Collaborative signature medical management system and method based on key segmentation
By employing key segmentation and threshold signature technologies, the single point of failure and static key management issues in medical signature systems have been resolved. Dynamic signature strategies and multi-role collaborative signatures have been implemented, thereby enhancing the security and compliance of the medical data signature system.
Patent Information
- Application Number
- CN202511267271.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-09-05
- Publication Date
- 2025-12-09
AI Technical Summary
Existing medical signature systems suffer from single point of failure risks, insufficient static key management and cross-institutional collaboration, making it difficult to meet the security and compliance requirements of complex medical scenarios.
By employing key segmentation and threshold signature technologies, a dynamic signature strategy is generated by acquiring medical demand information, key shares are allocated and verified, and a valid electronic signature is generated using biometric verification and threshold signature algorithms, which is then embedded in electronic medical documents.
It eliminates the single point of failure risk caused by a single private key, enables dynamic adjustment of signing permissions, improves the security and efficiency of medical processes, and enhances compliance and interoperability.
Smart Images
Figure CN121098511A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of medical collaborative signature technology, and in particular to a collaborative signature medical management system and method based on key segmentation. Background Technology
[0002] With the rapid development of medical informatization, electronic signature technology has become a core means of ensuring the authenticity, integrity, and immutability of data in medical systems. However, existing medical signature systems still have significant shortcomings in key management, evidence storage reliability, and cross-institutional collaboration, making it difficult to meet the security and compliance requirements of complex medical scenarios.
[0003] Traditional electronic signature schemes are typically completed by a single private key holder (such as the attending physician), posing a serious single point of failure risk. The loss or theft of the private key directly jeopardizes the entire medical data security system. Furthermore, current medical signature systems mostly employ static key allocation mechanisms, with signing permissions fixed to specific roles (such as doctors and nurses), making it impossible to dynamically adjust according to the stage of the medical process (such as diagnosis, surgery, and prescription). For example, surgical scenarios require multi-party collaborative signatures, but traditional systems require pre-configured fixed permissions, leading to inefficient processes or increased security risks. Summary of the Invention
[0004] The purpose of this invention is to provide a collaborative signature medical management system and method based on key segmentation, which can realize collaborative management of electronic signatures and dynamic adjustment of signature strategies, thereby improving the efficiency of medical processes and reducing security risks.
[0005] To achieve the above objectives, the present invention provides a medical collaborative signature management method based on key segmentation, comprising:
[0006] Obtain current medical needs information, which includes medical process stage identifiers and patient information;
[0007] Based on a preset rule base and the medical demand information, a dynamic signature strategy is generated. The dynamic signature strategy defines the list of medical roles that need to participate in the signature, the minimum number of signers threshold, and the key share allocation rules.
[0008] Based on the key share allocation rules, a key share request is sent to the medical role client in the medical role list to obtain the signature of each medical role;
[0009] Receive and verify key shares from multiple medical role clients;
[0010] When the collected key share meets the minimum number of signers threshold of the dynamic signature strategy, a valid electronic signature is generated collaboratively based on the collected key share using a threshold signature algorithm.
[0011] Furthermore, the method also includes:
[0012] The valid electronic signature is embedded into the electronic medical document to generate a signed electronic medical document.
[0013] Furthermore, the dynamic signature generation strategy based on the preset rule base and the medical demand information includes:
[0014] Based on the medical process stage identifier and patient information, the corresponding stage signature rule is called from the preset rule base;
[0015] Based on the aforementioned medical roles, the minimum number of signers threshold and key share allocation weight are dynamically adjusted to generate key share allocation rules.
[0016] Furthermore, the list of medical roles is linked to the job level, qualifications, or department of the medical role.
[0017] Furthermore, the patient information includes at least one or more of the following: disease type, patient risk level, and patient identity information.
[0018] Furthermore, the receiving and verification of key shares from multiple medical role clients includes:
[0019] Verify the biometrics of the medical role, wherein the biometrics include at least one or more of facial features, fingerprints, and voiceprints.
