Identity verification interlocking-based intelligent blocking blood sampling safety control system

Abstract

The present application relates to the technical field of biometric identification, and discloses an intelligent blocking type blood sampling safety control system and method based on identity verification interlocking, comprising: a near field communication module and a processor built in a blood sampling device, which synchronously read a patient identity and a blood sampling consumable identity, and match and verify with preset blood sampling task information, and only when the verification is passed, mechanical locking is released to realize one-time operation authorization. The present application reconstructs the traditional separated checking and execution process into an indivisible atomic operation through a triple identity synchronous verification mechanism, avoids the occurrence of human cognitive errors, and simultaneously realizes consumable entity authenticity verification by using the physical characteristics of near field communication, thereby significantly improving the endogenous defense capability of the system against high-order physical attacks.

Description

Technical Field

[0001] This invention relates to an intelligent blocking blood collection safety control system based on identity verification interlocking, belonging to the field of biometric identification technology. Background Technology

[0002] In the field of biometric identification technology, the safety of medical blood collection operations mainly relies on manual verification and single-point biometric authentication. Existing technologies usually adopt operator pre-authorization or single-time biometric verification of patients. However, the verification process and the blood collection execution process are inherently separated in time and space. This separation means that during the window period from the completion of verification to needle insertion, operators may cause cognitive errors such as patient confusion and misuse of consumables due to fatigue, interference, or human negligence, which becomes a high-risk blind spot for medical safety.

[0003] Although some solutions attempt to introduce electronic wristband scanning or dynamic biometric monitoring, they still cannot fundamentally solve the following deep-seated contradictions: 1. Existing technologies default to continuous authentication, failing to bind identity verification with specific medical actions in real time, resulting in uncontrollable cognitive gaps between verification results and actions performed; 2. Consumable verification mechanisms relying on digital tags cannot verify the physical authenticity of the entity to which the tag is attached, posing a risk of being deceived by counterfeit tags; 3. Mechanical unlocking modes with fixed time windows are difficult to cope with misalignments between actions and authorizations caused by operational delays or interruptions in real-world scenarios.

[0004] In view of this, the industry has explored ways to improve monitoring accuracy by adding multiple sensors (such as liveness detection and motion tracking), but this significantly increases system complexity and cost, and does not address the essence of contextual logic self-consistency verification. Therefore, how to achieve mandatory binding between identity verification and medical operations in the spatiotemporal dimension, and establish a lightweight and highly reliable security closed loop while ensuring the authenticity of physical entities, has become the technical problem to be solved by this invention. Summary of the Invention

[0005] This invention provides an intelligent blocking blood collection safety control system based on identity verification interlocking. Its main purpose is to solve the safety hazards caused by the separation of identity verification and operation execution in medical blood collection, as well as the problem that existing technologies are difficult to achieve multi-source identity synchronous verification and precise binding of action intent in a lightweight manner.

[0006] To achieve the above objectives, the present invention provides an intelligent blocking blood collection safety control system based on identity verification interlocking, comprising:

[0007] An intelligent occlusion blood collection device, which has a blood collection execution component that can be mechanically locked by an electromagnetically driven locking pin, and has a built-in context-aware processor and a near-field communication reading module.

[0008] The context-aware processor is configured to: when the near-field communication reading module synchronously obtains patient identity information and consumable identity information from a patient identity identifier and a blood collection consumable identity identifier, determine whether the patient identity information and consumable identity information match an associated blood collection task based on a predefined blood collection task matching rule; and only when a match is determined, control the electromagnetic drive lock pin to release the lock on the blood collection execution component to perform a one-time operation authorization on the blood collection execution component; wherein, the determination criteria of the predefined blood collection task matching rule include: the logical consistency between the patient unique identifier of the read patient identity information and the target patient unique identifier indicated in the associated blood collection task information, and the logical consistency between the consumable unique identifier of the read blood collection consumable identity information and the target consumable unique identifier indicated in the associated blood collection task information.

[0009] Preferably, the context-aware processor is further configured to: while the near-field communication reading module obtains the consumable identification information from the blood collection consumable identification, measure and generate in real time an entity feature data characterizing the physical electromagnetic interaction process between the near-field communication reading module and the blood collection consumable identification; compare the entity feature data with a stored baseline feature data for similarity, and only when the similarity between the entity feature data and the stored baseline feature data reaches a preset similarity threshold is the physical entity blood collection consumable associated with the blood collection consumable identification deemed to be genuine and valid, and this is used as another necessary condition for judging whether the defined blood collection task matching rules are met.

[0010] Preferably, the one-time operation authorization has a fixed valid time window. When the fixed valid time window ends, the context-aware processor controls the electromagnetic drive lock pin to automatically restore the lock on the blood collection execution component.

[0011] Preferably, the context-aware processor is further configured to: after releasing the electromagnetic drive lock pin, monitor the completion of the blood collection action of the blood collection execution component, and immediately control the electromagnetic drive lock pin to automatically restore the lock on the blood collection execution component after the blood collection action is detected to be completed.

