Electronic medical record access control method and system based on dynamic strategy adjustment

Abstract

The invention discloses an electronic medical record access control method and system based on dynamic strategy adjustment, and relates to the technical field of medical record management. The method comprises the following steps: establishing an electronic medical record sharing platform on a user mobile terminal, inputting a current electronic medical record after a user authorizes to log in, and generating an electronic medical record library of the user; the user sends electronic medical record request information to the electronic medical record sharing platform and analyzes the electronic medical record request information; performing permission level identification on the medical record viewing object, and outputting a matched permission level; performing medical record calling from the electronic medical record library, and outputting a called electronic medical record; and performing medical record information processing on the called electronic medical record according to the matching permission level, outputting the processed electronic medical record, and sending the processed electronic medical record to the medical record viewing object. The technical problem that in the prior art, medical record information of users in different hospitals cannot be managed and accessed in a unified mode is solved, and the technical effect of achieving safe sharing of electronic medical records through dynamic strategy adjustment and an authority control mechanism is achieved.

Description

TECHNICAL FIELD

[0001] The present application relates to the medical record management technical field, and in particular to an electronic medical record access control method and system based on dynamic strategy adjustment. BACKGROUND

[0002] With the increase in the number of patients visiting hospitals, how to effectively manage and share patient electronic medical record information has become a challenge to be solved. At present, there is an information island phenomenon in medical record data sharing between many hospitals and medical institutions. When patients visit different hospitals, they often need to repeat the provision of personal medical record information, resulting in waste of medical resources and patient treatment information gaps. In addition, the existing medical record management system also has deficiencies in permission control and information protection, and it is difficult to accurately control the access permission of different viewing objects to patient medical records, which may cause information leakage or misuse problems. SUMMARY

[0003] The present application provides an electronic medical record access control method and system based on dynamic strategy adjustment, which solves the technical problem that user medical record information in different hospitals cannot be uniformly managed and accessed in the prior art.

[0004] In a first aspect, the present application provides an electronic medical record access control method based on dynamic strategy adjustment, which comprises: An electronic medical record sharing platform is established on a user mobile terminal, the electronic medical record sharing platform comprising a synchronous transmission module, which is used to enter the current electronic medical record and generate an electronic medical record library of the user after the user is authorized to log in; the user sends electronic medical record request information to the electronic medical record sharing platform, analyzes the electronic medical record request information, and obtains medical record types, medical record keywords, and medical record viewing objects; the medical record viewing objects are input into a defined strategy rule template for permission level identification, and a matching permission level is output, with an additional permission number identifier; the electronic medical record sharing platform calls medical records from the electronic medical record library according to the medical record types and medical record keywords, and outputs the called electronic medical records; the called electronic medical records are processed for medical record information according to the matching permission level, and the processed electronic medical records are sent to the medical record viewing objects.

[0005] In a second aspect, the present application provides an electronic medical record access control system based on dynamic strategy adjustment, which comprises: The platform building unit is used for establishing an electronic medical record sharing platform in a user mobile terminal, and the electronic medical record sharing platform comprises a synchronous transmission module. When a user is authorized to log in, the synchronous transmission module is used for entering a current electronic medical record, and generating an electronic medical record library of the user. A request analysis unit is used for the user to send electronic medical record request information to the electronic medical record sharing platform, analyzing the electronic medical record request information, obtaining a medical record type, a medical record keyword and a medical record viewing object. A permission identification unit is used for inputting the medical record viewing object into a defined strategy rule template for permission level identification, outputting a matched permission level, and the matched permission level being attached with permission times identification. A medical record calling unit is used for the electronic medical record sharing platform to call a medical record from the electronic medical record library according to the medical record type and the medical record keyword, and output a called electronic medical record. A medical record processing unit is used for processing medical record information of the called electronic medical record according to the matched permission level, outputting a processed electronic medical record, and sending the processed electronic medical record to the medical record viewing object.

