Medical insurance trusted space system

Abstract

The invention discloses a medical insurance trusted space system, which comprises a service center, a data processing center, a trusted management and control center, a technical component, a connector, an operation management layer and a supervision management layer, the service center provides a unified service entrance and business support capability for users; the data processing center is responsible for full life cycle processing and trusted computing of data; the credible management and control center guarantees credibility of participants and operations in the data space; the technical component provides bottom-layer technical tools and algorithm support, the connector realizes cross-system and cross-network secure interconnection and intercommunication, the operation management layer ensures stable operation and continuous optimization of the system, and the supervision management layer ensures compliance and risk controllability of data flow; the method has the advantages that the technology is mature and stable, the safety is high, and the whole link is controllable.

Description

Technical Field

[0001] The present invention relates to the technical field of data processing, and particularly to a medical insurance trusted space system. Background Art

[0002] The medical insurance trusted data space is a key infrastructure that takes the authorized operation of public data as the core and promotes the secure sharing and value release of medical insurance data. The "shared governance" role of medical insurance data in the medical system improves the quality and efficiency of medical services through data empowerment.

[0003] Defects and deficiencies of current technologies

[0004] Trust: How to ensure the trustworthiness of the user entity's identity and the application programs processing data. It is necessary to ensure the authenticity and trustworthiness of the user entity (such as patients, doctors) identities to prevent impersonation or forgery; at the same time, it is necessary to verify that the application programs processing data (such as hospital systems, third-party platforms) have not been tampered with or implanted with malicious code to avoid data leakage or abuse;

[0005] Controllability: How to ensure the trustworthiness of the entities, objects, time, location, and actions in data sharing. In data sharing, it is necessary to strictly control the entity (who accesses), object (what data is accessed), time (when to access), location (access source), and actions (how to operate) to prevent unauthorized or abnormal access and ensure the secure and compliant flow of data;

[0006] Availability: How to ensure the interoperability, completeness, timeliness, and authenticity of data. It is necessary to solve data interoperability (compatibility across institutions and systems), completeness (no missing or incorrect data), timeliness (real-time or near-real-time updates), and authenticity (verifiable data source, not tampered with) to support precision medicine and medical insurance decision-making;

[0007] Auditability: How to ensure that the logs of the entire data life cycle are not tampered with and provide evidence for compliance auditing. It is necessary to completely record the logs of the entire data life cycle (generation, transmission, storage, use, destruction), ensure that the logs are not tampered with, and at the same time provide verifiable audit evidence to meet compliance requirements. Summary of the Invention

[0008] In view of the above deficiencies of the prior art, the technical problem to be solved by this patent application is how to provide a medical insurance trusted space system with mature and stable technology, high security, and controllability across the entire link.

[0009] To solve the above technical problems, the present invention adopts the following technical solutions:

[0010] A medical insurance trusted space system, comprising a service center, a data processing center, a trusted control center, technical components, connectors, an operation management layer, and a supervision management layer; the service center provides a unified service entrance and business support capabilities for users; the data processing center is responsible for the full life cycle processing and trusted computing of data; the trusted control center ensures the trustworthiness of the participating entities and operations within the data space; the technical components provide underlying technical tools and algorithm support, the connectors achieve secure interconnection across systems and networks, the operation management layer ensures the stable operation and continuous optimization of the system, and the supervision management layer ensures the compliance of data circulation and controllability of risks.

[0011] Preferably, the functional modules of the service center include a directory management module, a product development module, an application review module, a supply-demand matching module, a measurement and pricing module, and a contract management module; the directory management module is used to establish a data resource directory, classify and manage medical insurance data, and support dynamic updates and retrievals; the product development module is used to provide data product development tools, support data modeling, API encapsulation, and visual analysis, and form reusable data services; the application review module is used to process data usage applications, including permission reviews and compliance reviews, to ensure the legal and compliant use of data; the supply-demand matching module matches data demanders and suppliers through the platform to promote the efficient docking of data resources; the measurement and pricing module is used to design a data service billing model and support cost accounting and settlement; the contract management module automatically executes data sharing rules and responsibility divisions through smart contracts or electronic agreements.

