Access control method, device and equipment for medical information system based on contents and attributes

Abstract

The invention discloses an access control method, device and equipment of a medical information system based on contents and attributes, and relates to the technical field of information security, the method comprises the following steps: obtaining user attribute information, environment attribute information, a request category and a target resource from an access request; authorizing the user to access the target resource matched with the attribute according to the direct retrieval category; related scene categories are analyzed for cases, and if the target security level of the target resource is smaller than or equal to the user security level, the user is authorized to access the target resource and content similar resources corresponding to the target resource; determining the highest team security level corresponding to the joint consultation information in the user attribute information according to the joint consultation related scene category; if the target security level of the target resource is smaller than or equal to the team highest security level, the user is authorized to access the target resource and the content-similar consultation resource corresponding to the target resource, and the flexibility of data access control of the medical information system can be improved.

Description

Technical Field

[0001] This application relates to the field of information security technology, and in particular to an access control method, apparatus, and device for a medical information system based on content and attributes. Background Technology

[0002] Currently, with the rapid development of medical informatization, medical information systems have become a key support for the operation of medical institutions and medical services. These systems store a large amount of critical patient information that is related to patient privacy, health, and the development of the medical industry. Ensuring the secure sharing of this data is of great significance.

[0003] Access control technology is a core means of ensuring secure data sharing in medical information systems. Access control technology typically categorizes users into predefined roles such as doctors and nurses based on their responsibilities and assigns them fixed permissions. This approach simplifies management; system administrators only need to operate according to roles, reducing management complexity.

[0004] However, the development of the healthcare industry has led to diverse work scenarios and complex, rapidly changing access requirements. Different departments and medical professionals have different needs, which also vary depending on the patient's condition, treatment stage, and task adjustments. Current access control methods with fixed permissions hinder flexible access to healthcare information system data, impacting the efficiency and quality of healthcare work. Summary of the Invention

[0005] The purpose of this application is to provide a method, apparatus, and device for access control of a medical information system based on content and attributes, which can improve the flexibility of data access control in the medical information system.

[0006] To achieve the above objectives, this application provides the following solution: Firstly, this application provides an access control method for a content- and attribute-based medical information system, comprising: The user access requests are extracted to obtain user attribute information, environmental attribute information, request category, and target resource from the access requests; wherein, the request category is a direct retrieval category, a case analysis related scenario category, and a joint consultation related scenario category; If the request category is the direct retrieval category, then the resource attribute information corresponding to the target resource is determined; if the user attribute information matches the resource attribute information and the environment attribute information matches the standard environment attribute, then the user is authorized to access the target resource. If the request category is the case analysis-related scenario category, then the user's security level is determined from the user attribute information; if the target security level of the target resource is less than or equal to the user's security level, then content-similar resources corresponding to the target resource are obtained from the medical information system, and the user is authorized to access the target resource and the content-similar resources; wherein, the first content similarity between the content-similar resources and the target resource is greater than a preset threshold. If the request category is the joint consultation related scenario category, then the joint consultation information in the user attribute information is obtained; and the highest security level of the team corresponding to the joint consultation information is determined; and if the target security level of the target resource is less than or equal to the highest security level of the team, then the content-similar consultation resource corresponding to the target resource is obtained from the medical information system; and the user is authorized to access the target resource and the content-similar consultation resource; wherein, the second content similarity between the content-similar consultation resource and the target resource is greater than the preset threshold, and the consultation resource sensitivity level of the content-similar consultation resource is less than or equal to the highest security level of the team.

[0007] Optionally, the user attribute information includes at least the user's department, system role, administrative role, and security level; the environmental attribute information includes at least the user's current location and current working time; and the resource attribute information includes at least the resource's department, attending physician information, resource sensitivity level, and content sharing level. If the user attribute information matches the resource attribute information and the environmental attribute information matches the standard environmental attributes, then the user is authorized to access the target resource, specifically including: If the user's department matches the resource's department, then the system role set and the lowest-level administrative role in the attending physician information are determined. If the user's system role belongs to the system role set, or the user's administrative role level is greater than or equal to the lowest administrative role level, then the user's security level and the resource sensitivity level are compared to obtain a security level comparison result. If the security level comparison result indicates that the user's security level is greater than or equal to the resource sensitivity level, then obtain the work location area and the work time period of the user in the standard environment attributes; If the user's current location is within the work location area and the current work time is within the work time period, then if the content sharing level is the shareable level, the user is authorized to access the target resource.

[0008] Optionally, if the target security level of the target resource is less than or equal to the user's security level, then obtaining content-similar resources corresponding to the target resource from the medical information system and authorizing the user to access the target resource and the content-similar resources specifically includes: If the target security level of the target resource is less than or equal to the user security level, then the user's medical specialty is obtained from the user attribute information. Determine the medical security level corresponding to the user's medical specialty; Determine the resource sensitivity level corresponding to the target resource; If the medical security level is greater than or equal to the resource sensitivity level, then obtain content-similar resources corresponding to the target resource from the medical information system, and authorize the user to access the target resource and the content-similar resources.

[0009] Optionally, obtaining content-similar resources from the medical information system that correspond to the target resource specifically includes: Obtain a first candidate resource set from the medical information system; wherein the first candidate resource set contains multiple first candidate resources; The first content similarity between the target resource and each first candidate resource is calculated; The first candidate resource with a content similarity greater than a preset threshold is determined as the second candidate resource; Determine the current resource sensitivity of each second candidate resource; The second candidate resource with a current resource sensitivity less than or equal to the user's security level is identified as a content-similar resource.

[0010] Optionally, determining the highest security level for the team corresponding to the joint consultation information specifically includes: Obtain consultation personnel information that matches the joint consultation information; Determine the security level of each consultant's information; The highest security level for the consultation personnel is determined as the highest security level of the team corresponding to the joint consultation information.