[0012] Preferably, the step of the context-aware processor controlling the electromagnetic drive lock pin to unlock includes: when it is determined that the defined blood collection task matching rule is a match, the system first enters a pre-authorization state; and, in the pre-authorization state, when the near-field communication reading module detects that the distance between the needle tip of the blood collection execution component and the surface of a biological body meets a millimeter-level distance condition, the system switches from the pre-authorization state to the execution authorization state to completely unlock the electromagnetic drive lock pin. The millimeter-level distance condition is expressed as: ,in, This indicates the distance between the needle tip of the blood collection device and the surface of the organism, expressed in millimeters. This indicates a preset millimeter-level distance threshold. Distance detection is performed by monitoring the characteristic changes in the coil load impedance of the near-field communication readout module when it approaches the surface of a living organism.

[0013] Preferably, when the context-aware processor determines that the defined blood collection task matching rule is a match, it is also configured to drive a sensory prompting component to output a message indicating successful operation authorization.

[0014] Preferably, the sensory cueing component is an acoustic cueing component.

[0015] Preferably, the intelligent blocking blood collection device also includes an operator identity authorization module, which is configured to complete operator identity authorization by reading the operator's near-field communication ID card before executing the blood collection task, and associate the operator's unique identifier with the associated blood collection task information.

[0016] Preferably, the context-aware processor is an ARM Cortex-M0 level microcontroller. The context-aware processor also includes a wireless communication module, which is used to communicate wirelessly with the hospital information management system or laboratory information management system to obtain blood collection task information and transmit blood collection completion information back.

[0017] A blood collection safety control method implemented by an intelligent blocking blood collection safety control system based on identity verification interlocking includes: in the intelligent blocking blood collection device, simultaneously acquiring patient identity information of the patient's identity identifier and consumable identity information of the blood collection consumable identifier; based on the defined blood collection task matching rules, determining whether the patient identity information and consumable identity information match the associated blood collection task information; and when the determination is that they match, triggering an electromagnetic drive lock pin to release the lock on the blood collection execution component in order to perform a one-time blood collection operation.

[0018] Compared with the prior art, the beneficial effects of the present invention are:

[0019] 1. By synchronously sensing the patient's identification, blood collection consumable identification, and operator authorization information through near-field communication at the same spatiotemporal node, the device triggers instantaneous mechanical unlocking only when the logical correlation between the three parties is verified. This mandatory context coupling mechanism reconstructs the traditionally separate verification-execution process into an indivisible atomic operation, making human cognitive errors, such as picking up the wrong consumable or the patient losing the physical condition, fundamentally bridging the most stubborn process breakpoints in medical safety.

[0020] 2. By reusing the electromagnetic field physical layer characteristics of the near-field communication module, a physical electromagnetic fingerprint is generated simultaneously when reading the digital identity of consumables. By comparing the pre-stored benchmark features, the system can identify the physical consistency of the tag attachment medium, such as the material of the vacuum tube and the dielectric properties of the rubber stopper. This mechanism extends digital trust to the physical entity dimension without adding sensors, making counterfeit consumables inevitably exposed because they cannot reproduce the original electromagnetic interaction characteristics, significantly improving the intrinsic defense against high-level physical attacks.

[0021] 3. By utilizing the characteristic impedance change generated when the near-field communication antenna is close to the surface of a biological body, the system upgrades the authorization status from pre-authorization to execution authorization. When the needle tip stably approaches the skin to a distance of millimeters, the electromagnetic field disturbance triggers the final release of the mechanical locking pin. This action intention capture based on the change of physical field makes the device unlocking and puncture action form a strong spatiotemporal coupling, avoiding the risk of false triggering caused by operation delay or interruption, and giving the system adaptive robustness to real operation dynamics. Attached Figure Description

[0022] Figure 1 This is an operation flowchart of the intelligent blocking blood collection safety control system based on identity verification interlocking of the present invention;

[0023] Figure 2 This is a performance evaluation diagram of the intelligent blocking blood collection safety control system of the present invention;

[0024] Figure 3 This is a logical structure diagram of the triple identity matching and context-aware processing of the present invention;

[0025] Figure 4 This is a diagram illustrating the accuracy analysis of the operational intent capture in this invention.

[0026] The objectives, features, and advantages of this invention will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0027] It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

[0028] This application provides an intelligent blocking blood collection safety control system based on identity verification interlocks, including:

[0029] An intelligent occlusion blood collection device, which has a blood collection execution component that can be mechanically locked by an electromagnetically driven locking pin, and has a built-in context-aware processor and a near-field communication reading module.

[0030] The context-aware processor is configured to: when the near-field communication reading module synchronously obtains patient identity information and consumable identity information from a patient identity identifier and a blood collection consumable identity identifier, determine whether the patient identity information and consumable identity information match an associated blood collection task based on a predefined blood collection task matching rule; and only when a match is determined, control the electromagnetic drive lock pin to release the lock on the blood collection execution component to perform a one-time operation authorization on the blood collection execution component; wherein, the determination criteria of the predefined blood collection task matching rule include: the logical consistency between the patient unique identifier of the read patient identity information and the target patient unique identifier indicated in the associated blood collection task information, and the logical consistency between the consumable unique identifier of the read blood collection consumable identity information and the target consumable unique identifier indicated in the associated blood collection task information.

