Fusion data secure transmission method applied to glucometer equipment and intelligent glucometer

Abstract

The embodiment of the invention discloses a fusion data secure transmission method applied to glucometer equipment and an intelligent glucometer, and the method comprises the steps: reading user identity information through a multimode identity recognition module, and obtaining an eID signature online when the user identity information is recognized as an eID carrier; blood glucose data are collected, and the code ID of the blood glucose test paper is automatically read to call accurate calibration parameters; the main control chip binds the eID signature, the calibrated blood glucose data and a timestamp to generate a trusted data chain with judicial evidence storage efficacy; and after being subjected to hardware-level encryption storage, the data are transmitted to a server through a national secret encryption channel, and continuous transmission after network disconnection is supported. The system integrates an identity card, a social security card and a multimode identity recognition module of an eID radio frequency unit; and the blood glucose detection module is provided with a test paper ID automatic identification circuit. According to the invention, the data credibility and security of the whole process from the detection source to the cloud management are realized, and the technical problems of easy error of identity binding, data source error, fragile transmission security and difficult cross-network identity tracing are solved.

Description

TECHNICAL FIELD

[0001] The embodiment of the application relates to the technical field of intelligent medical instruments, and particularly relates to a fusion data secure transmission method applied to a blood glucose meter device and an intelligent blood glucose meter. BACKGROUND

[0002] With the rapid growth of chronic disease management, mobile medical treatment and remote health monitoring demand, the application of traditional blood glucose meters in primary diagnosis, community screening and home monitoring scenarios has increasingly prominent application short boards, mainly including the following technical bottlenecks:

[0003] 1. Identity information and detection data are seriously separated, and there is a risk of manual association error. In the existing mobile screening or diagnosis process, the operator usually uses a traditional blood glucose meter to obtain a blood glucose value, and then manually matches the value with the identity information (such as name and ID number) on the patient's paper registration form. This process completely relies on manual operation, which is not only inefficient, but also more likely to cause "misattribution" due to negligence or confusion of the registration form, resulting in incorrect association of identity and data, which seriously affects the accuracy of subsequent diagnosis and treatment.

[0004] 2. Data island phenomenon is prominent, and there is a delay and security risk of secondary entry. Traditional devices lack direct docking capability with hospital information systems (HIS / electronic medical record EMR). Detection data needs to be manually entered into the system by medical staff afterwards, which often delays for several hours or even longer, which cannot meet the needs of real-time health management. More seriously, the manual recording and transmission of sensitive personal information such as ID numbers violate the provisions of the Personal Information Protection Law that personal information processing should ensure safety and avoid leakage (such as Article 29), which constitutes a significant data leakage risk.

[0005] 3. The identity verification means is single and has insufficient credibility, and it is difficult to prevent identity fraud. The existing process usually only verifies the physical ID card, and lacks association authentication of network digital identity. This leads to the fact that in the remote health management scenario, the system cannot effectively verify the real identity of the data uploader, and there is a risk of identity fraud and data forgery, making it difficult to establish a credible identity traceability system throughout the whole process of "offline detection-online management".

[0006] 4. The data security protection in the whole life cycle is weak, and it is difficult to meet the medical level compliance requirements. Most of the intelligent blood glucose meters on the market only use general encryption protocols (such as TLS) in the data transmission link, and lack hardware-level security protection in local storage and operation permission control. The overall security architecture fails to integrate national commercial cryptographic algorithms, hardware security isolation and other key technologies, making it difficult to meet the security standards required by the Data Security Law and related medical health data.

[0007] 5. Poor device adaptability, lack of reliable mechanism for offline work. In mobile medical treatment, community follow-up and other scenarios with unstable network conditions, the device cannot work or cannot guarantee the integrity and subsequent reliable upload of offline data once the network is disconnected, which restricts its application in more extensive grassroots scenarios.

