A digital medical record management method and system

Abstract

The application provides a digital medical record management method and system, and belongs to the technical field of digital management. The method comprises the following steps: acquiring medical health organization node information and medical record management demand data, and constructing a medical alliance chain infrastructure based on the node information; performing hierarchical encryption mechanism deployment on the medical alliance chain infrastructure, forming a distributed medical record storage block chain network through node identity authentication and consensus mechanism configuration; and realizing tamper-proof storage of medical record data through the distributed block chain network and the hash index mechanism, effectively preventing malicious modification or deletion of data. The hierarchical encryption mechanism is used for differential encryption processing of medical record fields, sensitive information can be set to a higher encryption level, and the privacy of patients is protected. The double-chain storage mechanism (main chain+storage side chain) separates the storage of data and operation logs but verifies them in linkage, thereby enhancing the overall anti-attack ability of the system and data consistency verification.

Description

Technical Field

[0001] This invention proposes a digital medical record management method and system, belonging to the field of digital management technology. Background Technology

[0002] Currently, digital medical record management is increasingly widely used in the healthcare industry, but it still faces many challenges in practice: data formats differ across medical institutions, making cross-institutional sharing difficult and easily leading to data silos; medical records contain a large amount of private information, and traditional storage methods pose risks of leakage and tampering, resulting in insufficient security; the entire lifecycle management of medical records, including creation, updating, and destruction, relies on manual operations, which are inefficient and prone to errors; at the same time, balancing medical data sharing and privacy protection is difficult to achieve, and compliance management presents significant challenges. These issues restrict the efficient application of digital medical records in clinical diagnosis and treatment, scientific research collaboration, and other scenarios, necessitating a more secure, efficient, and compliant management solution. Summary of the Invention

[0003] This invention provides a digital medical record management method and system to solve the problems mentioned in the background section above:

[0004] This invention proposes a digital medical record management method, the method comprising:

[0005] S1. Obtain node information and medical record management needs data from medical and health institutions, and build a medical consortium blockchain infrastructure based on the node information; deploy a layered encryption mechanism for the medical consortium blockchain infrastructure, and form a distributed medical record storage blockchain network through node identity authentication and consensus mechanism configuration; design the on-chain storage structure according to the medical record management needs data to obtain the medical consortium blockchain medical record storage architecture.

[0006] S2. Perform structured parsing and field-level splitting on the digitized medical record data to establish a mapping relationship between medical record fields and permission levels; implement differentiated encryption processing on the split medical record fields based on a layered encryption mechanism to generate encrypted medical record data blocks; generate unique identifiers for the encrypted medical record data blocks through a hash algorithm, and complete the construction of a blockchain index in conjunction with the medical consortium blockchain medical record storage architecture to obtain an encrypted medical record dataset with on-chain evidence.

[0007] S3. Deploy a smart contract for medical record lifecycle management, associate and bind the encrypted medical record dataset with the smart contract, and realize the automatic triggering and recording of medical record operation behavior through the on-chain event listening mechanism; generate audit logs for the execution process of the smart contract to obtain the blockchain management record of the entire lifecycle of the medical record;

[0008] S4. Construct a cross-institutional blockchain gateway system and configure communication protocols and data conversion rules between different medical consortium blockchain nodes; develop a privacy computing module based on zero-knowledge proof technology to perform encrypted querying and verification of cross-institutional medical record data; connect the privacy computing module with the medical consortium blockchain medical record storage architecture through the cross-institutional blockchain gateway system to complete the construction of a cross-institutional medical record sharing channel and obtain a cross-chain shared dataset under privacy protection.

[0009] S5. Establish a dual-chain evidence storage mechanism, use smart contracts to link and verify the data of the main chain and the side chain, integrate the encrypted medical record dataset stored on the chain, the blockchain management records of the entire life cycle of medical records, and the cross-chain shared dataset, generate a digital medical record blockchain management strategy, and deploy it to the medical consortium chain control platform to execute the full-process medical record management task.

[0010] The present invention proposes a digital medical record management system, comprising:

[0011] One or more processors;

[0012] Memory, used to store one or more programs.

[0013] Wherein, when the one or more programs are executed by the one or more processors, the one or more processors are made to implement the method described in any one of the above.

[0014] The beneficial effects of this invention are as follows: By utilizing a distributed blockchain network and hash indexing mechanism, immutable evidence storage of medical record data is achieved, effectively preventing malicious modification or deletion of data. A layered encryption mechanism is employed to perform differentiated encryption processing on medical record fields; sensitive information can be set with higher encryption levels to protect patient privacy. A dual-chain evidence storage mechanism (main chain + evidence storage side chain) separates and verifies data and operation logs, enhancing the overall system's resistance to attacks and data consistency verification.

[0015] The system performs structured parsing and field-level splitting of medical record data, and establishes a "field-permission level" mapping relationship to support fine-grained access control based on roles. It introduces zero-knowledge proof technology to achieve verifiable but invisible data when sharing across institutions. That is, the recipient can verify the authenticity of the medical record (such as whether a certain disease has been diagnosed) without obtaining the complete plaintext data. The encryption and permission logic is automatically executed by smart contracts to avoid unauthorized human operations.

