Digital medical record management system
By introducing modules such as user authentication, data encryption, security audit, data anonymization and continuous monitoring into the medical record management system, the problem of insufficient privacy in the medical record management system has been solved, and higher security and privacy protection has been achieved.
Patent Information
- Application Number
- CN202510727922.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-06-03
- Publication Date
- 2025-09-19
AI Technical Summary
The existing medical record management system has poor privacy and is vulnerable to cyber attacks, which can lead to the leakage of electronic medical records and exposure of patients' personal information, affecting the physical and mental health of medical institutions and patients.
The user authentication and authorization module, data encryption module, security audit module, data anonymization module, privacy setting and patient control module, continuous monitoring module and threat monitoring module are used to enhance system security and privacy protection.
It improves the overall security of the medical record management system, reduces the risk of data leakage, protects patient privacy, and avoids impacts on medical institutions and patients.
Smart Images
Figure CN120673953A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of information management, and in particular to a digital medical record management system. Background Art
[0002] Medical records refer to a set of documents and archives established by medical institutions to record patients' basic information, medical history, diagnosis and treatment process, and medical expenses. With the rapid development of computers and the Internet, by converting traditional paper medical records into electronic formats through digital technology, medical records can be shared among different medical institutions based on the Internet to improve the efficiency of patient treatment. In this process, medical records need to be managed through the use of medical record management systems.
[0003] However, the existing management system still has the following technical problems when in use:
[0004] The current medical record management system has poor privacy and is vulnerable to cyber attacks, which can lead to the leakage of electronic medical records and the exposure of patients' personal information. This not only affects the corresponding medical institutions, but also causes certain harm to the physical and mental health of patients.
[0005] Therefore, a digital medical record management system is proposed to solve the above problems. Summary of the Invention
[0006] The purpose of the present invention is to provide a digital medical record management system to solve the problems raised in the above background technology.
[0007] To achieve the above-mentioned object, the present invention provides the following technical solutions: a digital medical record management system, comprising a user authentication and authorization module, a data encryption module, a security audit module, a data anonymization module, a privacy setting and patient control module, a continuous monitoring module, and a threat monitoring module;
[0008] The user authentication and authorization module is used to authenticate and authorize users. In addition to the traditional username and password, it also requires users to provide additional identity verification information to enhance account security and assign corresponding permissions based on user roles to ensure that only authorized personnel can access specific information;
[0009] The data encryption module encrypts the transport layer, using the SSL / TLS protocol to protect the security of data transmission over the network, and encrypts data at rest, making the content difficult to read even if the physical media is stolen;
[0010] The security audit module records all operations on sensitive data in the system, regularly checks log files, detects abnormal activities and generates reports for further analysis;
[0011] The data anonymization module is used to remove or hide personal identity information without affecting the value of data analysis, so that even if the data is leaked, it is difficult to trace it back to a specific individual. By adding noise or other methods, the accuracy of statistical results is guaranteed while protecting individual privacy.
[0012] The privacy settings and patient control module allows patients to view and control which medical providers can access their electronic health records and how this information is shared. When a third party requests access to a patient's health information, the system should notify the patient and explain the purpose and scope of the access.
[0013] The continuous monitoring module monitors network traffic in real time, identifies potential malicious activities and responds promptly;
[0014] The threat monitoring module accesses external threat intelligence services to obtain the latest network security threat information and make preventive preparations in advance.
[0015] Preferably, the user authentication and authorization module includes a user registration management unit, an identity authentication unit, a role access control unit and a permission allocation management unit;
[0016] The user registration management unit is responsible for the creation of new users, information maintenance and account status management; the identity authentication unit performs user identity authentication operations to confirm whether the login requester is a legitimate user; the role access control unit defines different roles and their corresponding permission sets; the permission allocation management unit is used to manage and update user permission settings.
[0017] Preferably, the data encryption module includes a key management unit, a transport layer encryption unit, a storage layer encryption unit, a field level encryption unit and an encryption service interface unit;
[0018] The key management unit is responsible for generating, storing, distributing, rotating and revoking encryption keys; the transport layer encryption unit uses the SSL / TLS protocol to encrypt data transmitted between the client and the server; the storage layer encryption unit encrypts static data stored in the database or file system; the field-level encryption unit separately encrypts specific sensitive fields in the database; the encryption service interface unit provides a standardized API interface for applications to facilitate the integration of encryption functions.