[0008] In summary, the prior art solution has obvious deficiencies in automatic binding of identity-data, real-time secure intercommunication of cross-system data, trusted identity authentication of the whole link, and medical-grade data security protection. Therefore, there is an urgent need for an intelligent blood glucose meter system that can deeply integrate entity identity and network identity authentication, realize real-time encryption and direct transmission of detection data, and has hardware-level security protection and offline resume transmission capability, to solve the above problems and meet the growing demand for mobile, compliant and trusted medical health management. SUMMARY

[0009] To this end, the embodiments of the present application provide a fusion data security transmission method applied to a blood glucose meter device and an intelligent blood glucose meter to solve the three technical problems existing in mobile medical scenarios: manual association of identity information and detection data is prone to error, data cannot be securely synchronized to the hospital system in real time, and there is a lack of organic integration of national network identity authentication and hardware-level security protection. The following solutions are proposed.

[0010] To achieve the above purpose, the embodiments of the present application provide the following technical solutions:

[0011] According to a first aspect of the embodiments of the present application, a fusion data security transmission method applied to a blood glucose meter device is provided, the blood glucose meter device comprising a master control chip, a blood glucose detection module, an identity recognition module and a PSAM security chip, the identity recognition module comprising an eID module for reading information of an eID carrier of a person being tested;

[0012] The fusion data security transmission method comprises:

[0013] After the blood glucose meter device is powered on, the eID module automatically starts initialization, sends a ready signal to the master control chip, and the master control chip returns an initialization confirmation instruction to complete activation of the eID module;

[0014] When the eID carrier of the person being tested approaches the eID module recognition area of the blood glucose meter device, the eID module detects the carrier signal, sends a carrier detection pulse, and the eID carrier returns a response signal. After the eID module confirms the medium type of the eID carrier, it reports corresponding confirmation information to the master control chip;

[0015] The main control chip sends a read command to the eID module. The eID module generates a random number challenge and sends it to the eID carrier. The eID carrier encrypts the challenge value using its built-in private key and returns the encrypted information. After receiving the information, the eID module decrypts it through the PSAM security chip, extracts the identity feature value, and sends it to the main control chip.

[0016] The main control chip encapsulates the identity feature value into a verification request packet, which also includes a device ID and a timestamp; the verification request packet is sent to the Ministry of Public Security's eID verification server through an encrypted transmission channel; if the Ministry of Public Security's eID verification server verifies the identity, the main control chip receives a response packet from the Ministry of Public Security's eID verification server containing an eID signature and verification result, the main control chip parses the response packet and verifies the validity of the eID signature, and then sends a verification completion signal to the eID module;

[0017] The eID signature is embedded in the blood glucose data collected by the blood glucose detection module to generate a trusted data packet containing the examinee's identity, blood glucose data, and timestamp, thereby enabling secure data transmission between the device and the hospital information system and / or remote health management platform.

[0018] Furthermore, if the Ministry of Public Security's eID verification server verifies the ID successfully, the main control chip also drives the blood glucose meter's display screen to show the eID verification success feedback information and output the signature digest; if the verification fails, an error code is displayed and the reason for the failure is recorded.

[0019] Furthermore, the eID signature is embedded in the blood glucose data collected by the blood glucose detection module to generate a trusted data packet containing the examinee's identity, blood glucose data, and timestamp, enabling secure data transmission with the hospital information system and / or remote health management platform. This also includes:

[0020] If a network interruption is detected, the trusted data packet is temporarily stored in the local cache; after the network is restored, the interrupted data is automatically resumed based on the data packet's timestamp and hash value verification mechanism.

[0021] According to a second aspect of the present invention, a smart blood glucose meter is provided: comprising a sensing layer, a processing layer, a security layer and a transmission layer, supporting the execution of the fusion data secure transmission method as described in claim 1;

[0022] The sensing layer includes a blood glucose detection module and a multi-mode identity recognition module. The blood glucose detection module is used to collect blood glucose data. The multi-mode identity recognition module integrates an ID card reader coil, a social security card recognition unit, and an eID module, which respectively read information from the physical ID card, social security card, and eID carrier of the person being tested.

[0023] The processing layer, with the main control chip as its core, receives blood glucose data and identity information from the sensing layer and performs encrypted data storage; it also connects to the display driver module to complete the data visualization output.

