the required access levels and types under different circumstances. For example, the system will consider whether the current scenario is an emergency or a routine check-up, as well as the doctor's specific role.

[0145] Next, the system analyzes specific use cases (such as emergency scenarios) and user roles (such as doctors) through its post-startup permission definition and processing mechanism, identifying and classifying the required access permission levels and types under different circumstances. For example, the system distinguishes between the different permission requirements of doctors in emergency scenarios and routine examination scenarios, determining that doctors require higher access permissions during emergency situations.

[0146] Furthermore, based on the collected usage scenarios and user role information, the system formulates precise and flexible access control policies for each usage scenario and user role. For example, it stipulates that doctors can view and update patients' emergency medical history information in emergency situations, but can only view non-sensitive information during routine examinations. In addition, the system also considers other factors, such as timestamps and geographical location, to further refine the permission settings.

[0147] Finally, based on the access control policy, the system generates a preliminary draft of access conditions and permissions. This draft clearly defines which types of medical data doctors can access within specific time periods and records each access operation for subsequent auditing and accountability. For example, the draft explicitly states that doctors can access patients' emergency medical history information during emergency situations, while only non-sensitive information can be viewed during routine examinations.

[0148] Through these steps, the system not only improves the flexibility and accuracy of access control but also ensures that access conditions and permissions always meet current security needs and regulatory requirements, providing reliable data support for emergency response. Simultaneously, the application of dynamic access control algorithms makes permission settings more flexible, allowing for real-time adjustments based on actual circumstances, thus enhancing the system's adaptability and security.

[0149] To address potential privacy breaches and imprecise access controls during medical data sharing, and to further enhance the security and privacy protection of data sharing, some embodiments utilize attribute-based encryption and proxy re-encryption techniques in step 104 to evaluate access requests from other maritime medical institutions according to the secure smart contract rules. Temporary access is granted when preset conditions are met, and differential privacy technology is employed to protect sensitive personal information during the sharing process, resulting in securely shared medical records. This includes:

[0150] Using attribute-based encryption technology, patient medical data is encrypted according to the access conditions and permissions defined in the secure smart contract rules, generating encrypted data with specific attribute tags. This ensures that only entities with the corresponding decryption attributes can decrypt and access this data, resulting in encrypted medical data. Based on this encrypted medical data, combined with proxy re-encryption technology, when other maritime medical institutions make access requests, the encrypted medical data is re-encrypted through an authorized proxy server, resulting in re-encrypted medical data. According to the secure smart contract rules, access requests from other maritime medical institutions are evaluated. The smart contract automatically checks whether the request meets preset access conditions and grants temporary access rights when all conditions are met, resulting in evaluated access rights. Based on the evaluated access rights and the re-encrypted medical data, differential privacy technology is used to protect sensitive personal information during the sharing process. By adding appropriate random noise to the query results, the influence of individual data points is masked, resulting in privacy-protected shared data. Based on the privacy-protected shared data, securely shared medical records are finally generated, ensuring effective access and use of medical data throughout the entire data sharing process, and strictly protecting patient privacy and sensitive personal information.

[0151] In this embodiment, attribute-based encryption is an encryption method that allows data owners to encrypt data based on specific attributes (such as user role, timestamp, etc.). Only entities with the corresponding decryption attributes can decrypt and access this data. This ensures that data can only be accessed by authorized users. Proxy re-encryption is an encryption conversion technique that allows authorized proxy servers to convert one user's encrypted data into another user's encrypted form without knowing the original data or any private key. This allows data to be securely shared between different users while maintaining an encrypted state. Secure smart contract rules refer to automatically executed contracts encoded on the blockchain that specify the operational permissions and conditions for different roles in specific scenarios. These rules must be rigorously verified to ensure their correctness and security. Differential privacy technology is a privacy protection method that protects individual privacy by adding appropriate random noise to query results to ensure that the impact of individual data points is masked. Even if an attacker gains access to some data, they cannot accurately infer the sensitive information of a single patient. Temporary access permissions refer to access permissions granted by the system for a limited period of time under preset conditions. This permission ensures that data use is limited to the necessary scope and time, enhancing data security.

[0152] In this embodiment, firstly, the system encrypts patient medical data using attribute-based encryption technology according to the access conditions and permissions defined in the secure smart contract rules. Each data fragment is tagged with a specific attribute, ensuring that only entities with the corresponding decryption attributes can decrypt and access this data. For example, doctors can access emergency medical history information in emergency situations, but can only view non-sensitive information during routine examinations. Secondly, when other maritime medical institutions make access requests, the system uses proxy re-encryption technology through an authorized proxy server to convert the encrypted medical data into a new encrypted form. This way, even if the recipient does not have the original encryption key, they can decrypt the data using their own key, ensuring that the data remains encrypted throughout transmission. Next, the system automatically checks whether the access requests from other maritime medical institutions meet the preset access conditions according to the secure smart contract rules. The smart contract verifies the requester's identity, role, and access purpose, ensuring that all preset conditions are met. If the request meets all conditions, the system grants temporary access permissions, restricting the access time and scope to ensure the legality and necessity of data use. Furthermore, the system employs differential privacy technology to add appropriate random noise to the query results, ensuring that the impact of individual data points is masked and protecting individual privacy. Even if an attacker gains access to some data, they cannot accurately deduce the sensitive information of an individual patient. This step ensures privacy protection during data sharing. Finally, based on the privacy-protected shared data, the system generates securely shared medical records. These records not only enable effective access and use of medical data but also strictly protect patient privacy and sensitive personal information, ensuring the security and legality of data sharing.