[0016] Deploy smart contracts for the lifecycle of medical records to automatically trigger operations such as creation, authorization, update, archiving, and destruction, and record each step on the blockchain; all operations are automatically recorded through on-chain event listening, generating tamper-proof audit logs that support full-process traceability; main chain and side chain data are linked and verified through smart contracts to ensure that operation records are consistent with actual data changes and to prevent "log falsification".

[0017] A cross-institutional blockchain gateway system is built to unify communication protocols and data format conversion rules, breaking down information silos; a privacy computing module is used to support encrypted condition queries, enabling a data sharing mode where data is available but not visible; cross-chain shared records are also stored on the blockchain for evidence, ensuring that every data call is traceable.

[0018] Based on a consortium blockchain architecture, it supports dynamic joining / leaving of medical institutions, and node identity authentication and consensus mechanisms ensure network controllability and trustworthiness; the on-chain storage structure can be flexibly designed according to different medical record types to adapt to diverse business needs; smart contracts support upgrades and version management, facilitating subsequent function iterations.

[0019] Automating medical record management processes (such as archiving due dates and revoking access permissions) reduces human intervention and operational errors; all operations are logged on the blockchain, significantly reducing legal and reputational risks caused by data leaks, tampering, or loss; reducing paper medical record storage space and management costs, and promoting the digital transformation of hospitals. Attached Figure Description

[0020] Figure 1 This is a diagram of the method described in this invention. Detailed Implementation

[0021] The preferred embodiments of the present invention will be described below with reference to the accompanying drawings. It should be understood that the preferred embodiments described herein are for illustration and explanation only and are not intended to limit the present invention.

[0022] One embodiment of the present invention, such as Figure 1 As shown, a digital medical record management method includes:

[0023] S1. Obtain node information and medical record management needs data from medical and health institutions, and build a medical consortium blockchain infrastructure based on the node information; deploy a layered encryption mechanism for the medical consortium blockchain infrastructure, and form a distributed medical record storage blockchain network through node identity authentication and consensus mechanism configuration; design the on-chain storage structure according to the medical record management needs data to obtain the medical consortium blockchain medical record storage architecture.

[0024] S2. Perform structured parsing and field-level splitting on the digitized medical record data to establish a mapping relationship between medical record fields and permission levels; implement differentiated encryption processing on the split medical record fields based on a layered encryption mechanism to generate encrypted medical record data blocks; generate unique identifiers for the encrypted medical record data blocks through a hash algorithm, and complete the construction of a blockchain index in conjunction with the medical consortium blockchain medical record storage architecture to obtain an encrypted medical record dataset with on-chain evidence.

[0025] S3. Deploy a smart contract for medical record lifecycle management. The smart contract includes triggering conditions and execution logic for medical record creation, access authorization, update synchronization, archiving and destruction, etc.; associate and bind the encrypted medical record dataset with the smart contract, and realize the automatic triggering and recording of medical record operation behavior through the on-chain event listening mechanism; generate audit logs for the execution process of the smart contract to obtain the blockchain management record of the entire lifecycle of medical records.

[0026] S4. Construct a cross-institutional blockchain gateway system and configure communication protocols and data conversion rules between different medical consortium blockchain nodes; develop a privacy computing module based on zero-knowledge proof technology to perform encrypted querying and verification of cross-institutional medical record data; connect the privacy computing module with the medical consortium blockchain medical record storage architecture through the cross-institutional blockchain gateway system to complete the construction of a cross-institutional medical record sharing channel and obtain a cross-chain shared dataset under privacy protection.

[0027] S5. Establish a dual-chain evidence storage mechanism, storing encrypted medical record datasets on the main chain and storing medical record operation audit logs and cross-chain sharing records on the evidence storage side chain; use smart contracts to link and verify the data between the main chain and the side chain to ensure the consistency of medical record data and operation records; integrate the encrypted medical record datasets stored on the chain, the blockchain management records of the entire lifecycle of medical records, and the cross-chain shared datasets to generate a digital medical record blockchain management strategy, and deploy it to the medical consortium blockchain control platform to execute the entire process of medical record management tasks.

[0028] The working principle and effects of the above technical solution are as follows: Through layered encryption and field-level access control, medical record information of different sensitivities is protected in a targeted manner, reducing the risk of data leakage and improving the security of medical record data; by leveraging cross-chain gateways and zero-knowledge proof technology, data barriers between different medical institutions are broken down, eliminating cumbersome manual verification processes and reducing the difficulty of sharing medical records across institutions; the tamper-proof characteristics of blockchain and the dual-chain evidence storage mechanism ensure that medical record data and operation records are authentic and traceable, providing reliable evidence for medical diagnosis and judicial evidence collection, and enhancing the credibility of medical record data; smart contracts automate the creation, authorization, and other operations in the lifecycle of medical records, reducing manual intervention and allowing medical staff to devote more energy to diagnosis and treatment, thus improving the efficiency of medical record management; the full-process audit logs and access control comply with the relevant regulations on medical data privacy protection, avoiding compliance risks caused by improper management and ensuring the compliance of medical record management.