[0031] Preferably, the context-aware processor is further configured to: while the near-field communication reading module obtains the consumable identification information from the blood collection consumable identification, measure and generate in real time an entity feature data characterizing the physical electromagnetic interaction process between the near-field communication reading module and the blood collection consumable identification; compare the entity feature data with a stored baseline feature data for similarity, and only when the similarity between the entity feature data and the stored baseline feature data reaches a preset similarity threshold is the physical entity blood collection consumable associated with the blood collection consumable identification deemed to be genuine and valid, and this is used as another necessary condition for judging whether the defined blood collection task matching rules are met.

[0032] Preferably, the one-time operation authorization has a fixed valid time window. When the fixed valid time window ends, the context-aware processor controls the electromagnetic drive lock pin to automatically restore the lock on the blood collection execution component.

[0033] Preferably, the context-aware processor is further configured to: after releasing the electromagnetic drive lock pin, monitor the completion of the blood collection action of the blood collection execution component, and immediately control the electromagnetic drive lock pin to automatically restore the lock on the blood collection execution component after the blood collection action is detected to be completed.

[0034] Preferably, the step of the context-aware processor controlling the electromagnetic drive lock pin to unlock includes: when it is determined that the defined blood collection task matching rule is a match, the system first enters a pre-authorization state; and, in the pre-authorization state, when the near-field communication reading module detects that the distance between the needle tip of the blood collection execution component and the surface of a biological body meets a millimeter-level distance condition, the system switches from the pre-authorization state to the execution authorization state to completely unlock the electromagnetic drive lock pin. The millimeter-level distance condition is expressed as: ,in, This indicates the distance between the needle tip of the blood collection device and the surface of the organism, expressed in millimeters (e.g., 1-5 mm). This indicates a preset millimeter-level distance threshold. Distance detection is performed by monitoring the characteristic changes in the coil load impedance of the near-field communication readout module when it approaches the surface of a living organism.

[0035] Preferably, when the context-aware processor determines that the defined blood collection task matching rule is a match, it is also configured to drive a sensory prompting component to output a message indicating successful operation authorization.

[0036] Preferably, the sensory prompting component is an acoustic prompting component; the intelligent blocking blood collection device also includes an operator identity authorization module, which is configured to complete operator identity authorization by reading the operator's near-field communication ID card before executing the blood collection task, and associate the operator's unique identifier with the associated blood collection task information.

[0037] Preferably, the context-aware processor is an ARM Cortex-M0 level microcontroller. The context-aware processor also includes a wireless communication module, which is used to communicate wirelessly with the hospital information management system or laboratory information management system to obtain blood collection task information and transmit blood collection completion information back.

[0038] A smart blocking blood collection safety control method based on identity verification interlocking includes: in a smart blocking blood collection device, simultaneously acquiring patient identity information of the patient's identity identifier and consumable identity information of the blood collection consumable identifier; based on a defined blood collection task matching rule, determining whether the patient identity information and consumable identity information match the associated blood collection task information; and, only when a match is determined, triggering an electromagnetic drive lock pin to release the lock on the blood collection execution component to perform a one-time blood collection operation.

[0039] Example 1: This invention provides an intelligent blocking blood collection safety control system based on identity verification interlocks. This system combines biometric recognition technology with mechanical control, utilizing a context-aware processor, a near-field communication module, and an electromagnetically driven locking pin to ensure simultaneous verification of patient identity, blood collection consumable identity, and operator identity at the same spatiotemporal node. Only when the identity information matches and verification is successful can the mechanical lock be released and a one-time blood collection operation authorized. Specifically, in this embodiment, the blood collection device incorporates a context-aware processor and a near-field communication reading module. The context-aware processor receives information from the near-field communication module and, by simultaneously reading the patient's identity identifier and the blood collection consumable's identity identifier, determines whether the patient's identity information and the consumable's identity information match the associated blood collection task information. The core of this step lies in ensuring the accuracy of identity verification based on predefined blood collection task matching rules. The near-field communication module, by reading the patient's identity identifier and the blood collection consumable's identity identifier, enables the system to... The system simultaneously acquires and verifies identity information. Near-field communication (NFC) technology utilizes electromagnetic wave induction for information reading, making it particularly suitable for high-precision identity verification in medical environments. A context-aware processor determines the consistency between the blood collection task and the read information according to defined rules. For example, it checks whether the read patient identity matches the target patient identity in the task information, thus deciding whether to execute the blood collection operation. The electromagnetic drive lock unlocks and authorizes the device. After successful identity verification, the context-aware processor controls the electromagnetic drive lock to release the mechanical lock of the blood collection device's execution component, achieving one-time operation authorization. When identity verification is successful, the context-aware processor issues a command to release the electromagnetic lock. This process ensures that blood collection is only allowed when all verification conditions are met, thus avoiding misoperation and unauthorized blood collection. Operation authorization control has a fixed effective time window for one-time operation authorization. After the operation time expires, the electromagnetic drive lock automatically re-locks to ensure system security.