[0006] The one or more technical solutions provided in the present application have at least the following technical effects or advantages: The electronic medical record sharing platform is established in the user mobile terminal, and the electronic medical record sharing platform comprises a synchronous transmission module. When the user is authorized to log in, the synchronous transmission module is used for entering a current electronic medical record, and generating an electronic medical record library of the user. The user sends electronic medical record request information to the electronic medical record sharing platform, analyzes the electronic medical record request information, obtains a medical record type, a medical record keyword and a medical record viewing object. The medical record viewing object is input into a defined strategy rule template for permission level identification, a matched permission level is output, and the matched permission level is attached with permission times identification. The electronic medical record sharing platform calls a medical record from the electronic medical record library according to the medical record type and the medical record keyword, and outputs a called electronic medical record. The called electronic medical record is processed according to the matched permission level, a processed electronic medical record is output, and the processed electronic medical record is sent to the medical record viewing object. The technical problem that medical record information of a user in the prior art cannot be uniformly managed and accessed in different hospitals is solved, and the technical effect that electronic medical record safe sharing is realized through a dynamic strategy adjustment and a permission control mechanism is achieved. BRIEF DESCRIPTION OF DRAWINGS

[0007] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed to be used in the embodiment description will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without any creative effort.

[0008] Figure 1 The electronic medical record access control method based on dynamic strategy adjustment provided in the embodiment of the present application is shown in the flowchart. Figure 2 A schematic diagram of an electronic medical record access control system structure based on dynamic policy adjustment is provided for the embodiments of the present application.

[0009] Label explanation: platform building unit 11, request analysis unit 12, permission identification unit 13, medical record calling unit 14, medical record processing unit 15. DETAILED DESCRIPTION

[0010] The present application provides an electronic medical record access control method and system based on dynamic policy adjustment, which solves the technical problem that user's medical record information in different hospitals cannot be uniformly managed and accessed in the prior art.

[0011] The technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the present application.

[0012] It should be noted that the terms "include" and "have" are intended to cover non-exclusive inclusion, for example, a process, method, system, product or server including a series of steps or units need not be limited to those clearly listed steps or units, but can include other steps or modules not clearly listed or inherent to these processes, methods, products or devices.

[0013] Embodiment one, as shown in the present application provides an electronic medical record access control method based on dynamic policy adjustment, wherein the method comprises: Figure 1 establishing an electronic medical record sharing platform on a user mobile terminal, the electronic medical record sharing platform comprising a synchronous transmission module, when the user is authorized to log in, the synchronous transmission module is used to enter the current electronic medical record, and generate an electronic medical record library of the user.

[0014] ​The electronic medical record sharing platform is established on the user mobile terminal, and the electronic medical record sharing platform comprises a synchronous transmission module. After the user logs in the platform through authorization, the synchronous transmission module will start and begin to work. Specifically, after the user is authorized and logs in, the platform will be connected to the user's mobile device to obtain the user's current electronic medical record data; the synchronous transmission module will upload and input the user's current electronic medical record information (such as medical history, examination results, diagnosis information, etc.) into the electronic medical record sharing platform to create an electronic medical record library belonging to the user. The electronic medical record library will store the relevant medical record information of the user in various hospitals, clinics or medical institutions, and will be organized and classified according to different medical record types. In this way, all the medical record information of the user can be stored centrally and can be viewed, updated or shared at any time through the platform. The synchronous transmission module ensures that the user's electronic medical record data is updated in a timely manner, guarantees the completeness and real-time nature of the data, and provides data support for subsequent medical record calling and permission management.

[0015] Further, the electronic medical record sharing platform comprises a voice recognition module, and the method comprises: When the user sends electronic medical record request information to the electronic medical record sharing platform, the voice recognition module is started, and dialogue information is input according to the voice recognition module; the voice recognition module generates electronic medical record request information based on the dialogue information, and if any item of the parsed data of the electronic medical record request information returns empty, voice feedback is performed by the voice recognition module to obtain supplementary dialogue information; the electronic medical record request information is updated based on the supplementary dialogue information until all items of the parsed data of the electronic medical record request information return non-empty.

[0016] The electronic medical record sharing platform further comprises a voice recognition module, which will be activated and begin to work when the user sends electronic medical record request information to the electronic medical record sharing platform. Specifically, when the user sends electronic medical record request information to the electronic medical record sharing platform, the voice recognition module is started, and the dialogue information of the user is input through voice recognition technology; the user inputs the request information through voice, and the voice recognition module converts the voice of the user into text data to generate preliminary electronic medical record request information; if a data item in the generated electronic medical record request information has an empty parsing result, indicating that the user's input has insufficient or ambiguous information, the system will perform voice feedback through the voice recognition module to prompt the user to supplement the missing information, wherein the content of the voice feedback can be a prompt tone or prompt sentence generated by the system to guide the user to provide more specific request content; according to the supplementary dialogue information of the user, the system will update the electronic medical record request information until all necessary request data items are parsed correctly and completely, ensuring the accuracy and integrity of the request information.