[0020] To achieve the above objectives, the present invention also provides a medical collaborative signature management system based on key segmentation, comprising:
[0021] The medical needs information acquisition module is used to acquire current medical needs information, which includes medical process stage identifiers and patient information;
[0022] The dynamic signature strategy generation module is used to generate a dynamic signature strategy based on a preset rule base and the medical demand information. The dynamic signature strategy defines the list of medical roles that need to participate in the signing, the minimum number of signers threshold, and the key share allocation rules.
[0023] The key share acquisition module is used to send key share requests to the medical role clients in the medical role list based on the key share allocation rules to obtain the signatures of each medical role.
[0024] The key share verification module receives and verifies key shares from multiple medical role clients.
[0025] The electronic signature generation module, when the collected key share meets the minimum number of signers threshold of the dynamic signature strategy, collaboratively generates a valid electronic signature based on the collected key share using a threshold signature algorithm.
[0026] Furthermore, the system also includes:
[0027] The signature file association module is used to embed the valid electronic signature into the electronic medical document to generate an electronic medical document with the signature.
[0028] To achieve the above objectives, the present invention also provides an electronic device, comprising:
[0029] processor;
[0030] A memory in which executable instructions of the processor are stored;
[0031] The processor is configured to execute the previously described key-segmentation-based medical collaborative signature management method by executing the executable instructions.
[0032] To achieve the above objectives, the present invention also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the medical collaborative signature management method based on key segmentation as described above.
[0033] In this embodiment of the invention, key segmentation and threshold signature technology completely eliminate the single point of failure risk caused by a single private key in traditional schemes. The system private key can generate a valid signature without complete reconstruction, fundamentally improving the security of the medical data signature system. Furthermore, by introducing a dynamic signature strategy generation mechanism based on medical process stages and patient information, signature permissions are transformed from traditional static binding to a flexible mode that can be intelligently adjusted according to specific scenarios. This satisfies the multi-role collaborative signature requirements necessary for complex scenarios such as surgery and high-risk prescriptions, while also ensuring the execution efficiency of ordinary diagnosis and treatment processes. This invention is beneficial for enhancing the compliance and interoperability of medical systems. Attached Figure Description
[0034] Figure 1 This is a flowchart of a medical collaborative signature management method based on key segmentation in an embodiment of the present invention.
[0035] Figure 2 This is a flowchart of a medical collaborative signature management method based on key segmentation in another embodiment of the present invention.
[0036] Figure 3 This is a schematic diagram of the architecture of a medical collaborative signature management system based on key segmentation in an embodiment of the present invention.
[0037] Figure 4This is a schematic diagram of the architecture of a medical collaborative signature management system based on key segmentation in another embodiment of the present invention.
[0038] Figure 5 This is a schematic diagram of the architecture of an electronic device in an embodiment of the present invention. Detailed Implementation
[0039] To illustrate the technical content, structural features, and effects of the present invention in detail, the following description is provided in conjunction with the embodiments and accompanying drawings.
[0040] To make the above-mentioned objects, features, and advantages of the present invention more apparent and understandable, specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings. Many specific details are set forth in the following description to provide a thorough understanding of the present invention. However, the present invention can be practiced in many other ways different from those described herein, and those skilled in the art can make similar modifications without departing from the spirit of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.
[0041] Example 1
[0042] Please see Figure 1 and Figure 2 This invention discloses a medical collaborative signature management method based on key segmentation, comprising:
[0043] S1: Obtain current medical needs information, which includes medical process stage identifiers and patient information.
[0044] Specifically, the medical process can include stages such as diagnosis, surgery, and prescription.
[0045] Specifically, the patient information includes at least one or more of the following: disease type, patient risk level, and patient identity information. Of course, patient information may also include medically relevant information such as allergy history and vital signs.
[0046] S2: Based on the preset rule base and the medical demand information, generate a dynamic signature strategy. The dynamic signature strategy defines the list of medical roles that need to participate in the signing, the minimum number of signers threshold, and the key share allocation rules.
[0047] Specifically, the dynamic signature strategy generated based on the preset rule base and the medical demand information includes:
[0048] (1) Based on the medical process stage identifier and patient information, call the corresponding stage signature rule from the preset rule base.