[0012] Preferably, the data processing center includes a data collection module, a data access module, a data storage module, a data processing module, a secure computing module, a trusted integration framework module, and a trusted execution environment module; the data collection module interfaces with multi-source heterogeneous data and supports the collection of structured / unstructured data; the data access module formulates a standardized interface protocol to achieve the standardized access of data; the data storage module adopts distributed storage technology, supports hierarchical management of hot and cold data, and ensures high availability and disaster recovery capabilities; the data processing module performs data cleaning, desensitization, and tagging processes to improve data quality; the secure computing module applies privacy computing technology to achieve "data availability without visibility"; the trusted integration framework module integrates data, algorithms, and computing power resources to provide unified scheduling capabilities; the trusted execution environment module protects the privacy of the data processing process based on hardware-level security isolation technology.

[0013] Preferably, the trusted control center includes an identity authentication module, an application authentication module, a node access module, an authorization policy module, an evidence storage management module, and a log management module; the identity authentication module uses multi-factor authentication to ensure the authenticity of user / organization identities; the application authentication module conducts security reviews on data call applications to prevent malicious code or illegal access; the node access module manages data space nodes and verifies node compliance; the authorization policy module dynamically controls data access rights based on the RBAC / ABAC model; the evidence storage management module records key operations through blockchain to provide an immutable audit basis; the log management module records operation logs across the entire link to support traceability and analysis of abnormal behaviors.

[0014] Preferably, the technical components include an identification system, semantic conversion, blockchain, national cryptography algorithms, and large models; the identification system assigns unique identifiers to data, devices, and users to achieve global interconnection; semantic conversion: solves the semantic heterogeneity problem of different data sources through ontology modeling and knowledge graph technology; the blockchain constructs a consortium chain network to achieve data evidence storage, intelligent contract execution, and cross-institutional consensus; the national cryptography algorithms: adopt the SM2 / SM3 / SM4 national cryptography standards to ensure data encryption, signature, and transmission security; the large models: apply large models in the medical insurance vertical field to support scenarios such as intelligent review, fraud detection, and policy simulation.

[0015] Preferably, the core functions of the connector include node mutual recognition and networking, semantic interoperability, encryption and decryption of data in circulation, and supervision and audit logs; node mutual recognition and networking: support cross-domain authentication and trusted networking of heterogeneous nodes, where nodes include cloud, edge, and end; semantic interoperability provides a standardized data conversion middleware to eliminate business term differences; encryption and decryption of data in circulation, based on quantum key distribution or homomorphic encryption, realizes end-to-end protection of data flow; the supervision and audit logs: synchronize operation logs to regulatory nodes in real time to meet the requirements of penetrative supervision.

[0016] Preferably, the overall construction of the trusted data space system complies with the comprehensive protection of the information security management system, information security technology system, and information security operation system. In terms of data security: uses encryption technology to protect the confidentiality of stored sensitive data, implements data backup and recovery mechanisms to prevent data loss and disaster recovery; in terms of network security: uses firewalls and one-way isolation network gates to protect the network from unauthorized access and attacks, and uses virtual private networks (VPNs) to encrypt network communications to protect data transmission.

[0017] Preferably, the security objectives of the information security management system: clarify the protection objectives and top-level security policies of medical insurance data; the overall strategy deployment of the information security management system includes organizational structure and responsibilities, and personnel security system standards.

[0018] Preferably, the information security technology system includes a basic protection layer, network and communication security, threat response technology, and cryptography and physical technology; the basic protection layer includes data protection, access control, and identity recognition; the network and communication security includes communication protection and security area boundaries; the threat response technology includes vulnerability reinforcement, threat detection, and monitoring; the cryptography and physical technology includes non-repudiation and physical security.