[0017] Further, the electronic medical record sharing platform further comprises a standardized medical record processing template, and the method comprises: The electronic medical record sharing platform further includes a standardized medical record processing template. Specifically, the system defines a standardized medical record processing template, which is used to unify and standardize the format of medical record information, so that electronic medical records from different sources can be processed according to a unified standard. The system receives electronic medical record data entered by the synchronization transmission module and inputs the entered electronic medical record into the standardized medical record processing template for standardized processing. During the standardized processing, the system converts each item of data in the electronic medical record (such as patient basic information, medical record, diagnosis result, etc.) into data conforming to the standard format according to the preset template rules, and outputs the standardized electronic medical record. The system stores the standardized electronic medical record in the electronic medical record library, ensuring that all medical record data can be archived according to a unified standard, facilitating subsequent queries and calls. Through the standardized medical record processing template, the system can efficiently manage and process electronic medical records, improving the efficiency of data utilization and the convenience of access.

[0018] The electronic medical record sharing platform further includes a standardized medical record processing template. Specifically, the system defines a standardized medical record processing template, which is used to unify and standardize the format of medical record information, so that electronic medical records from different sources can be processed according to a unified standard. The system receives electronic medical record data entered by the synchronization transmission module and inputs the entered electronic medical record into the standardized medical record processing template for standardized processing. During the standardized processing, the system converts each item of data in the electronic medical record (such as patient basic information, medical record, diagnosis result, etc.) into data conforming to the standard format according to the preset template rules, and outputs the standardized electronic medical record. The system stores the standardized electronic medical record in the electronic medical record library, ensuring that all medical record data can be archived according to a unified standard, facilitating subsequent queries and calls. Through the standardized medical record processing template, the system can efficiently manage and process electronic medical records, improving the efficiency of data utilization and the convenience of access.

[0019] The user sends electronic medical record request information to the electronic medical record sharing platform, analyzes the electronic medical record request information, and obtains the medical record type, medical record keyword, and medical record viewing object.

[0020] When the user sends electronic medical record request information to the electronic medical record sharing platform, the system analyzes the received electronic medical record request information. During the analysis process, the system extracts key data items from the request information, including the medical record type, medical record keyword, and medical record viewing object. The medical record type refers to the category of medical records that the user requests to access, such as diagnosis medical records, treatment medical records, examination records, etc. The medical record keyword refers to the search keywords related to the medical record content input by the user, which are used to help the system more accurately locate and retrieve the required medical record information. The medical record viewing object indicates who will view the medical record information, which may be the patient himself, medical personnel, or other authorized viewers. The system analyzes these key information to ensure that it can accurately obtain and provide the corresponding electronic medical record content according to the user's request.

[0021] The medical record viewing object is input into the defined policy rule template for permission level identification, and the matching permission level is output, with the number of permission times attached.

[0022] The medical record viewing object is input into a defined policy rule template for permission level identification. The system identifies the permission level of the medical record viewing object according to the preset policy rule template. The policy rule template contains the permission definition of different viewing objects. Specifically, according to the identity category of the medical record viewing object (such as patient, doctor, nurse, etc.), the system identifies the permission level thereof, wherein the permission level determines the range and depth of the viewing object that can access the medical record. For example, a doctor may have higher permissions and can view the complete medical record content, while a nurse may only be able to view part of the information, such as nursing records. By inputting the data of the medical record viewing object, the system matches with the policy rule template, identifies the permission level of the viewing object, and outputs the matching permission level corresponding thereto. The matching permission level is additionally marked with a permission number, including the upper limit of the access number of each medical record viewing object and the interval time length of the revisit. Specifically, the system will allocate the upper limit of the access number (i.e., the maximum number of times the medical record can be viewed within a certain period of time) and the interval time (i.e., the minimum time interval after accessing the medical record) for the viewing object according to the policy rule template, thereby controlling the access frequency of the medical record.