[0024] The security layer is based on the PSAM security chip and is equipped with an encrypted transmission unit and a two-factor authentication module. The security layer and the processing layer are connected through an encrypted interface.

[0025] The transmission layer consists of a wireless module and an Ethernet interface. One end is connected to the data output port of the main control chip, and the other end establishes communication links with the server of the medical staff and the eID verification server of the Ministry of Public Security, respectively. The communication link with the eID verification server of the Ministry of Public Security adopts a dedicated encryption protocol.

[0026] Furthermore, the encrypted transmission unit supports the TLS protocol and the SM4 national cryptographic algorithm, and the main control chip communicates with the multi-mode communication module through the encrypted transmission unit.

[0027] Furthermore, the wireless module includes at least one of a Wi-Fi unit, a Bluetooth unit, and a mobile communication unit.

[0028] Furthermore, the dual-factor authentication module integrates a fingerprint recognition sensor and a password input unit, and outputs the authentication result to the main control chip.

[0029] Furthermore, the processing layer also includes:

[0030] A local cache memory is used to temporarily store the trusted data packets in the event of a network outage.

[0031] Furthermore, the main control chip is also used to retransmit the temporarily stored data packets to the remote server after the network is restored, based on the timestamp and hash value verification mechanism of the trusted data packets.

[0032] Furthermore, the blood glucose detection module also includes an automatic test strip ID recognition circuit for identifying and verifying the type of blood glucose test strip.

[0033] The embodiments of the present invention have the following advantages:

[0034] 1. Enhance identity authentication security: Implement national-level identity verification through the eID module to prevent identity theft and data forgery, and ensure that blood glucose data can be traced back to the real patient in remote health management, thus solving the problem of identity silos.

[0035] 2. Expand cross-scenario applications: Supports authentication through mobile eID, physical eID cards, and other media, adapting to the habits of patients of different ages, and enabling reliable data collection in scenarios such as remote community follow-up and home monitoring.

[0036] 3. Compliant with policy requirements: It integrates with the Ministry of Public Security's eID system, responds to the requirements of the Personal Information Protection Law and the Data Security Law, helps the medical industry build a compliant identity authentication system, and improves policy adaptability. Attached Figure Description

[0037] To more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are merely exemplary, and those skilled in the art can derive other embodiments based on the provided drawings without creative effort.

[0038] The structures, proportions, sizes, etc. illustrated in this specification are only for the purpose of assisting those skilled in the art in understanding and reading the content disclosed herein, and are not intended to limit the conditions under which the present invention can be implemented. Therefore, they have no substantial technical significance. Any modifications to the structure, changes in the proportions, or adjustments to the size, without affecting the effects and objectives that the present invention can produce, should still fall within the scope of the technical content disclosed in the present invention.

[0039] Figure 1 This is a flowchart illustrating a method for secure transmission of fused data in a blood glucose meter device, as provided in an embodiment of the present invention. Detailed Implementation

[0040] The following specific embodiments illustrate the implementation of the present invention. Those skilled in the art can easily understand other advantages and effects of the present invention from the content disclosed in this specification. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0041] To address the three major technical challenges in mobile healthcare scenarios—the ease with which identity information and testing data can be manually linked, the inability to securely synchronize data to hospital systems in real time, and the lack of organic integration between national network identity authentication and hardware-level security protection—we propose the following solutions.

[0042] This invention discloses a blood glucose meter with authentication functionality. The system comprises a sensing layer, a processing layer, a security layer, a transmission layer, and an application layer.

[0043] The perception layer includes a blood glucose detection module and a multi-mode identity recognition module. The blood glucose detection module connects to the blood glucose sensor via a test strip ID recognition circuit to collect blood glucose data. The multi-mode identity recognition module integrates an ID card reader coil, a social security card reader unit, and an eID radio frequency module, which respectively read information from physical ID cards, social security cards, and eID carriers. All three recognition units are bidirectionally connected to the PSAM security chip to ensure the security of the identity information decryption process.

