Military hospital comprehensive medical record information management method and system
Through a combination of symmetric encryption and asymmetric encryption, combined with a role-based access control model, data security and permission management problems in military hospital case management are solved, and efficient case information management is achieved.
Patent Information
- Application Number
- CN202510544010.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-04-28
- Publication Date
- 2025-08-08
AI Technical Summary
There are problems in the management of medical records of military hospitals, such as insufficient data security, poor authority management, and low data processing efficiency.
The case data is encrypted by a combination of symmetric encryption algorithms and asymmetric encryption algorithms, and the role-based access control model is used to set permissions, combining distributed database storage and regular backups to achieve fine permission management.
It improves the security of medical record data during storage and transmission, realizes fine permission management, and improves data processing efficiency and system scientificity and rationality.
Smart Images
Figure CN120452652A_ABST
Abstract
Description
Technical Field
[0001] The present invention belongs to the technical field of medical record information management, and in particular relates to a comprehensive medical record information management method and system for a military hospital. Background Art
[0002] With the rapid development of science and technology, the level of hospital information management is also increasing. Hospital information management systems, an interdisciplinary science that integrates multiple disciplines such as medicine, information, management, and computers, have been widely used in major hospitals, providing technical support for their efficient operations. Hospital information management systems encompass multiple aspects of hospital management.
[0003] Medical record management in military hospitals contains a large amount of sensitive medical data, patient personal information, and special information about military personnel. With the development of information technology, traditional medical record management methods suffer from issues such as insufficient data security, inadequate rights management, and low data processing efficiency. Ensuring the security and integrity of medical record information during collection, storage, transmission, and use, while simultaneously achieving efficient rights management and data processing, is a critical challenge facing medical record management in military hospitals. To address this, this application proposes a comprehensive medical record information management method and system for military hospitals. Summary of the Invention
[0004] The purpose of the present invention is to provide a method and system for comprehensive medical record information management in military hospitals in order to solve the above problems, thereby solving the problems of security, authority management and data processing efficiency in the medical record management of military hospitals mentioned in the background technology.
[0005] In order to solve the above problems, the present invention provides a technical solution:
[0006] A method for managing comprehensive medical record information in a military hospital comprises the following steps:
[0007] S1. Medical record information collection: collect the patient's medical record data through the terminal equipment in the hospital and conduct preliminary verification;
[0008] S2. Data encryption processing: Encrypt medical record data using a combination of symmetric and asymmetric encryption algorithms;
[0009] S3. Permission setting and allocation: According to the roles and responsibilities of hospital personnel, access rights are set using a role-based access control model;
[0010] S4. Data storage: Store the encrypted medical record data in a distributed database and perform regular backups;
[0011] S5. Data query and access: After verifying the user's identity and permissions, retrieve and decrypt the medical record data and provide it to the user;
[0012] S6. Data update and modification: perform operations after verifying user permissions and record operation logs;
[0013] S7. Data security audit: Audit the access and operation of medical record information and record audit logs;
[0014] S8. Data sharing and transmission: Data is encrypted and transmitted through a secure network according to sharing rules and permissions;
[0015] S9. Data destruction: Safely destroy data that has exceeded its retention period or needs to be destroyed;
[0016] S10. System maintenance and update: Regularly maintain and update the system.
[0017] Preferably, the symmetric encryption algorithm is the AES algorithm, the asymmetric encryption algorithm is the RSA algorithm, and the data encryption strength calculation formula is E=log2(N)×K, where E represents the encryption strength, N represents the number of possible key combinations, and K represents the key length.
[0018] Preferably, the permission setting adopts a role-based access control model, and the permission allocation weight calculation formula is W = α × R + β × D + γ × Y, where W represents the permission weight, R represents the role weight, D represents the responsibility weight, Y represents the working years weight, α, β, γ are weight coefficients, and α + β + γ = 1.
[0019] Preferably, the medical record data includes the patient's basic information, diagnosis information, treatment information, and examination and test results.