[0011] Optionally, obtaining similar consultation resources from the medical information system that correspond to the target resource specifically includes: Obtain a second candidate resource set from the medical information system; wherein the second candidate resource set contains multiple first candidate consultation resources; The second content similarity between the target resource and each first candidate consultation resource is calculated; The first candidate consultation resource whose second content similarity is greater than the preset threshold is determined as the second candidate consultation resource; Determine the consultation resource sensitivity of each second candidate consultation resource; The second candidate consultation resource with a consultation resource sensitivity less than or equal to the user's security level is determined as the third candidate consultation resource; Determine the content sharing level of each third candidate consultation resource; wherein, the content sharing level is a shareable level, a restricted sharing level, or a non-shareable level; The third candidate consultation resource at the shareable level is determined as a consultation resource with content similar to the target resource; The third candidate consultation resource with the restricted sharing level is subjected to fuzzy processing to obtain fuzzy consultation resources; and the fuzzy consultation resources are determined as the consultation resources with similar content.

[0012] Secondly, this application provides an access control device for a content- and attribute-based medical information system, comprising: The extraction unit is used to extract the user's access request from the obtained user to obtain the user attribute information, environment attribute information, request category and target resource in the access request; wherein, the request category is the direct retrieval category, the case analysis related scenario category and the joint consultation related scenario category; The first authorization unit is configured to determine the resource attribute information corresponding to the target resource if the request category is the direct retrieval category; and to authorize the user to access the target resource if the user attribute information matches the resource attribute information and the environment attribute information matches the standard environment attribute. The second authorization unit is configured to determine the user's security level from the user attribute information if the request category is the case analysis-related scenario category; if the target security level of the target resource is less than or equal to the user's security level, obtain content-similar resources corresponding to the target resource from the medical information system and authorize the user to access the target resource and the content-similar resources; wherein the first content similarity between the content-similar resources and the target resource is greater than a preset threshold. The third authorization unit is configured to: if the request category is a scenario related to the joint consultation, obtain joint consultation information from the user attribute information; determine the highest security level of the team corresponding to the joint consultation information; and if the target security level of the target resource is less than or equal to the highest security level of the team, obtain content-similar consultation resources corresponding to the target resource from the medical information system; and authorize the user to access the target resource and the content-similar consultation resources; wherein the second content similarity between the content-similar consultation resources and the target resource is greater than the preset threshold, and the consultation resource sensitivity level of the content-similar consultation resources is less than or equal to the highest security level of the team.

[0013] Thirdly, this application provides a computer device, including: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the access control method for a content- and attribute-based medical information system as described above.

[0014] Fourthly, this application provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the access control method for a content- and attribute-based medical information system described above.

[0015] Fifthly, this application provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the access control method for a content- and attribute-based medical information system described above.

[0016] In a sixth aspect, this application provides a chip including a processor and a communication interface, the communication interface being coupled to the processor, the processor being used to run a program or instructions, and the processor executing the program or instructions implementing the steps of the access control method for a content- and attribute-based medical information system as described above.

[0017] According to the specific embodiments provided in this application, the following technical effects are disclosed: This application provides a content- and attribute-based access control method, apparatus, and device for medical information systems. By formulating differentiated authorization strategies for different categories of access requests, it significantly improves the flexibility of data access control. For direct searches, it dynamically verifies resource matching based on user and environment attributes; for case analysis, it expands access permissions for content-similar resources based on user security levels; for joint consultations, it dynamically filters accessible consultation resources with similar content based on the team's highest security level. This hierarchical and categorized fine-grained control mechanism can dynamically adjust the authorization scope according to the actual scenario, improving the flexibility of data access control in medical information systems while ensuring data security, effectively balancing security and usability. Attached Figure Description

[0018] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0019] Figure 1A flowchart illustrating an access control method for a content- and attribute-based medical information system provided in an embodiment of this application; Figure 2 for Figure 1 A detailed flowchart of step 102; Figure 3 for Figure 1 A detailed flowchart of step 103; Figure 4 for Figure 1 A detailed flowchart of step 104; Figure 5 A schematic diagram of the functional modules of an access control device for a content- and attribute-based medical information system provided in an embodiment of this application; Figure 6 This is a schematic diagram of the structure of a computer device provided in an embodiment of this application. Detailed Implementation

[0020] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0021] To make the above-mentioned objectives, features and advantages of this application more apparent and understandable, the application will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0022] In one exemplary embodiment, such as Figure 1 As shown, an access control method for a medical information system based on content and attributes is provided. This method is executed by a computer device, specifically by a terminal or server alone, or by both a terminal and a server. In this embodiment, it includes the following steps 101 to 104. Wherein: Step 101: Extract the user's access request to obtain the user attribute information, environment attribute information, request category, and target resource in the access request.

[0023] In this embodiment of the application, the request category is the direct retrieval category, the case analysis-related scenario category, and the joint consultation-related scenario category.

[0024] In this embodiment of the application, the user attribute information includes at least the user's department, user system role, user administrative role, and user security level; the environmental attribute information includes at least the user's current location and current working time; and the resource attribute information includes at least the resource's department, attending physician information, resource sensitivity level, and content sharing level.

[0025] For example, the user attribute information (access subject attributes) of user U (access subject) may include, but is not limited to, system role (i.e., user system role), administrative role (i.e., user administrative role), medical specialty, department (i.e., user's department), work status, security level (i.e., user security level), and content security permission. Specifically: U1 System Roles: Based on a user's assigned role within the healthcare information system, these roles define the system functions and data scope they can access. For example, an emergency room doctor role can access emergency room patient records, while a nurse role might only be able to perform operations such as medication administration and vital sign recording. System roles are typically associated with predefined permission templates to ensure consistent access permissions for users with the same role.

[0026] U2 Administrative Roles: These reflect a user's administrative responsibilities within the system, such as a department head or hospital director. Users with senior administrative roles typically have broader access rights and can facilitate multi-departmental or cross-agency collaboration, accessing data from other departments through temporary authorization mechanisms when necessary.

[0027] U3 Medical Specialty: This attribute represents a user's expertise in a specific medical field, such as cardiology, neurosurgery, or pediatrics. It is typically used to control access to professionally sensitive data; for example, in non-emergency situations, only cardiologists may be allowed to view cardiac catheterization reports.

[0028] U4 Department: The user's administrative or clinical unit within the hospital, such as the emergency department, cardiology department, or intensive care unit. This attribute restricts data access to patient information relevant to the user's department, ensuring appropriate data flow within the department. Furthermore, in multi-departmental collaboration scenarios, cross-departmental data access can be enabled through temporary authorization.