[0040] While reading the identification information of blood collection consumables, the context-aware processor simultaneously measures and generates entity feature data in real time, characterizing the electromagnetic interaction process between the near-field communication reading module and the blood collection consumable identification tag. This data is compared with pre-stored benchmark feature data for similarity. Only when the similarity reaches a preset threshold can the physical entity associated with the blood collection consumable identification tag be considered authentic and valid. For physical feature verification, the near-field communication module generates entity feature data through electromagnetic interaction characteristics and compares it with stored benchmark feature data. If the similarity meets a set threshold, the consumable is confirmed to be authentic and valid, thereby further enhancing system security. The system also includes a baseline data storage module. This module stores the electromagnetic interaction characteristics of blood collection consumables of different materials and forms. This data is obtained through experiments and is used to compare with the read feature data to ensure the authenticity of the consumables. The system also includes an operator identity authorization module, which is configured to complete identity verification by reading the operator's near-field communication badge and associate the operator's unique identifier with the blood collection task information. Operator identity verification is achieved by reading the near-field communication badge and verifying the operator's identity, which is then associated with the task information to ensure that only authorized operators can perform blood collection operations, thereby further improving the system's security.

[0041] Example 2: This invention provides an intelligent blocking blood collection safety control system based on identity verification interlocking, aiming to solve the security risks caused by the spatiotemporal separation between identity verification and medical operation in existing technologies. This system ensures accurate matching of identity information during medical blood collection by synchronously verifying multi-source identity information, accurately binding physical behavioral intent, and verifying the authenticity of blood collection consumables. It also prevents errors caused by operational delays or human negligence. The system includes key components such as blood collection equipment, a context-aware processor, a near-field communication module, an electromagnetic drive lock pin, sensory prompting components, and an operator identity authorization module. These components cooperate to achieve mandatory binding of identity verification and medical operation. The specific workflow is as follows: The system's context-aware processor receives information from the near-field communication module and determines whether the patient's identity information, blood collection consumable information, and operator information are consistent according to predetermined blood collection task matching rules. The context-aware processor also controls the unlocking and unlocking of the electromagnetic drive lock pin, ensuring that only when identity verification is successful... The system allows blood collection operations. The near-field communication module reads the patient's identity card and the blood collection consumable's identity card through electromagnetic field induction and generates physical feature data. This data is compared with pre-stored benchmark features to verify the physical authenticity of the blood collection consumable. When the similarity meets a preset threshold, the consumable is considered authentic and valid. An electromagnetic drive lock is used to lock the blood collection execution component, ensuring that no operation can be performed before identity verification is successful. After all identity information matches and physical verification is successful, the context-aware processor controls the electromagnetic drive lock to unlock, authorizing the execution of a one-time blood collection operation. To prevent operational errors, the electromagnetic lock will automatically unlock after the blood collection operation is completed. The system has an acoustic prompt component to issue an operation authorization prompt after successful identity verification, ensuring that the operator can accurately know the authorization status. The operator identity verification module completes identity verification by reading the operator's near-field communication ID card and associates the operator's unique identifier with the blood collection task information, ensuring that only authorized operators can perform blood collection tasks.

[0042] In the operation process, the near-field communication module first reads both the patient's identification and the blood collection consumable's identification simultaneously. The context-aware processor then performs a matching verification. If the read identification information does not match the preset blood collection task information, the system will prevent the operation from proceeding. Next, the near-field communication module measures and generates electromagnetic interaction characteristic data representing the identification and the blood collection consumable in real time, and compares them. Only when the comparison result meets the preset similarity threshold is the blood collection consumable considered genuine and valid, thus enhancing the system's ability to combat counterfeits. Subsequently, the context-aware processor controls the electromagnetic drive lock to release the mechanical lock of the blood collection equipment, authorizing the execution of a one-time blood collection operation. The operator authentication module completes authentication by reading the operator's near-field communication ID card, ensuring that only authorized operators can perform the operation. After successful authorization, the sensory prompting component emits an acoustic prompt, prompting the operator to perform the blood collection operation. After the blood collection operation is completed, the context-aware processor detects that the blood collection execution component has completed its action and automatically resumes operation. The electromagnetic lock pin's locking status; regarding parameters and setting basis, the system performs strict matching verification by reading patient identity information, consumable identity information, and operator identity information. The patient identity information must be completely consistent with the target patient identifier in the task information; the consumable identity information must also be completely consistent with the target consumable identifier in the task information. Only when all three are completely consistent will the system allow unlocking and execute the blood collection operation. The similarity threshold of entity feature data is derived from experimental verification. This value is based on data collection and comparison of the electromagnetic interaction characteristics of various consumables, and is obtained after multiple rounds of optimization and experimentation to ensure that this value can effectively identify genuine consumables and exclude counterfeit ones. The system ensures seamless integration of identity verification and blood collection execution through synchronous verification of multi-source identity information and accurate capture of physical behavioral intentions, greatly reducing medical accidents caused by operational errors, fatigue, or negligence in traditional processes. The system design adopts existing hardware and communication technologies to avoid increasing system complexity and cost due to adding additional sensors.