[0153] Here is a specific example:

[0154] Imagine a maritime emergency rescue scenario where a doctor on a cruise ship needs to quickly access a patient's medical history to provide emergency treatment. A doctor on another cruise ship makes a similar request. The system begins executing the steps described above:

[0155] The system first encrypts the patient's medical data using attribute-based encryption technology, based on the access conditions and permissions defined in the secure smart contract rules. For example, doctors can access emergency medical history information in emergency situations, while only viewing non-sensitive information during routine examinations. The encrypted data is tagged with specific attributes to ensure that only entities with the corresponding decryption attributes can decrypt and access this data.

[0156] Secondly, when a doctor on another cruise ship requests access, the system uses proxy re-encryption technology via an authorized proxy server to convert the encrypted medical data into a new encrypted form. Even if the recipient does not have the original encryption key, they can decrypt the data using their own key, ensuring that the data remains encrypted throughout the transmission process.

[0157] Next, according to the rules of the secure smart contract, the system automatically checks whether the access request from a doctor on another cruise ship meets the preset access conditions. The smart contract verifies the requester's identity, role, and purpose of access to ensure that all preset conditions are met. If the request meets all conditions, the system will grant temporary access rights, restricting the access time and scope to ensure the legality and necessity of data use.

[0158] Furthermore, the system employs differential privacy technology, adding appropriate random noise to the query results to ensure that the impact of individual data points is masked, thus protecting individual privacy. Even if an attacker gains access to some data, they cannot accurately infer sensitive information about a single patient. This step ensures privacy protection during the data sharing process.

[0159] Finally, based on privacy-preserving shared data, the system generates securely shared medical records. These records not only enable effective access and use of medical data but also strictly protect patient privacy and sensitive personal information, ensuring the security and legality of data sharing.

[0160] Through these steps, the system not only improves the security and privacy protection of medical data sharing, but also ensures the legality and necessity of data use, providing reliable data support for emergency care. Meanwhile, the application of attribute-based encryption and proxy re-encryption technologies makes data sharing more flexible and secure, enhancing the system's adaptability and reliability.

[0161] This application recognizes that ensuring the integrity and security of patient medical records is crucial in the field of medical data management and sharing. While traditional hash algorithms can provide a certain level of data integrity protection, their flexibility and security may be insufficient in the face of complex, multi-factor dynamic environments. Especially in maritime medical facilities, the efficient and secure management of medical data presents a significant challenge due to limited communication capabilities and geographically dispersed locations.

[0162] To address these challenges, the research team designed a secure hashing method based on a multi-level weighted mechanism and a composite hash function. This method not only improves the complexity and uniqueness of hash values ​​but also introduces dynamic factors such as timestamps, version numbers, and environmental variables, enhancing the uniqueness and security of hash values. In this way, the system can flexibly adjust the hash calculation process under different scenarios, ensuring the integrity and privacy protection of medical data. Therefore, a new alternative solution is proposed, which includes:

[0163] Based on the medical record digest, a secure hashing algorithm is used to process the medical record digest to generate a unique corresponding hash value, ensuring the integrity of the medical record digest content and preventing unauthorized alteration, resulting in a securely hashed medical record digest, including:

[0164] From medical record summaries obtained from maritime medical institutions and processed, key information elements are identified and selected to obtain key information K used to verify the core part of the patient's medical records. i ;

[0165] According to the key information K i The medical record summary is preprocessed to standardize it, removing unnecessary characters or format differences that affect the consistency of the hash result, thus obtaining a standardized medical record summary.

[0166] Introducing a multi-level weighting mechanism, each key information element K i Each has a base weight w i and a dynamic weight d i Dynamic weight d i Adjustments are made based on timestamp T or other dynamic factors (such as user role, geographic location); for each key information element K i Apply a polynomial expression P(K) i The polynomial expression P(K) i ) contains multiple parameters a i b i c i To increase complexity, a matrix M is used to represent all key information elements and their related parameters, where the elements of matrix M are m. ij ;

[0167] Based on the data processed above, composite hash functions H1 and H2 are used to hash the data at different levels respectively, and finally merged to generate the final hash value H.

[0168] The final hash value H is generated using the following formula:

[0169]

[0170] Where H is the final generated hash value; SHA256 is the secure hash algorithm function; H1 and H2 are two different hash functions, applied to different levels of data respectively; It is applied to each key information element K i The polynomial expression; w i is the basic weight of the i-th key information element; D is the dynamic weight matrix; M is the combination matrix representing all key information elements and their related parameters; n is the total number of key information elements;

[0171] Introduce timestamp T, version number V, and environment variable E to enhance the uniqueness and security of hash values;

[0172] Use a comprehensive hash function H check To perform a consistency check, the comprehensive hash function compares the hash values ​​themselves, taking into account additional timestamps, version numbers, and environment variables.

[0173] The hash value H is generated using the following formula. 新 :

[0174] H 新 =SHA256(H 旧 ⊕T⊕V⊕E)

[0175] Among them, H 新 This represents the newly generated hash value; T is the current timestamp; V is the version number; E is the environment variable; ⊕ represents the bitwise XOR operation, used to enhance the uniqueness of the hash value; H 旧 This represents the hash value that was previously stored or transmitted.