[0049] (2) Combine the medical roles and dynamically adjust the minimum number of signers threshold and key share allocation weight to generate key share allocation rules.
[0050] Specifically, the pre-defined rule base can include mandatory provisions from national and industry regulations concerning physician authority at various levels and approval processes for special drugs. Furthermore, it can include risk assessment models based on clinical best practices, such as determining the high-risk level of a prescription based on patient age and renal function indicators. These rules are stored in a configurable rule engine.
[0051] Understandably, the medical role list refers to the list of medical personnel matched with the corresponding medical stage and patient information.
[0052] Specifically, the list of medical roles is linked to the role's rank, qualifications, or department. That is, it is closely related to the role's rank (e.g., different levels such as chief physician, attending physician), qualifications (e.g., possessing specific surgical qualifications, special drug prescription rights), and department (e.g., surgery, internal medicine, anesthesiology). The system accurately determines the role list based on these factors, thereby ensuring that appropriate personnel participate in each stage of processes such as dynamic signatures, complying with medical standards and safety requirements.
[0053] In a specific example, the context file can be obtained through the Spring framework, such as by using the ApplicationContext interface, which allows for the output of a dynamic signature strategy by inputting medical requirement information.
[0054] S3: Based on the key share allocation rules, send key share requests to the medical role clients in the medical role list to obtain the signatures of each medical role.
[0055] Specifically, choose a finite field GF(q), where q is a prime number and must be greater than the maximum signature value and the number of medical roles in the list of medical roles.
[0056] Construct a polynomial of degree k−1 f(x)=a0+a1x+a2x²+…+a_{k−1}x^{k−1}, where a0 is the signature and a1,a2,…,a_{k−1} are coefficients randomly selected in a finite field.
[0057] For each participant i (1≤i≤n), calculate the value of the polynomial at x=i, i.e., the key share s_i=f(i), and then distribute these shares to the various medical role clients. Here, n is the total number of participants.
[0058] In a specific example, based on established key share allocation rules, the system accurately locates the client corresponding to each medical role in the medical role list. Then, through a secure and reliable communication channel, it sends key share requests to each of these clients one by one. The request includes specific information about the required key share, such as the share ID. Upon receiving the request, each medical role client responds according to its own permissions and security verification process. If the verification is successful, it securely returns the corresponding key share to the system, thereby gradually collecting the signatures of all medical roles and laying the foundation for a secure and compliant dynamic signature process.
[0059] S4: Receive and verify key shares from multiple medical role clients.
[0060] Specifically, receiving and verifying key shares from multiple medical role clients includes:
[0061] Verify the biometrics of the medical role, wherein the biometrics include at least one or more of facial features, fingerprints, and voiceprints.
[0062] Of course, biometrics can also include other features, such as iris features, which will not be listed in this invention.
[0063] In a specific example, after issuing a key share request, the system activates a real-time monitoring mechanism, waiting to receive key shares returned from multiple medical role clients. Once a client responds, the system immediately performs a preliminary check on the received data to confirm whether the data format conforms to preset specifications and to eliminate garbled characters or abnormally formatted data caused by transmission errors.
[0064] Subsequently, the authenticity and integrity of the key share are rigorously verified using pre-defined encryption algorithms and verification rules. For example, digital signature technology is used to verify whether the key share was issued by a legitimate medical client and has not been tampered with. Simultaneously, the validity of the key share is checked to confirm whether it is within its prescribed validity period.
[0065] If the key share passes all verification steps, the system will store it securely; if verification fails, the system will record the failure information and promptly notify the corresponding client, requesting a resend of the correct key share, thereby ensuring the security and accuracy of the entire dynamic signature process.
[0066] S5: When the collected key share meets the minimum number of signers threshold of the dynamic signature strategy, a valid electronic signature is generated collaboratively based on the collected key share using a threshold signature algorithm.
[0067] Threshold Signature Scheme (TSS) is an important branch of digital signatures. It is a cryptographic technique based on Secure Multi-Party Computation (MPC). Through the threshold signature algorithm, a valid signature can be generated without collecting all key shares. In practical implementation, the threshold algorithm can also be combined with blockchain. In blockchain applications, the advantage of threshold signatures lies in the fact that signature generation is carried out through an off-chain MPC protocol, resulting in greater security and avoiding the risk of contract hacking.