[0019] Preferably, the information security operation system includes a system construction stage, a system operation and maintenance stage, and a continuous supervision stage; during the system construction stage, the secure development lifecycle is followed during development and testing, and secure design is embedded in the development of the medical insurance system. Third-party security assessment is carried out during acceptance and delivery to ensure system compliance; during the system operation and maintenance stage: during daily management, medical insurance data should be backed up, keys should be updated, an emergency plan for data leakage should be formulated, and system changes should be responded to and approved 7×24 hours a day. The business continuity risk of medical insurance should be evaluated; during the continuous supervision stage, regular internal and external audits should be carried out, and medical insurance data in mobile devices should be encrypted and stored.

[0020] In summary, the present invention has the following advantages:

[0021] 1. Feasibility and technological maturity; integrating proven technologies such as federated learning and blockchain to reduce implementation risks and adapt to existing medical insurance data infrastructure; resource efficiency: replacing the transfer of original data with encrypted computing to reduce data replication and storage costs and improve cross-institutional collaboration efficiency; compliance adaptation: built-in smart contracts automatically match regulatory requirements such as the Data Security Law and the Personal Information Protection Law to lower the legal implementation threshold.

[0022] 2. Dual insurance for security and privacy protection; computing security: federated learning enables data to be "usable but invisible" to avoid exposure of original data; storage security: blockchain evidence storage ensures that operation logs are tamper-proof and supports post-event auditing and traceability; dynamic permission control: smart contracts restrict the scope of data use in real time (such as time limit, frequency, and purpose) to prevent abuse of excessive permissions; risk isolation: the distributed architecture avoids single-point leakage, and even local attacks do not affect the overall data security.

[0023] 3. Innovation and technological fusion breakthrough; federated learning + blockchain: embedding non-repudiation in privacy computing to achieve "computing verifiability"; dynamic data masking: automatically adjusting the data granularity according to the business scenario (such as statistical level / individual level); mode innovation: constructing a collaboration paradigm of "data does not move, the model moves" to solve the problem of cross-regional sharing of medical insurance data.

[0024] 4. Process closed-loop and full-link controllability; Beforehand: Contractual authorization clarifies data usage; During: Encrypted computing and real-time monitoring block abnormal behaviors; Afterward: Blockchain audit logs support responsibility demarcation and evidence solidification; Self-verification system: The data usage effect (such as model accuracy) can be quantitatively fed back to optimize subsequent sharing strategies; Multi-party collaborative closed-loop: The responsibilities and powers of roles such as medical institutions, medical insurance bureaus, and pharmaceutical companies are clear, forming a compliant sharing ecosystem. Brief Description of the Drawings

[0025] Figure 1 It is a system framework diagram of a medical insurance trusted space system described in the present invention.

[0026] Figure 2 It is an information security architecture diagram of the trusted data space in the present invention. Detailed Implementation Modes

[0027] The present invention will be further described in detail below with reference to the drawings. In the description of the present invention, it should be understood that the orientation or positional relationship indicated by orientation words such as "upper, lower" and "top, bottom" is usually based on the orientation or positional relationship shown in the drawings, and is only for the convenience of describing the present invention and simplifying the description. Without contrary description, these orientation words do not indicate and imply that the device or element referred to must have a specific orientation or be constructed and operated in a specific orientation, so it cannot be understood as a limitation on the protection scope of the present invention; the orientation words "inner, outer" refer to the inside and outside relative to the contour of each component itself.

[0028] As Figure 1-2 shown, a medical insurance trusted space system includes a service center, a data processing center, a trusted control center, technical components, a connector, an operation management layer, and a supervision management layer; the service center provides a unified service entrance and business support capabilities for users; the data processing center is responsible for the full life cycle processing and trusted computing of data; the trusted control center ensures the trustworthiness of the participating entities and operations within the data space; the technical components provide underlying technical tools and algorithm support, the connector realizes secure interconnection across systems and networks, the operation management layer ensures the stable operation and continuous optimization of the system, and the supervision management layer ensures the compliance of data circulation and risk controllability.