[0020] Preferably, the data storage adopts a distributed storage architecture to improve data storage capacity and access efficiency.
[0021] A comprehensive medical record information management system for a military hospital comprises: a medical record information collection module for collecting medical record data and performing preliminary verification; a data encryption module for encrypting medical record data, comprising a symmetric encryption unit and an asymmetric encryption unit; a rights management module for setting and assigning access rights, adopting a role-based access control model; a data storage module for storing encrypted medical record data, adopting a distributed database; a data query module for verifying user identity and rights, retrieving and decrypting medical record data; a data update module for processing data update and modification operations, and recording operation logs; a security audit module for auditing access and operations, and recording audit logs; a data sharing module for encrypting and transmitting data according to sharing rules and rights; a data destruction module for securely destroying medical record data that needs to be destroyed; and a system maintenance module for maintaining and updating the system.
[0022] Preferably, the data encryption module further includes a key management unit for generating and managing encryption keys.
[0023] Preferably, the authority management module includes a role management unit, a authority allocation unit and a authority table storage unit, and the roles include doctors, nurses, administrators and superior health department personnel.
[0024] Preferably, the data storage module includes a database server, a storage management unit and a backup and recovery unit, and backs up the database regularly.
[0025] Preferably, the security audit module includes an audit monitoring unit, a log storage unit and an audit analysis unit, and generates audit reports regularly.
[0026] The beneficial effects of the present invention are as follows: the method and system for comprehensive medical record information management in military hospitals provided herein ensure data security during storage and transmission by encrypting medical record data; employ a role-based access control model for permission setting and allocation, achieving refined permission management, ensuring that users with different roles can only access and manipulate medical record information within their respective permissions; and employing a calculation formula to calculate data encryption strength and permission allocation weights, improving the scientific nature and rationality of the system. Furthermore, the system provides functions such as data storage, query, update, sharing, destruction, and maintenance, enabling comprehensive management of military hospital medical record information and improving both efficiency and security. BRIEF DESCRIPTION OF THE DRAWINGS
[0027] For ease of explanation, the present invention is described in detail with reference to the following specific implementations and accompanying drawings.
[0028] Figure 1 It is a flow chart of the comprehensive medical record information management method of the present invention. DETAILED DESCRIPTION
[0029] Example:
[0030] like Figure 1 As shown, this specific embodiment adopts the following technical solutions:
[0031] A method and system for managing comprehensive medical record information in a military hospital, comprising the following steps:
[0032] S1. Medical record information collection: Through various terminal devices in the hospital, such as doctor workstations, nurse stations, and examination department equipment, collect patient basic information, diagnosis information, treatment information, examination and test results, and other medical record data. During collection, perform preliminary verification on the data to ensure its integrity and accuracy;
[0033] S2. Data encryption: Encrypt the collected medical record data. A symmetric encryption algorithm (such as the AES algorithm) is used in combination with an asymmetric encryption algorithm to encrypt the medical record data to obtain encrypted data. The public key of the recipient is then used to encrypt the key of the symmetric encryption algorithm to obtain the key ciphertext.
[0034] S3. Permission setting and allocation: Different access rights are set according to the different roles and responsibilities of hospital personnel. Roles include but are not limited to doctors, nurses, administrators, and higher-level health department personnel. Each role is assigned corresponding permissions. For example, doctors can view and modify the medical records of their patients, nurses can view basic nursing information and some treatment information of patients, and administrators have the highest management authority, including user management, permission allocation, data backup, etc. Permission setting adopts the role-based access control (RBAC) model, and the correspondence between roles and permissions is recorded in the permission table.
[0035] S4. Data storage: The encrypted medical record data is stored in the hospital's medical record database. The database adopts a distributed storage architecture to improve data storage capacity and access efficiency. At the same time, the database is backed up regularly to ensure data security and recoverability.
[0036] S5. Data Query and Access: When a user needs to query medical record information, the system first verifies the user's identity and permissions. The user enters their username and password. After identity authentication, the system determines the scope of medical record data the user can access and the operation permissions based on the user's role and permissions. For legitimate query requests, the system retrieves the encrypted medical record data from the database, decrypts the data using the corresponding private key, and provides the decrypted information to the user.