[0044] eID is a citizen online identity verification system developed by the Third Research Institute of the Ministry of Public Security and uniformly issued through the "Ministry of Public Security Citizen Online Identity Verification System". Based on cryptographic technology, the system uses national commercial cryptographic algorithms to generate unique identifiers that do not contain personal identification information, enabling users to perform online remote identity authentication without disclosing their personal information. eID can be loaded into bank cards, SIM cards, or mobile phone security chips.

[0045] Processing Layer: Centered on the main control chip, this layer receives blood glucose data and identity information from the sensing layer. The main control chip incorporates a national cryptographic algorithm acceleration engine and establishes a data interaction channel with the ARMTrustZone isolated storage module to achieve encrypted storage of sensitive data; it also connects to the display driver module to complete data visualization output.

[0046] ARMTrustZone is a hardware-level security technology introduced by ARM, mainly used to isolate the secure world and the ordinary world on the same processor, providing reliable security protection for devices.

[0047] Security Layer: This layer comprises an encrypted transmission unit and a two-factor authentication module. The encrypted transmission unit supports TLS 1.3 and SM4 algorithms and communicates with the main control chip via an encrypted interface. The two-factor authentication module integrates a fingerprint sensor and a password input unit, outputting the authentication result to the main control chip's security verification interface.

[0048] The transmission layer consists of a Wi-Fi / 4G / 5G wireless module and an Ethernet interface. One end connects to the data output port of the main control chip, and the other end establishes communication links with the hospital HIS / EMR system server and the Ministry of Public Security eID verification server, respectively. The link with the eID verification server uses a dedicated encryption protocol.

[0049] Application Layer: This layer includes the hospital information system and the remote health management platform. It receives data from the transport layer via an HL7 protocol converter, enabling data storage, analysis, and display. Data exchange between layers occurs through hardware-encrypted interfaces, and data verification mechanisms are implemented at key nodes.

[0050] This system uses multi-source identity-data binding technology to bind identity with blood glucose levels after reading information from the encrypted area of ​​the ID card, social security card, and the Ministry of Public Security eID module conforming to the GB / T35276-2017 standard, and generates an unalterable data packet with an eID signature, thereby achieving a unified association between physical identity and network identity.

[0051] The system supports a trusted offline resume function, which can store records in local Flash. After the network is restored, integrity is verified and retransmitted based on the timestamp and data hash value. All data contains eID signature to ensure traceability throughout the process.

[0052] In terms of dynamic security protection, the system implements a multi-layer protection mechanism: the transport layer uses TLS 1.3 and SM4 national cryptographic algorithms for double encryption to prevent data from being stolen or tampered with during transmission; the storage layer uses ARM TrustZone technology to achieve isolated storage, strictly protecting local patient information and blood glucose data and eliminating unauthorized access; the operation layer introduces two-factor authentication of nurses' fingerprints or passwords, combined with eID authentication for authorization management, ensuring that only nurses who have passed multi-layer authentication can perform sensitive operations on the device.

[0053] Corresponding to the blood glucose meter with authentication function disclosed above, this invention also discloses a method for secure transmission of fused data in blood glucose meter devices. The following details the method for secure transmission of fused data in blood glucose meter devices disclosed in this invention, in conjunction with the blood glucose meter with authentication function described above.

[0054] refer to Figure 1 The present invention also discloses a method for secure transmission of fused data applied to blood glucose meter devices, comprising:

[0055] During the identity verification stage, the media type is automatically identified. When an eID carrier is detected, the encrypted information is read through the eID radio frequency module, the online verification interface of the Ministry of Public Security is called to complete the verification, and an eID signature is generated.

[0056] During the data processing stage, eID signatures are embedded in data packets to achieve a chain binding of "measurement data - entity identity - eID network identity", providing a reliable traceability basis for remote management.

[0057] eID authentication sequence:

[0058] The eID authentication sequence diagram clearly shows the complete process from reading eID information to completing authentication, involving four interactive entities.

[0059] Initialization phase (T0-T1): After the blood glucose meter is powered on, the eID module automatically starts initialization, sending a ready signal (0x01) to the main control chip. The main control chip returns an initialization confirmation instruction (0xAA), completing the module activation.