[0043] Example 3: The core components of this example include: an intelligent blocking blood collection execution component with a built-in context-aware processor and near-field communication reading module; a blood collection needle assembly that can be mechanically locked by an electromagnetically driven locking pin controlled by the context-aware processor; and a set of identification and blood collection consumable entities for simulating blood collection scenarios. In the experimental preparation phase, the context-aware processor was first initialized and configured, involving the setting of a series of key parameters. The determination of these parameters was based on a comprehensive analysis and practical verification of the data transmission characteristics, electromagnetic field interaction laws, and operational safety requirements in typical blood collection processes. Specifically, the operating frequency of the near-field communication reading module was set to 13.56MHz, and the modulation depth was based on ISO / IEC. The optimized values ​​within the recommended range in the 14443 standard are determined. This setting aims to ensure stable and reliable synchronous reading of patient identification and blood collection consumable identification information, while minimizing electromagnetic interference to surrounding medical electronic equipment, and achieving an engineering balance between data transmission efficiency and energy coupling efficiency. The system's pre-set blood collection task information includes the target patient's unique identifier, such as the hospital number or electronic medical record identifier stored in their near-field communication wristband, and the unique identifier of the target blood collection consumable, as well as the batch number and product serial number embedded in the near-field communication tag on the blood collection vacuum tube or syringe packaging. During logical consistency judgment, the blood collection consumable identification information and the target consumable's unique identifier in the associated blood collection task information must achieve an exact match. If any character difference exists, it is judged as a mismatch. The similarity threshold used for verifying the physical authenticity of the blood collection consumable is set technically... The consideration lies in achieving an optimal engineering balance between the recall rate (the probability that genuine consumables are not misidentified as counterfeit) and the false alarm rate (the probability that counterfeit consumables are not misidentified as genuine). Specifically, if the similarity threshold is too high, the system may misidentify consumables as counterfeit due to minor process variations between batches of blood collection consumables. Conversely, if the value is too low, the system may be overly sensitive to background noise, potentially allowing counterfeit blood collection consumables to pass verification under specific simulation conditions. Therefore, in practical engineering, the threshold needs to be determined based on the inherent noise baseline of the near-field communication reading module, the dielectric constant fluctuation range of the blood collection consumable material, and the core identification accuracy required to address the anti-counterfeiting problem this invention aims to solve, within a reasonable engineering range that optimizes the overall technical effect. In this experiment, the threshold was set to 0.92 (based on cosine similarity calculation), the fixed effective time window for a single operation authorization is set to 8 seconds. This setting fully considers the average operation time for medical staff to complete blood collection operations (including needle tip positioning, puncture, blood drawing to needle removal), and reserves necessary margin to cope with slight operation delays. The determination of this time window needs to be based on the average duration of clinical blood collection operations, the operator's proficiency, and the operation delays that may occur in extreme cases, to be set within a reasonable engineering range that allows the overall blood collection process to proceed smoothly and avoids duplicate authorizations. If the value of this time window is too short, the system may be locked again before the operator has completed the blood collection operation, thereby interrupting the blood collection process; conversely, if its value is too long, it may lead to the risk that the blood collection equipment is used for non-designated patients or non-designated consumables during the authorization period. The millimeter-level distance condition is used to trigger the switch from the pre-authorization state to the execution authorization state, expressed as: . ,in This indicates the distance between the needle tip of the blood collection device and the surface of the organism. This represents a preset millimeter-level distance threshold, set at 3 millimeters. This value was determined by measuring the characteristic change curves of the near-field communication coil load impedance on simulation models of various skin types using different models of lancets, and simultaneously verifying the actual distance using an optical macro sensor. This distance condition aims to accurately capture the critical moment when the needle tip is about to contact the surface of the organism, avoiding accidental unlocking due to accidental touch or shaking during operation. The determination of this millimeter-level distance condition needs to be based on the physical size of the lancet, the dielectric properties of the organism surface, and the sensitivity of the near-field communication coil load impedance change, to be set within a reasonable engineering range that can accurately capture the physical intention of puncture while effectively avoiding accidental triggering.