[0176] Based on the hash value H after the consistency check, the generated hash value is associated with the original medical record digest to form an indivisible whole, resulting in a securely hashed medical record digest.

[0177] The following is a detailed explanation of each parameter:

[0178] K i These are key information elements, extracted from the medical record summary, used to verify the core parts of a patient's medical record. They are identified and selected using natural language processing techniques or rule-matching algorithms, such as medical history, diagnosis results, and treatment plans.

[0179] w i : This refers to the basic weights, where K is the weight for each key information element. i The basic weights reflect their relative importance in hash calculations. Based on the experience of domain experts or historical data analysis, the importance of each key information element is determined, and a corresponding weight value is assigned.

[0180] d i This is a dynamic weight, adjusted based on a timestamp T or other dynamic factors (such as user role or geographic location), enhancing the uniqueness and security of the hash value. The weight is adjusted in real-time according to the actual application scenario and changes in dynamic factors. For example, a doctor in an emergency situation may have a higher weight.

[0181] M: Represents a combination matrix of all key information elements and their related parameters, with matrix elements of m. ij Each key information element and its corresponding polynomial parameter a i b i c i Combine them into a matrix form for easier subsequent calculations.

[0182] H1 and H2 are two different hash functions applied to different levels of data to ensure the complexity and uniqueness of hash values. Choose a secure hash algorithm that has been extensively tested and verified, such as SHA-256 or SHA-3.

[0183] T: The current timestamp, used to enhance the uniqueness and security of the hash value. The timestamp is automatically generated by the system, accurate to the second or even smaller.

[0184] V: Represents the data version number, used to track historical changes in the data. The version number is incremented with each data update to ensure that each generated hash value is unique.

[0185] E: This is an environment variable representing environmental information used to generate or utilize the data, such as geographical location and device type. It is used to enhance the uniqueness and security of hash values. It can be automatically obtained from the system environment or manually entered by the user.

[0186] D: This is the dynamic weight matrix, representing the dynamic weight matrix for each key information element, used to adjust the weight distribution during the hash calculation process. The dynamic weight matrix is ​​generated in real-time based on the actual application scenario and changes in dynamic factors.

[0187] H: This is the final hash value, generated through a composite hash function, ensuring the integrity of the medical record summary content and preventing unauthorized alteration. (Using the formula...) Calculated.

[0188] H 新 This is the newly generated hash value, a new hash value generated through a consistency check, taking into account additional timestamps, version numbers, and environment variables. It is expressed by formula H. 新 =SHA256(H 旧 It is calculated using ⊕T⊕V⊕E.

[0189] Here is a specific example:

[0190] Imagine a maritime emergency rescue scenario where a doctor on a cruise ship needs to quickly access a patient's medical history to provide emergency treatment. The doctor sends an access request to the hospital server via a mobile device. After the server verifies the doctor's identity and grants access, the system begins executing the steps described above:

[0191] Suppose that K is the key information element extracted from the medical record summary. i Includes: medical history (K1), diagnosis (K2), and treatment plan (K3);

[0192] The base weight w for each key information element i The values ​​are: w1 = 0.4, w2 = 0.3, w3 = 0.3;

[0193] Dynamic weight d i Adjustments are made based on timestamp T and user role. For example, doctors have a higher weight in emergency situations, assuming d1 = 1.2, d2 = 1.1, and d3 = 1.0.

[0194] The selected key information elements are standardized and preprocessed to remove unnecessary spaces, punctuation marks and other format differences, ensuring that data from different sources can produce the same hash value after processing.

[0195] polynomial expression Assume the parameters are: a1 = 0.5, b1 = 0.3, c1 = 0.2; a2 = 0.6, b2 = 0.2, c2 = 0.2; a3 = 0.7, b3 = 0.1, c3 = 0.2.

[0196] Calculate the polynomial value P(K) for each key information element. i ):

[0197]

[0198] Construct matrix M to represent the combination of all key information elements and their related parameters, for example:

[0199]

[0200] Where m ij These are specific values ​​determined based on actual data;

[0201] The data at different levels is hashed using compound hash functions H1 and H2 respectively, and then the results are merged to generate the final hash value H.

[0202]

[0203] Suppose H1 and H2 are two different hash functions, applied to different levels of data. Assume the outputs of H1 and H2 are hash1 and hash2 respectively, then the final hash value H can be expressed as:

[0204] H = SHA256(hash1 + hash2)

[0205] Introducing timestamps, version numbers, and environment variables:

[0206] A timestamp T, version number V, and environment variable E are introduced to enhance the uniqueness and security of the hash value. Assume the current timestamp T = 1672729200 (Unix timestamp), version number V = 1.0, and environment variable E = "CruiseShipA".

[0207] Use a comprehensive hash function H check A consistency check is performed, comparing the hash values ​​themselves and taking into account additional timestamps, version numbers, and environment variables.