[0029] In this embodiment, the functional modules of the service center include a directory management module, a product development module, an application review module, a supply-demand matching module, a metering and pricing module, and a contract management module; the directory management module is used to establish a data resource directory, classify and manage medical insurance data, and support dynamic update and retrieval; the product development module is used to provide data product development tools, support data modeling, API encapsulation, and visual analysis, and form reusable data services; the application review module is used to process data usage applications, including permission review and compliance review, to ensure legal and compliant data calls; the supply-demand matching module matches data demanders and suppliers through the platform to promote the efficient docking of data resources; the metering and pricing module is used to design a data service charging model and support cost accounting and settlement; the contract management module automatically executes data sharing rules and responsibility division through smart contracts or electronic agreements.

[0030] Specifically, the medical insurance data includes, but is not limited to, insured information, medical records, and drug catalogs; the data service charging model includes, but is not limited to, charging by times, by quantity, and by value.

[0031] In this embodiment, the data processing center includes a data collection module, a data access module, a data storage module, a data processing module, a secure computing module, a trusted integration framework module, and a trusted execution environment module; the data collection module interfaces with multi-source heterogeneous data and supports the collection of structured / unstructured data; the data access module formulates a standardized interface protocol to achieve standardized data access; the data storage module uses distributed storage technology to support hierarchical management of hot and cold data and ensure high availability and disaster recovery capabilities; the data processing module performs data cleaning, desensitization, and tagging to improve data quality; the secure computing module applies privacy computing technology to achieve "data can be used but not seen"; the trusted integration framework module integrates data, algorithms, and computing power resources to provide unified scheduling capabilities; the trusted execution environment module protects the privacy of the data processing process based on hardware-level security isolation technology.

[0032] Specifically, the multi-source heterogeneous data includes, but is not limited to, hospital HIS systems and medical insurance settlement platforms; the standardized interface protocol includes, but is not limited to, FHIR and HL7; the privacy computing technology includes, but is not limited to, federated learning and multi-party secure computing; the hardware-level security isolation technology includes, but is not limited to, Intel SGX.

[0033] In this embodiment, the trusted control center includes an identity authentication module, an application authentication module, a node access module, an authorization policy module, an evidence storage management module, and a log management module. The identity authentication module uses multi-factor authentication to ensure the authenticity of user / organization identities. The application authentication module conducts security reviews on data call applications to prevent malicious code or illegal access. The node access module manages data space nodes and verifies node compliance. The authorization policy module dynamically controls data access permissions based on the RBAC / ABAC model. The evidence storage management module records key operations through blockchain to provide an immutable audit basis. The log management module records operation logs across the entire link to support traceability and analysis of abnormal behaviors.

[0034] Specifically, the multi-factor authentication includes, but is not limited to, biometric recognition and digital certificates. The data space nodes include, but are not limited to, medical institution nodes and regulatory nodes. The key operations include, but are not limited to, data applications and authorizations.

[0035] In this embodiment, the technical components include an identification system, semantic conversion, blockchain, national cryptographic algorithms, and large models. The identification system assigns unique identifiers to data, devices, and users to achieve global interconnection. The semantic conversion solves the semantic heterogeneity problem of different data sources through ontology modeling and knowledge graph technology. The blockchain constructs a consortium chain network to achieve data evidence storage, intelligent contract execution, and cross-institutional consensus. The national cryptographic algorithms adopt the SM2 / SM3 / SM4 national cryptographic standards to ensure data encryption, signature, and transmission security. The large models apply large models in the medical insurance vertical field to support scenarios such as intelligent review, fraud detection, and policy simulation.