[0029] U5 Job Status: The user's current job status, including whether they are on duty, on leave, or on call. This attribute dynamically adjusts the user's access permissions; for example, only doctors on duty may be able to write prescriptions, while doctors on leave may only be able to view limited patient information. Job status is typically integrated with the scheduling system for automatic updates.

[0030] U6 security level: This is the internal trust rating assigned by the medical information system in this paper based on a comprehensive assessment of the user's role, professional qualifications, experience, and security background. Within the context of the system's access control model, this level is specifically divided into four grades: Public, Internal, Confidential, and Highly Sensitive. Higher security levels grant users access to a wider range of data.

[0031] U7 Content Security License: This is a dynamic, temporary authorization attribute based on the relevance of clinical content. When a user participates in an authorized core case (e.g., attending an inter-hospital consultation), this license temporarily expands their access boundaries, allowing them to access other cases that are directly related to the core case in terms of clinical content—even if the sensitivity level of these related cases typically exceeds the user's inherent security level.

[0032] The resource attribute information of the target resource R may include, but is not limited to, key attributes such as sensitivity level (i.e., resource sensitivity level), department (i.e., the department to which the resource belongs), attending physician (i.e., attending physician information), and content sharing level. Specifically: R1 Sensitivity Level: This level categorizes resources based on their privacy level, directly impacting the strictness of access controls and corresponding to user security levels, thus forming the basis of hierarchical access control. In our model's application to healthcare information systems, this level can be divided into multiple grades (e.g., four grades: Public, Internal, Confidential, and Highly Sensitive). For example, basic information such as routine test results falls under the Internal level and can be shared within the treatment team; data related to the diagnosis and treatment plans of major diseases is classified as Confidential and requires strict access control; while resources related to forensic identification or special infectious diseases are classified as Highly Sensitive, requiring additional approval and continuous monitoring.

[0033] R2 Department: Identifies the department that created the resource or bears primary management responsibility, establishing departmental boundaries for data access. For example, test reports are created and quality controlled by the laboratory, imaging data is managed by the radiology department, and surgical records are generated by the corresponding surgical department. This attribute ensures the reasonable flow of data within the responsible department and also supports authorized access in multi-departmental collaboration scenarios.

[0034] R3 Attending Physician: The medical staff member primarily responsible for the patient's diagnosis and treatment process, possessing the highest clinical access rights to patient-related resources. This attribute not only defines the core access team but also establishes a treatment accountability system. In complex cases, a collaborative model involving multiple attending physicians may emerge, with experts jointly managing relevant data. The attending physician attribute works in conjunction with the department attribute to ensure the integrity of the treatment team while effectively preventing unauthorized access to sensitive medical data.

[0035] R4 Content Sharing Level: This is a key attribute of a resource that defines the scope and manner in which its data can be shared when the resource becomes the target of content-related access requests (e.g., during cross-departmental consultations due to its clinical relevance to core cases). This attribute does not replace the resource's inherent "sensitivity level" but rather provides more granular control specifically for collaborative scenarios driven by clinical content relevance.

[0036] Specifically, this attribute is divided into three levels: R41 Shareable: This resource allows direct, full access during content-associated access. When a user's Content Security License is active and the relevance is verified, the full content of this resource can be accessed like a regular medical record. Suitable for most de-identified data or routine medical records used for medical research and discussion.

[0037] R42 Not Shareable: This resource is prohibited from any form of content-related access. Even if it is highly relevant to the core case and the user holds a valid Content Security License, access requests will be rejected by the system. This provides the highest level of protection for extremely sensitive cases (e.g., those involving significant legal matters, state secrets, or cases where the patient explicitly refuses to share).

[0038] R43 Restricted Sharing: This resource can be queried and accessed within a content-related context, but its content must undergo automated de-identification and processing before presentation. Processing methods may include: a) Anonymization: Directly removing patient identifiers (name, ID number, contact information); b) Generalization: Converting exact age to an age range, and specific addresses to city names; c) Summary: Providing a clinical summary without identifying information, rather than the original medical record.

[0039] Environmental attribute information E may include, but is not limited to, key dimensions such as time context, location context, clinical context, and business context. Specifically: E1 Time Context: Defines the specific time and duration of the access request, forming the basis for implementing dynamic authorization policies based on time. This attribute includes not only the precise access timestamp but also contextual information such as weekdays, holidays, and work shifts (e.g., day shifts, night shifts, and shift changeover periods). For example, attempting to access highly sensitive medical records during non-urgent nighttime hours should be restricted.

[0040] E2 location context describes the physical and logical origin of the access request and is a key factor in assessing the credibility of access behavior. It can be further categorized into physical location (e.g., inside the hospital, in a doctor's home) and logical location (e.g., on the hospital intranet, on the external internet, or via VPN). Typically, access originating from within the hospital via the intranet is granted broader data permissions compared to access originating from an external home network.

[0041] E3 Clinical Context: Captures real-time emergency states related to a patient's condition; its core attribute is the emergency status flag. This flag can be automatically triggered by the system based on the patient's vital signs or manually activated by medical personnel. Once activated, the system temporarily relaxes access restrictions to allow medical staff involved in the resuscitation to quickly obtain critical information. Simultaneously, a comprehensive audit trail must be maintained to prevent abuse of privileges.

[0042] E4 Business Context: Defines the context of an ongoing medical or administrative activity, providing a basis for temporary and scenario-specific privilege escalation. For example, the consultation status attribute identifies whether a multidisciplinary consultation is in progress, details the participants involved, and temporarily binds a user's access permissions to a set of cases related to the consultation.

[0043] Access to a target resource can involve performing operations on that resource, such as viewing, modifying, and deleting. In this embodiment, only the "viewing" operation is considered. Within this scope, the core design of the "viewing" operation comprises two levels: first, basic data viewing, controlled by static attributes of the subject, object, and environment; second, viewing associated content, driven by dynamic "content security permission" attributes, which can temporarily expand the authorized access scope. The latter is a key mechanism supporting advanced clinical collaboration.