[0208] The newly generated hash value H 新 Generate using the following formula:

[0209] Assuming the hash value H was previously stored or transmitted 旧 If the hash value is "abc123…...", then the newly generated hash value H is... 新 for:

[0210] H 新 =SHA256("abc123…⊕1672729200⊕"1.0"⊕"CruiseShipA")

[0211] The final hash value H and the newly generated hash value H' were obtained by calculating using the above formula. 新 These two hash values ​​not only ensure the integrity of the medical record summary and prevent unauthorized alterations, but also incorporate timestamps, version numbers, and environment variables to enhance the uniqueness and security of the hash values. Through a multi-level weighted mechanism and compound hash function generation, the complexity and uniqueness of the hash values ​​are ensured, making them consistent across various complex scenarios.

[0212] Through these steps, the system not only improves the security and consistency of medical data but also ensures its integrity and immutability, providing reliable data support for emergency care. Simultaneously, the application of dynamic weights and multiple hash functions makes permission settings more flexible, allowing for real-time adjustments based on actual circumstances, thus enhancing the system's adaptability and security.

[0213] This application recognizes that ensuring the security and flexibility of access permissions for patient medical records is crucial in the field of medical data management and sharing. Traditional static access control methods are ill-suited to complex, multi-factor dynamic environments, especially in maritime medical facilities where limited communication and geographically dispersed locations present significant challenges to the efficient and secure management of medical data.

[0214] To address these challenges, the research team designed a permission management system based on validated smart contract rules and dynamic permission control algorithms. This approach not only improves the accuracy and flexibility of permission settings but also introduces dynamic factors such as timestamps, version numbers, and environment variables, enhancing the flexibility and security of permission definitions. In this way, the system can flexibly adjust permission management strategies in different scenarios, ensuring secure access and use of medical data. Therefore, a new alternative solution is proposed, which includes:

[0215] Using the verified smart contract rules as a foundation, and combining them with a dynamic access control algorithm, the definition and processing of access conditions and permissions begin. Based on different use cases and user roles, precise and flexible access control strategies are formulated, generating a preliminary draft of access conditions and permissions, including:

[0216] Utilizing the verified smart contract rule C validated This ensures that all subsequent operations comply with verified security and correctness standards, resulting in verified smart contract rules.

[0217] Based on the verified smart contract rule C validated Combined with dynamic access control algorithm A dynamic Together with environment variable E, it initiates the definition and processing of access conditions and permissions, resulting in the permission definition and processing mechanism M after startup. init ;

[0218] The permission definition and processing mechanism M after startup is obtained through the following formula. init :

[0219] M init =A dynamic (C validated E)

[0220] Here, E is an environment variable used to enhance the flexibility and security of permission definitions; C validated This refers to verified smart contract rules; A dynamic It is a dynamic access control algorithm;

[0221] Utilizing the post-startup permission definition processing mechanism M init Analyze specific use cases Si and user role R j Identify and classify the required access levels and types under different circumstances to obtain usage scenarios and user role information. SR Introducing a complex function F analyze The function F analyze Timestamp T and version number V were considered to increase complexity;

[0222] The usage scenario and user role information I can be obtained through the following formula. SR :

[0223] I SR =F ana l yze (M init S i R j (T, V)

[0224] Among them, L SR This refers to specific information about usage scenarios and user roles after analysis and classification; F analyze It is a comprehensive analysis function; T is the current timestamp; V is the version number; S i This refers to specific use cases; R j This refers to specific user roles;

[0225] Based on the usage scenario and user role information I SR To develop precise and flexible access control policies for each use case and user role. ij This clearly defines which roles perform specific operations under what conditions, forming an access control policy P; and introduces a weight matrix W and an exponent matrix E. p This indicates the importance and frequency of each role's permissions in a specific scenario;

[0226] The access control policy P is formed using the following formula:

[0227]

[0228] Here, P refers to the precise and flexible access control policy formulated for each use case and user role, represented by a matrix M. P Indicates; w ij The i-th use case S i The j-th user role R j Permission weights; e ij The i-th use case S i The j-th user role R j The permission index represents the importance and frequency of permissions; [M] P [] is the access control policy matrix; This indicates the permission weight w of the first user role R1 in the first use case S1. 11 and permission index e 11 The product; This indicates that in the first use case S1, the m-th user role R m Permission weight w 1m and permission index e 1m The product; Indicates the nth use case S n Below, the permission weight w of the first user role R1 n1 and permission index e n1 The product; Indicates the nth use case S n Next, the m-th user role R m Permission weight w nm and permission index e nm The product;

[0229] Based on the access control policy P, a preliminary draft of access conditions and permissions D is generated. draft The preliminary draft of access conditions and permissions specifies the access permissions for different roles under different circumstances; a complex synthesis function F is introduced. draft The function considers the access control policy P, combined with the usage scenario and user role information I. SR Other dynamic factors (such as timestamp T and environmental variable E);

[0230] A preliminary draft of access conditions and permissions, D, is generated using the following formula. draft :

[0231] D draft =F draft (P, I) SR (T, E)

[0232] Among them, D draft This refers to a preliminary draft of access conditions and permissions generated based on access control policies, specifying the access permissions for different roles under different circumstances; F draft It is a synthesized generating function; T is a timestamp; E is an environment variable.

[0233] The following is a detailed explanation of each parameter:

[0234] C validated These are verified smart contract rules that have undergone formal verification to ensure their logical behavior meets expectations and that they are free of security vulnerabilities or errors. They are written by the blockchain development team and have undergone rigorous testing and verification processes to ensure their correctness and security.

[0235] A dynamic This is a dynamic access control algorithm that dynamically adjusts access permissions based on different usage scenarios and user roles. It is a flexible access control algorithm designed and implemented based on existing access management theories and the needs of practical application scenarios.