[0068] Specifically, the process of collaboratively generating a valid digital signature using a threshold signature algorithm based on the collected key shares includes the following specific steps:
[0069] (1) Check the data format of each key share.
[0070] Since different clients may have different data formats due to factors such as software version and transmission protocol, they need to be uniformly converted into a standard format that the threshold signature algorithm can recognize, such as a specific binary encoding or structured data format.
[0071] (2) Filter valid key shares.
[0072] A hash algorithm is used to calculate the hash value for each key share, and this hash value is compared with the hash value provided in advance by the sender. If they match, it means that the key share has not been tampered with during transmission and is complete and valid; if they do not match, the share is marked as invalid, and the corresponding client is required to resend it.
[0073] (3) Confirm the number of medical roles involved.
[0074] The system identifies the medical roles corresponding to valid shares, confirming the set of roles participating in this collaborative signature. Simultaneously, it checks whether the number of roles in this set reaches the minimum number of signatories specified in the dynamic signature strategy. If not, it waits for more valid shares to be collected or triggers the corresponding exception handling mechanism; if the threshold is reached, it continues with subsequent steps.
[0075] (4) Calculate and generate a valid signature.
[0076] When the medical role corresponding to the valid share provides their key share, the polynomial f(x) is reconstructed by interpolation (such as Lagrange interpolation) to calculate f(0), which is the final electronic signature.
[0077] In a specific example, the list of medical roles can be divided into essential medical roles and optional medical roles. For instance, in a major surgical procedure, the chief physician is an essential medical role, so the collected key shares must include the chief physician, while other operators are optional medical roles. If the minimum number of signers threshold is t, then in addition to the chief physician, at least (t-1) key shares need to be collected.
[0078] In some embodiments, the method further includes:
[0079] S6: Embed the valid electronic signature into the electronic medical document to generate an electronic medical document with the signature.
[0080] Specifically, electronic medical documents can include medical records, pharmacy records, surgical informed consent forms, and other medical-related documents.
[0081] In this embodiment of the invention, key segmentation and threshold signature technology completely eliminate the single point of failure risk caused by a single private key in traditional schemes. The system private key can generate a valid signature without complete reconstruction, fundamentally improving the security of the medical data signature system. Furthermore, by introducing a dynamic signature strategy generation mechanism based on medical process stages and patient information, signature permissions are transformed from traditional static binding to a flexible mode that can be intelligently adjusted according to specific scenarios. This satisfies the multi-role collaborative signature requirements necessary for various complex medical scenarios while ensuring the execution efficiency of ordinary diagnosis and treatment procedures. This invention is beneficial for enhancing the compliance and interoperability of medical systems.
[0082] Example 2
[0083] Please see Figure 3 and Figure 4 This invention also discloses a medical collaborative signature management system based on key segmentation, comprising:
[0084] The medical demand information acquisition module 10 is used to acquire current medical demand information, which includes medical process stage identifiers and patient information.
[0085] The dynamic signature strategy generation module 20 is used to generate a dynamic signature strategy based on a preset rule base and the medical demand information. The dynamic signature strategy defines a list of medical roles that need to participate in the signing, a minimum number of signers threshold, and key share allocation rules.
[0086] The key share acquisition module 30 is used to send a key share request to the medical role client in the medical role list based on the key share allocation rule to obtain the signature of each medical role.
[0087] The key share verification module 40 receives and verifies key shares from multiple medical role clients.
[0088] The electronic signature generation module 50, when the collected key share meets the minimum number of signers threshold of the dynamic signature strategy, collaboratively generates a valid electronic signature based on the collected key share through a threshold signature algorithm.
[0089] In some embodiments, the system further includes:
[0090] The signature file association module 60 is used to embed the valid electronic signature into the electronic medical document to generate an electronic medical document with the signature.