[0023] Further, the medical record viewing object is input into a defined policy rule template for permission level identification, and the defined policy rule template includes: According to the object category, a medical record viewing object sample is generated, wherein the object category includes a first type of object and a second type of object, the first type of object is a nursing staff of the user, and the second type of object is a doctor of the user; a corresponding permission number is generated according to the medical record viewing object sample, the permission number includes an upper limit of access number and an interval time length of revisit; a corresponding permission level label is generated according to the medical record viewing object sample, the permission level label includes a first permission level and a second permission level, and the first permission level is less than the second permission level; and a policy rule template is defined according to the mapping relationship among the medical record viewing object sample, the permission level label and the permission number.

[0024] Preferably, the medical record viewing object sample is generated according to the object category, wherein the object category is divided into a first type of object and a second type of object; the first type of object is a user's caregiver, and the second type of object is a user's doctor; and the object category determines the permission control when accessing the medical record information. The system generates a corresponding permission number identifier according to the medical record viewing object sample, wherein the permission number identifier includes an access number upper limit and a revisit interval duration. The access number upper limit refers to the maximum number of times that the medical record viewing object can access the user's medical record within a certain period of time, so as to ensure that the use of the medical record will not be excessively abused; and the revisit interval duration refers to the minimum interval time of the next access after the access to the medical record by the same viewing object, so as to avoid the risk of information leakage caused by frequent viewing. The system generates a corresponding permission level label according to the medical record viewing object sample, wherein the permission level label of the first type of object (caregiver) is a first permission level, and the permission level label of the second type of object (doctor) is a second permission level, and the first permission level is less than the second permission level, that is, the caregiver can only access limited medical record information, while the doctor has higher permission and can access more comprehensive medical record content.

[0025] After generating the permission level label, the system defines a complete strategy rule template according to the mapping relationship among the medical record viewing object sample, the permission level label, and the permission number identifier, which is used to automatically match the corresponding permission level according to the identity of the medical record viewing object in the actual medical record request process, so as to ensure that the access to the medical record data meets the predetermined permission control standard.

[0026] Further, the object category further includes a third type of object, and the third type of object is a permission family member of the user; a third permission level label is set according to the third type of object, and the defined strategy rule template is updated according to the third permission level label, wherein the third permission level label is greater than or equal to the second permission level label.

[0027] The object category further includes a third type of object, and the third type of object is a permission family member of the user. According to the access demand of the third type of object, the system sets a third permission level label for the third type of object. The setting of the third permission level label ensures that the permission family member has a certain permission when accessing the medical record information, but the permission level is greater than or equal to the permission level label of the second type of object (doctor). That is, the third type of object can access medical record content that is not lower than the content that can be accessed by the doctor, but the specific permission range is determined by the permission level mapping relationship in the strategy rule template. According to the relationship between the third type of object and the third permission level label, the system updates and perfects the defined strategy rule template. Through the update of the strategy rule template, it is ensured that the permission allocation of different types of medical record viewing objects (such as caregivers, doctors, and permission family members) in the system can be accurately controlled and meet the actual access demand.

[0028] The electronic medical record sharing platform calls medical records from the electronic medical record library according to the medical record type and the medical record keyword, and outputs the called electronic medical record.

[0029] The electronic medical record sharing platform calls medical records from the electronic medical record library according to the medical record type and the medical record keyword. Specifically, when the user submits medical record request information, the system searches according to the medical record type (such as diagnosis record, treatment plan, examination report, etc.) and the medical record keyword (such as specific disease name, symptoms, treatment process, etc.) in the request, extracts relevant medical record data from a large number of medical record records stored in the electronic medical record library. The system filters out medical record records that meet the conditions by matching the medical record type and the medical record keyword, and calls these medical record information to ensure that the user can obtain accurate medical record data. The medical record called by the system is output to the user interface or further processed for viewing, modification or other related operations.

[0030] Further, the electronic medical record sharing platform calls medical records from the electronic medical record library according to the medical record type and the medical record keyword, and the method comprises: The electronic medical record sharing platform obtains candidate medical records from the electronic medical record library according to the medical record type, performs semantic expansion on the medical record keyword based on an NLP semantic model, outputs medical record expansion keywords, and obtains called electronic medical records from the candidate medical records according to the medical record expansion keywords.