[0060] Media detection phase (T2-T4): When the eID carrier (such as mobile phone eID) approaches the identification area, the eID radio frequency module detects the carrier signal and sends a carrier detection pulse (T2). The carrier returns an acknowledgment signal (T3). After confirming the media type, the module reports "eID carrier detected" to the main control chip (T4).

[0061] Information reading phase (T5-T9): The main control chip sends a read command to the eID module (T5). The module generates a random number challenge (T6) and sends it to the eID carrier. The carrier encrypts the challenge value using the built-in private key and returns the encrypted information (T7). After receiving the information, the module decrypts it through the PSAM chip (T8), extracts the identity feature value, and sends it to the main control chip (T9).

[0062] Online verification phase (T10-T14): The main control chip encapsulates the identity feature value into a verification request packet (including device ID and timestamp), and sends it to the Ministry of Public Security eID verification server through an encrypted transmission channel (T10). After the server verifies the identity, it returns a response packet containing the eID signature and verification result (T12). The main control chip parses the response and verifies the validity of the signature (T13), and finally sends a verification completion signal to the eID module (T14).

[0063] Result feedback phase (T15-T16): If verification is successful, the main control chip drives the display to show "eID verification successful" and outputs the signature digest (T15); if verification fails, an error code is displayed and the reason for failure is recorded (T16). Throughout the entire sequence, key instructions and data are transmitted in encrypted format, and the time interval is strictly controlled within 100ms to ensure user experience.

[0064] This invention achieves automatic identity-data binding, resume transmission after network outage, dynamic security protection, and network identity authentication through innovative hardware architecture and software functions, solving the problems of information fragmentation, data silos, and security risks in existing technologies.

[0065] The embodiments of the present invention have the following beneficial effects:

[0066] 1) Building a comprehensive identity authentication and trust system: The blood glucose meter integrates an eID module to achieve multi-dimensional fusion authentication of physical ID cards, social security cards, and online identities. It supports multiple media such as mobile eID and physical eID cards to adapt to different user habits. Through national-level identity verification, it effectively prevents identity theft and data forgery, breaks down "identity silos," and establishes a comprehensive identity trust system of "offline testing - online traceability."

[0067] 2) Achieving Highly Reliable Data Security and Judicial Evidence Preservation Capabilities: Adopting a national cryptographic-level security architecture, integrating PSAM chips, ARM TrustZone isolation technology, and the eID national cryptographic algorithm, it provides hardware-level triple encryption protection for identity, transmission, and storage. Trusted data packets containing identity, blood glucose data, and timestamps are generated through eID private key signing, achieving medical-grade security and judicial evidence preservation reliability, ensuring data authenticity and traceability.

[0068] 3) Support for cross-scenario compliant applications: The embodiments of this invention can be flexibly applied to various health management scenarios such as community remote follow-up and home monitoring, helping to build a medical identity authentication system that complies with the requirements of the Cybersecurity Law, the Personal Information Protection Law and the Data Security Law, and improving policy adaptability and industry compliance.

[0069] Although the present invention has been described in detail above with general descriptions and specific embodiments, modifications or improvements can be made to it, which will be obvious to those skilled in the art. Therefore, all such modifications or improvements made without departing from the spirit of the present invention fall within the scope of protection claimed by the present invention.

