Medical insurance electronic certificate security management system based on block chain

Abstract

The invention discloses a medical insurance electronic certificate security management system based on a block chain, and relates to the technical field of medical security informatization and block chains. The system solves the problems of information isolated island, data tampering risk, privacy disclosure, low cross-mechanism cooperation efficiency and the like in traditional medical insurance electronic certificate management through the technical characteristics of distributed account books, asymmetric encryption, smart contracts and the like of the block chain. According to the method, a multi-layer encryption mechanism and a dynamic authority management model are adopted, safe generation, storage, verification and full-process management of use of the medical insurance electronic certificate are achieved, meanwhile, data consistency among distributed nodes is ensured through a consensus algorithm, and the safety, transparency and reliability of a medical insurance system are improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of medical insurance informatization and blockchain technology, and particularly relates to a medical insurance electronic certificate security management system based on blockchain. BACKGROUND

[0002] With the rapid development of medical informatization, the security and reliability of medical insurance electronic certificates, which are important for insured persons to enjoy medical insurance services, are crucial. Traditional medical insurance electronic certificate management systems mostly use centralized architecture, which has the following problems:

[0003] 1. Data storage is centralized, with single point of failure and data tampering risk;

[0004] 2. There are information silos between medical institutions and medical insurance departments, making data sharing difficult;

[0005] 3. User privacy information protection is insufficient, and information leakage is easy to occur;

[0006] 4. Cross-institutional collaboration is inefficient, and the certificate verification process is cumbersome;

[0007] 5. Lack of effective tamper-proofing mechanism and operation traceability capability.

[0008] Blockchain technology has features such as distributed storage, tamper-proofing, transparency and traceability, and secure encryption, providing a new technical approach to solving the above problems. Therefore, the present application proposes a medical insurance electronic certificate security management system based on blockchain. SUMMARY

[0009] The purpose of the present application is to overcome the shortcomings of the prior art, and to provide a medical insurance electronic certificate security management system and method based on blockchain, which uses blockchain technology to realize the secure generation, storage, verification and use of medical insurance electronic certificates, and improves the security, reliability and efficiency of the medical insurance system.

[0010] To achieve the above purpose, the present application adopts the following technical solutions:

[0011] A medical insurance electronic certificate security management system based on blockchain, comprising:

[0012] A certificate generation module for generating a unique medical insurance electronic certificate based on user identity information and encrypting the certificate information;

[0013] A blockchain storage module using a consortium chain architecture, composed of nodes such as medical insurance management agencies, medical institutions and insured units to form a distributed ledger network, for storing encrypted medical insurance electronic certificates and related operation records;

[0014] An identity authentication module, which realizes identity authentication and permission management of users and institutions based on an asymmetric encryption algorithm;

[0015] An intelligent contract module, which contains preset business rules and access control logic, and is used for automatically performing verification, use and update operations of medical insurance credentials;

[0016] A privacy protection module, which adopts zero-knowledge proof and data desensitization technology to protect user privacy information while ensuring the validity verification of the credentials;

[0017] A consensus module, which adopts an improved practical Byzantine fault tolerance algorithm to realize data consistency among distributed nodes.

[0018] Further, the medical insurance electronic credential generated by the credential generation module contains a user unique identifier, an insured information digest and a validity period, and is encrypted in the following manner:

[0019] The credential information is symmetrically encrypted by using the national standard SM4 algorithm to obtain an encrypted credential C;

[0020] The symmetric encryption key is asymmetrically encrypted by using the public key of the receiving party to obtain a key ciphertext K;

[0021] The finally generated medical insurance electronic credential is a combination of the encrypted credential C and the key ciphertext K.

[0022] Further, the identity authentication module adopts an attribute-based encryption mechanism ABE, defines a user attribute set and an access control policy, and realizes permission verification through the following formula:

[0023] For the user attribute set S and the access control policy P, when S satisfies P, the user can decrypt to obtain the corresponding permission, that is:

[0024] If S|=P, then Decrypt(CT,SK_S)=M

[0025] Where CT is a ciphertext, SK_S is a private key generated based on the user attribute set S, and M is plaintext information.

[0026] Further, the intelligent contract module contains a credential verification contract, a use record contract and an anomaly detection contract, wherein the credential verification contract performs the following operations:

[0027] Receives credential information and verification parameters submitted by a verification request party;

[0028] Calls a blockchain storage module to obtain an original hash value of the credential;

[0029] Calculates a hash value of the credential to be verified and compares it with the original hash value;

[0030] A response of verification pass or fail is returned according to the comparison result.