[0031] Preferably, the electronic medical record sharing platform obtains candidate medical records from the electronic medical record library according to the medical record type; the medical record type such as diagnosis record, treatment record, examination report, etc. will be used as a screening condition, and the system obtains all candidate medical record data that meet the medical record type by querying the medical record records in the database. The medical record keyword is expanded based on the natural language processing (NLP) semantic model, and the NLP semantic model can analyze and understand the semantic relationship of the medical record keyword, identify synonyms, near synonyms or more extensive associated words related to the keyword, and thus expand a set of medical record expansion keywords. These expanded keywords can effectively increase the search range and improve the comprehensiveness of medical record query. The system further screens the obtained candidate medical records according to the medical record expansion keywords to obtain the final electronic medical record calling result.

[0032] The medical information of the called electronic medical record is processed according to the matched permission level, and the processed electronic medical record is output and sent to the medical record viewing object.

[0033] According to the determined matching permission level, the system processes the called electronic medical record information accordingly, ensuring that different users access corresponding levels of medical record data according to their permissions. For example, if the medical record viewing object is a doctor, the permission level is high, and the doctor can access the complete medical record; if the medical record viewing object is a nurse, the permission level is low, and the nurse can only view part of the medical record, such as nursing records or basic information. According to the requirements of the permission level, the system adjusts the visible fields of the medical record information, hides sensitive or detailed information that is not suitable for users of this permission level to view, and performs information blurring processing or field masking. After processing, the system outputs the processed electronic medical record and sends it to the corresponding medical record viewing object. The medical record viewing object can be the user himself, a designated doctor, a nurse, or other authorized personnel. According to the previous permission control, the system ensures that the sharing of medical record data complies with privacy protection regulations, and transmits the processed medical record information through a secure channel.

[0034] Further, the method of processing the called electronic medical record according to the matching permission level includes: Defining a permission-field mapping matrix, identifying the invisible fields corresponding to the matching permission level according to the permission-field mapping matrix, and performing medical record information blurring processing on the called electronic medical record according to the invisible fields, and outputting the processed electronic medical record.

[0035] Preferably, the system predefines a permission-field mapping matrix, which associates different permission levels with fields in the electronic medical record. Each field represents specific information in the medical record, such as patient name, diagnosis record, medication prescription, examination report, etc., and each permission level (such as patient, doctor, nurse, etc.) has different access permissions. The permission-field mapping matrix lists which fields are visible to users of different permission levels and which fields are invisible.

[0036] When the system identifies the applicable medical record according to the user's permission level, it uses the permission-field mapping matrix to identify the invisible fields under that permission level. According to the identified invisible fields, the system performs blurring processing on the called electronic medical record, including masking sensitive information, hiding specific fields, or replacing part of the field content with general information (such as "xxx" representing hidden content). After completing the information blurring processing, the system outputs the processed electronic medical record. The processed electronic medical record will strictly follow the permission control strategy, ensuring that only authorized users can see the visible information, and it will be sent to the corresponding medical record viewing object through a secure channel.

[0037] Further, the method of sending the processed electronic medical record to the medical record viewing object also includes: The system sets a temporary access token, which includes a first invalidation period. After sending the processed electronic medical record and the temporary access token to the medical record viewer, the system invalidates the processed electronic medical record when the first invalidation period is reached.

[0038] Preferably, the system sets a temporary access token to protect the security of the electronic medical record data. The temporary access token is a mechanism for controlling access to medical records, which includes a first invalidation period, i.e., the time period during which the token is valid. The first invalidation period is a preset time limit, usually a few minutes or hours, to ensure that the electronic medical record is valid within a specified time period and automatically invalidates after the time period.

[0039] After the medical record information is processed, the system sends the processed electronic medical record and the temporary access token to the medical record viewer, which can be an authorized patient, doctor, nurse, or other personnel with access rights. The temporary access token provides temporary access to the electronic medical record, and the viewer can access the medical record information within the specified invalidation period. When the first invalidation period expires, the system automatically invalidates the processed electronic medical record, i.e., the medical record data cannot be accessed.