[0044] This experiment was conducted in a controlled simulated clinical environment to simulate potential real-world scenarios during blood collection. Simulated patients were equipped with near-field communication (NFC) wristbands containing unique patient identifiers. Various blood collection consumables were used, including genuine and counterfeit NFC tag-based consumables. The counterfeit tags matched the genuine tags in terms of data, but used non-standard materials or packaging techniques on the physical carrier. Simulated operators participated, each issued a NFC badge containing their unique identifier. The experiment primarily verified whether the blood collection device could correctly unlock and authorize a one-time operation when patient, consumable, and operator identities matched. First, the preset blood collection task information, including the unique identifiers of specific patients and consumables, was imported into the intelligent blocking blood collection device via the wireless communication module. Simulated operators used their NFC badges to authenticate their identities by approaching the operator authorization module. The context-aware processor then linked the operator's unique identifier with the associated blood collection task information. If the operator's identity is not authorized or the association fails, the system will remain blocked. After successful operator authorization, the operator will simultaneously bring the near-field communication reading module built into the blood collection device close to the simulated patient's near-field communication wristband and the near-field communication tag of the blood collection consumable. The context-aware processor will simultaneously read the patient identity information of the patient identity tag and the consumable identity information of the blood collection consumable tag. Based on the defined blood collection task matching rules, the context-aware processor will determine whether the patient identity information and the blood collection consumable identity information match the associated blood collection task information. At the same time, the context-aware processor will measure and generate entity feature data in real time, representing the physical electromagnetic interaction process between the near-field communication reading module and the blood collection consumable tag, and compare the similarity of the entity feature data with a stored baseline feature data. If the patient's unique identifier in the patient identity information is logically consistent with the target patient's unique identifier indicated in the associated blood collection task information, and the consumable's unique identifier in the blood collection consumable information is logically consistent with the target consumable's unique identifier indicated in the associated blood collection task information, and the similarity between the entity feature data and the stored baseline feature data reaches a preset similarity threshold (e.g., higher than 0), the system will be considered successful.When the situation-aware processor control system enters a pre-authorization state (92), it drives a sensory cueing component (e.g., an acoustic cueing component) to output a successful operation authorization prompt (e.g., a short beep). In this pre-authorization state, the electromagnetic drive lock pin remains locked, and the blood collection execution component cannot perform blood collection operations. If any of the above conditions are not met, such as a mismatch between the patient's unique identifier, a mismatch between the consumable's unique identifier, or a similarity of the physical characteristics of the blood collection consumables being lower than a preset threshold, the system will maintain the blocking state and issue an error prompt through the sensory cueing component (e.g., a series of short beeps). The blood collection execution component remains mechanically locked and cannot perform blood collection operations. After the system enters the pre-authorization state, the operator slowly brings the needle tip of the blood collection execution component close to a biological surface (e.g., a polymer biomimetic skin model). The near-field communication reading module continuously monitors the characteristic changes in its coil load impedance. When the near-field communication reading module detects that the distance between the needle tip of the blood collection execution component and the biological surface first meets a millimeter-level distance condition (e.g., ...), ... When the situation is authorized, the context-aware processor immediately controls the electromagnetic drive lock to release the lock on the blood collection actuator, thus authorizing the operation of the blood collection actuator. At this time, the sensory prompting component will output a prompt to release the lock. If, in the pre-authorized state, the millimeter-level distance condition is not met within a fixed effective time window (e.g., 8 seconds), or if the operator moves the blood collection device away from the biological surface, the context-aware processor will control the electromagnetic drive lock to automatically re-lock the blood collection actuator and output an authorization timeout prompt. While the blood collection actuator is in the authorized execution state, the simulated operator completes the blood collection action. The completion of the blood collection action is determined by monitoring the changes in the stroke, speed, and resistance of the blood collection actuator. Upon detecting the completion of the blood collection action, the context-aware processor immediately controls the electromagnetic drive lock to automatically unlock the blood collection execution component. The sensory prompt component outputs an operation completion notification. If the blood collection device is forcibly removed from the biological surface before the blood collection action is completed, the context-aware processor will also immediately control the electromagnetic drive lock to unlock. In each operation cycle, the following key data is recorded: identity verification result (match or non-match); similarity value of the physical features of the blood collection consumables; system state switching time points (from initialization to pre-authorization, from pre-authorization to execution authorization); unlocking and unlocking time of the electromagnetic drive lock; effective duration of a one-time operation authorization; blood collection action completion status and corresponding lock recovery time.

[0045] The results of multiple rounds of simulated blood collection operation cycles aim to verify the functional effectiveness and operational stability of the technical solution of this invention. Under correctly matched test conditions, the system can complete the synchronous verification of three-party identities and the verification of entity authenticity, and enter the pre-authorization state. This indicates that by reconstructing the verification and execution process into indivisible atomic operations, this solution can verify the patient's identity and the authenticity of blood collection consumables before the blood collection operation begins. Under test conditions where the patient's unique identifier does not match, the consumable's unique identifier does not match, or the similarity of the physical features of the blood collection consumables does not reach the preset threshold, the system can identify mismatched or counterfeit blood collection consumables and maintain the blocking state. This indicates that this invention uses the electromagnetic field physical characteristics of the near-field communication module to verify entity authenticity, aiming to improve the system's defense against high-order physical attacks. After successfully entering the pre-authorization state, the electromagnetic drive lock can be unlocked only when the distance between the needle tip of the blood collection execution component and the surface of the biological body meets the millimeter-level distance condition. This indicates that authorization and operation intent can be synchronized. In the pre-authorization state, if the fixed effective time window is exceeded and the millimeter-level distance condition is not met, the electromagnetic drive... The locking pin can automatically recover from locking, aiming to avoid accidental triggering due to operation delays or interruptions. When the blood collection execution component is in the authorized execution state, the context-aware processor can automatically recover the lock on the blood collection execution component after the blood collection action is completed. This aims to achieve one-time operation authorization control. Compared with the blood collection security mechanism that relies on manual verification or single biometric verification in the prior art, the intelligent blocking blood collection security control system of this invention may show potential advantages in the following aspects: Through the interlocking mechanism of simultaneous verification and operation execution of three parties (patient, blood collection consumables, and operator), it aims to coordinate the verification and execution process, bridging the cognitive gaps that may exist in the traditional process. It uses the electromagnetic fingerprint characteristics of the near-field communication module to verify the authenticity of the blood collection consumables, aiming to solve the potential problem of digital tags being easily counterfeited in the prior art, thereby improving the system's ability to resist physical attacks. Based on the change of physical field between the needle tip of the blood collection execution component and the surface of the biological body at the millimeter level, it captures the puncture action intention, aiming to make the unlocking of the blood collection device and the puncture action form a spatiotemporal coupling, thereby improving the operational safety of the system.