[0029] In one embodiment of the present invention, S1 includes:

[0030] S11. Collect the node hardware configuration, network bandwidth, data interface specifications and institutional qualification information of each medical and health institution, and at the same time collect the medical record management requirement parameters, which include clinical diagnosis and treatment, scientific research statistics and medical insurance settlement, to form a node information set and a requirement parameter set.

[0031] S12. Based on the node information set, the Byzantine fault-tolerant algorithm is used to build the basic node network of the medical consortium blockchain, and the core nodes (such as tertiary hospitals), verification nodes (such as community health service centers) and edge nodes (such as family doctor terminals) are divided to construct a multi-level consortium blockchain topology.

[0032] S13. Deploy a four-level encryption mechanism in the consortium blockchain infrastructure, consisting of application layer, contract layer, consensus layer, and data layer. The application layer uses digital certificate encryption, the contract layer implements code signing encryption, the consensus layer is configured with node key encryption, and the data layer performs hash salting encryption.

[0033] S14. Node identity is authenticated on-chain using Distributed Identity Identifier (DID) technology. Combined with a hybrid consensus mechanism of Practical Byzantine Fault Tolerance (PBFT) and Proof-of-Stake (PoS), node consensus weights and block verification rules are configured to form a distributed medical record storage blockchain network.

[0034] S15. Based on the set of requirements parameters, design the on-chain storage logical structure, divide it into a basic medical record area (stores basic patient information), a treatment record area (stores examination and test data), and a privacy-sensitive area (stores genetic medical history, etc.). Each area is configured with an independent on-chain addressing identifier to obtain the medical consortium chain medical record storage architecture.

[0035] The working principle and effects of the above technical solution are as follows: Node levels are divided according to the hardware conditions and qualifications of different institutions, allowing both large hospitals and primary healthcare institutions to participate reasonably in on-chain collaboration, thus improving the adaptability of the consortium blockchain; a four-layer encryption mechanism covers the entire process from application access to data storage, providing multiple security defenses for medical record data and enhancing the encryption protection capabilities of on-chain data; distributed identity identification technology makes the identity of each node traceable, and the hybrid consensus mechanism reduces the possibility of malicious nodes interfering with the network, lowering the risk of node identity impersonation; different storage areas are divided according to needs and configured with independent identifiers, facilitating rapid location and retrieval of various medical record data, improving the orderliness of on-chain storage; the architecture is built in conjunction with the actual needs of clinical practice, scientific research, and medical insurance, allowing blockchain technology to truly meet the usage requirements of medical scenarios, enhancing the practicality of the consortium blockchain.

[0036] In one embodiment of the present invention, S2 includes:

[0037] S21. Natural language processing technology is used to perform entity recognition and relation extraction on unstructured medical record text, and the medical record data is parsed into structured fields, including patient ID, diagnosis code and medication record, and then the field-level splitting is performed according to medical data standards (such as HL7FHIR).

[0038] S22. Establish a field sensitivity-permission level mapping model, divide medical record fields into four permission levels: public (e.g., gender), department (e.g., routine examination results), personal (e.g., psychological assessment), and encrypted (e.g., HIV test results), and associate the corresponding access roles and operation permissions.

[0039] S23. Based on the layered encryption mechanism of S13, differentiated encryption is implemented for fields with different permission levels. Symmetric encryption is used at the public level, node public key encryption is used at the department level, patient private key encryption is used at the personal level, and homomorphic encryption is used at the encryption level to generate multi-dimensional encrypted medical record data blocks.

[0040] S24. Generate a unique hash value for each encrypted medical record data block using the SHA-256 hash algorithm, associate it with the patient's unique identifier and timestamp, and form an on-chain identity identifier for the data block.

[0041] S25. Based on the medical consortium blockchain medical record storage architecture, the hash identifiers of encrypted medical record data blocks are classified and stored by region. A three-level index structure of patient ID-timestamp-data block address is constructed to complete the construction of the blockchain index and obtain the encrypted medical record dataset stored on the chain.

[0042] The working principle and effects of the above technical solution are as follows: Natural language processing technology transforms messy text information into standardized fields, facilitating subsequent storage and use, and improving the structuring level of medical record data; the sensitivity-level encryption method ensures that information with different levels of privacy is appropriately protected, guaranteeing necessary access needs while reducing the possibility of sensitive information leakage, thus enhancing the precision of data privacy protection; the three-level index structure allows medical staff to quickly locate the required medical record data, saving query time and reducing the difficulty of data retrieval; the unique hash identifier of each data block is associated with patient information and a timestamp, making the data source and modification trajectory clear at a glance, improving the uniqueness and traceability of the data; different encryption methods are used for different permission levels, ensuring security while avoiding the obstruction of normal use caused by excessive encryption, thus enhancing the flexibility of the encryption mechanism.

[0043] In one embodiment of the present invention, S3 includes:

[0044] S31. Design a smart contract module for medical record lifecycle management, including a creation module (defining the on-chain format and initialization rules for medical records), an authorization module (configuring attribute-based access control policies), an update module (setting multi-node signature thresholds for data modification), an archiving module (establishing on-chain evidence storage rules for long-term storage of medical records), and a destruction module (clarifying the judicial audit process for deleting medical records).