[0040] Further, when the processed electronic medical record is invalidated when the first invalidation period is reached, the method further includes: The temporary access token includes a first activation key. If the medical record viewer sends a medical record activation request to the user, the first activation key is sent to the medical record viewer after authorization by the user. The medical record viewer reactivates the processed electronic medical record according to the first activation key.

[0041] To restore access rights after the expiration of the invalidation period, the system sets the temporary access token with a first activation key. The first activation key is a secure key used to reactivate the processed electronic medical record and provide the medical record viewer with access rights after the access token expires. When the medical record viewer (e.g., a doctor or patient) needs to access the invalidated electronic medical record again, the medical record viewer sends a medical record activation request to the user (e.g., the owner of the medical record) to request authorization to restore access rights. After receiving the medical record activation request, the user authorizes according to the authorization settings. If the user agrees to restore access, the system generates and sends the first activation key to the medical record viewer. The first activation key is unique and used to verify the identity of the medical record viewer and allow them to access the processed electronic medical record again. After receiving the first activation key, the medical record viewer uses the key to reactivate the electronic medical record according to the predetermined rules. At this time, the access rights of the electronic medical record are restored, and the medical record viewer can continue to view or process the electronic medical record data.

[0042] To sum up, the embodiments of the present application have at least the following technical effects: The electronic medical record sharing platform is established on the user mobile terminal, and includes a synchronous transmission module. When the user is authorized to log in, the synchronous transmission module is used to input the current electronic medical record and generate an electronic medical record library of the user. The user sends electronic medical record request information to the electronic medical record sharing platform, analyzes the electronic medical record request information, and obtains a medical record type, a medical record keyword, and a medical record viewing object. The medical record viewing object is input into a defined policy rule template for permission level identification, and a matched permission level is output. The matched permission level is attached with a permission number identification. The electronic medical record sharing platform calls a medical record from the electronic medical record library according to the medical record type and the medical record keyword, and outputs a called electronic medical record. The called electronic medical record is processed according to the matched permission level, and the processed electronic medical record is sent to the medical record viewing object. The technical problem that the medical record information of the user in different hospitals cannot be uniformly managed and accessed in the prior art is solved, and the technical effect that the electronic medical record is safely shared through a dynamic policy adjustment and a permission control mechanism is achieved.

[0043] Embodiment two, based on the same inventive concept as the electronic medical record access control method based on dynamic policy adjustment in the foregoing embodiments, as shown in Figure 2 The present application provides an electronic medical record access control system based on dynamic policy adjustment, wherein the system includes: A platform building unit 11 is configured to establish an electronic medical record sharing platform on a user mobile terminal, and the electronic medical record sharing platform includes a synchronous transmission module. When the user is authorized to log in, the synchronous transmission module is used to input the current electronic medical record and generate an electronic medical record library of the user. A request analysis unit 12 is configured to send electronic medical record request information to the electronic medical record sharing platform, analyze the electronic medical record request information, and obtain a medical record type, a medical record keyword, and a medical record viewing object. A permission identification unit 13 is configured to input the medical record viewing object into a defined policy rule template for permission level identification, and output a matched permission level. The matched permission level is attached with a permission number identification. A medical record calling unit 14 is configured to call a medical record from the electronic medical record library according to the medical record type and the medical record keyword, and output a called electronic medical record. A medical record processing unit 15 is configured to process the called electronic medical record according to the matched permission level, and output a processed electronic medical record. The processed electronic medical record is sent to the medical record viewing object.

[0044] Further, the platform building unit 11 is configured to perform the following method: When the user sends electronic medical record request information to the electronic medical record sharing platform, the voice recognition module is started, and conversation information is entered according to the voice recognition module; the voice recognition module generates electronic medical record request information from the conversation information, if any item of the electronic medical record request information analysis data returns empty, the voice recognition module carries out voice feedback, and obtains supplementary conversation information; the electronic medical record request information is updated based on the supplementary conversation information, until any item of the electronic medical record request information analysis data returns empty.

[0045] Further, the permission identification unit 13 is used to execute the following method: According to the object category, a medical record viewing object sample is generated, wherein the object category includes a first object and a second object, the first object is a nursing staff of the user, and the second object is a doctor of the user; a corresponding permission times identifier is generated according to the medical record viewing object sample, the permission times identifier includes an access times upper limit and a revisit interval length; a corresponding permission level label is generated according to the medical record viewing object sample, the permission level label includes a first permission level and a second permission level, and the first permission level is less than the second permission level; a strategy rule template is defined according to the mapping relationship of the medical record viewing object sample, the permission level label and the permission times identifier.