[0044] Step 102: If the request category is the direct retrieval category, then determine the resource attribute information corresponding to the target resource; if the user attribute information matches the resource attribute information and the environment attribute information matches the standard environment attribute, then authorize the user to access the target resource.

[0045] For example, a doctor retrieves the complete medical records of the patients under their care during ward rounds. In this model, multi-layered authentication is performed according to a predefined security policy, checking subject attributes (e.g., department, professional role, on-call status), resource attributes (e.g., department affiliation, sensitivity level), and environmental attributes (e.g., access terminal location, emergency status). Access is only authorized when all attribute conditions meet the policy requirements. This model constitutes the basic security mechanism for system access control.

[0046] As an optional implementation, if step 102 shows that the user attribute information matches the resource attribute information and the environment attribute information matches the standard environment attributes, then the method of authorizing the user to access the target resource may include: If the user's department matches the resource's department, then the system role set and the lowest-level administrative role in the attending physician information are determined. If the user's system role belongs to the system role set, or the user's administrative role level is greater than or equal to the lowest administrative role level, then the user's security level and the resource sensitivity level are compared to obtain a security level comparison result. If the security level comparison result indicates that the user's security level is greater than or equal to the resource sensitivity level, then obtain the work location area and the work time period of the user in the standard environment attributes; If the user's current location is within the work location area and the current work time is within the work time period, then if the content sharing level is the shareable level, the user is authorized to access the target resource.

[0047] This implementation method involves multi-dimensional conditional judgments. First, it narrows down the scope based on departmental matching. Then, it performs preliminary screening by combining system roles and administrative roles. Next, it ensures security by comparing user security levels and resource sensitivity levels. Finally, it verifies the work location and time period, authorizing access only when the content can be shared. This layered and flexible combination of conditions allows for dynamic adjustment of access permissions based on actual scenarios and user identities, avoiding a one-size-fits-all approach and ensuring that the right users access the necessary data at the right time and place, thereby improving the efficiency of medical work.

[0048] Please refer to the following: Figure 2 , Figure 2 for Figure 1 The detailed flowchart of step 102 is as follows: The user initiates an access request; Verify basic attributes: Extract the user's access request to obtain user attribute information u, environment attribute information e, operation information a of the request type, and resource attribute information r of the target resource. Execute attribute-based access control (ABAC) policy evaluation: match user attribute information with resource attribute information, and match environment attribute information with standard environment attributes to obtain matching results; If the matching result indicates that the user attribute information matches the resource attribute information and the environment attribute information matches the standard environment attribute, then the user is authorized to access the target resource; If the matching result indicates that the user attribute information does not match the resource attribute information or the environment attribute information does not match the standard environment attributes, then the user is denied access to the target resource.

[0049] Step 103: If the request category is the case analysis related scenario category, then determine the user's security level from the user attribute information; if the target security level of the target resource is less than or equal to the user's security level, then obtain content similar resources corresponding to the target resource from the medical information system, and authorize the user to access the target resource and the content similar resources.

[0050] In this embodiment of the application, the first content similarity between the content-similar resource and the target resource is greater than a preset threshold.

[0051] As an optional implementation, if step 103 involves obtaining content-similar resources corresponding to the target resource from the medical information system and authorizing the user to access the target resource and the content-similar resources, the method may include: If the target security level of the target resource is less than or equal to the user security level, then the user's medical specialty is obtained from the user attribute information. Determine the medical security level corresponding to the user's medical specialty; Determine the resource sensitivity level corresponding to the target resource; If the medical security level is greater than or equal to the resource sensitivity level, then obtain content-similar resources corresponding to the target resource from the medical information system, and authorize the user to access the target resource and the content-similar resources.

[0052] This implementation method, after ensuring the target resource's security level meets the requirements, introduces the user's medical expertise dimension. By comparing the medical security level corresponding to the user's medical expertise with the resource sensitivity level of the target resource, it ensures that only users with the corresponding professional capabilities and matching security levels can access the resource. This avoids the risk of misoperation or information leakage that may occur due to users meeting the security level but lacking the relevant expertise. It makes access control more aligned with the highly specialized and data-sensitive characteristics of the medical industry, ensuring the security and proper use of medical data.

[0053] Optionally, step 103, obtaining content-similar resources corresponding to the target resource from the medical information system, may include: Obtain a first candidate resource set from the medical information system; wherein the first candidate resource set contains multiple first candidate resources; The first content similarity between the target resource and each first candidate resource is calculated; The first candidate resource with a content similarity greater than a preset threshold is determined as the second candidate resource; Determine the current resource sensitivity of each second candidate resource; The second candidate resource with a current resource sensitivity less than or equal to the user's security level is identified as a content-similar resource.

[0054] This implementation method involves constructing a first candidate resource set to broaden the search scope, then precisely locating similar resources by calculating content similarity to ensure a high degree of relevance. Subsequently, a dual verification process is introduced, combining resource sensitivity and user security level, allowing users to access only similar resources within their security permission range. This layered filtering strategy avoids interference from irrelevant resources and effectively prevents the leakage of sensitive data, strengthening the security control of data access while ensuring the availability of medical information.

[0055] In this embodiment of the application, the first candidate resource can be case information stored in the medical information system, and the first candidate resource set can be all case information stored in the medical information system. The resource type of the first candidate resource can be text, image, or video. This embodiment of the application does not limit this.

[0056] In this embodiment of the application, optionally, when the first candidate resource is text type, algorithms such as TF-IDF, Transformer, and BERT can be used to extract features from each first candidate resource to obtain candidate resource features of the first candidate resource; at this time, feature extraction can also be performed on the target resource to obtain target resource features of the target resource; and the feature similarity between the target resource features and each candidate resource feature can be calculated; and the first candidate resource corresponding to the candidate resource feature with a feature similarity greater than a preset similarity threshold can be determined as a content similar resource.

[0057] Optionally, when the first candidate resource is an image or video, algorithms such as ResNet, VGG, and VisionTransformer can be used to extract features from the first candidate resource to obtain candidate resource features. At this time, feature extraction can also be performed on the target resource to obtain target resource features. Then, the feature similarity between the target resource features and each candidate resource feature can be calculated. Furthermore, the first candidate resource corresponding to the candidate resource feature with a feature similarity greater than a preset similarity threshold can be determined as a content-similar resource.