[0045] S32. Compile the smart contract into bytecode and deploy it to the medical consortium blockchain. Configure the contract call interface and trigger conditions, such as requiring the creation of medical records to meet the signatures of more than 3 core nodes, and requiring access authorization to match the preset permission level threshold.

[0046] S33. By associating the hash identifier of the encrypted medical record dataset with the smart contract address through the on-chain data binding protocol, a mapping relationship between data block, contract, and operation permission is established, thereby realizing the automatic association between data operation and contract logic;

[0047] S34. Deploy on-chain event listening nodes to capture operational behaviors in real time. The operational behaviors include medical record creation, access, and updating, triggering the execution of the corresponding smart contract module, and writing the operation information into the on-chain log. The operation information includes the subject, time, and content.

[0048] S35. Perform structured processing on the log data during the execution of the smart contract, generate a full lifecycle trajectory map of the medical record according to the time series, including the on-chain hash verification value of each operation, and obtain the blockchain management record of the full lifecycle of the medical record.

[0049] The working principle and effects of the above technical solution are as follows: Smart contracts automatically execute processes such as creation and authorization, reducing tedious manual operations and the probability of errors, and improving the automation level of medical record management; the clear triggering conditions and execution rules in the contract ensure that each step is traceable, avoiding arbitrariness in management and enhancing the standardization of operations; attribute-based access control and multi-node signature mechanisms make permission allocation more precise, reduce the risk of unauthorized operations, and lower the complexity of permission management; the full lifecycle trajectory map completely records every step of the operation, coupled with on-chain hash verification, making data changes traceable and improving the traceability of medical record trajectories; once deployed, smart contracts run according to the rules, unaffected by human factors, ensuring the stable execution of management processes and enhancing the reliability of the system.

[0050] In one embodiment of the present invention, step S4 includes:

[0051] S41. Design a cross-institutional blockchain gateway architecture, including a protocol adaptation layer (supporting multiple protocol conversions such as HTTP and gRPC), a data routing layer (routing rules based on node ID and permission level), and a security verification layer (configuring a two-way authentication mechanism for node identity), to achieve heterogeneous network interconnection of different medical consortium blockchain nodes;

[0052] S42. For different types of data, including electronic medical records and examination reports, standardized data conversion rules are formulated to uniformly convert the private data formats of various institutions into the common format of the consortium blockchain, while retaining the encrypted identifiers of the original data characteristics.

[0053] S43. Develop a privacy computing module based on zero-knowledge proof technology, including a proof generator (generating proofs of the validity of data queries), a verifier (verifying the correctness of the proof), and a computing engine (supporting numerical comparison, aggregation statistics, and other operations in encrypted states).

[0054] S44. By connecting the privacy computing module and the medical consortium blockchain medical record storage architecture through the security verification layer of the cross-institutional blockchain gateway system, an access whitelist and operation audit mechanism for shared data are set up to build an encrypted channel.

[0055] S45. Simulate multi-institutional data query scenarios to conduct channel stress tests and security verification, optimize data transmission encryption efficiency and verification speed, and obtain cross-chain shared datasets under privacy protection.

[0056] The working principle and effects of the above technical solution are as follows: Multi-protocol adaptation and standardized conversion rules break down system barriers between different institutions, allowing data to flow smoothly between heterogeneous networks and improving the smoothness of cross-institutional data sharing; Zero-knowledge proof technology allows data to be verified without revealing specific content, and encrypted channels and whitelist mechanisms further strengthen privacy defenses and enhance privacy protection in the sharing process; Gateway architecture and routing rules simplify the connection process of different nodes, eliminating the need to spend a lot of effort adapting to multiple systems and lowering the technical threshold for cross-chain collaboration; Two-way authentication and operation auditing make every data access traceable, reducing the risk of data being illegally obtained or tampered with and improving the security of data sharing; Stress testing and efficiency optimization enable this mechanism to quickly respond to query needs in real-world scenarios, without affecting the user experience due to technical complexity, thus enhancing the practicality of the sharing system.

[0057] In one embodiment of the present invention, S42 includes:

[0058] Data structure parsing is performed on electronic medical records and examination reports. The electronic medical records include medical records and diagnostic conclusions, and the examination reports include imaging reports and test results. Feature parameters are extracted, including field type (text, numeric, image), data length, and correlation. A multi-type data feature library is established.

[0059] Cross-institutional data field mapping analysis is performed based on a multi-type data feature library to identify common fields in electronic medical records. These common fields include basic patient information and treatment codes. Custom fields unique to each institution (such as departmental internal notes) are marked, and a common-individual field classification table is generated.

[0060] Based on the common-individual field classification table, a two-level conversion rule is formulated, which includes a basic layer and an extension layer. The basic layer uses the HL7FHIR standard to define the general format of common fields (such as the date format being unified as YYYY-MM-DD). The extension layer designs the encapsulation specification of custom fields (using a key-value pair structure to retain the characteristics of the organization).