[0019] Preferably, the security audit module includes a log recording unit, an event monitoring and alarm unit, a data analysis unit, a compliance checking unit and a user behavior analysis unit;
[0020] The log recording unit is responsible for collecting all relevant operation logs in the system, including user logins, access records, and modification operations; the event monitoring and alarm unit monitors system activities in real time and identifies abnormal behaviors or potential security threats; the data analysis unit conducts in-depth analysis of the collected log data and extracts valuable information; the compliance checking unit verifies whether the system operation complies with the requirements of relevant laws, regulations and internal policies; the user behavior analysis unit monitors the user's daily activity patterns and identifies abnormal situations that deviate from normal behavior.
[0021] Preferably, the data anonymization module includes a data identification and classification unit, an anonymization strategy configuration unit, a data conversion unit, a differential privacy unit, and an audit monitoring unit;
[0022] The data identification and classification unit identifies and classifies sensitive data in the system; the anonymization policy configuration unit defines and manages anonymization policies; the data conversion unit performs actual data conversion operations; the differential privacy unit introduces noise during the data analysis process to protect individual privacy; and the audit monitoring unit records logs of all anonymization operations and monitors the system's operating status in real time.
[0023] Preferably, the privacy setting and patient control module includes a patient authorization management unit, an informed consent management unit and a notification unit;
[0024] The patient authorization management unit allows patients to view and manage who can access their electronic health records; the informed consent management unit records and manages patients' consent to data sharing for different purposes; the notification unit is used to notify patients when a third party requests access to the patient's health information, and explain the purpose and scope of the access.
[0025] Preferably, the continuous monitoring module includes a real-time monitoring unit, a log record analysis unit and an intrusion monitoring and defense unit;
[0026] The real-time monitoring unit monitors the key performance indicators and security events of the system in real time; the log record analysis unit collects and stores log data of all system activities; the intrusion monitoring and defense unit uses signature matching and behavior analysis technology to detect malicious activities within the network.
[0027] Preferably, the threat monitoring module includes an abnormal behavior monitoring unit and a threat intelligence integration unit; the abnormal behavior monitoring unit and the threat intelligence integration unit use machine learning algorithms to analyze the normal behavior patterns of users and systems and identify behaviors that deviate from normal patterns; the threat intelligence integration unit integrates external threat intelligence sources, including security information shared by the industry.
[0028] Compared with the prior art, the present invention has the following beneficial effects:
[0029] This application, through the joint cooperation of user authentication and authorization module, data encryption module, security audit module, data anonymization module, privacy setting and patient control module, continuous monitoring module and threat monitoring module, can not only improve overall security, but also better protect patient privacy, reduce the risk of data leakage, and effectively avoid the impact of data leakage on medical institutions and patients, so that the system can be more widely used in medical institutions. BRIEF DESCRIPTION OF THE DRAWINGS
[0030] Figure 1 This is a module composition diagram of the digital medical record management system;
[0031] Figure 2 This is the unit composition diagram of the user authentication and authorization module;
[0032] Figure 3 This is a unit composition diagram of the data encryption module;
[0033] Figure 4 This is the unit composition diagram of the security audit module;
[0034] Figure 5 This is the unit composition diagram of the data anonymization module;
[0035] Figure 6 This is a diagram of the unit composition of the privacy settings and patient control module;
[0036] Figure 7 This is a diagram of the unit composition of the continuous monitoring module;
[0037] Figure 8 This is a diagram of the unit composition of the threat monitoring module. DETAILED DESCRIPTION
[0038] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.
[0039] In the description of the present invention, it should be understood that the terms "upper", "lower", "front", "back", "left", "right", "top", "bottom", "inside", "outside", etc., indicating directions or positional relationships, are based on the directions or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific direction, be constructed and operated in a specific direction, and therefore should not be understood as limiting the present invention.
[0040] Example:
[0041] See also Figure 1-8 , the present invention provides a technical solution:
[0042] A digital medical record management system, comprising a user authentication and authorization module, a data encryption module, a security audit module, a data anonymization module, a privacy setting and patient control module, a continuous monitoring module, and a threat monitoring module;
[0043] The user authentication and authorization module is used to authenticate and authorize users. In addition to the traditional username and password, it also requires users to provide additional identity verification information to enhance account security and assign corresponding permissions based on user roles to ensure that only authorized personnel can access specific information;
[0044] The data encryption module encrypts the transport layer, using the SSL / TLS protocol to protect the security of data transmission over the network, and encrypts data at rest, making the content difficult to read even if the physical media is stolen;
[0045] The security audit module records all operations on sensitive data in the system, regularly checks log files, detects abnormal activities and generates reports for further analysis;
[0046] The data anonymization module is used to remove or hide personal identity information without affecting the value of data analysis, so that even if the data is leaked, it is difficult to trace it back to a specific individual. By adding noise or other methods, the accuracy of statistical results is guaranteed while protecting individual privacy.