[0236] E: Environment variables, including dynamic factors such as current geographic location, user role, and timestamp, are used to enhance the flexibility and security of permission definitions. These are automatically obtained from the system environment or manually entered by the user, such as geographic location information and timestamps.

[0237] M init : This is the permission definition and processing mechanism after startup. It is an automated processing mechanism used to define access conditions and permissions after startup, which combines smart contract rules and environment variables.

[0238] S i and R j This involves defining specific use cases (e.g., emergency care, routine checkups) and user roles (e.g., doctors, nurses, patients). These roles can be predefined or dynamically identified through system configuration or user selection.

[0239] T and V: Represent the current time and data version number, used to increase the uniqueness and security of the hash value. The time feather and incrementing version number are automatically generated by the system.

[0240] I SR This refers to the specific information about usage scenarios and user roles after analysis and classification.

[0241] P: This is the access control policy matrix, which contains precise and flexible access control policies tailored to each use case and user role, represented by matrix M. P express.

[0242] w ij : The i-th use case S i The j-th user role R j Permission weights.

[0243] e ij : The i-th use case S i The j-th user role R j The permission index indicates the importance and frequency of permissions.

[0244] D draft The preliminary draft of access conditions and permissions, generated based on access control policies, specifies the access permissions for different roles under different circumstances.

[0245] Here is a specific example:

[0246] Imagine a maritime emergency rescue scenario where a doctor on a cruise ship needs to quickly access a patient's medical history to provide emergency treatment. The doctor sends an access request to the hospital server via a mobile device. After the server verifies the doctor's identity and grants access, the system begins executing the steps described above:

[0247] Assume that the verified smart contract rule C validated It has been checked by a formal verification system to ensure that its logical behavior meets expectations and that there are no security vulnerabilities or errors.

[0248] Introduce environment variables E, such as current geographic location, user role, timestamp, etc., to enhance the flexibility and security of permission definitions.

[0249] Using dynamic access control algorithm A dynamic Together with environment variable E, it initiates the definition and processing of access conditions and permissions, resulting in the permission definition and processing mechanism M after startup. init :

[0250] M init =A dynamic (C validated E)

[0251] Assuming a specific use case S i Includes: emergency rescue scenario (S1) and routine check-up scenario (S2).

[0252] User Role R j This includes: doctors (R1), nurses (R2), and the patient (R3).

[0253] Calculate usage scenarios and user role information I SR :

[0254] I SR =F analyze (M init S i R j (T, V)

[0255] Assume the current timestamp T = 1672729200 (Unix timestamp) and the version number V = 1.0.

[0256] Based on usage scenarios and user role information SR To develop precise and flexible access control policies for each use case and user role. ij It clearly defines which roles perform specific operations under what conditions.

[0257] Introducing the weight matrix W and the exponent matrix E p This represents the importance and frequency of each role's permissions in a specific scenario.

[0258] Form the access control policy matrix P:

[0259]

[0260] Assume the weight matrix W and the exponent matrix E p as follows:

[0261]

[0262] The access control policy matrix P is then:

[0263]

[0264] Based on access control policy P, combined with usage scenarios and user role information I SR Together with other dynamic factors (such as timestamp T and environment variable E), a preliminary draft of access conditions and permissions, D, is generated. draft。 .

[0265] Introducing a complex synthesis function F draft :

[0266] D draft =F draft (P, I) SR (T, E)

[0267] Assume F draft The specific implementation is customized according to actual needs, and the final generated D draft It specifies the access permissions for different roles under different circumstances.

[0268] The final access control policy matrix P and the preliminary access conditions and permissions draft D were obtained through the above formula. draft。 These two results not only ensure the accuracy and flexibility of access permission settings, but also introduce timestamps, version numbers, and environment variables, enhancing the flexibility and security of permission definitions. This is achieved through the weight matrix W and the exponent matrix E. p This indicates the importance and frequency of each role's permissions in a specific scenario, ensuring the accuracy and flexibility of permission settings. For example, in an emergency scenario, doctors have higher permission weight and index, enabling them to perform more operations; while in a routine examination scenario, their permissions are relatively lower. This is achieved through the comprehensive function F. draft The system generates and defines access permissions for different roles under different circumstances. This makes permission settings more flexible, allowing for real-time adjustments based on actual needs, thus enhancing the system's adaptability and security.

[0269] Through these steps, the system not only improves the accuracy and flexibility of access control but also ensures that access permissions always meet current security needs and regulatory requirements, providing reliable data support for emergency care. Simultaneously, the application of dynamic access control algorithms makes permission settings more flexible, allowing for real-time adjustments based on actual circumstances, enhancing the system's adaptability and security. This formulaic approach is of great significance in the field of medical data management and sharing. It not only ensures the security and flexibility of access permissions for medical records but also introduces various dynamic factors, enhancing the flexibility and security of permission definitions. Through precise access control policies and flexible permission settings, the system can flexibly adjust access management strategies in different scenarios, ensuring secure access and use of medical data and providing reliable data support for emergency care and other medical services.