[0061] The conversion rules embed encrypted identifier generation logic, perform AES encryption on the feature values ​​of the original data, including text hashes and image fingerprints, generate encrypted identifiers that are bound to the data content, and specify their storage location in a common format, such as an extended field in the data header.

[0062] The system applies conversion rules to perform batch conversion of proprietary format data from various institutions. It verifies the consistency of the converted general format using a format verification tool, while also checking the correlation between the encrypted identifier and the original data to generate a standardized conversion dataset.

[0063] The working principle and effects of the above technical solution are as follows: A unified universal format allows electronic medical records and examination reports from different medical institutions to be mutually identifiable, eliminating interoperability issues due to format differences and improving cross-institutional data compatibility; the custom field encapsulation rules of the extension layer meet standardization requirements without erasing the unique information of each hospital, preserving the uniqueness of institutional data; the encrypted identifier bound to the original content allows the converted universal format data to be traced back to the source, facilitating data authenticity verification and enhancing data traceability; batch conversion processing and automated verification tools reduce the workload of manually adjusting formats and lower the possibility of human error, reducing the labor cost of format conversion; clear two-layer conversion rules provide a unified standard for the entire process, avoiding arbitrariness in the conversion process and improving the standardization of data conversion.

[0064] In one embodiment of the present invention, S44 includes:

[0065] Obtain the functional parameters and interface specifications of the privacy computing module, as well as the on-chain storage path and data access rules of the medical consortium blockchain's medical record storage architecture, to obtain the basic information set for docking;

[0066] Based on the obtained basic information set for docking, the docking parameters of the module and architecture are configured in the security verification layer of the cross-institutional blockchain gateway system, including communication ports and data interaction frequency thresholds, and a preliminary connection link is established.

[0067] Based on the established initial connection link, the node identity verification procedure of the security verification layer is initiated to perform digital certificate verification and on-chain identity comparison on the nodes to which the privacy computing module belongs and the nodes corresponding to the medical record storage architecture, and generate identity verification results.

[0068] Based on the identity verification results, the node information that has passed the verification is filtered out. Combined with the sensitivity level classification of medical record data, a shared data access whitelist is formulated to clarify the data scope and operation permissions that each node can access.

[0069] Based on the established access whitelist, develop an operation auditing program, set log recording dimensions (such as access time, operation type, and data identifier), and embed the auditing program into the connection link to form an intermediate link with auditing function;

[0070] Based on the established intermediate link, the national cryptographic SM4 algorithm is used to encrypt the data transmitted through the link, and a dynamic key update mechanism is configured (the encryption key is automatically changed every 24 hours) to complete the construction of the encrypted channel.

[0071] The working principle and effects of the above technical solution are as follows: Based on detailed basic information set configuration parameters, the privacy computing module and storage architecture can be accurately connected, reducing connection failures and improving the accuracy of module connection; strict digital certificate verification and on-chain identity comparison filter out unauthorized nodes, reducing the risk of malicious access and enhancing the credibility of node identities; whitelists based on identity verification results and data sensitivity make the access scope of each node clear and unambiguous, avoiding unauthorized operations and reducing the problem of chaotic permissions in data sharing; after embedding the audit program, information such as the time and type of data access is recorded, which facilitates subsequent traceability and verification and improves the regulatory oversight of operational behavior; national cryptographic algorithm encryption and dynamic key updates make data more difficult to crack during transmission, adding a solid protective wall to the data and enhancing the security of the transmission link.

[0072] In one embodiment of the present invention, step S5 includes:

[0073] S51. Design a dual-chain architecture with main chain and side chain. The main chain uses a high-performance consortium blockchain (such as Hyperledger Fabric) to store encrypted medical record datasets to ensure high-frequency data access requirements. The side chain uses a lightweight blockchain (such as CosmosSDK) to store medical record operation audit logs and cross-chain sharing records to reduce the storage pressure on the main chain.

[0074] S52. Formulate main chain and side chain data synchronization rules. The main chain will trigger a synchronization with the side chain once every 100 data blocks generated. The hash of the data block and the hash of the corresponding operation record will be synchronized to the side chain through the cross-chain bridge to realize the chain association between data and records.

[0075] S53. Deploy a smart contract for main chain and side chain correlation verification, and periodically verify the consistency between the hash of the encrypted medical record data block of the main chain and the hash of the corresponding operation record of the side chain. If there is a difference, trigger an abnormal alarm and freeze the relevant data operation permissions.

[0076] S54. Based on big data analytics, integrate encrypted medical record datasets, full lifecycle management records, and cross-chain shared datasets to generate a digital medical record blockchain management strategy that includes storage optimization strategies, dynamic permission adjustment rules, and cross-chain collaboration mechanisms.

[0077] S55. Compile the management strategy into an on-chain executable script and deploy it to the medical consortium blockchain control platform. Through the platform's visual console, monitor and dynamically adjust the strategy execution to complete the entire process of medical record management.