[0036] In this embodiment, the core functions of the connector include node mutual recognition and networking, semantic interoperability, circulation encryption and decryption, and supervision audit logs. The node mutual recognition and networking support cross-domain authentication and trusted networking of heterogeneous nodes, where the nodes include cloud, edge, and end. The semantic interoperability provides a standardized data conversion middleware to eliminate differences in business terms. The circulation encryption and decryption realizes end-to-end protection of data flow based on quantum key distribution or homomorphic encryption. The supervision audit logs synchronize operation logs to regulatory nodes in real time to meet the requirements of penetrative supervision.

[0037] Specifically, operation management provides service modules for operation and maintenance monitoring, operation management, and operation analysis to ensure the stable operation and continuous optimization of the system. The operation and maintenance monitoring includes automated fault warning and recovery, and real-time monitoring of system performance, such as computing resources and network latency. The operation management manages user services, resource quotas, and billing rules to optimize operation processes. The operation analysis displays indicators such as resource utilization rate and service call volume through a data cockpit to support decision-making.

[0038] Specifically, the supervision and management provides service modules for event management, early warning management, authentication supervision, authorization supervision, and usage supervision to ensure compliance in data circulation and controllable risks.

[0039] The event management includes, but is not limited to, recording violation events such as unauthorized access and initiating emergency response processes; the early warning management: identifying abnormal behaviors based on AI models, such as high-frequency calls and access to sensitive fields, triggering early warnings; the authentication supervision: auditing the identity authentication process to prevent forged identities or abuse of permissions; the authorization supervision: monitoring the allocation and usage of permissions and dynamically adjusting policies; the usage supervision: tracking data usage scenarios, such as whether it exceeds the application scope, to ensure compliance with privacy protection requirements.

[0040] In this embodiment, the overall construction of the trusted data space complies with the comprehensive protection of the information security management system, information security technology system, and information security operation system. In terms of data security: using encryption technology to protect the confidentiality of stored sensitive data, implementing data backup and recovery mechanisms to prevent data loss and disaster recovery; in terms of network security: using firewalls and one-way isolation gateways to protect the network from unauthorized access and attacks, and using virtual private networks (VPNs) to encrypt network communications to protect data transmission.

[0041] In this embodiment, the security objectives of the information security management system: clarify the protection objectives and top-level security policies for medical insurance data; the overall strategy deployment of the information security management system includes organizational structure and responsibilities, and personnel security system standards.

[0042] Specifically, the organizational structure and responsibilities are decision-making - management - execution - supervision, manifested in a hierarchical management mechanism to ensure that responsibilities are assigned to specific individuals; positions and authorizations: setting position permissions according to the sensitivity of medical insurance data, such as hierarchical authorizations for doctors, administrators, and auditors; communication and inspections: cross-departmental collaboration and regular compliance reviews.

[0043] Specifically, the personnel security includes awareness and skills: regularly conducting data privacy protection training; assessment and education: ensuring that personnel have the ability to operate safely through examination and certification.

[0044] Specifically, the system standards include policies and strategies: formulating compliance standards for medical insurance data sharing and storage; process forms: standardizing operation processes, such as patient data access approval forms.

[0045] In this embodiment, the information security technology system includes a basic protection layer, network and communication security, threat response technology, and cryptography and physical technology; the basic protection layer includes data protection, access control, and identity recognition; the network and communication security includes communication protection and security area boundaries; the threat response technology includes vulnerability reinforcement, threat detection, and monitoring; the cryptography and physical technology includes non-repudiation and physical security.

[0046] Specifically, the data protection includes: encrypting medical insurance data using national cryptographic algorithms and desensitization technology; the access control is role-based access management (RBAC) to prevent unauthorized access; the identity recognition ensures the authenticity of user identities through digital certificates and biometric recognition; the communication protection uses SSL / TLS to ensure the security of medical insurance data transmission; the security zone boundary isolates the internal and external networks and deploys firewalls and intrusion detection systems (IDS); the vulnerability reinforcement regularly scans and repairs system vulnerabilities, such as patch management; the threat detection uses AI to analyze abnormal behaviors, such as frequently retrieving sensitive data; the monitoring and supervision conducts real-time log auditing to track the data operation traces; the non-repudiation uses digital signature technology to ensure the traceability of operations, such as electronic prescription signatures; the physical security includes entity protection such as access control to the data center and monitoring cameras.