[0091] Example 3
[0092] Please see Figure 5 This invention discloses an electronic device, comprising:
[0093] Processor 70;
[0094] The memory 80 stores executable instructions of the processor 70; wherein the processor 30 is configured to execute the key segmentation-based medical collaborative signature management method as described in Embodiment 1 by executing the executable instructions.
[0095] Example 4
[0096] The present invention also discloses a computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements the medical collaborative signature management method based on key segmentation as described in Embodiment 1.
[0097] It should be understood that, in the embodiments of the present invention, the processor may be a central processing unit (CPU), or it may be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor. Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by hardware related to computer program instructions. The program can be stored in a computer-readable storage medium, and when executed, it may include the processes of the embodiments of the above methods. The storage medium may be a magnetic disk, optical disk, read-only memory (ROM), or random access memory (RAM), etc.
[0098] In the above embodiments, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions in other embodiments.
[0099] The above-disclosed examples are merely preferred embodiments of the present invention, intended to facilitate understanding and implementation by those skilled in the art. They should not be construed as limiting the scope of the present invention. Therefore, equivalent variations made in accordance with the scope of the present invention's patent are still within the scope of the present invention.
Claims
1. A medical collaborative signature management method based on key segmentation, characterized in that, include: Obtain current medical needs information, which includes medical process stage identifiers and patient information; Based on a preset rule base and the medical demand information, a dynamic signature strategy is generated. The dynamic signature strategy defines the list of medical roles that need to participate in the signature, the minimum number of signers threshold, and the key share allocation rules. Based on the key share allocation rules, a key share request is sent to the medical role client in the medical role list to obtain the signature of each medical role; Receive and verify key shares from multiple medical role clients; When the collected key share meets the minimum number of signers threshold of the dynamic signature strategy, a valid electronic signature is generated collaboratively based on the collected key share using a threshold signature algorithm.
2. The medical collaborative signature management method as described in claim 1, characterized in that, The method further includes: The valid electronic signature is embedded into the electronic medical document to generate a signed electronic medical document.
3. The medical collaborative signature management method as described in claim 1, characterized in that, The dynamic signature generation strategy based on the preset rule base and the medical demand information includes: Based on the medical process stage identifier and patient information, the corresponding stage signature rule is called from the preset rule base; Based on the aforementioned medical roles, the minimum number of signers threshold and key share allocation weight are dynamically adjusted to generate key share allocation rules.
4. The medical collaborative signature management method as described in claim 1, characterized in that, The list of medical roles is linked to the job level, qualifications, or department of the medical role.
5. The medical collaborative signature management method as described in claim 1, characterized in that, The patient information includes at least one or more of the following: disease type, patient risk level, and patient identity information.
6. The medical collaborative signature management method as described in claim 1, characterized in that, The process of receiving and verifying key shares from multiple medical role clients includes: Verify the biometrics of the medical role, wherein the biometrics include at least one or more of facial features, fingerprints, and voiceprints.
7. A medical collaborative signature management system based on key segmentation, characterized in that, include: The medical needs information acquisition module is used to acquire current medical needs information, which includes medical process stage identifiers and patient information; The dynamic signature strategy generation module is used to generate a dynamic signature strategy based on a preset rule base and the medical demand information. The dynamic signature strategy defines the list of medical roles that need to participate in the signing, the minimum number of signers threshold, and the key share allocation rules. The key share acquisition module is used to send key share requests to the medical role clients in the medical role list based on the key share allocation rules to obtain the signatures of each medical role. The key share verification module receives and verifies key shares from multiple medical role clients. The electronic signature generation module, when the collected key share meets the minimum number of signers threshold of the dynamic signature strategy, collaboratively generates a valid electronic signature based on the collected key share using a threshold signature algorithm.
8. The medical collaborative signature management system as described in claim 7, characterized in that, The system also includes: The signature file association module is used to embed the valid electronic signature into the electronic medical document to generate an electronic medical document with the signature.
9. An electronic device, characterized in that, include: processor; A memory in which executable instructions of the processor are stored; The processor is configured to execute the medical collaborative signature management method based on key segmentation as described in any one of claims 1 to 8 by executing the executable instructions.
10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the medical collaborative signature management method based on key segmentation as described in any one of claims 1 to 8.