[0078] The working principle and effects of the above technical solution are as follows: the main chain focuses on frequently accessed core medical record data, while the side chain handles log recording, avoiding the response delays caused by single-chain storage congestion and improving the operating efficiency of the blockchain system; the lightweight side chain stores non-core records without occupying the high-performance resources of the main chain, saving system investment and reducing the cost pressure of data storage; main-side chain hash synchronization and periodic verification ensure that medical record data and operation records always correspond, and even minor differences can be detected and handled in a timely manner, enhancing data integrity and consistency; storage, permission, and cross-chain rules generated based on actual data conditions can flexibly respond to changes in the needs of different medical scenarios, improving the adaptability of management strategies; the visual console makes the strategy execution status clear at a glance, facilitating timely adjustments by administrators, ensuring that the entire medical record management process is standardized and orderly, and enhancing the transparency of the entire process management.

[0079] In one embodiment of the present invention, S52 includes:

[0080] Collect main chain data block generation rate, side chain data processing capability and cross chain bridge transmission delay parameters to generate main chain and side chain performance characteristic datasets;

[0081] Based on the obtained performance characteristic dataset, set the main chain data block synchronization trigger threshold (e.g., 100 data blocks), configure the trigger monitoring mechanism (monitor in real time through the main chain block height counter), and generate synchronization trigger rules;

[0082] Based on the synchronization triggering rules, the hash value of the data block to be synchronized on the main chain is extracted. At the same time, the operation record hash of the corresponding data block is matched from the operation log associated with the side chain to establish a "data block hash - operation record hash" mapping table.

[0083] Based on the obtained mapping table, configure the cross-chain bridge's transmission protocol (such as using an off-chain messaging protocol) and encryption method (such as elliptic curve encryption), and package the hash data in the mapping table into a cross-chain synchronization data packet;

[0084] Synchronization data packets are transmitted to the sidechain via a cross-chain bridge. After the sidechain nodes verify the integrity of the data packets, they write the hash data into the sidechain blocks in timestamp order, forming a main-sidechain hash association chain, thus realizing the chained association between data and records.

[0085] The working principle and effects of the above technical solution are as follows: Setting trigger thresholds based on actual performance avoids resource waste caused by excessive synchronization or data disconnection caused by slow synchronization, improving the rationality of main-chain and side-chain data synchronization; the hash mapping table ensures a one-to-one correspondence between main-chain data blocks and side-chain operation records, preventing misattribution; it reduces the security risks of cross-chain transmission, and encrypted transmission and integrity verification make synchronized data less susceptible to tampering during transmission, ensuring data authenticity and enhancing the accuracy of data association; standardized transmission protocols and packaging methods allow hash data to flow quickly between main-chain and side-chain, reducing synchronization time and improving the efficiency of inter-chain association; the hash association chain formed by timestamps makes subsequent queries of data sources and operation records clearer, more convenient, and reliable, enhancing the reliability of data traceability.

[0086] In one embodiment of the present invention, S54 includes:

[0087] Extract the storage usage, access frequency, and data type distribution characteristics of the encrypted medical record dataset; the operation hotspots and permission call frequency in the full lifecycle management records; and the number of shared nodes and data transmission time in the cross-chain shared dataset to form a multi-dimensional analysis dataset.

[0088] Based on the obtained multi-dimensional analysis dataset, a clustering algorithm is used to classify encrypted medical record data into hot and cold categories (hot data is high-frequency access data within 30 days, and cold data is low-frequency access data over 90 days). Combining the differences in storage performance between the main chain and the side chain, a draft storage optimization strategy is generated, which prioritizes the storage of hot data on the main chain and archives cold data on the side chain.

[0089] Based on the frequency of permission calls and the qualification level of cross-chain sharing nodes in the full lifecycle management records, a dynamic permission evaluation model is established, and the trigger conditions for permission upgrades and downgrades are set (such as automatic downgrade for no permission calls for 3 consecutive months, and temporary upgrade for research institutions after certification), forming a draft of dynamic permission adjustment rules;

[0090] Based on the node response speed and data transmission time in the cross-chain shared dataset, optimize the routing algorithm of the cross-chain bridge, formulate a node load balancing strategy (automatically divert traffic to backup nodes when the load of a single node exceeds the threshold), and build a cross-chain collaboration mechanism framework.

[0091] The draft storage optimization strategy, the initial draft of the dynamic permission adjustment rules, and the cross-chain collaboration mechanism framework were integrated and verified. The compatibility and execution efficiency of each part were verified through simulation, and finally a complete digital medical record blockchain management strategy was generated.

[0092] The working principle and effects of the above technical solution are as follows: Cold and hot data classification storage allows main chain resources to focus on serving frequently accessed data, avoiding performance waste and improving the utilization efficiency of storage resources; the dynamic evaluation model can adjust permissions according to actual usage, ensuring necessary access while reducing the risks of idle permissions, enhancing the flexibility of permission management; the optimized routing algorithm and load balancing strategy make data transmission between different nodes smoother, reducing waiting time and mitigating latency issues in cross-chain collaboration; rules based on actual data characteristics can better adapt to the complex needs of medical scenarios, improving the practicality of management strategies; fusion verification ensures that storage, permission, and cross-chain strategies cooperate with each other, avoiding potential disconnects caused by individual optimizations and enhancing the coordination of various management links.