[0058] Please refer to the following: Figure 3 , Figure 3 for Figure 1 The detailed flowchart of step 103 is as follows: The user initiates an access request; Verify basic attributes and execute ABAC: Extract the user's access request to obtain user attribute information u, environment attribute information e, operation information a of the request category, and resource attribute information r of the target resource; then match the user attribute information with the resource attribute information and match the environment attribute information with the standard environment attributes to obtain the matching results; If the matching result indicates that the user attribute information does not match the resource attribute information or the environment attribute information does not match the standard environment attributes, then the user is denied access to the target resource. If the matching result indicates that the user attribute information matches the resource attribute information and the environment attribute information matches the standard environment attribute, then the user is authorized to access the target resource, and a similar resource candidate set (i.e., the first candidate resource set) is obtained from the medical information system; wherein, the similar resource candidate set contains multiple similar resources (i.e., the first candidate resources). The content similarity between the target resource and each similar resource is calculated. Similar resources with a content similarity greater than a preset threshold are identified as similar resources. Determine whether the current resource sensitivity of similar content resources is less than or equal to the user's security level; If the current resource sensitivity of similar content resources is less than or equal to the user's security level, then the user is authorized to access similar content resources. If the current resource sensitivity of a similar resource is greater than the user's security level, then the user is denied access to the similar resource.

[0059] Step 104: If the request category is the joint consultation related scenario category, then obtain the joint consultation information in the user attribute information; and determine the highest security level of the team corresponding to the joint consultation information; and if the target security level of the target resource is less than or equal to the highest security level of the team, then obtain the content-similar consultation resource corresponding to the target resource from the medical information system; and authorize the user to access the target resource and the content-similar consultation resource.

[0060] In this embodiment of the application, the second content similarity between the content-similar consultation resource and the target resource is greater than the preset threshold, and the consultation resource sensitivity level of the content-similar consultation resource is less than or equal to the team's highest security level.

[0061] As an optional implementation, step 104, determining the highest security level for the team corresponding to the joint consultation information, may include: Obtain consultation personnel information that matches the joint consultation information; Determine the security level of each consultant's information; The highest security level for the consultation personnel is determined as the highest security level of the team corresponding to the joint consultation information.

[0062] This implementation method, by accurately acquiring consultation personnel information and extracting individual security levels, uses the highest level as the team permission benchmark. This ensures that highly authorized experts have sufficient resources to support complex case discussions while avoiding the risk of sensitive data leakage due to excessive delegation of permissions. This dynamic evaluation mechanism based on members' actual permissions allows the system to flexibly adapt to consultation teams of different sizes, achieving a precise balance between data security and business needs while ensuring the efficiency of medical collaboration.

[0063] As an optional implementation, step 104, obtaining consultation resources with similar content to the target resource from the medical information system, may include: Obtain a second candidate resource set from the medical information system; wherein the second candidate resource set contains multiple first candidate consultation resources; The second content similarity between the target resource and each first candidate consultation resource is calculated; The first candidate consultation resource whose second content similarity is greater than the preset threshold is determined as the second candidate consultation resource; Determine the consultation resource sensitivity of each second candidate consultation resource; The second candidate consultation resource with a consultation resource sensitivity less than or equal to the user's security level is determined as the third candidate consultation resource; Determine the content sharing level of each third candidate consultation resource; wherein, the content sharing level is a shareable level, a restricted sharing level, or a non-shareable level; The third candidate consultation resource at the shareable level is determined as a consultation resource with content similar to the target resource; The third candidate consultation resource with the restricted sharing level is subjected to fuzzy processing to obtain fuzzy consultation resources; and the fuzzy consultation resources are determined as the consultation resources with similar content.

[0064] This implementation method involves initial screening based on content similarity, followed by secondary filtering based on the sensitivity of consultation resources and user security levels to ensure resource accessibility. Furthermore, it introduces a content sharing level determination, directly opening up shareable resources and blurring the boundaries of restricted sharing before opening them. This protects sensitive information details while preserving resource availability. This layered processing mechanism ensures medical data security while flexibly meeting the resource needs of different scenarios in joint consultations, effectively balancing data confidentiality and collaboration efficiency.

[0065] Please refer to the following: Figure 4 , Figure 4 for Figure 1 A detailed flowchart of step 104 is shown below; Initiate an access request in a joint consultation scenario; Activate joint consultation scenarios and dynamic attributes; Determine the highest security level for the group within the medical treatment team; Perform basic ABAC strategy verification: Extract the user's access request to obtain user attribute information u, environment attribute information e, operation information a of the request category, and resource attribute information r of the medical case; match the user attribute information with the resource attribute information, and match the environment attribute information with the standard environment attributes to obtain the matching results; If the matching result indicates that the user attribute information does not match the resource attribute information or the environment attribute information does not match the standard environment attributes, then the user is denied access to the medical case. If the matching result indicates that the user attribute information matches the resource attribute information and the environment attribute information matches the standard environment attribute, then the user is authorized to access the medical case, and a content similarity calculation is initiated based on the medical case to generate a similar resource candidate set (i.e., the second candidate resource set) from the medical information system; wherein, the similar resource candidate set contains multiple similar resources (i.e., the first candidate consultation resources). Resource sensitivity detection: Obtain the resource sensitivity of each similar resource in the candidate set of similar resources; Determine whether the resource sensitivity of similar resources exceeds the team's highest security level; If the sensitivity of a similar resource exceeds the team's highest security level, then the user is denied access to that similar resource. If the resource sensitivity of similar resources is less than or equal to the team's highest security level, then the content sharing level of the similar resources is determined. Determine whether the content sharing level allows for complete sharing; If the content sharing level allows for full sharing, then users are authorized to access the similar resource. If the content sharing level cannot be fully shared, then determine whether the content sharing level can be restricted from sharing; If the content sharing level cannot be restricted, then deny users access to the similar resource; If the content sharing level can be restricted, then grant users permission to access content from similar, desensitized resources.