Claims

1. A method for secure transmission of fused data applied to blood glucose meter devices, characterized in that, The blood glucose meter device includes a main control chip, a blood glucose detection module, an identity recognition module, and a PSAM security chip. The identity recognition module includes an eID module, which is used to read information from the eID carrier of the person being tested. The method for secure transmission of fused data includes: After the blood glucose meter is powered on, the eID module automatically starts initialization, sends a ready signal to the main control chip, and the main control chip returns an initialization confirmation command, thus activating the eID module. When the eID carrier of the person being tested approaches the eID module recognition area of ​​the blood glucose meter, the eID module detects the carrier signal, sends a carrier detection pulse, the eID carrier returns a response signal, and after confirming the media type of the eID carrier, the eID module reports the corresponding confirmation information to the main control chip. The main control chip sends a read command to the eID module. The eID module generates a random number challenge and sends it to the eID carrier. The eID carrier encrypts the challenge value using its built-in private key and returns the encrypted information. After receiving the information, the eID module decrypts it through the PSAM security chip, extracts the identity feature value, and sends it to the main control chip. The main control chip encapsulates the identity feature value into a verification request packet, which also includes a device ID and a timestamp; the verification request packet is sent to the Ministry of Public Security's eID verification server through an encrypted transmission channel; if the Ministry of Public Security's eID verification server verifies the identity, the main control chip receives a response packet from the Ministry of Public Security's eID verification server containing an eID signature and verification result, the main control chip parses the response packet and verifies the validity of the eID signature, and then sends a verification completion signal to the eID module; The eID signature is embedded in the blood glucose data collected by the blood glucose detection module to generate a trusted data packet containing the examinee's identity, blood glucose data, and timestamp, thereby enabling secure data transmission between the device and the hospital information system and / or remote health management platform.

2. The method for secure transmission of fused data applied to blood glucose meter devices as described in claim 1, characterized in that, If the Ministry of Public Security's eID verification server verifies the ID successfully, the main control chip will also drive the blood glucose meter's display screen to show the eID verification success feedback information and output the signature digest; if the verification fails, an error code will be displayed and the reason for the failure will be recorded.

3. The method for secure transmission of fused data applied to blood glucose meter devices as described in claim 1, characterized in that, Embedding the eID signature into the blood glucose data collected by the blood glucose detection module generates a trusted data packet containing the examinee's identity, blood glucose data, and timestamp, enabling secure data transmission with the hospital information system and / or remote health management platform. This also includes: If a network interruption is detected, the trusted data packet is temporarily stored in the local cache; after the network is restored, the interrupted data is automatically resumed based on the data packet's timestamp and hash value verification mechanism.

4. A smart blood glucose meter, characterized in that: It consists of a perception layer, a processing layer, a security layer, and a transmission layer, and supports the execution of the fused data secure transmission method as described in claim 1; The sensing layer includes a blood glucose detection module and a multi-mode identity recognition module. The blood glucose detection module is used to collect blood glucose data. The multi-mode identity recognition module integrates an ID card reader coil, a social security card recognition unit, and an eID module, which respectively read information from the physical ID card, social security card, and eID carrier of the person being tested. The processing layer, with the main control chip as its core, receives blood glucose data and identity information from the sensing layer and performs encrypted data storage; it also connects to the display driver module to complete the data visualization output. The security layer is based on the PSAM security chip and is equipped with an encrypted transmission unit and a two-factor authentication module. The security layer and the processing layer are connected through an encrypted interface. The transmission layer consists of a wireless module and an Ethernet interface. One end is connected to the data output port of the main control chip, and the other end establishes communication links with the server of the medical staff and the eID verification server of the Ministry of Public Security, respectively. The communication link with the eID verification server of the Ministry of Public Security adopts a dedicated encryption protocol.

5. A smart blood glucose meter as described in claim 4, characterized in that, The encrypted transmission unit supports the TLS protocol and the SM4 national cryptographic algorithm. The main control chip communicates with the multi-mode communication module through the encrypted transmission unit.

6. A smart blood glucose meter as described in claim 4, characterized in that, The wireless module includes at least one of a Wi-Fi unit, a Bluetooth unit, and a mobile communication unit.

7. A smart blood glucose meter as described in claim 4, characterized in that, The dual-factor authentication module integrates a fingerprint recognition sensor and a password input unit, and outputs the authentication result to the main control chip.

8. A smart blood glucose meter as described in claim 4, characterized in that, The processing layer further includes: A local cache memory is used to temporarily store the trusted data packets in the event of a network outage.

9. A smart blood glucose meter as described in claim 4, characterized in that, The main control chip is also used to retransmit the temporarily stored data packets to the remote server after the network is restored, based on the timestamp and hash value verification mechanism of the trusted data packets.

10. A smart blood glucose meter as described in claim 4, characterized in that, The blood glucose detection module also includes an automatic test strip ID recognition circuit, which is used to identify and verify the type of blood glucose test strip.

Images