[0037] S6. Data Update and Modification: When a doctor or nurse needs to update or modify medical record information, the system will verify the user's authority again. Only users with the corresponding modification permissions can perform the operation. After the modification operation is completed, the system automatically records the modification time, modification person, and modification content, forming an operation log for audit and traceability.
[0038] S7. Data security audit: Regularly conduct security audits on access to and operations of medical record information. Audit content includes user login records, access time, accessed data objects, operation types, etc. Audit logs can be used to promptly identify abnormal access behaviors and security risks, and appropriate measures can be taken to address them.
[0039] S8. Data Sharing and Transmission: When medical record data needs to be shared with other hospitals or higher-level health departments, the system encrypts the shared data according to the preset sharing rules and permissions and transmits it through a secure network channel. After receiving the data, the recipient uses the corresponding key to decrypt it to ensure the security of the data during transmission;
[0040] S9. Data destruction: For medical record data that has exceeded its retention period or needs to be destroyed for other reasons, the system will destroy the data according to the prescribed process; confirmation will be carried out before destruction to ensure that only useless data is destroyed. The destruction process will use a secure method, such as multiple overwriting, to prevent data recovery;
[0041] S10. System maintenance and update: Regularly maintain and update the medical record information management system, including software version updates, hardware equipment inspections, security vulnerability repairs, etc., to ensure the stability, security and functional integrity of the system.
[0042] Among them, data encryption strength calculation: In order to evaluate the security of the encryption algorithm, the encryption strength calculation formula is adopted: E = log2(N) × K, where E represents the encryption strength, N represents the number of possible key combinations, and K represents the key length. This formula can be used to calculate the encryption strength of different encryption algorithms to ensure that the appropriate encryption algorithm is selected.
[0043] Among them, the authority allocation weight calculation: when allocating authority, the user's authority weight is calculated based on factors such as the user's role, responsibilities and years of work experience. The calculation formula is: W = α × R + β × D + γ × Y, where W represents the authority weight, R represents the role weight (different roles are assigned different basic weights), D represents the responsibility weight (according to specific job responsibilities, the corresponding weight is assigned), and Y represents the years of work weight (the longer the years of work, the higher the weight), α, β, and γ are weight coefficients, and α + β + γ = 1; this formula can be used to more reasonably allocate user authority.
[0044] A comprehensive medical record information management system for military hospitals, comprising:
[0045] Medical record information collection module: used to collect medical record data from various terminal devices in the hospital and perform preliminary verification to ensure the integrity and accuracy of the data. This module includes a data input interface, a data verification unit, etc.
[0046] Data encryption module: used to encrypt the collected medical record data, using a combination of symmetric encryption algorithm and asymmetric encryption algorithm. This module includes symmetric encryption unit, asymmetric encryption unit, key management unit, etc.
[0047] Permission management module: used to set different access rights according to the different roles and responsibilities of hospital personnel, using the role-based access control (RBAC) model. This module includes a role management unit, a permission allocation unit, and a permission table storage unit;
[0048] Data storage module: used to store encrypted medical record data in a distributed database and perform regular backups. This module includes a database server, a storage management unit, a backup and recovery unit, etc.
[0049] Data query module: used to receive user query requests, verify user identity and authority, retrieve encrypted medical record data from the database and decrypt it, and provide the decrypted information to the user. This module includes a query interface, identity authentication unit, data decryption unit, etc.
[0050] Data update module: used to process user updates and modifications to medical record information, verify user permissions, and record operation logs. This module includes an update interface, permission verification unit, and operation log recording unit.
[0051] Security audit module: used to conduct security audits on access to and operations of medical record information and record audit logs. This module includes an audit monitoring unit, a log storage unit, an audit analysis unit, etc.