[0047] The privacy settings and patient control module allows patients to view and control which medical providers can access their electronic health records and how this information is shared. When a third party requests access to a patient's health information, the system should notify the patient and explain the purpose and scope of the access.
[0048] The continuous monitoring module monitors network traffic in real time, identifies potential malicious activities and responds promptly;
[0049] The threat monitoring module accesses external threat intelligence services to obtain the latest network security threat information and make preventive preparations in advance.
[0050] The user authentication and authorization module includes a user registration management unit, an identity authentication unit, a role access control unit and a rights allocation management unit;
[0051] The user registration management unit is where new users who need to access the system first complete the registration process, enter the necessary personal information, and set an initial password. Administrators can also activate or disable user accounts in this unit. The identity authentication unit usually uses a username / password combination for initial verification, and supports multi-factor authentication (MFA), such as SMS verification codes, email verification codes, or biometrics. Once the authentication is successful, a session token will be generated and sent to the client for authentication of subsequent requests. The role access control unit determines which resources the user can access and which operations they can perform based on the role they belong to after the user successfully logs in. For example, a doctor may have the right to view a patient's complete medical record, while a nurse can only view certain specific parts. The permission allocation management unit allows administrators to dynamically adjust the permission levels of a single user or a group of users, which helps to cope with changes in demand in special circumstances, such as temporarily granting a researcher permission to access specific patient data.
[0052] The user registration management unit is responsible for the creation of new users, information maintenance and account status management; the identity authentication unit performs user identity authentication operations to confirm whether the login requester is a legitimate user; the role access control unit defines different roles and their corresponding permission sets; the permission allocation management unit is used to manage and update user permission settings.
[0053] The data encryption module includes a key management unit, a transport layer encryption unit, a storage layer encryption unit, a field level encryption unit and an encryption service interface unit;
[0054] The key management unit ensures that only authorized users can access the keys required for decryption, and regularly updates the keys to enhance security. This unit also includes a key backup and recovery mechanism to prevent data inaccessibility due to key loss; the transport layer encryption unit protects data transmitted on the network from eavesdropping or tampering, ensuring that the data flow from the browser to the server is fully encrypted to prevent man-in-the-middle attacks; the storage layer encryption unit ensures that even if the physical media is stolen, attackers cannot easily read the unencrypted data content. Strong encryption algorithms are usually used to encrypt data and ensure that keys are stored securely; the field-level encryption unit provides more fine-grained control, allowing additional security measures to be applied only to the most sensitive information, reducing the performance overhead of overall encryption; the encryption service interface unit simplifies the developer's workflow, allowing encryption operations to be seamlessly embedded in existing business logic without in-depth understanding of the underlying encryption technology details.
[0055] The key management unit is responsible for generating, storing, distributing, rotating and revoking encryption keys; the transport layer encryption unit uses the SSL / TLS protocol to encrypt data transmitted between the client and the server; the storage layer encryption unit encrypts static data stored in the database or file system; the field-level encryption unit separately encrypts specific sensitive fields in the database; the encryption service interface unit provides a standardized API interface for applications to facilitate the integration of encryption functions.
[0056] The security audit module includes a log recording unit, an event monitoring and alarm unit, a data analysis unit, a compliance checking unit and a user behavior analysis unit;
[0057] The log recording unit records the activity trajectory of each user in detail, providing basic data for subsequent security audits; once the event monitoring and alarm unit detects suspicious activities (such as multiple failed login attempts, unauthorized data access), it immediately triggers an alarm to notify relevant personnel; the data analysis unit generates regular security audit reports to show the system health status, potential risk points and improvement suggestions; the compliance inspection unit ensures that the system complies with HIPAA, GDPR and other regulations when processing patient information to avoid legal risks; the user behavior analysis unit helps to detect internal threats, such as employees abusing their authority to access sensitive information.
[0058] The log recording unit is responsible for collecting all relevant operation logs in the system, including user logins, access records, and modification operations; the event monitoring and alarm unit monitors system activities in real time and identifies abnormal behaviors or potential security threats; the data analysis unit conducts in-depth analysis of the collected log data and extracts valuable information; the compliance checking unit verifies whether the system operation complies with the requirements of relevant laws, regulations and internal policies; the user behavior analysis unit monitors the user's daily activity patterns and identifies abnormal situations that deviate from normal behavior.