[0270] Figure 2 This application provides a schematic diagram of the structure of a secure, shared maritime medical record management system based on blockchain technology, as shown in the embodiments of this application. Figure 2 As shown, the system includes:

[0271] Module 21 is used to obtain access authorization for specific patient medical data from maritime medical institutions, ensuring that only legally authorized entities can access, update and share medical information;

[0272] The generation module 22 is used to create a patient medical record summary based on the access authorization and in combination with a secure hash algorithm, generate an immutable distributed ledger entry with timestamp evidence, and apply ring signature technology to anonymize the creator of the entry, thereby obtaining a privacy-protected medical record summary entry.

[0273] The inspection module 23 is used to check the correctness and security of the smart contract rules based on the privacy-protected medical record summary entries through a formal verification system, define access conditions and permissions using a dynamic access control algorithm, and generate secure smart contract rules specific to each medical record.

[0274] Evaluation module 24 is used to evaluate and process access requests from other maritime medical institutions according to the rules of the secure smart contract using attribute-based encryption technology and proxy re-encryption technology. When the preset conditions are met, temporary access rights are granted, and differential privacy technology is used to protect sensitive personal information during the sharing process to obtain securely shared medical records.

[0275] The recording module 25 is used to immediately record the details of the interaction in the blockchain after each successful access to and modification of the securely shared medical records, forming an immutable historical record to ensure transparency and accountability, while maintaining the integrity of the patient's long-term health records.

[0276] Figure 2 The aforementioned secure and shared maritime medical record management system based on blockchain technology can execute... Figure 1 The implementation principle and technical effects of the secure sharing maritime medical record management method based on blockchain technology described in the illustrated embodiment will not be repeated here. The specific methods by which each module and unit of the secure sharing maritime medical record management system based on blockchain technology in the above embodiments have been described in detail in the embodiments related to this method, and will not be elaborated upon here.

[0277] In one possible design, Figure 2 The blockchain-based secure shared maritime medical record management system illustrated in this embodiment can be implemented as a computing device, such as... Figure 3 As shown, the computing device may include a storage component 31 and a processing component 32;

[0278] The storage component 31 stores one or more computer instructions, wherein the one or more computer instructions are invoked and executed by the processing component 32.

[0279] The processing component 32 is used to: obtain access authorization for specific patient medical data from maritime medical institutions, ensuring that only legally authorized entities can access, update, and share medical information; based on the access authorization and in conjunction with a secure hash algorithm, create a summary of the patient's medical records to generate an immutable distributed ledger entry with timestamped evidence, and apply ring signature technology to anonymize the creator of the entry, resulting in a privacy-protected medical record summary entry; based on the privacy-protected medical record summary entry, check the correctness and security of the smart contract rules through a formal verification system, define access conditions and permissions using a dynamic access control algorithm, and generate secure smart contract rules specific to each medical record; use attribute-based encryption technology and proxy re-encryption technology to evaluate and process access requests from other maritime medical institutions according to the secure smart contract rules, grant temporary access permissions when preset conditions are met, and use differential privacy technology to protect sensitive personal information during the sharing process, resulting in securely shared medical records; after each successful access to and modification of the securely shared medical record, immediately record the details of the interaction in the blockchain to form an unalterable historical record, ensuring transparency and traceability of responsibility, while maintaining the integrity of the patient's long-term health records.

[0280] The processing component 32 may include one or more processors to execute computer instructions to complete all or part of the steps in the above-described method. Alternatively, the processing component may be implemented as one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field-programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the above-described method.

[0281] Storage component 31 is configured to store various types of data to support operations at the terminal. The storage component can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk.

[0282] Of course, computing devices may also include other components, such as input / output interfaces, display components, communication components, etc.

[0283] Input / output interfaces provide interfaces between processing components and peripheral interface modules, which can be output devices, input devices, etc.

[0284] The communication components are configured to facilitate wired or wireless communication between computing devices and other devices.

[0285] The computing device can be a physical device or an elastic computing host provided by a cloud computing platform. In this case, the computing device can refer to a cloud server, and the aforementioned processing components, storage components, etc., can be basic server resources rented or purchased from the cloud computing platform.

[0286] This application also provides a computer storage medium storing a computer program, which, when executed by a computer, can perform the above-described functions. Figure 1 The illustrated embodiment is a secure sharing method for managing maritime medical records based on blockchain technology.

[0287] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0288] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0289] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0290] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application.