[0031] Further, the improved practical Byzantine fault tolerance algorithm adopted by the consensus module introduces a node reputation value mechanism, and the consensus weight W_i of node i is calculated as follows:

[0032] W_i = a * R_i + (1-a) * S_i

[0033] Wherein, R_i is the historical reputation value of node i, S_i is the resource proportion of node i, and a is the weight coefficient, and 0 < a < 1.

[0034] A medical insurance electronic certificate security management method based on blockchain, comprising the following steps:

[0035] S1: The user submits identity information at the registration node, and after passing the audit, the certificate generation module generates an initial medical insurance electronic certificate;

[0036] S2: The certificate generation module encrypts the medical insurance electronic certificate, generates an encrypted certificate, and sends it to the blockchain storage module;

[0037] S3: The blockchain storage module broadcasts the encrypted certificate to each node of the alliance chain, and completes the certificate on-chain storage through the consensus algorithm;

[0038] S4: When the user uses medical insurance services in a medical institution, the medical institution node sends a certificate verification request to the blockchain network;

[0039] S5: The smart contract module executes the verification logic and completes the certificate validity verification through zero-knowledge proof technology without revealing the user's privacy;

[0040] S6: After verification, the corresponding medical insurance service operation is executed, and the operation record is encrypted and written into the blockchain;

[0041] S7: Regularly backup and audit the blockchain data to ensure data integrity and operation compliance.

[0042] Further, the encryption process in step S2 includes:

[0043] a) Hash calculation on the original certificate information M: H = Hash(M), wherein Hash is the SHA-256 hash function;

[0044] b) Encrypt M using symmetric key K: C = Encrypt(K, M);

[0045] c) Encrypt K using the public key PK of the blockchain system: K' = Encrypt(PK, K);

[0046] d) Generate the final stored credential information: T = (C, K', H, Sign), where Sign is the sender's digital signature.

[0047] Furthermore, the zero-knowledge proof verification process in step S5 satisfies the following conditions:

[0048] The proving party P can prove to the verifying party V that it possesses a valid electronic medical insurance certificate without disclosing the specific content of the certificate to V; this process satisfies completeness, reliability, and zero-knowledge, that is:

[0049] Completeness: If P has valid credentials, then the probability that V passes verification is 1.

[0050] Reliability: If P does not possess valid credentials, the probability of V passing verification is negligible;

[0051] Zero knowledge required: V cannot obtain any information about the credentials from the verification process.

[0052] Furthermore, it also includes an abnormal behavior detection step, which calculates the operational risk value using the following formula:

[0053] Risk=w1·F1+w2·F2+w3·F3+w4·F4

[0054] Wherein, F1 is the operation frequency anomaly factor, F2 is the operation location anomaly factor, F3 is the operation time anomaly factor, F4 is the operation amount anomaly factor, and w1-w4 are the weight coefficients of each factor, and satisfy w1+w2+w3+w4=1.

[0055] The beneficial effects of this invention are as follows:

[0056] 1. By adopting blockchain distributed storage technology, the risks of single points of failure and data tampering are avoided, thus improving the security of electronic medical insurance vouchers;

[0057] 2. By utilizing asymmetric encryption and zero-knowledge proof technologies, user privacy information is protected while ensuring the validity of credentials;

[0058] 3. Smart contracts have been used to automate the verification and use of medical insurance vouchers, improving the efficiency of cross-institutional collaboration;

[0059] 4. The improved consensus algorithm introduces a node reputation mechanism, which enhances the security and efficiency of the consensus process;

[0060] 5. The entire process of operation is recorded on the blockchain, enabling traceability and auditability of medical insurance services and enhancing the transparency and credibility of the system. Attached Figure Description

[0061] To more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings used in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of the present invention and should not be regarded as a limitation of the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0062] Figure 1 This is a schematic diagram of the system module composition and hierarchical relationship of the present invention. Detailed Implementation

[0063] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. The components of the embodiments of the present invention described and shown in the accompanying drawings can generally be arranged and designed in various different configurations.

[0064] A blockchain-based electronic medical insurance voucher security management system includes a voucher generation module, a blockchain storage module, an identity authentication module, a smart contract module, a privacy protection module, and a consensus module.

[0065] The voucher generation module is used to generate a unique electronic medical insurance voucher based on the user's identity information. It uses the national cryptographic SM4 algorithm for symmetric encryption, and at the same time, it uses the recipient's public key for asymmetric encryption. The final generated electronic medical insurance voucher is a combination of the encrypted voucher and the key ciphertext.