[0059] The data anonymization module includes a data identification and classification unit, an anonymization strategy configuration unit, a data conversion unit, a differential privacy unit, and an audit monitoring unit;
[0060] The data identification and classification unit is used to determine which fields contain personally identifiable information or other sensitive data for subsequent processing. For example, names, ID numbers, social security numbers, etc. are all sensitive fields that require special attention; the anonymization policy configuration unit selects appropriate anonymization methods (such as deletion, replacement, generalization) according to different usage scenarios and security requirements. For example, in some cases only partial anonymization may be required, while in other cases full anonymization is required; the data conversion unit processes sensitive data according to the preset anonymization strategy; the differential privacy unit ensures that the accuracy of the statistical results is not affected while preventing the inference of individual specific information from aggregated data through reverse engineering. This is especially important for research and analysis purposes; the audit monitoring unit ensures that the anonymization process complies with regulations and is able to track any abnormal behavior or potential security threats. Log records can be used for post-review and compliance checks.
[0061] The data identification and classification unit identifies and classifies sensitive data in the system; the anonymization policy configuration unit defines and manages anonymization policies; the data conversion unit performs actual data conversion operations; the differential privacy unit introduces noise during the data analysis process to protect individual privacy; and the audit monitoring unit records logs of all anonymization operations and monitors the system's operating status in real time.
[0062] The privacy setting and patient control module includes a patient authorization management unit, an informed consent management unit and a notification unit;
[0063] The patient authorization management unit enables patients to grant or revoke access to their health data to specific medical providers, family members, or other relevant personnel. The informed consent management unit ensures that each data sharing is based on the patient's informed consent, including research purposes, cross-institutional sharing, etc. This unit should also support dynamic updates of the patient's consent status. The notification unit is to improve transparency, let patients clearly understand how their data will be used, and give them the opportunity to choose whether to consent.
[0064] The patient authorization management unit allows patients to view and manage who can access their electronic health records; the informed consent management unit records and manages patients' consent to data sharing for different purposes; the notification unit is used to notify patients when a third party requests access to the patient's health information, and explain the purpose and scope of the access.
[0065] The continuous monitoring module includes a real-time monitoring unit, a log record analysis unit and an intrusion monitoring and defense unit;
[0066] The real-time monitoring unit detects unusual activity or potential threats and immediately triggers alerts to notify relevant personnel. For example, it can detect multiple failed login attempts or unusual data access patterns. The log analysis unit provides a detailed audit trail, helping administrators understand the system's historical behavior and facilitate subsequent investigations. Log data can also be further analyzed to identify trends and anomalies. The intrusion detection and prevention unit not only identifies known attack patterns but also uses machine learning algorithms to predict unknown threats. Once a threat is detected, measures can be taken to prevent the attack from spreading.
[0067] The real-time monitoring unit monitors the key performance indicators and security events of the system in real time; the log record analysis unit collects and stores log data of all system activities; the intrusion monitoring and defense unit uses signature matching and behavior analysis technology to detect malicious activities within the network.
[0068] The threat monitoring module includes an abnormal behavior monitoring unit and a threat intelligence integration unit;
[0069] The Abnormal Behavior Monitoring Unit establishes a baseline model to monitor user operations and system activity in real time, identifying abnormal behavior and issuing alerts. This approach is particularly effective in detecting zero-day attacks and other unknown threats. The Threat Intelligence Integration Unit enables the system to obtain the latest threat intelligence in a timely manner, updating its internal database and enhancing its ability to identify new threats. This helps improve the system's self-defense capabilities.
[0070] The abnormal behavior monitoring unit and threat intelligence integration unit use machine learning algorithms to analyze the normal behavior patterns of users and systems and identify behaviors that deviate from normal patterns; the threat intelligence integration unit integrates external threat intelligence sources, including security information shared by the industry.
[0071] The above shows and describes the basic principles and main features of the present invention and the advantages of the present invention. For those skilled in the art, it is obvious that the present invention is not limited to the details of the above exemplary embodiments, and the present invention can be implemented in other specific forms without departing from the spirit or basic characteristics of the present invention; therefore, no matter from which point of view, the embodiments should be regarded as exemplary and non-restrictive. The scope of the present invention is limited by the appended claims rather than the above description. Therefore, it is intended that all changes that fall within the meaning and scope of the equivalent elements of the claims are included in the present invention, and any figure signs in the claims should not be regarded as limiting the claims involved.
[0072] While embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions, and variations may be made to these embodiments without departing from the principles and spirit of the invention, and that the scope of the invention is defined by the appended claims and their equivalents.