[0093] One embodiment of the present invention provides a digital medical record management system, comprising:

[0094] One or more processors;

[0095] Memory, used to store one or more programs.

[0096] Wherein, when the one or more programs are executed by the one or more processors, the one or more processors are made to implement the method described in any one of the above.

[0097] Obviously, those skilled in the art can make various modifications and variations to this invention without departing from its spirit and scope. Therefore, if these modifications and variations fall within the scope of the claims of this invention and their equivalents, this invention also intends to include these modifications and variations.

Claims

1. A digital medical record management method, characterized in that, The method includes: S1. Obtain node information and medical record management needs data from medical and health institutions, and build a medical consortium blockchain infrastructure based on the node information; deploy a layered encryption mechanism for the medical consortium blockchain infrastructure, and form a distributed medical record storage blockchain network through node identity authentication and consensus mechanism configuration; design the on-chain storage structure according to the medical record management needs data to obtain the medical consortium blockchain medical record storage architecture. S2. Perform structured parsing and field-level splitting on the digitized medical record data to establish a mapping relationship between medical record fields and permission levels; implement differentiated encryption processing on the split medical record fields based on a layered encryption mechanism to generate encrypted medical record data blocks; generate unique identifiers for the encrypted medical record data blocks through a hash algorithm, and complete the construction of a blockchain index in conjunction with the medical consortium blockchain medical record storage architecture to obtain an encrypted medical record dataset with on-chain evidence. S3. Deploy a smart contract for medical record lifecycle management, associate and bind the encrypted medical record dataset with the smart contract, and realize the automatic triggering and recording of medical record operation behavior through the on-chain event listening mechanism; generate audit logs for the execution process of the smart contract to obtain the blockchain management record of the entire lifecycle of the medical record; S4. Construct a cross-institutional blockchain gateway system and configure communication protocols and data conversion rules between different medical consortium blockchain nodes; develop a privacy computing module based on zero-knowledge proof technology to perform encrypted querying and verification of cross-institutional medical record data; connect the privacy computing module with the medical consortium blockchain medical record storage architecture through the cross-institutional blockchain gateway system to complete the construction of a cross-institutional medical record sharing channel and obtain a cross-chain shared dataset under privacy protection. S5. Establish a dual-chain evidence storage mechanism, using smart contracts to correlate and verify data between the main chain and side chains, integrating on-chain encrypted medical record datasets, blockchain management records of the entire lifecycle of medical records, and cross-chain shared datasets to generate a digital medical record blockchain management strategy, which is then deployed to the medical consortium blockchain control platform to execute full-process medical record management tasks; including: S51. Design a dual-chain architecture with a main chain and a side chain. The main chain uses a high-performance consortium chain to store encrypted medical record datasets, while the side chain uses a lightweight blockchain to store medical record operation audit logs and cross-chain sharing records. S52. Formulate main chain and side chain data synchronization rules. The main chain will trigger a synchronization with the side chain once every 100 data blocks generated. The hash of the data block and the hash of the corresponding operation record will be synchronized to the side chain through the cross-chain bridge to realize the chain association between data and records. S53. Deploy a smart contract for main chain and side chain correlation verification, and periodically verify the consistency between the hash of the encrypted medical record data block of the main chain and the hash of the corresponding operation record of the side chain. If there is a difference, trigger an abnormal alarm and freeze the relevant data operation permissions. S54. Based on big data analytics, integrate encrypted medical record datasets, full lifecycle management records, and cross-chain shared datasets to generate a digital medical record blockchain management strategy. S55. Compile the management strategy into an on-chain executable script and deploy it to the medical consortium blockchain control platform. Through the platform's visual console, monitor and dynamically adjust the strategy execution to complete the entire process of medical record management.

2. The digital medical record management method according to claim 1, characterized in that, S1 includes: S11. Collect the node hardware configuration, network bandwidth, data interface specifications and institutional qualification information of each medical and health institution, and at the same time collect the medical record management requirement parameters to form a node information set and a requirement parameter set. S12. Based on the node information set, the Byzantine fault-tolerant algorithm is used to build the basic node network of the medical consortium blockchain, and the core nodes, verification nodes and edge nodes are divided to construct a multi-level consortium blockchain topology. S13. Deploy a four-level encryption mechanism (application layer, contract layer, consensus layer, and data layer) in the consortium blockchain infrastructure. S14. Node identity is authenticated on the blockchain through distributed identity identification technology, combined with a practical Byzantine fault tolerance and proof-of-stake hybrid consensus mechanism, and node consensus weights and block verification rules are configured to form a distributed medical record storage blockchain network. S15. Based on the set of requirements parameters, design the on-chain storage logical structure, divide it into basic medical record area, medical record area and privacy sensitive area, configure an independent on-chain addressing identifier for each area, and obtain the medical consortium chain medical record storage architecture.