[0046] Further, the permission identification unit 13 is used to execute the following method: The object category further includes a third object, and the third object is a permission family member of the user; a third permission level label is set according to the third object, and the defined strategy rule template is updated according to the third permission level label, wherein the third permission level label is greater than or equal to the second permission level label.

[0047] Further, the platform building unit 11 is used to execute the following method: A standardized medical record processing template is defined; an electronic medical record entered by the synchronous transmission module is received, the electronic medical record is input into the standardized medical record processing template for standardized template processing, and a standardized electronic medical record is output; the standardized electronic medical record is stored in the electronic medical record library, and the electronic medical record library is called through the electronic medical record sharing platform.

[0048] Further, the medical record processing unit 15 is used to execute the following method: A temporary access token is set, the temporary access token includes a first invalid period; after the temporary access token and the processed electronic medical record are sent to the medical record viewing object at the same time, based on the temporary access token, if the first invalid period is reached, the processed electronic medical record is in an invalid state.

[0049] Further, the medical record processing unit 15 is configured to perform the following method: The temporary access token includes a first activation key; if the medical record viewing object sends a medical record activation request to the user, the first activation key is sent to the medical record viewing object after being authorized by the user, and the medical record viewing object reactivates the processed electronic medical record according to the first activation key.

[0050] Further, the medical record processing unit 15 is configured to perform the following method: The electronic medical record sharing platform obtains candidate medical records from the electronic medical record database according to the medical record type; performs semantic expansion on the medical record keywords based on an NLP semantic model, outputs medical record expansion keywords, and obtains calling electronic medical records from the candidate medical records according to the medical record expansion keywords.

[0051] Further, the medical record processing unit 15 is configured to perform the following method: Define a permission-field mapping matrix; identify the invisible field corresponding to the matching permission level according to the permission-field mapping matrix, perform medical record information fuzzy processing on the calling electronic medical record according to the invisible field, and output the processed electronic medical record.

[0052] It should be noted that the above-mentioned sequence of the embodiments of the present application is only for description, and does not represent the advantages and disadvantages of the embodiments. The above describes a specific embodiment of the present application. The processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multi-task processing and parallel processing are possible or can be advantageous.

[0053] The above only describes the preferred embodiments of the present application, and does not limit the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

[0054] The present application is only an exemplary description of the present application, and should be considered as covering any and all modifications, changes, combinations or equivalents within the scope of the present application. Obviously, those skilled in the art can make various modifications and changes to the present application without departing from the scope of the present application. Thus, if these modifications and changes of the present application belong to the scope of the present application and its equivalents, the present application intends to include these modifications and changes.

Claims

1. An electronic medical record access control method based on dynamic policy adjustment, characterized in that: The method comprises: Establishing an electronic medical record sharing platform on the user's mobile terminal, the electronic medical record sharing platform includes a synchronous transmission module. When the user authorizes login, the synchronous transmission module is used to enter the current electronic medical record and generate the user's electronic medical record library; The user sends an electronic medical record request message to the electronic medical record sharing platform, and the electronic medical record request message is parsed to obtain the medical record type, medical record keywords, and medical record viewing object; The medical record viewing object is input into the defined policy rule template to identify the permission level, and the matching permission level is output, and the matching permission level is additionally marked with the permission count; The electronic medical record sharing platform retrieves medical records from the electronic medical record database according to the medical record type and medical record keywords, and outputs the retrieved electronic medical records; The medical record information of the called electronic medical record is processed according to the matching authority level, the processed electronic medical record is output, and the processed electronic medical record is sent to the medical record viewing object.

2. The method according to claim 1, wherein The electronic medical record sharing platform includes a voice recognition module, and the method includes: When the user sends an electronic medical record request message to the electronic medical record sharing platform, the voice recognition module is activated, and conversation information is recorded according to the voice recognition module; The voice recognition module generates electronic medical record request information based on the conversation information. If any item of the parsed data of the electronic medical record request information is returned as null, the voice recognition module performs voice feedback to obtain supplementary conversation information. The electronic medical record request information is updated based on the supplementary dialogue information until any item of the parsed data of the electronic medical record request information is not empty.