[0052] Data sharing module: used to share medical record data with other hospitals or higher-level health departments, encrypt the data according to preset sharing rules and permissions, and transmit it through a secure network channel. This module includes a sharing interface, a sharing rule management unit, a secure transmission unit, etc.
[0053] Data destruction module: used to safely destroy medical record data that has exceeded its retention period or needs to be destroyed, and operates according to the prescribed process. This module includes a destruction application unit, a destruction confirmation unit, and a destruction execution unit;
[0054] System maintenance module: used to maintain and update the medical record information management system, including software version updates, hardware equipment inspections, security vulnerability repairs, etc. This module includes a maintenance interface, version management unit, equipment monitoring unit, etc.
[0055] In summary:
[0056] In various departments of military hospitals, doctors input patients' diagnosis information and treatment plans through doctor workstations. Nurses use nurse workstations to record patients' care information and changes in their condition. Equipment in examination departments automatically uploads test results to the system. The collection module performs format and logic checks on the input data, such as checking whether the patient number is unique and whether the diagnosis result complies with the standard, to ensure data integrity and accuracy.
[0057] After collecting medical record data, the data encryption module first encrypts the data using the AES algorithm. The key length of the AES algorithm can be selected as 128 bits, 192 bits, or 256 bits, depending on the sensitivity of the data. The AES key is then encrypted using the recipient's public key. The public and private keys are generated using an asymmetric encryption algorithm (such as the RSA algorithm). After receiving the data, the recipient uses their own private key to decrypt the data to obtain the AES key, and then uses the AES key to decrypt the medical record data.
[0058] System administrators set up different roles based on the actual situation of the hospital, such as chief physician, attending physician, nurse, system administrator, etc., and assign corresponding permissions to each role. For example, chief physicians can view and modify the medical records of all patients, attending physicians can only view and modify the medical records of patients they are responsible for, and nurses can only view the patient's nursing information and some treatment information. When assigning permissions, the user's permission weight is calculated using the permission allocation weight calculation formula based on the user's years of work and responsibilities to ensure the rationality of permission allocation;
[0059] The data storage module stores encrypted medical record data in a distributed database. The distributed database consists of multiple server nodes, and data is stored in each node in a dispersed manner, which improves the storage capacity and access efficiency of the data. At the same time, the system automatically backs up the database every day, and the backup data is stored in a dedicated storage device to ensure data recoverability.
[0060] When a doctor needs to query a patient's medical records, he or she enters the user name and password on the system login interface. After verification by the identity authentication module, the system determines the scope of patients and data content that can be accessed based on the doctor's role and permissions. The doctor enters the query criteria, such as the patient's name, hospitalization number, etc. The data query module retrieves the encrypted medical record data from the database, decrypts it using the corresponding private key, and displays the decrypted information on the doctor's workstation screen.
[0061] When a doctor needs to modify a patient's diagnosis, the system first verifies the doctor's authority. Only doctors with modification authority can perform the operation. After the modification is completed, the system automatically records the modification time, modification person, and modification content to form an operation log. The operation log is stored in the log storage unit of the security audit module for subsequent audit and tracing.
[0062] The security audit module analyzes the system's access and operation logs daily to check for abnormal access behaviors, such as multiple failed login attempts or access to unauthorized data. Once abnormal behavior is detected, the system immediately issues an alarm and notifies the system administrator to handle the situation. At the same time, the audit analysis unit regularly generates audit reports to assess the system's security status.
[0063] When medical record data needs to be shared with higher-level health departments, the data sharing module determines the scope and permissions of the shared data based on the preset sharing rules, encrypts the shared data, and transmits it through a secure VPN network channel. After receiving the data, the higher-level health department uses the corresponding key to decrypt it and obtain the medical record information;
[0064] For medical record data that has exceeded its retention period, the data destruction module will first issue a destruction notice and notify relevant personnel for confirmation. After confirmation, the data in the database will be overwritten multiple times according to the prescribed destruction process to ensure that the data cannot be recovered.