3. The digital medical record management method according to claim 1, characterized in that, The S2 includes: S21. Natural language processing technology is used to perform entity recognition and relation extraction on unstructured medical record text, and the medical record data is parsed into structured fields, including patient ID, diagnosis code and medication record, and then the data is split at the field level according to medical data standards. S22. Establish a field sensitivity-permission level mapping model, divide medical record fields into four permission levels: public, department, personal, and encrypted, and associate them with corresponding access roles and operation permissions. S23. Based on the layered encryption mechanism of S13, differentiated encryption is implemented for fields with different permission levels to generate multi-dimensional encrypted medical record data blocks; S24. Generate a unique hash value for each encrypted medical record data block using the SHA-256 hash algorithm, associate it with the patient's unique identifier and timestamp, and form an on-chain identity identifier for the data block. S25. Based on the medical consortium blockchain medical record storage architecture, the hash identifiers of encrypted medical record data blocks are classified and stored by region. A three-level index structure of patient ID-timestamp-data block address is constructed to complete the construction of the blockchain index and obtain the encrypted medical record dataset stored on the chain.

4. The digital medical record management method according to claim 1, characterized in that, The S3 includes: S31. Design a smart contract module for medical record lifecycle management; S32. Compile the smart contract into bytecode and deploy it to the medical consortium blockchain, configuring the contract call interface and triggering conditions; S33. By associating the hash identifier of the encrypted medical record dataset with the smart contract address through the on-chain data binding protocol, a mapping relationship between data block, contract, and operation permission is established, thereby realizing the automatic association between data operation and contract logic; S34. Deploy on-chain event listening nodes to capture operational behaviors in real time, trigger the execution of corresponding modules of smart contracts, and write the operation information into the on-chain log. S35. Perform structured processing on the log data during the execution of the smart contract, generate a time-series trajectory map of the entire life cycle of the medical record, and obtain the blockchain management record of the entire life cycle of the medical record.

5. The digital medical record management method according to claim 1, characterized in that, The S4 includes: S41. Design a cross-institutional blockchain gateway architecture; S42. For different types of data, formulate standardized data conversion rules to uniformly convert the private data formats of various institutions into the common format of the consortium blockchain, while retaining the encrypted identifiers of the original data characteristics; S43. Develop a privacy computing module based on zero-knowledge proof technology; S44. By connecting the privacy computing module and the medical consortium blockchain medical record storage architecture through the security verification layer of the cross-institutional blockchain gateway system, an access whitelist and operation audit mechanism for shared data are set up to build an encrypted channel. S45. Simulate multi-institutional data query scenarios to conduct channel stress tests and security verification, optimize data transmission encryption efficiency and verification speed, and obtain cross-chain shared datasets under privacy protection.

6. The digital medical record management method according to claim 5, characterized in that, S42 includes: Data structure analysis is performed on electronic medical records and examination reports to extract feature parameters and establish a multi-type data feature library; Cross-institutional data field mapping analysis is performed based on a multi-type data feature library to identify common fields in electronic medical records. These common fields include basic patient information and treatment codes. Custom fields unique to each institution are marked to generate a common-individual field classification table. A two-layer conversion rule is formulated based on the common-individual field classification table. The two-layer conversion rule includes a base layer and an extension layer. The base layer uses the HL7FHIR standard to define the general format of common fields, and the extension layer designs the encapsulation specification of custom fields. The conversion rules embed encrypted identifier generation logic, perform AES encryption on the feature values ​​of the original data, the feature values ​​include text hash and image fingerprint, generate encrypted identifiers that are bound to the data content, and specify their storage location in a general format. The system applies conversion rules to perform batch conversion of proprietary format data from various institutions. It verifies the consistency of the converted general format using a format verification tool, while also checking the correlation between the encrypted identifier and the original data to generate a standardized conversion dataset.

7. The digital medical record management method according to claim 5, characterized in that, The privacy computing module includes a proof generator, a verifier, and a computing engine; the proof generator is used to generate a validity proof for a data query, the verifier is used to verify the correctness of the proof, and the computing engine is used to support numerical comparison and aggregation statistics in an encrypted state.

8. The digital medical record management method according to claim 7, characterized in that, S52 includes: Collect main chain data block generation rate, side chain data processing capability and cross chain bridge transmission delay parameters to generate main chain and side chain performance characteristic datasets; Based on the obtained performance characteristic dataset, the main chain data block synchronization trigger threshold is set, and the trigger monitoring mechanism is configured to generate synchronization trigger rules. Based on the synchronization triggering rules, the hash value of the data block to be synchronized on the main chain is extracted. At the same time, the operation record hash of the corresponding data block is matched from the operation log associated with the side chain to establish a data block hash-operation record hash mapping table. Based on the obtained mapping table, configure the cross-chain bridge's transmission protocol and encryption method, and package the hash data in the mapping table into a cross-chain synchronization data packet; Synchronization data packets are transmitted to the sidechain via a cross-chain bridge. After the sidechain nodes verify the integrity of the data packets, they write the hash data into the sidechain blocks in timestamp order, forming a main-sidechain hash association chain, thus realizing the chained association between data and records.

9. A digital medical record management system, comprising: One or more processors; Memory, used to store one or more programs. Wherein, when the one or more programs are executed by the one or more processors, the one or more processors implement the method of any one of claims 1 to 8.

Images