[0066] Implementing steps 101 to 104 above, this flexible access control method avoids the rigid restrictions of the traditional single-mode approach. It allows for dynamic and reasonable allocation of access permissions based on actual medical work scenarios and user needs, improving the flexibility of data access control in the medical information system and enhancing the efficiency and quality of medical work. Furthermore, this application allows suitable users to access the required data at the appropriate time and place, improving medical work efficiency. It also avoids the risk of misoperation or information leakage that may arise from users meeting security standards but lacking the necessary expertise. Moreover, this application strengthens the security control of data access while ensuring the availability of medical information. Furthermore, this application achieves a precise balance between data security and business needs while ensuring the efficiency of medical collaboration. Finally, this application flexibly meets the resource needs of different scenarios in joint consultations while ensuring medical data security, effectively balancing data confidentiality and collaboration efficiency.

[0067] Based on the same inventive concept, this application also provides an access control device for a content- and attribute-based medical information system for implementing the access control method for the content- and attribute-based medical information system described above. The solution provided by this device is similar to the implementation described in the above method. Therefore, the specific limitations in one or more embodiments of the access control device for a content- and attribute-based medical information system provided below can be found in the limitations of the access control method for a content- and attribute-based medical information system described above, and will not be repeated here.

[0068] In one exemplary embodiment, such as Figure 5 As shown, an access control device for a content- and attribute-based medical information system includes: Extraction unit 501 is used to extract user access requests from the obtained user access requests to obtain user attribute information, environmental attribute information, request category, and target resource from the access requests; wherein, the request category is a direct retrieval category, a case analysis related scenario category, and a joint consultation related scenario category; the user attribute information includes at least the user's department, user system role, user administrative role, and user security level; the environmental attribute information includes at least the user's current location and current working time; and the resource attribute information includes at least the resource's department, attending physician information, resource sensitivity level, and content sharing level. The first authorization unit 502 is configured to determine the resource attribute information corresponding to the target resource if the request category is the direct retrieval category; and to authorize the user to access the target resource if the user attribute information matches the resource attribute information and the environment attribute information matches the standard environment attribute. The second authorization unit 503 is configured to: if the request category is the case analysis-related scenario category, determine the user's security level from the user attribute information; if the target security level of the target resource is less than or equal to the user's security level, obtain content-similar resources corresponding to the target resource from the medical information system, and authorize the user to access the target resource and the content-similar resources; wherein the first content similarity between the content-similar resources and the target resource is greater than a preset threshold. The third authorization unit 504 is configured to: if the request category is the joint consultation related scenario category, obtain the joint consultation information in the user attribute information; determine the highest security level of the team corresponding to the joint consultation information; and if the target security level of the target resource is less than or equal to the highest security level of the team, obtain the content-similar consultation resource corresponding to the target resource from the medical information system; and authorize the user to access the target resource and the content-similar consultation resource; wherein the second content similarity between the content-similar consultation resource and the target resource is greater than the preset threshold, and the consultation resource sensitivity level of the content-similar consultation resource is less than or equal to the highest security level of the team.

[0069] As an optional implementation, if the user attribute information matches the resource attribute information and the environment attribute information matches the standard environment attribute, the first authorization unit 502 may specifically authorize the user to access the target resource in the following manner: If the user's department matches the resource's department, then the system role set and the lowest-level administrative role in the attending physician information are determined. If the user's system role belongs to the system role set, or the user's administrative role level is greater than or equal to the lowest administrative role level, then the user's security level and the resource sensitivity level are compared to obtain a security level comparison result. If the security level comparison result indicates that the user's security level is greater than or equal to the resource sensitivity level, then obtain the work location area and the work time period of the user in the standard environment attributes; If the user's current location is within the work location area and the current work time is within the work time period, then if the content sharing level is the shareable level, the user is authorized to access the target resource.

[0070] This implementation method involves multi-dimensional conditional judgments. First, it narrows down the scope based on departmental matching. Then, it performs preliminary screening by combining system roles and administrative roles. Next, it ensures security by comparing user security levels and resource sensitivity levels. Finally, it verifies the work location and time period, authorizing access only when the content can be shared. This layered and flexible combination of conditions allows for dynamic adjustment of access permissions based on actual scenarios and user identities, avoiding a one-size-fits-all approach and ensuring that the right users access the necessary data at the right time and place, thereby improving the efficiency of medical work.

[0071] As an optional implementation, if the target security level of the target resource is less than or equal to the user security level, the second authorization unit 503 may obtain content-similar resources corresponding to the target resource from the medical information system and authorize the user to access the target resource and the content-similar resources in the following specific ways: If the target security level of the target resource is less than or equal to the user security level, then the user's medical specialty is obtained from the user attribute information. Determine the medical security level corresponding to the user's medical specialty; Determine the resource sensitivity level corresponding to the target resource; If the medical security level is greater than or equal to the resource sensitivity level, then obtain content-similar resources corresponding to the target resource from the medical information system, and authorize the user to access the target resource and the content-similar resources.

[0072] This implementation method, after ensuring the target resource's security level meets the requirements, introduces the user's medical expertise dimension. By comparing the medical security level corresponding to the user's medical expertise with the resource sensitivity level of the target resource, it ensures that only users with the corresponding professional capabilities and matching security levels can access the resource. This avoids the risk of misoperation or information leakage that may occur due to users meeting the security level but lacking the relevant expertise. It makes access control more aligned with the highly specialized and data-sensitive characteristics of the medical industry, ensuring the security and proper use of medical data.

[0073] As an optional implementation, the second authorization unit 503 may obtain content-similar resources corresponding to the target resource from the medical information system in the following specific ways: Obtain a first candidate resource set from the medical information system; wherein the first candidate resource set contains multiple first candidate resources; The first content similarity between the target resource and each first candidate resource is calculated; The first candidate resource with a content similarity greater than a preset threshold is determined as the second candidate resource; Determine the current resource sensitivity of each second candidate resource; The second candidate resource with a current resource sensitivity less than or equal to the user's security level is identified as a content-similar resource.