[0047] In this embodiment, the information security operation system includes a system construction stage, a system operation and maintenance stage, and a continuous supervision stage; during the system construction stage, the secure development lifecycle is followed during development and testing, and secure design is embedded in the development of the medical insurance system. Third-party security assessment during acceptance and delivery ensures system compliance; during the system operation and maintenance stage: during daily management, medical insurance data should be backed up, keys should be updated, a data leakage emergency plan should be formulated, and system changes should be responded to and approved 7×24 hours. The business continuity risk of medical insurance should be evaluated; during the continuous supervision stage, regular internal and external audits are conducted, and medical insurance data in mobile devices is encrypted and stored.

[0048] Specifically, the security protection objects include a secure computing environment, a security zone boundary, and secure network communication; the secure computing environment ensures the security of computing resources for medical insurance business systems, such as electronic medical records and medical insurance settlement; the security zone boundary divides the boundary between the medical insurance internal network and the external network to prevent cross-region attacks; the secure network communication ensures the security of data exchange between medical insurance institutions, such as hospitals and medical insurance bureaus.

[0049] The present invention provides, in terms of technology, the integration and integration, and capacity scheduling of various circulation technology components such as trusted computing environment, data usage control technology, data sandbox, privacy computing, and function computing; Trusted computing environment (TEE): Based on hardware-level isolation technologies such as Intel SGX and ARM TrustZone, it ensures that sensitive data is processed in encrypted memory, and even system administrators cannot steal it, guaranteeing the trustworthiness of the computing process; Data usage control technology: Combining attribute-based encryption (ABE) and dynamic access policies, it realizes fine-grained permission management such as "only allowing doctors in tertiary hospitals to access specific disease data during working hours", and is automatically executed through smart contracts; Data sandbox: Provides a virtualized isolation environment, supports data to be "usable but invisible", allows third parties to perform analysis within a controlled space (such as medical insurance fraud detection), and the results are output after review without revealing the original data; Privacy computing: Integrates federated learning, secure multi-party computing (MPC), and homomorphic encryption, supports cross-institutional joint modeling such as disease prediction, and each participating party only exposes encrypted intermediate results to protect data sovereignty; Function computing: Dynamically schedules data processing logic such as desensitization and aggregation through the Serverless architecture, allocates resources on demand, and meets the requirements of scenarios such as high-concurrency and low-latency medical insurance settlement.

[0050] The present invention provides the service capabilities of data security technology components such as data watermarking, sensitive discovery, and ciphertext exchange in terms of security; Data watermarking: Adopts dynamic invisible watermarking technology to embed traceable identifiers in medical insurance data such as electronic medical records and settlement records. Once leaked, the responsible party can be accurately located, and at the same time, it does not affect the normal use of the data; Visible watermarks are supported, such as PDF anti-counterfeiting, and invisible digital watermarks, such as database field fingerprints; Sensitive data discovery: Based on NLP and deep learning, automatically scans structured / unstructured data such as diagnosis and treatment texts and imaging reports, identifies sensitive fields, classifies and grades them, such as GDPR special category data, and generates a risk heat map to guide the formulation of desensitization strategies; Ciphertext exchange: Combining the national secret algorithm (SM4) and quantum key distribution (QKD), it realizes end-to-end encryption of data transmission. Through the **proxy re-encryption (PRE)** technology, it allows third parties to process data without decrypting it, such as medical insurance auditing. The key is hosted by a hardware security module (HSM) to prevent man-in-the-middle attacks.