[0065] The system maintenance module regularly checks the software version. If a new version is released, it automatically downloads and installs the update package. At the same time, it inspects the hardware devices, checks the operating status of the server, the capacity of the storage device, etc., to ensure the normal operation of the hardware devices. Any security vulnerabilities found are repaired in a timely manner to improve the security of the system.
[0066] While embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions, and variations may be made to these embodiments without departing from the principles and spirit of the invention, and that the scope of the invention is defined by the appended claims and their equivalents.
Claims
1. A method for managing comprehensive medical record information in a military hospital, characterized in that: The following steps are involved: S1. Medical record information collection: collect the patient's medical record data through the terminal equipment in the hospital and conduct preliminary verification; S2. Data encryption processing: Encrypt medical record data using a combination of symmetric and asymmetric encryption algorithms; S3. Permission setting and allocation: Based on the roles and responsibilities of hospital personnel, access rights are set using a role-based access control model; S4. Data storage: Store the encrypted medical record data in a distributed database and perform regular backups; S5. Data query and access: After verifying the user's identity and permissions, retrieve and decrypt the medical record data and provide it to the user; S6. Data update and modification: perform operations after verifying user permissions and record operation logs; S7. Data security audit: Audit the access and operation of medical record information and record audit logs; S8. Data sharing and transmission: Data is encrypted and transmitted through a secure network according to sharing rules and permissions; S9. Data destruction: Safely destroy data that has exceeded its retention period or needs to be destroyed; S10. System maintenance and update: Regularly maintain and update the system.
2. A method for managing comprehensive medical records information in a military hospital according to claim 1, characterized in that: The symmetric encryption algorithm is the AES algorithm, the asymmetric encryption algorithm is the RSA algorithm, and the data encryption strength calculation formula is E=log2(N)×K, where E represents the encryption strength, N represents the number of possible key combinations, and K represents the key length.
3. A method for managing comprehensive medical records information in a military hospital according to claim 1, characterized in that: The permission setting adopts a role-based access control model, and the permission allocation weight calculation formula is W = α × R + β × D + γ × Y, where W represents the permission weight, R represents the role weight, D represents the responsibility weight, Y represents the working years weight, α, β, and γ are weight coefficients, and α + β + γ = 1.
4. A method for managing comprehensive medical records information in a military hospital according to claim 1, characterized in that: The medical record data includes the patient's basic information, diagnosis information, treatment information, and examination and test results.
5. A method for managing comprehensive medical records information in a military hospital according to claim 1, characterized in that: The data storage adopts a distributed storage architecture to improve the storage capacity and access efficiency of data.
6. A comprehensive medical record information management system for military hospitals, characterized in that: include: Medical record information collection module: used to collect medical record data and conduct preliminary verification; Data encryption module: used to encrypt medical record data, including symmetric encryption unit and asymmetric encryption unit; Permission management module: used to set and assign access rights, using a role-based access control model; Data storage module: used to store encrypted medical record data, using a distributed database; Data query module: used to verify user identity and permissions, retrieve and decrypt medical record data; Data update module: used to process data update and modification operations and record operation logs; Security audit module: used to audit access and operations and record audit logs; Data sharing module: used to encrypt and transmit data according to sharing rules and permissions; Data destruction module: used to safely destroy medical record data that needs to be destroyed; System maintenance module: used to maintain and update the system.
7. A military hospital comprehensive medical record information management system according to claim 6, characterized in that: The data encryption module also includes a key management unit for generating and managing encryption keys.
8. A military hospital comprehensive medical record information management system according to claim 6, characterized in that: The authority management module includes a role management unit, an authority allocation unit and an authority table storage unit. The roles include doctors, nurses, administrators and superior health department personnel.
9. A military hospital comprehensive medical record information management system according to claim 6, characterized in that: The data storage module includes a database server, a storage management unit and a backup and recovery unit, and backs up the database regularly.
10. A military hospital comprehensive medical record information management system according to claim 6, characterized in that: The security audit module includes an audit monitoring unit, a log storage unit and an audit analysis unit, and generates audit reports regularly.