[0074] This implementation method involves constructing a first candidate resource set to broaden the search scope, then precisely locating similar resources by calculating content similarity to ensure a high degree of relevance. Subsequently, a dual verification process is introduced, combining resource sensitivity and user security level, allowing users to access only similar resources within their security permission range. This layered filtering strategy avoids interference from irrelevant resources and effectively prevents the leakage of sensitive data, strengthening the security control of data access while ensuring the availability of medical information.

[0075] As an optional implementation, the third authorization unit 504 may determine the highest security level of the team corresponding to the joint consultation information in the following specific ways: Obtain consultation personnel information that matches the joint consultation information; Determine the security level of each consultant's information; The highest security level for the consultation personnel is determined as the highest security level of the team corresponding to the joint consultation information.

[0076] This implementation method, by accurately acquiring consultation personnel information and extracting individual security levels, uses the highest level as the team permission benchmark. This ensures that highly authorized experts have sufficient resources to support complex case discussions while avoiding the risk of sensitive data leakage due to excessive delegation of permissions. This dynamic evaluation mechanism based on members' actual permissions allows the system to flexibly adapt to consultation teams of different sizes, achieving a precise balance between data security and business needs while ensuring the efficiency of medical collaboration.

[0077] As an optional implementation, the third authorization unit 504 may obtain consultation resources with similar content to the target resource from the medical information system in the following specific ways: Obtain a second candidate resource set from the medical information system; wherein the second candidate resource set contains multiple first candidate consultation resources; The second content similarity between the target resource and each first candidate consultation resource is calculated; The first candidate consultation resource whose second content similarity is greater than the preset threshold is determined as the second candidate consultation resource; Determine the consultation resource sensitivity of each second candidate consultation resource; The second candidate consultation resource with a consultation resource sensitivity less than or equal to the user's security level is determined as the third candidate consultation resource; Determine the content sharing level of each third candidate consultation resource; wherein, the content sharing level is a shareable level, a restricted sharing level, or a non-shareable level; The third candidate consultation resource at the shareable level is determined as a consultation resource with content similar to the target resource; The third candidate consultation resource with the restricted sharing level is subjected to fuzzy processing to obtain fuzzy consultation resources; and the fuzzy consultation resources are determined as the consultation resources with similar content.

[0078] This implementation method involves initial screening based on content similarity, followed by secondary filtering based on the sensitivity of consultation resources and user security levels to ensure resource accessibility. Furthermore, it introduces a content sharing level determination, directly opening up shareable resources and blurring the boundaries of restricted sharing before opening them. This protects sensitive information details while preserving resource availability. This layered processing mechanism ensures medical data security while flexibly meeting the resource needs of different scenarios in joint consultations, effectively balancing data confidentiality and collaboration efficiency.

[0079] By implementing the above-described method, this flexible access control approach avoids the rigid restrictions of traditional single-mode access control. It allows for dynamic and reasonable allocation of access permissions based on actual medical work scenarios and user needs, enhancing the flexibility of data access control in medical information systems and improving the efficiency and quality of medical work. Furthermore, this application allows suitable users to access the required data at the appropriate time and place, improving medical work efficiency. It also avoids the risk of misoperation or information leakage that may arise from users meeting security standards but lacking the necessary expertise. Moreover, this application strengthens the security control of data access while ensuring the availability of medical information. Furthermore, this application achieves a precise balance between data security and business needs while ensuring the efficiency of medical collaboration. Finally, this application flexibly meets the resource needs of different scenarios in joint consultations while ensuring medical data security, effectively balancing data confidentiality and collaboration efficiency.

[0080] In one exemplary embodiment, a computer device is provided, which may be a server or a terminal, and its internal structure diagram may be as follows. Figure 6As shown, this computer device includes a processor, memory, input / output (I / O) interfaces, and a communication interface. The processor, memory, and I / O interfaces are connected via a system bus, and the communication interface is also connected to the system bus via the I / O interfaces. The processor provides computational and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides the environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The database stores access control data for a content- and attribute-based medical information system. The I / O interfaces are used for exchanging information between the processor and external devices. The communication interface is used for communication with external terminals via a network connection. When the computer program is executed by the processor, it implements an access control method for a content- and attribute-based medical information system.

[0081] Those skilled in the art will understand that Figure 6 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0082] In one exemplary embodiment, a computer device is also provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps in the above-described method embodiments.

[0083] In one exemplary embodiment, a computer-readable storage medium is provided storing a computer program that, when executed by a processor, implements the steps in the above-described method embodiments.

[0084] In one exemplary embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps in the above-described method embodiments.

[0085] In one exemplary embodiment, a chip is provided, the chip including a processor and a communication interface, the communication interface being coupled to the processor, the processor being used to run programs or instructions to implement the steps in the above method embodiments and achieve the same technical effect, and will not be described again here to avoid repetition.

[0086] It should be understood that the chip mentioned in the embodiments of this application may also be referred to as a system-on-a-chip, system chip, chip system, or system-on-a-chip, etc.

[0087] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data must comply with relevant regulations.

[0088] Those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments described above. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM).

[0089] The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

[0090] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0091] This document uses specific examples to illustrate the principles and implementation methods of this application. The descriptions of the above embodiments are only for the purpose of helping to understand the methods and core ideas of this application. Furthermore, those skilled in the art will recognize that, based on the ideas of this application, there will be changes in the specific implementation methods and application scope. Therefore, the content of this specification should not be construed as a limitation of this application.

Claims

1. An access control method for a content- and attribute-based medical information system, characterized in that, The access control method for the content- and attribute-based medical information system includes: The user access requests are extracted to obtain user attribute information, environmental attribute information, request category, and target resource from the access requests; wherein, the request category is a direct retrieval category, a case analysis related scenario category, and a joint consultation related scenario category; If the request category is the direct retrieval category, then the resource attribute information corresponding to the target resource is determined; if the user attribute information matches the resource attribute information and the environment attribute information matches the standard environment attribute, then the user is authorized to access the target resource. If the request category is the case analysis-related scenario category, then the user's security level is determined from the user attribute information; if the target security level of the target resource is less than or equal to the user's security level, then content-similar resources corresponding to the target resource are obtained from the medical information system, and the user is authorized to access the target resource and the content-similar resources; wherein, the first content similarity between the content-similar resources and the target resource is greater than a preset threshold. If the request category is the joint consultation related scenario category, then the joint consultation information in the user attribute information is obtained; and the highest security level of the team corresponding to the joint consultation information is determined; and if the target security level of the target resource is less than or equal to the highest security level of the team, then the content-similar consultation resource corresponding to the target resource is obtained from the medical information system; and the user is authorized to access the target resource and the content-similar consultation resource; wherein, the second content similarity between the content-similar consultation resource and the target resource is greater than the preset threshold, and the consultation resource sensitivity level of the content-similar consultation resource is less than or equal to the highest security level of the team.