[0066] The blockchain storage module adopts a consortium blockchain architecture, which consists of a distributed ledger network composed of nodes such as medical insurance management agencies, medical institutions, and insured units. Each node maintains a complete copy of the ledger to ensure data consistency and reliability.

[0067] The identity authentication module implements user and organization identity authentication and access control management based on attribute encryption (ABE) mechanism. A user attribute set S and an access control policy P are defined. When S satisfies P, the user can decrypt and obtain the corresponding permissions, as shown in formula (1):

[0068] like Then Decrypt(CT,SK_S)=M(1)

[0069] Where CT is the ciphertext, SK_S is the private key generated based on the user attribute set S, and M is the plaintext information.

[0070] The smart contract module contains preset business rules and access control logic, automatically executing the verification, use, and update operations of medical insurance vouchers. The voucher verification contract receives verification requests, calls the blockchain storage module to obtain the original hash value of the voucher, calculates the hash value of the voucher to be verified and compares it with the original hash value, and returns a verification response based on the comparison result.

[0071] The privacy protection module uses zero-knowledge proof technology, enabling the prover to prove to the verifier that they possess a valid electronic medical insurance certificate without disclosing the specific content of the certificate, thus satisfying the requirements of completeness, reliability, and zero-knowledge proof.

[0072] The consensus module adopts an improved practical Byzantine fault-tolerant algorithm and introduces a node reputation value mechanism. The consensus weight W_i of node i is calculated as shown in (2):

[0073] W_i = α·R_i + (1-α)·S_i (2)

[0074] Where R_i is the historical reputation value of node i, S_i is the proportion of computing resources of node i, α is the weight coefficient, and 0 < α < 1.

[0075] This invention also discloses a blockchain-based method for the secure management of electronic medical insurance vouchers, comprising the following steps:

[0076] S1: The user submits their identity information at the registration node. After the information is approved, the voucher generation module generates the initial electronic medical insurance voucher.

[0077] S2: The voucher generation module encrypts the electronic medical insurance voucher, specifically including:

[0078] a) Perform a hash calculation on the original voucher information M: H = Hash(M);

[0079] b) Encrypt M using the symmetric key K: C = Encrypt(K, M);

[0080] c) Encrypt K using the blockchain system's public key PK: K' = Encrypt(PK, K);

[0081] d) Generate the final stored credential information: T = (C, K', H, Sign)

[0082] S3: The blockchain storage module broadcasts the encrypted credentials to each node of the consortium blockchain and completes the on-chain storage of the credentials through a consensus algorithm;

[0083] S4: When a user uses medical insurance services at a medical institution, the medical institution node sends a credential verification request to the blockchain network;

[0084] S5: The smart contract module executes the verification logic, using zero-knowledge proof technology to verify the validity of credentials without disclosing user privacy;

[0085] S6: After successful verification, execute the corresponding medical insurance service operation and encrypt the operation record before writing it to the blockchain;

[0086] S7: Regularly back up and audit blockchain data to ensure data integrity and operational compliance.

[0087] The present invention also includes an abnormal behavior detection step, which calculates the operational risk value using formula (3):

[0088] Risk = w1·F1 + w2·F2 + w3·F3 + w4·F4 (3)

[0089] Wherein, F1 is the operation frequency anomaly factor, F2 is the operation location anomaly factor, F3 is the operation time anomaly factor, F4 is the operation amount anomaly factor, and w1-w4 are the weight coefficients of each factor.

[0090] This invention combines blockchain technology with the management of electronic medical insurance vouchers, solving the security risks and efficiency problems of traditional systems and providing a new technical solution for the construction of medical insurance informatization.

[0091] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A blockchain-based security management system for electronic medical insurance vouchers, characterized in that: include: The voucher generation module is used to generate unique electronic medical insurance vouchers based on user identity information and to encrypt the voucher information. The blockchain storage module adopts a consortium blockchain architecture, which consists of a distributed ledger network composed of nodes such as medical insurance management agencies, medical institutions, and insured units. It is used to store encrypted electronic medical insurance vouchers and related operation records. The identity authentication module uses an asymmetric encryption algorithm to implement user and organization identity authentication and access control. The smart contract module contains preset business rules and access control logic, which are used to automatically execute the verification, use and update operations of medical insurance vouchers; The privacy protection module employs zero-knowledge proof and data anonymization technologies to protect user privacy information while ensuring the validity of credentials. The consensus module employs an improved practical Byzantine fault-tolerant algorithm to achieve data consistency among distributed nodes.