Claims
1. A digital medical record management system, characterized in that: The digital medical record management system includes a user authentication and authorization module, a data encryption module, a security audit module, a data anonymization module, a privacy setting and patient control module, a continuous monitoring module, and a threat monitoring module; The user authentication and authorization module is used to authenticate and authorize users. In addition to the traditional username and password, it also requires users to provide additional identity verification information to enhance account security and assign corresponding permissions based on user roles to ensure that only authorized personnel can access specific information; The data encryption module encrypts the transport layer, using the SSL / TLS protocol to protect the security of data transmission over the network, and encrypts data at rest, making the content difficult to read even if the physical media is stolen; The security audit module records all operations on sensitive data in the system, regularly checks log files, detects abnormal activities and generates reports for further analysis; The data anonymization module is used to remove or hide personal identity information without affecting the value of data analysis, so that even if the data is leaked, it is difficult to trace it back to a specific individual. By adding noise or other methods, the accuracy of statistical results is guaranteed while protecting individual privacy. The privacy settings and patient control module allows patients to view and control which medical providers can access their electronic health records and how this information is shared. When a third party requests access to a patient's health information, the system should notify the patient and explain the purpose and scope of the access. The continuous monitoring module monitors network traffic in real time, identifies potential malicious activities and responds promptly; The threat monitoring module accesses external threat intelligence services to obtain the latest network security threat information and make preventive preparations in advance.
2. A digital medical record management system according to claim 1, characterized in that: The user authentication and authorization module includes a user registration management unit, an identity authentication unit, a role access control unit and a rights allocation management unit; The user registration management unit is responsible for the creation of new users, information maintenance and account status management; the identity authentication unit performs user identity authentication operations to confirm whether the login requester is a legitimate user; The role access control unit defines different roles and their corresponding permission sets; the permission allocation management unit is used to manage and update user permission settings.
3. A digital medical record management system according to claim 1, characterized in that: The data encryption module includes a key management unit, a transport layer encryption unit, a storage layer encryption unit, a field level encryption unit and an encryption service interface unit; The key management unit is responsible for generating, storing, distributing, rotating and revoking encryption keys; the transport layer encryption unit uses the SSL / TLS protocol to encrypt data transmitted between the client and the server; the storage layer encryption unit encrypts static data stored in the database or file system; the field-level encryption unit separately encrypts specific sensitive fields in the database; the encryption service interface unit provides a standardized API interface for applications to facilitate the integration of encryption functions.
4. A digital medical record management system according to claim 1, characterized in that: The security audit module includes a log recording unit, an event monitoring and alarm unit, a data analysis unit, a compliance checking unit and a user behavior analysis unit; The log recording unit is responsible for collecting all relevant operation logs in the system, including user logins, access records, and modification operations; the event monitoring and alarm unit monitors system activities in real time and identifies abnormal behaviors or potential security threats; the data analysis unit conducts in-depth analysis of the collected log data and extracts valuable information; the compliance checking unit verifies whether the system operation complies with the requirements of relevant laws, regulations and internal policies; the user behavior analysis unit monitors the user's daily activity patterns and identifies abnormal situations that deviate from normal behavior.
5. A digital medical record management system according to claim 1, characterized in that: The data anonymization module includes a data identification and classification unit, an anonymization strategy configuration unit, a data conversion unit, a differential privacy unit, and an audit monitoring unit; The data identification and classification unit identifies and classifies sensitive data in the system; the anonymization policy configuration unit defines and manages anonymization policies; the data conversion unit performs actual data conversion operations; the differential privacy unit introduces noise during the data analysis process to protect individual privacy; and the audit monitoring unit records logs of all anonymization operations and monitors the system's operating status in real time.
6. A digital medical record management system according to claim 1, characterized in that: The privacy setting and patient control module includes a patient authorization management unit, an informed consent management unit and a notification unit; The patient authorization management unit allows patients to view and manage who can access their electronic health records; the informed consent management unit records and manages patients' consent to data sharing for different purposes; the notification unit is used to notify patients when a third party requests access to the patient's health information, and explain the purpose and scope of the access.
7. A digital medical record management system according to claim 1, characterized in that: The continuous monitoring module includes a real-time monitoring unit, a log record analysis unit and an intrusion monitoring and defense unit; The real-time monitoring unit monitors the key performance indicators and security events of the system in real time; The logging analysis unit collects and stores log data of all system activities; The intrusion monitoring and defense unit uses signature matching and behavior analysis technology to detect malicious activities within the network.
8. A digital medical record management system according to claim 1, characterized in that: The threat monitoring module includes an abnormal behavior monitoring unit and a threat intelligence integration unit; the abnormal behavior monitoring unit and the threat intelligence integration unit use machine learning algorithms to analyze the normal behavior patterns of users and systems and identify behaviors that deviate from normal patterns; the threat intelligence integration unit integrates external threat intelligence sources, including security information shared by the industry.