2. The access control method for a content- and attribute-based medical information system according to claim 1, characterized in that, The user attribute information includes at least the user's department, system role, administrative role, and security level. The environmental attribute information includes at least the user's current location and current working time. The resource attribute information includes at least the resource's department, attending physician information, resource sensitivity level, and content sharing level. If the user attribute information matches the resource attribute information and the environmental attribute information matches the standard environmental attributes, then the user is authorized to access the target resource, specifically including: If the user's department matches the resource's department, then the system role set and the lowest-level administrative role in the attending physician information are determined. If the user's system role belongs to the system role set, or the user's administrative role level is greater than or equal to the lowest administrative role level, then the user's security level and the resource sensitivity level are compared to obtain a security level comparison result. If the security level comparison result indicates that the user's security level is greater than or equal to the resource sensitivity level, then obtain the work location area and the work time period of the user in the standard environment attributes; If the user's current location is within the work location area and the current work time is within the work time period, then if the content sharing level is the shareable level, the user is authorized to access the target resource.

3. The access control method for a content- and attribute-based medical information system according to claim 1, characterized in that, If the target security level of the target resource is less than or equal to the user's security level, then similar content resources corresponding to the target resource are obtained from the medical information system, and the user is authorized to access the target resource and the similar content resources, specifically including: If the target security level of the target resource is less than or equal to the user security level, then the user's medical specialty is obtained from the user attribute information. Determine the medical security level corresponding to the user's medical specialty; Determine the resource sensitivity level corresponding to the target resource; If the medical security level is greater than or equal to the resource sensitivity level, then obtain content-similar resources corresponding to the target resource from the medical information system, and authorize the user to access the target resource and the content-similar resources.

4. The access control method for a content- and attribute-based medical information system according to claim 3, characterized in that, The step of obtaining content-similar resources corresponding to the target resource from the medical information system specifically includes: Obtain a first candidate resource set from the medical information system; wherein the first candidate resource set contains multiple first candidate resources; The first content similarity between the target resource and each first candidate resource is calculated; The first candidate resource with a content similarity greater than a preset threshold is determined as the second candidate resource; Determine the current resource sensitivity of each second candidate resource; The second candidate resource with a current resource sensitivity less than or equal to the user's security level is identified as a content-similar resource.

5. The access control method for a content- and attribute-based medical information system according to claim 1, characterized in that, The determination of the highest security level for the team corresponding to the joint consultation information specifically includes: Obtain consultation personnel information that matches the joint consultation information; Determine the security level of each consultant's information; The highest security level for the consultation personnel is determined as the highest security level of the team corresponding to the joint consultation information.

6. The access control method for a content- and attribute-based medical information system according to claim 5, characterized in that, The step of obtaining similar consultation resources from the medical information system to the target resource specifically includes: Obtain a second candidate resource set from the medical information system; wherein the second candidate resource set contains multiple first candidate consultation resources; The second content similarity between the target resource and each first candidate consultation resource is calculated; The first candidate consultation resource whose second content similarity is greater than the preset threshold is determined as the second candidate consultation resource; Determine the consultation resource sensitivity of each second candidate consultation resource; The second candidate consultation resource with a consultation resource sensitivity less than or equal to the user's security level is determined as the third candidate consultation resource; Determine the content sharing level of each third candidate consultation resource; wherein, the content sharing level is a shareable level, a restricted sharing level, or a non-shareable level; The third candidate consultation resource at the shareable level is determined as a consultation resource with content similar to the target resource; The third candidate consultation resource with the restricted sharing level is subjected to fuzzy processing to obtain fuzzy consultation resources; and the fuzzy consultation resources are determined as the consultation resources with similar content.

7. An access control device for a content- and attribute-based medical information system, characterized in that, The access control device for the content- and attribute-based medical information system includes: The extraction unit is used to extract the user's access request from the obtained user to obtain the user attribute information, environment attribute information, request category and target resource in the access request; wherein, the request category is the direct retrieval category, the case analysis related scenario category and the joint consultation related scenario category; The first authorization unit is configured to determine the resource attribute information corresponding to the target resource if the request category is the direct retrieval category; and to authorize the user to access the target resource if the user attribute information matches the resource attribute information and the environment attribute information matches the standard environment attribute. The second authorization unit is configured to determine the user's security level from the user attribute information if the request category is the case analysis-related scenario category; if the target security level of the target resource is less than or equal to the user's security level, obtain content-similar resources corresponding to the target resource from the medical information system and authorize the user to access the target resource and the content-similar resources; wherein the first content similarity between the content-similar resources and the target resource is greater than a preset threshold. The third authorization unit is configured to: if the request category is a scenario related to the joint consultation, obtain joint consultation information from the user attribute information; determine the highest security level of the team corresponding to the joint consultation information; and if the target security level of the target resource is less than or equal to the highest security level of the team, obtain content-similar consultation resources corresponding to the target resource from the medical information system; and authorize the user to access the target resource and the content-similar consultation resources; wherein the second content similarity between the content-similar consultation resources and the target resource is greater than the preset threshold, and the consultation resource sensitivity level of the content-similar consultation resources is less than or equal to the highest security level of the team.

8. A computer device, comprising: A memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that the processor executes the computer program to implement the steps of the access control method for a content- and attribute-based medical information system according to any one of claims 1-6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When executed by a processor, the computer program implements the steps of the access control method for a content- and attribute-based medical information system as described in any one of claims 1-6.

10. A computer program product, comprising a computer program, characterized in that, When executed by a processor, the computer program implements the steps of the access control method for a content- and attribute-based medical information system as described in any one of claims 1-6.

Images