Claims

1. A blockchain-based secure sharing of maritime medical records management method, characterized in that, The method comprises the following steps: Obtaining access authorization of medical data of a specific patient from a maritime medical institution, ensuring that only legally authorized entities can access, update and share medical information; According to the access authorization, combined with a secure hash algorithm, a patient medical record summary is created and processed to generate a tamper-proof and timestamped evidence distributed ledger entry, and an ring signature technology is applied to anonymize the creator of the entry to obtain a privacy-protected medical record summary entry; Based on the privacy-protected medical record summary entry, the correctness and security of the smart contract rules are checked by a formal verification system, the access conditions and permissions are defined by a dynamic permission control algorithm, and a secure smart contract rule specific to each medical record is generated; Using attribute-based encryption technology and proxy re-encryption technology, the access request of other maritime medical institutions is evaluated and processed according to the secure smart contract rule, and temporary access permission is granted when the preset condition is met, and differential privacy technology is used to protect personal sensitive information during sharing to obtain securely shared medical records; After each successful access and modification of the securely shared medical records, the details of the interaction are immediately recorded in the blockchain to form an unalterable history record to ensure transparency and traceability of responsibility, while maintaining the integrity of the patient's long-term health record; In the process of creating and processing patient medical record summaries, a multi-level weighting mechanism is introduced, with each key information element... They all have a base weight. and a dynamic weight Dynamic weights Based on timestamp Adjustments can be made for other dynamic factors (such as user role, geographic location); for each key information element. Apply a polynomial expression The polynomial expression Contains multiple parameters To increase complexity; using matrices A matrix represents a combination of all key information elements and their related parameters. The elements are ; Based on the above-processed data, a composite hash function is used and Hashing is performed on data at different levels respectively, and finally the final hash value is generated by merging ; The final hash value is generated by the following equation : ； wherein, is the final generated hash value; is a secure hash algorithm function; and are two different hash functions applied to different levels of data; is a polynomial expression applied to each key information element ; is the base weight of the th key information element; is a dynamic weight matrix; is a combination matrix representing all key information elements and their related parameters; is the total number of key information elements; Introducing timestamps , version numbers and environmental variables to enhance the uniqueness and security of the hash values; Using a comprehensive hash function to perform consistency checks, which compares hash values themselves, taking into account additional timestamps, version numbers and environmental variables; The generated hash value is generated by the following equation : ； wherein, represents a newly generated hash value; is a current timestamp; is a version number; is an environmental variable; represents a bitwise XOR operation to enhance the uniqueness of the hash value; represents a previously stored or transmitted hash value based on the hash value after the consistency check associating the generated hash value with the original medical record summary to form an inseparable whole, resulting in a securely hashed medical record summary.

2. The method of claim 1, wherein, According to the access authorization, combined with a secure hash algorithm, a patient medical record summary is created and processed to generate a tamper-proof and timestamped evidence distributed ledger entry, and an ring signature technology is applied to anonymize the creator of the entry to obtain a privacy-protected medical record summary entry, comprising: Using the access authorization, obtaining medical data related to a specific patient from a maritime medical institution, and extracting the medical data to obtain a medical record summary formed by key information; According to the medical record summary, using a secure hash algorithm to process the medical record summary to generate a unique corresponding hash value, ensuring the integrity of the medical record summary content and preventing unauthorized changes, obtaining a securely hashed medical record summary; Based on the securely hashed medical record summary, adding the current timestamp information as the evidence of the creation time to ensure the traceability of the creation time and sequence of the medical record summary, generating a timestamped medical record summary; Using blockchain technology, based on the timestamped medical record summary, a new distributed ledger entry is created, which will be appended to the blockchain-based distributed ledger in chronological order and cannot be tampered with, obtaining a distributed ledger entry; Applying ring signature technology, selecting a group of signers without revealing the actual signer's identity, signing the distributed ledger entry to anonymize the creator of the entry, obtaining an anonymized distributed ledger entry; Based on the anonymized distributed ledger entry, the anonymized distributed ledger entry is used as the final privacy-protected medical record summary entry, ensuring the security and privacy of the medical record summary.

3. The method of claim 2, wherein, The medical record summary is processed using a secure hash algorithm to generate a unique corresponding hash value, ensuring the integrity of the medical record summary content and preventing unauthorized changes, resulting in a secure hashed medical record summary, including: The medical record summary obtained from the maritime medical institution and processed by extraction is used to identify and select the key information elements in the medical record summary, resulting in key information for verifying the core part of the patient's medical record; According to the key information, the medical record summary is standardized and preprocessed to remove unnecessary characters or format differences that affect the consistency of the hash result, resulting in a standardized medical record summary; Based on the standardized medical record summary, a secure hash algorithm is used to calculate and process the standardized medical record summary to generate a fixed-length, unique hash value, which serves as the digital fingerprint of the medical record summary. Any minor data changes will cause the hash value to change significantly, ensuring the integrity and authenticity of the medical record summary content; Using the generated hash value, consistency checking is performed to ensure that the same medical record summary produces the same hash value regardless of how it is processed, confirming the integrity and untampered state of the medical record summary content; Based on the hash value after consistency checking, the generated hash value is associated with the original medical record summary to form an inseparable whole, resulting in a secure hashed medical record summary.

4. The method of claim 1, wherein, The privacy-protected medical record summary item is checked for correctness and security by a formal verification system, and access conditions and permissions are defined using a dynamic permission control algorithm to generate secure smart contract rules specific to each medical record, including: Using the privacy-protected medical record summary item, the privacy-protected medical record summary item is submitted as input to the formal verification system for automatic checking and verification of the smart contract code, ensuring that the smart contract code logic behaves as expected and has no security vulnerabilities or errors, resulting in a verified smart contract rule; Based on the verified smart contract rule, combined with the dynamic permission control algorithm, the access conditions and permissions are defined and processed, and the access permissions are dynamically adjusted according to different use scenarios and user roles, ensuring that only when the pre-set conditions are met can specific operations be performed, including viewing, editing or sharing medical records, generating defined access conditions and permissions; According to the defined access conditions and permissions, the secure smart contract rules specific to each medical record are coded to ensure that the secure smart contract rules are transparent and tamper-proof, and comply with relevant laws, regulations and industry standards, ensuring that all operations are legal and compliant.