[0051] In summary, the present invention has the following advantages:

[0052] 1. Feasibility and technological maturity; Integrate proven technologies such as federated learning and blockchain to reduce the implementation risk and adapt to the existing medical insurance data infrastructure; Resource efficiency: Replace the transfer of original data with encrypted computing, reduce data replication and storage costs, and improve the efficiency of cross-institutional collaboration; Compliance adaptation: Built-in smart contracts automatically match the requirements of laws and regulations such as the Data Security Law and the Personal Information Protection Law, reducing the legal implementation threshold;

[0053] 2. Dual insurance for security and privacy protection; Computational security: Federated learning enables "usable but invisible" data, avoiding exposure of raw data; Storage security: Blockchain evidence storage ensures the anti-tampering of operation logs and supports post-event audit and traceability; Dynamic permission control: Smart contracts restrict the scope of data use in real time (such as time limit, frequency, purpose), preventing unauthorized abuse; Risk isolation: The distributed architecture avoids single-point leakage, and even local attacks do not affect the overall data security.

[0054] 3. Innovation and technological integration breakthrough; Federated learning + blockchain: Embed non-repudiation in privacy computing to achieve "computationally verifiable"; Dynamic data masking: Automatically adjust the data granularity according to the business scenario (such as statistical level / individual level); Mode innovation: Build a collaborative paradigm of "data does not move while the model moves" to solve the problem of cross-regional sharing of medical insurance data.

[0055] 4. Process closed-loop and full-link controllability; Beforehand: Contractual authorization clarifies the purpose of data use; During: Encrypted computing and real-time monitoring block abnormal behaviors; Afterward: Blockchain audit logs support responsibility delimitation and evidence solidification; Self-verification system: The data use effect (such as model accuracy) can be quantitatively feedback to optimize subsequent sharing strategies; Multi-party collaborative closed-loop: The responsibilities and powers of roles such as medical institutions, medical insurance bureaus, and pharmaceutical companies are clear, forming a compliant sharing ecosystem

[0056] Finally, it should be noted that those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these changes and modifications.

Claims

1. A medical insurance trusted space system, characterized in that, It includes a service center, a data processing center, a trusted control center, technical components, connectors, an operation management layer, and a supervision management layer; the service center provides a unified service entrance and business support capabilities for users; the data processing center is responsible for the full life cycle processing and trusted computing of data; the trusted control center ensures the trustworthiness of the participating entities and operations within the data space; the technical components provide underlying technical tools and algorithm support, the connectors achieve secure interconnection across systems and networks, the operation management layer ensures the stable operation and continuous optimization of the system, and the supervision management layer ensures the compliance of data circulation and controllability of risks.

2. The medical insurance trusted space system according to claim 1, characterized in that The functional modules of the service center include a directory management module, a product development module, an application review module, a supply-demand matching module, a metering and pricing module, and a contract management module; the directory management module is used to establish a data resource directory, classify and manage medical insurance data, and support dynamic updates and retrievals. The product development module is used to provide data product development tools, support data modeling, API encapsulation, and visual analysis, and form reusable data services; the application review module is used to process data usage applications, including permission reviews and compliance reviews, to ensure legal and compliant data calls; the supply-demand matching module matches data demanders and suppliers through the platform to promote the efficient docking of data resources; the metering and pricing module is used to design a data service charging model and support cost accounting and settlement; the contract management module automatically executes data sharing rules and responsibility divisions through smart contracts or electronic agreements.

3. The medical insurance trusted space system according to claim 2, characterized in that, The data processing center includes a data collection module, a data access module, a data storage module, a data processing module, a secure computing module, a trusted integration framework module, and a trusted execution environment module; the data collection module interfaces with multi-source heterogeneous data and supports the collection of structured / unstructured data; the data access module formulates a standardized interface protocol to achieve standardized data access; the data storage module uses distributed storage technology, supports hierarchical management of hot and cold data, and ensures high availability and disaster recovery capabilities; the data processing module performs data cleaning, desensitization, and tagging to improve data quality; the secure computing module applies privacy computing technology to achieve "data available but invisible". The trusted integration framework module integrates data, algorithms, and computing power resources and provides unified scheduling capabilities; the trusted execution environment module protects the privacy of the data processing process based on hardware-level security isolation technology.