3. The method according to claim 1, wherein The medical record viewing object is input into the defined policy rule template for authority level identification. The defined policy rule template includes: Generate a sample of medical record viewing objects according to object categories, wherein the object categories include first-category objects and second-category objects, the first-category objects are the user's caregivers, and the second-category objects are the user's treating doctors; Generate a corresponding permission level label according to the medical record viewing object sample, wherein the permission level label includes a first permission level and a second permission level, and the first permission level is lower than the second permission level; Generate a corresponding permission count identifier based on the medical record viewing object sample, wherein the permission count identifier includes an upper limit on the number of visits and a revisit interval; A policy rule template is defined according to the mapping relationship between the medical record viewing object sample, the permission level label and the permission number identifier.

4. The method according to claim 3, wherein The object category also includes a third type of object, which is the user's permission family; A third permission level tag is set according to the third type of object, and a defined policy rule template is updated according to the third permission level tag, wherein the third permission level tag is greater than or equal to the second permission level tag.

5. The method according to claim 1, wherein The electronic medical record sharing platform also includes a standardized medical record processing template, and the method includes: Define standardized medical record processing templates; Receiving the electronic medical record entered by the synchronous transmission module, inputting the electronic medical record into the standardized medical record processing template for standardized template processing, and outputting a standardized electronic medical record; The standardized electronic medical records are stored in the electronic medical record library, and the electronic medical record library is called through the electronic medical record sharing platform.

6. The method according to claim 1, wherein Sending the processed electronic medical record to the medical record viewing target, the method further includes: Setting a transient access token, wherein the transient access token includes a first expiration period; After the transient access token and the processed electronic medical record are simultaneously sent to the medical record viewing target, based on the transient access token, if the first expiration period is reached, the processed electronic medical record is put into an invalid state.

7. The method according to claim 6, wherein If the processed electronic medical record is in an invalid state when the first invalidation period is reached, the method further includes: The transient access token includes a first activation key; If the medical record viewing object sends a medical record activation request to the user, the first activation key is sent to the medical record viewing object after authorization by the user, and the medical record viewing object reactivates the processed electronic medical record according to the first activation key.

8. The method according to claim 1, wherein The electronic medical record sharing platform retrieves medical records from the electronic medical record library according to the medical record type and medical record keywords, and the method includes: The electronic medical record sharing platform obtains candidate medical records from the electronic medical record database according to the medical record type; The medical record keywords are semantically expanded based on the NLP semantic model, the medical record expansion keywords are output, and the electronic medical records are retrieved from the candidate medical records according to the medical record expansion keywords.

9. The method according to claim 1, wherein Processing medical record information of the called electronic medical record at the matching authority level, the method comprising: Define the permission-field mapping matrix; The invisible fields corresponding to the matching authority levels are identified according to the authority-field mapping matrix, medical record information fuzzy processing is performed on the called electronic medical record according to the invisible fields, and the processed electronic medical record is output.

10. The electronic medical record access control system based on dynamic policy adjustment is characterized by: A system for implementing the electronic medical record access control method based on dynamic policy adjustment according to any one of claims 1 to 9, comprising: A platform building unit is used to establish an electronic medical record sharing platform on the user's mobile terminal. The electronic medical record sharing platform includes a synchronous transmission module. When the user authorizes login, the synchronous transmission module is used to enter the current electronic medical record and generate the user's electronic medical record library; A request parsing unit, configured for the user to send electronic medical record request information to the electronic medical record sharing platform, parse the electronic medical record request information, and obtain the medical record type, medical record keywords, and medical record viewing object; A permission identification unit, configured to input the medical record viewing object into a defined policy rule template to identify the permission level, and output a matching permission level, wherein the matching permission level is additionally provided with a permission count identifier; A medical record calling unit, configured for the electronic medical record sharing platform to call medical records from the electronic medical record library according to the medical record type and medical record keywords, and output the called electronic medical records; The medical record processing unit is used to process the medical record information of the called electronic medical record according to the matching authority level, output the processed electronic medical record, and send the processed electronic medical record to the medical record viewing object.

Images