5. The method of claim 4, wherein, The access conditions and permissions are defined and processed based on the verified smart contract rules combined with a dynamic permission control algorithm, the access permissions are dynamically adjusted according to different use scenarios and user roles, and it is ensured that only under the condition of meeting the preset conditions can specific operations be performed, including viewing, editing or sharing medical records, and the defined access conditions and permissions are generated, including: Using the verified smart contract rules as the basis, combined with a dynamic permission control algorithm, the access conditions and permissions are defined and processed, accurate and flexible access control strategies are formulated according to different use scenarios and user roles, and a preliminary access condition and permission draft is generated. According to the specific use scenarios and user roles, the required access permission levels and types under different conditions are identified and processed to obtain use scenario and user role information. Based on the use scenario and user role information, the preliminary access condition and permission draft is further refined and improved to specify which roles can perform specific operations under certain conditions, forming an access condition and permission framework. Based on the access condition and permission framework, the access conditions are further refined using a dynamic permission control algorithm, and the access permissions are automatically adjusted according to real-time environmental changes to ensure that the access conditions always meet the current security requirements and regulatory requirements, and the refined access conditions and permissions are obtained. The refined access conditions and permissions are tested multiple times to simulate various operation scenarios to ensure that all preset conditions can correctly trigger the corresponding permission control mechanism, and necessary optimization is performed according to the test results to generate stable and reliable defined access conditions and permissions.

6. The method of claim 5, wherein, Using the verified smart contract rules as the basis, combined with a dynamic permission control algorithm, the access conditions and permissions are defined and processed, accurate and flexible access control strategies are formulated according to different use scenarios and user roles, and a preliminary access condition and permission draft is generated, including: Using the verified smart contract rules, it is ensured that all subsequent operations meet the verified security and correctness standards, and the verified smart contract rules are obtained. Based on the verified smart contract rules, combined with a dynamic permission control algorithm, the definition and processing of access conditions and permissions are started, and the started permission definition and processing mechanism is obtained. Using the started permission definition and processing mechanism, the specific use scenarios and user roles are analyzed to identify and classify the required access permission levels and types under different conditions, and the use scenario and user role information is obtained. According to the use scenario and user role information, accurate and flexible access control strategies are formulated for each use scenario and user role to specify which roles can perform specific operations under certain conditions, forming an access control strategy. Based on the access control strategy, a preliminary access condition and permission draft is generated, which specifies the access permissions of different roles under different conditions.

7. The method of claim 1, wherein, The access request of other maritime medical institutions is evaluated and processed according to the security smart contract rules, temporary access permission is granted when the preset conditions are met, and the differential privacy technology is used to protect the personal sensitive information in the sharing process, and the security shared medical record is obtained, including: The attribute-based encryption technology is used to encrypt the patient medical data according to the access conditions and permissions defined in the security smart contract rules, and the encrypted data with specific attribute labels is generated, so that only the entity with corresponding decryption attribute can decrypt and access the data, and the encrypted medical data is obtained; Based on the encrypted medical data, combined with the proxy re-encryption technology, when other maritime medical institutions make access requests, the encrypted medical data is re-encrypted by the authorized proxy server to obtain re-encrypted medical data; According to the security smart contract rules, the access request of other maritime medical institutions is evaluated and processed, the smart contract automatically checks whether the request meets the preset access conditions, and temporary access permission is granted when all conditions are met, and the evaluated access permission is obtained; Based on the evaluated access permission and the re-encrypted medical data, the differential privacy technology is used to protect the personal sensitive information in the sharing process, and appropriate random noise is added to the query result to ensure that the influence of a single data point is masked, and the privacy-protected shared data is obtained; Based on the privacy-protected shared data, the security shared medical record is finally generated, ensuring that the medical data is effectively accessed and used in the entire data sharing process, and the privacy and personal sensitive information of patients are strictly protected. 8.A blockchain-based secure sharing maritime medical record management system for performing the blockchain-based secure sharing maritime medical record management method of any one of claims 1 to 7. Including: The access authorization of a specific patient medical data is obtained from the maritime medical institution, and only the entity authorized by law can access, update and share the medical information; The generation module is used to create the patient medical record summary according to the access authorization and combined with the security hash algorithm, generate the distributed ledger entry with tamper-proof and time-stamped evidence, and apply the ring signature technology to anonymize the creator of the entry, and obtain the privacy-protected medical record summary entry; The check module is used to check the correctness and security of the smart contract rules based on the privacy-protected medical record summary entry through the formal verification system, and the dynamic permission control algorithm is used to define the access conditions and permissions, and the security smart contract rules specific to each medical record are generated; The evaluation module is used to evaluate and process the access request of other maritime medical institutions according to the security smart contract rules by using the attribute-based encryption technology and the proxy re-encryption technology, grant temporary access permission when the preset conditions are met, and use the differential privacy technology to protect the personal sensitive information in the sharing process, and obtain the security shared medical record. A record module is configured to record details of each interaction in the blockchain immediately after each successful access and modification of the secure shared medical record, forming an unalterable history record to ensure transparency and traceability of responsibility, while maintaining the integrity of the patient's long-term health profile.

9. A computing device, comprising: The storage component stores one or more computer instructions; the one or more computer instructions are used to be called and executed by the processing component to implement the method for managing secure sharing of maritime medical records based on blockchain technology according to any one of claims 1-7.

10. A computer storage medium, characterized in that, A computer program is stored, and when the computer program is executed by a computer, the method for managing secure sharing of maritime medical records based on blockchain technology according to any one of claims 1-7 is implemented.

Images