[0046] Example 4: This example combines Figures 1 to 4 The implementation of an intelligent blocking blood collection safety control system and method based on identity verification interlocking is described, such as... Figure 1As shown, firstly, the operator approaches the system and simultaneously reads the patient's identity information and the blood collection consumable's identifier through the context-aware processor. The context-aware processor verifies the logical consistency of the patient's and consumable's identity information according to matching rules. After successful verification, the system acquires entity feature data and confirms the authenticity of the blood collection consumable by comparing it with electromagnetic interaction features through the near-field communication module. Then, the system enters the pre-authorization state and issues an authorization success prompt tone. The operator brings the needle tip close to the surface of the biological body to a distance of millimeters. At this time, the system monitors and releases the lock, issuing an unlock prompt tone. After the blood collection action is completed, the system re-locks and issues a completion prompt tone.

[0047] like Figure 2 As shown in the figure, the horizontal axis represents the time window (seconds), while the vertical axis represents the system performance index (percentage). The four curves represent different performance indicators: operation success rate (solid circle), safety score (dashed triangle), user satisfaction (dashed square), and recommendation value (dashed diamond). The figure shows that as the time window increases, the operation success rate gradually increases and tends to stabilize. The safety score and user satisfaction show some fluctuations with the increase of the time window, but the overall trend is still upward. The change in recommendation value is similar to that of the operation success rate, indicating that the recommendation value is closely related to system performance. This figure reflects that as the operation time increases, system performance is significantly improved, and security and user experience are also optimized.

[0048] like Figure 3 As shown, the system uses a context-aware processor to synchronously receive and logically verify three input information items: the patient's unique identifier, the consumable's unique identifier, and the operator's identifier. On the one hand, the context-aware processor performs matching rule judgments based on the associated blood collection task information; on the other hand, it performs entity consistency verification by combining entity feature benchmark data to ensure the physical authenticity of the blood collection consumables. If the judgment result is a match, the context-aware processor will trigger an unlocking command, thereby controlling the electromagnetic drive lock to unlock the blood collection execution component. If the judgment is a mismatch, the system will maintain the locked state and prevent subsequent operations.

[0049] like Figure 4As shown in the figure, the horizontal axis represents the distance between the needle tip and the skin, in millimeters (mm), decreasing from 10mm to 0mm, reflecting the approach distance of the blood collection device at each stage of the process of approaching the skin. The vertical axis represents the detection accuracy, in percentages (%), ranging from 10% to 100%, reflecting the system's accuracy in recognizing the state of the needle tip approaching the skin. The figure contains three detection curves representing different skin models: standard skin model (marked with solid circles), thick stratum corneum model (marked with dashed squares), and thin skin model (marked with dotted triangles). As can be seen from the figure, as the distance between the needle tip and the skin gradually decreases, the detection accuracy of all three models shows an upward trend, especially the thin skin model, which increases the fastest, reaching more than 80% within 4mm. The thick stratum corneum model is slightly lower overall, indicating that the system has a certain degree of adaptability to different skin types.

[0050] Meanwhile, in the process of generating and comparing entity feature data in this invention, the dielectric properties of the rubber plug and the material of the vacuum tube are not directly involved in data processing by their material names, but are indirectly reflected as changes in the carrier's response to the distribution of the antenna's electromagnetic field through the electromagnetic coupling characteristics of the near-field communication reading module. When the near-field communication tag is attached to different physical carriers, the local electromagnetic environment of the tag body will undergo weak but measurable differences, specifically manifested as a combination of changes in multiple electrical parameters such as the equivalent load impedance of the antenna coil, coupling factor, and resonant frequency fine-tuning. The entity feature data is a structured representation of the multidimensional original measurement results of the above-mentioned electrical response characteristics collected by the reading module during the standard communication handshake process. Its core objective is to establish a traceable mapping path from physical entity structure—dielectric interference—electromagnetic response—parameter perturbation—feature vector; and although the dielectric properties of the rubber plug or the material of the vacuum tube may have consistency on a macroscopic scale, they are extremely sensitive to the interference modes of near-field high-frequency magnetic fields at the millimeter-scale spatial scale. For example, silicone, butyl rubber, or When multilayer composite packaging is placed close to the antenna structure, it can cause disturbances in the equivalent inductance or loop Q value ranging from micro-ohms to tens of micro-ohms. Similarly, vacuum blood collection tubes with different wall thicknesses or surface coatings will also cause a shift in the dielectric resonant point due to the shielding effect on the coupling medium of the tag's underlying layer. Therefore, even if two tags are completely identical at the data level, as long as there are microscopic differences in the physical structure to which they are attached, the collected physical feature data will exhibit identifiable distribution characteristics in the multidimensional feature space. In this invention, the stored benchmark feature data is based on a representative physical response dataset collected, encoded, and normalized by a near-field communication module from multiple historical batches of blood collection consumables under standardized attachment and reading conditions. A similarity threshold is set, and only data samples that fall within the specified similarity confidence interval in the feature space are considered to be physically real and valid. Thus, without the need to add additional radio frequency sensors or optical detection components, the system's intrinsic verification of the physical consistency of blood collection consumables can be achieved. These are all extended implementation methods known to those skilled in the art.