2. The blockchain-based electronic medical insurance voucher security management system according to claim 1, characterized in that: The electronic medical insurance voucher generated by the voucher generation module includes a unique user identifier, a summary of insurance information, and a validity period, and is encrypted using the following methods: The credential information is symmetrically encrypted using the national cryptographic SM4 algorithm to obtain encrypted credential C; The symmetric encryption key is asymmetrically encrypted using the recipient's public key to obtain the key ciphertext K. The final generated electronic medical insurance voucher is a combination of encrypted voucher C and key ciphertext K.

3. The blockchain-based electronic medical insurance voucher security management system according to claim 1, characterized in that: The identity authentication module employs an attribute-based encryption mechanism (ABE), defines a user attribute set and access control policy, and implements permission verification through the following formula: Given a user attribute set S and an access control policy P, when S satisfies P, the user can decrypt and obtain the corresponding permissions, that is: like Then Decrypt(CT,SK_S) = M Where CT is the ciphertext, SK_S is the private key generated based on the user attribute set S, and M is the plaintext information.

4. The blockchain-based electronic medical insurance voucher security management system according to claim 1, characterized in that: The smart contract module includes a credential verification contract, a usage record contract, and an anomaly detection contract, wherein the credential verification contract performs the following operations: Receive the credentials and verification parameters submitted by the verification requester; Call the blockchain storage module to obtain the original hash value of the credential; Calculate the hash value of the credential to be verified and compare it with the original hash value; The system returns a response indicating whether the verification passed or failed based on the comparison results.

5. The security management system for electronic medical insurance vouchers based on blockchain according to claim 1, characterized in that: The consensus module employs an improved practical Byzantine fault-tolerant algorithm that introduces a node reputation value mechanism. The consensus weight W_i of node i is calculated using the following formula: W_i=α·R_i+(1-α)·S_i Where R_i is the historical reputation value of node i, S_i is the proportion of computing resources of node i, α is the weight coefficient, and 0 < α < 1.

6. A blockchain-based method for secure management of electronic medical insurance vouchers, characterized in that, Includes the following steps: S1: The user submits their identity information at the registration node. After the information is approved, the voucher generation module generates the initial electronic medical insurance voucher. S2: The voucher generation module encrypts the electronic medical insurance voucher, generates an encrypted voucher, and sends it to the blockchain storage module. S3: The blockchain storage module broadcasts the encrypted credentials to each node of the consortium blockchain and completes the on-chain storage of the credentials through a consensus algorithm; S4: When a user uses medical insurance services at a medical institution, the medical institution node sends a credential verification request to the blockchain network; S5: The smart contract module executes the verification logic, using zero-knowledge proof technology to verify the validity of credentials without disclosing user privacy; S6: After successful verification, execute the corresponding medical insurance service operation and encrypt the operation record before writing it to the blockchain; S7: Regularly back up and audit blockchain data to ensure data integrity and operational compliance.

7. The method according to claim 6, characterized in that, The encryption process in step S2 includes: a) Perform hash calculation on the original voucher information M: H = Hash(M), where Hash is the SHA-256 hash function; b) Encrypt M using the symmetric key K: C = Encrypt(K, M); c) Encrypt K using the blockchain system's public key PK: K' = Encrypt(PK, K); d) Generate the final stored credential information: T = (C, K', H, Sign), where Sign is the sender's digital signature.

8. The method according to claim 6, characterized in that, The zero-knowledge proof verification process in step S5 satisfies the following conditions: The proving party P can prove to the verifying party V that it possesses a valid electronic medical insurance certificate without disclosing the specific content of the certificate to V; this process satisfies completeness, reliability, and zero-knowledge, that is: Completeness: If P has valid credentials, then the probability that V passes verification is 1. Reliability: If P does not possess valid credentials, the probability of V passing verification is negligible; Zero knowledge required: V cannot obtain any information about the credentials from the verification process.

9. The method according to claim 6, characterized in that, It also includes an abnormal behavior detection step, which calculates the operational risk value using the following formula: Risk=w1·F1+w2·F2+w3·F3+w4·F4 Wherein, F1 is the operation frequency anomaly factor, F2 is the operation location anomaly factor, F3 is the operation time anomaly factor, F4 is the operation amount anomaly factor, and w1-w4 are the weight coefficients of each factor, and satisfy w1+w2+w3+w4=1.

Images