4. The medical insurance trusted space system according to claim 3, characterized in that, The trusted control center includes an identity authentication module, an application authentication module, a node access module, an authorization policy module, an evidence storage management module, and a log management module; the identity authentication module adopts multi-factor authentication to ensure the authenticity of user / organization identities; the application authentication module conducts security reviews on data access applications to prevent malicious code or illegal access; the node access module manages data space nodes and verifies node compliance; the authorization policy module dynamically controls data access permissions based on the RBAC / ABAC model; the evidence storage management module records key operations through blockchain to provide an immutable audit basis; the log management module records operation logs throughout the entire link to support traceability and analysis of abnormal behaviors.

5. The medical insurance trusted space system according to claim 4, characterized in that, The technical components include an identification system, semantic conversion, blockchain, national cryptographic algorithms, and large models; the identification system assigns unique identifiers to data, devices, and users to achieve global interconnection; semantic conversion solves the semantic heterogeneity problem of different data sources through ontology modeling and knowledge graph technology; the blockchain constructs a consortium chain network to achieve data evidence storage, intelligent contract execution, and cross-organization consensus; the national cryptographic algorithms adopt the SM2 / SM3 / SM4 national cryptographic standards to ensure data encryption, signature, and transmission security; the large models apply large models in the medical insurance vertical domain to support scenarios such as intelligent review, fraud detection, and policy simulation.

6. The medical insurance trusted space system according to claim 5, wherein The core functions of the connector include node mutual recognition and networking, semantic interoperability, encryption and decryption for data circulation, and supervision audit logs; node mutual recognition and networking support cross-domain authentication and trusted networking of heterogeneous nodes, where nodes include cloud, edge, and end; semantic interoperability provides a standardized data conversion middleware to eliminate differences in business terms; encryption and decryption for data circulation achieve end-to-end protection of data flow based on quantum key distribution or homomorphic encryption; the supervision audit logs synchronize operation logs to regulatory nodes in real time to meet the requirements of penetrative supervision.

7. The medical insurance trusted space system according to claim 6, characterized in that, The overall construction of the trusted data space complies with the comprehensive protection of the information security management system, information security technology system, and information security operation system. In terms of data security: encryption technology is used to protect the confidentiality of stored sensitive data, and data backup and recovery mechanisms are implemented to prevent data loss and disaster recovery; in terms of network security: firewalls and one-way isolation network gates are used to protect the network from unauthorized access and attacks, and virtual private networks are used to encrypt network communications to protect data transmission.

8. The medical insurance trusted space system according to claim 7, characterized in that, The security objectives of the information security management system: clarify the protection objectives and top-level security policies for medical insurance data; the overall strategy deployment of the information security management system includes organizational structure and responsibilities, and personnel security system standards.

9. The medical insurance trusted space system according to claim 8, characterized in that, The information security technology system includes a basic protection layer, network and communication security, threat response technology, and cryptography and physical technology; the basic protection layer includes data protection, access control, and identity recognition; network and communication security includes communication protection and security area boundaries; threat response technology includes vulnerability reinforcement, threat detection, and monitoring; cryptography and physical technology includes non-repudiation and physical security.

10. A medical insurance trusted space system according to claim 9, characterized in that, The information security operation system includes a system construction stage, a system operation and maintenance stage, and a continuous supervision stage; during the system construction stage, the secure development lifecycle is followed during development and testing, and secure design is embedded in the development of the medical insurance system, and third-party security evaluation is carried out during acceptance and delivery to ensure system compliance; During the system operation and maintenance stage: during daily management, medical insurance data should be backed up, keys should be updated, an emergency plan for data leakage should be formulated, responses to system changes should be made 7×24 hours a day, and approvals should be obtained, and the risk of medical insurance business continuity should be evaluated; during the continuous supervision stage, regular internal and external audits should be carried out, and medical insurance data in mobile devices should be encrypted and stored.

Images