[0051] It will be apparent to those skilled in the art that the present invention is not limited to the details of the exemplary embodiments described above, and that the present invention can be implemented in other specific forms without departing from the spirit or essential characteristics of the present invention.

[0052] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit it. Although the present invention has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can be made to the technical solutions of the present invention without departing from the spirit and scope of the technical solutions of the present invention.

Claims

1. An intelligent blocking blood sampling safety control system based on identity verification interlocking, characterized in that, The intelligent blocking blood sampling device comprises a blood sampling execution component that can be mechanically locked by an electromagnetic drive lock pin, and a context-aware processor and a near-field communication reading module built-in the intelligent blocking blood sampling device. The context-aware processor is configured to: when the near-field communication reading module synchronously obtains patient identity information and consumable identity information from a patient identity and a blood sampling consumable identity, judge whether the patient identity information and the consumable identity information match an associated blood sampling task information based on a defined blood sampling task matching rule; and only when the judgment is that the patient identity information and the consumable identity information match the associated blood sampling task information, control the electromagnetic drive lock pin to release the lock of the blood sampling execution component to authorize one-time operation of the blood sampling execution component; wherein the judgment basis of the defined blood sampling task matching rule comprises logical consistency between a patient unique identifier of the read patient identity information and a target patient unique identifier indicated in the associated blood sampling task information, and logical consistency between a consumable unique identifier of the read blood sampling consumable identity information and a target consumable unique identifier indicated in the associated blood sampling task information. The context-aware processor is further configured to: while the near-field communication reading module obtains the consumable identity information from the blood sampling consumable identity, measure and generate entity feature data representing a physical electromagnetic interaction process between the near-field communication reading module and the blood sampling consumable identity in real time; and compare the entity feature data with a stored reference feature data for similarity, and only when the similarity between the entity feature data and the stored reference feature data reaches a preset similarity threshold, determine that a physical entity blood sampling consumable associated with the blood sampling consumable identity is real and valid, and use this as another necessary condition for judging whether the defined blood sampling task matching rule is met. The one-time operation authorization has a fixed valid time window, and when the fixed valid time window ends, the context-aware processor controls the electromagnetic drive lock pin to automatically restore the lock of the blood sampling execution component.

2. The intelligent interlocked blood sampling safety control system based on identity verification according to claim 1, characterized in that, The context-aware processor is further configured to: after releasing the lock of the electromagnetic drive lock pin, monitor the completion of the blood sampling action of the blood sampling execution component, and immediately control the electromagnetic drive lock pin to automatically restore the lock of the blood sampling execution component after monitoring the completion of the blood sampling action.

3. The intelligent interlocked blood sampling safety control system based on identity verification according to claim 1, characterized in that, The context-aware processor is further configured to drive a sensory prompting component to output an operation authorization success prompt when the defined blood sampling task matching rule is judged to be matched.

4. The intelligent interlocked blood sampling safety control system based on identity verification according to claim 1, characterized in that, The context-aware processor controls the step of unlocking the electromagnetic drive lock pin, which includes: when it is judged that the defined blood sampling task matching rule is matched, first making the system enter a pre-authorization state; and in the pre-authorization state, when the near field communication reading module detects that the distance between the needle tip of the blood sampling execution component and a biological surface satisfies a millimeter level distance condition, only then switching from the pre-authorization state to an execution authorization state of completely unlocking the electromagnetic drive lock pin, and the millimeter level distance condition is expressed as: wherein, represents the distance between the needle tip of the blood sampling execution component and the biological surface, and the value is in millimeters, represents a preset millimeter level distance threshold value, and the detection of the distance is performed by monitoring the characteristic change of the coil load impedance of the near field communication reading module when it is close to the biological surface.

5. The intelligent interlocked blood sampling safety control system based on identity verification according to claim 1, characterized in that, The sensory prompting component is an acoustic prompting component.

6. The intelligent interlocked blood sampling safety control system based on identity verification according to claim 5, characterized in that, The intelligent blocking blood sampling device further comprises an operator identity authorization module configured to complete operator identity authorization by reading an operator's near-field communication card before performing a blood sampling task, and associate the unique identifier of the operator with the associated blood sampling task information.

7. The intelligent interlocked blocking blood sampling safety control system based on identity verification according to claim 1, characterized in that, The context-aware processor is an ARM Cortex-M0 level microcontroller, and further comprises a wireless communication module for wireless communication with a hospital information management system or a laboratory information management system to obtain blood sampling task information and return blood sampling completion information.

8. The intelligent interlocked blocking blood sampling safety control system based on identity verification according to claim 1, characterized in that, ​ 9. An intelligent blocking blood sampling safety control method based on identity verification interlocking, characterized in that, The method is applied to the intelligent blocking blood sampling safety control system in claim 1, and the method comprises the following steps: in the intelligent blocking blood sampling device, patient identity information of a patient identity identifier and consumable identity information of a blood sampling consumable identity identifier are synchronously acquired; whether the patient identity information and the consumable identity information match the associated blood sampling task information is judged based on a defined blood sampling task matching rule; and when it is judged that the patient identity information and the consumable identity information match the associated blood sampling task information, an electromagnetic drive lock pin is triggered to release locking of a blood sampling execution component, so that disposable blood sampling operation is performed.

Images