Anesthesia care data management system

Abstract

The application discloses an anesthesia nursing data management system, which comprises a main external service device, a main service subsystem and a plurality of regional service subsystems, each floor of a hospital building is provided with a regional service subsystem, the regional service subsystem comprises a sub-storage node device, a first sub-external service device, a transmission authorization device and a plurality of local storage devices, and the main external service device and the main service subsystem are arranged in a main machine room of the hospital. In the application, data is distributed and stored in the local storage device, the sub-storage node device and the main storage device according to the timeliness of the data, the full-leakage risk is reduced from the source through the distributed storage, external devices read data through the first sub-external service device and the second sub-external service device, and the first sub-external service device and the second sub-external service device only store a small amount of query data, even if the first sub-external service device and the second sub-external service device are hacked, the amount of leaked data is very small, and the full-leakage risk is further reduced through the improved query mode.

Description

Technical Field

[0001] This invention relates to the field of data processing, and in particular to an anesthesia nursing data management system. Background Technology

[0002] The Department of Anesthesiology is a core department ensuring surgical safety and achieving comfortable medical care. It is responsible not only for the continuous monitoring and control of vital signs during surgery but also for extensive participation in pain management, critical care, painless treatment, and overall perioperative management. The anesthesia nursing process includes four core stages: preoperative preparation, intraoperative monitoring, postoperative recovery, and complication prevention. The data generated primarily includes patient basic information, vital sign monitoring records, anesthetic medication administration, airway management information, fluid intake and output, body temperature changes, anesthesia depth indicators, and complication records. This encompasses a wide range of important information, including patient basic information, physiological parameters, anesthetic drug dosages, and surgical procedure records. This data is not only the core basis for patient diagnosis and treatment but also of significant value for medical research and improving the quality of medical care.

[0003] In current anesthesia nursing data management, data is centrally stored on a central server. Once a hacker successfully intrudes into the server, they can access and steal all the data on the server, posing a very high risk of total data leakage. Summary of the Invention

[0004] To address the significant risk of total data leakage in the management of anesthesia and nursing data in existing technologies, the anesthesia and nursing data management system proposed in this invention includes a main external service device, a main service subsystem, and multiple regional service subsystems.

[0005] Each floor of the hospital's inpatient building is equipped with a regional service subsystem, which includes a sub-storage node device, a first sub-external service device, a transmission authorization device, and multiple local storage devices.

[0006] Each ward is equipped with a local storage device, which is used to store real-time monitoring data of patients in the current ward. The local storage device includes a control motherboard, an auxiliary motherboard, and a first storage unit.

[0007] The sub-storage node device and the first sub-external service device are located in the computer room on each floor. The sub-storage node device is used to store monitoring data of patients whose discharge date is less than or equal to 365 days ago.

[0008] The transmission authorization equipment is also located in the computer room on each floor. It has multiple gigabit network ports and is connected to the first sub-external service equipment and the local storage devices in each ward via network cables. The gigabit network port of the control motherboard of the local storage device is connected to the network cable from the transmission authorization equipment. The transmission authorization equipment is equipped with a Linux system. By setting firewall rules, the network port connected to the first sub-external service equipment can only receive data and not send data. By setting firewall rules, the network port connected to each local storage device can only send data and not receive data. The control motherboard can also set firewall rules to make its network port only receive data and not send data.

[0009] Both the main external service device and the main service subsystem are located in the hospital's main computer room. The main service subsystem includes a main storage device and a second external service device. The main storage device is used to store historical monitoring data of patients whose discharge date is more than 365 days ago.

[0010] The communication interfaces of the local storage device, the sub-storage node device, and the main storage device are only opened in the working state.

[0011] Preferably, the control motherboard adopts an x86 architecture industrial control motherboard, has WiFi communication capability, and is equipped with a Linux system.

[0012] Preferably, the auxiliary motherboard is an ARM industrial control motherboard, which implements the StarFlash communication function.

[0013] Preferably, the sub-storage node device has Bluetooth communication capability.

[0014] Preferably, the transmission authorization device uses a DT-22320-C206B industrial computer with 34 gigabit network ports.

[0015] Preferably, the main storage device includes a processor, a network communication unit, a Bluetooth communication unit, and a second storage unit.

[0016] Preferably, the working process of the anesthesia nursing data management system is as follows: the main external service device verifies the query request from the query terminal. After successful verification, the main external service device obtains the hospital number corresponding to the query request based on the hospital information system's inpatient management submodule, determines the discharge time and bed information corresponding to the hospital number, and determines the main service subsystem and / or specific regional service subsystem involved in the hospital number based on the discharge time and bed information. The main external service device transmits the hospital number, discharge time, bed information, and query request from the query terminal to the main service subsystem and / or specific regional service subsystem. The main service subsystem feeds back the data to the query terminal based on the query request and hospital number, and the regional service subsystem feeds back the data to the query terminal based on the hospital number, discharge time, bed information, and query request from the query terminal.

[0017] Preferably, determining the main service subsystem and / or specific regional service subsystem involved in the hospital number based on the discharge time and bed information specifically includes querying the discharge time and bed information corresponding to each hospital number from the hospital management submodule based on the hospital number. If the discharge time is more than 365 days ago, the hospital number involves the main service subsystem. If the discharge time is less than or equal to 365 days ago, or if there is no discharge time, the specific regional service subsystem is determined in combination with the bed information.

[0018] Preferably, the main service subsystem feeds data back to the query terminal based on the query terminal's query request and hospital number. Specifically, this includes a second sub-external service device receiving the query terminal's query request and hospital number, transmitting a communication start command to the main storage device via Bluetooth, the main storage device opening its communication interface, the second sub-external service device establishing a communication connection with the main storage device, retrieving data from the main storage device according to the query request, the main storage device immediately closing the communication interface after data transmission is complete, the second sub-external service device establishing a communication connection with the query terminal to feed back the data, and deleting the corresponding data after the data feedback is complete.

[0019] Preferably, the regional service subsystem feeds data back to the query terminal based on the hospital number, discharge time, bed information, and the query request from the query terminal. Specifically, this includes the first sub-service device receiving the hospital number, discharge time, bed information, and the query request from the query terminal. If the discharge time is less than or equal to 365 days ago, it indicates that the data corresponding to the hospital number is stored in the sub-storage node device. The first sub-service device transmits a communication start command to the sub-storage node device via Bluetooth. The sub-storage node device opens its communication interface, and the first sub-service device establishes a communication connection with the sub-storage node device. Data is retrieved from the sub-storage node device according to the query request. After data transmission is complete, the sub-storage node device immediately closes its communication interface. The first sub-service device and the query terminal then communicate. The first sub-service device establishes a communication connection and provides data feedback. After the data feedback is completed, the first sub-service device deletes the corresponding data. If there is no discharge time, it means the patient is still in the ward. Based on the bed information, the specific local storage device is determined. The first sub-service device controls the transmission authorization device to transmit the communication start command to the control motherboard of the specific local storage device via the network cable. The control motherboard opens the WiFi communication interface, and the first sub-service device establishes a communication connection with the local storage device. According to the query request, it retrieves data from the local storage device. After the data transmission is completed, the local storage device immediately closes the communication interface. The first sub-service device establishes a communication connection with the query terminal and provides data feedback. After the data feedback is completed, the first sub-service device deletes the corresponding data.

[0020] Compared with the prior art, the present invention has the following beneficial effects:

[0021] Based on the timeliness of the data, the data is distributed and stored on local storage devices, sub-storage node devices, and main storage devices. Distributed storage reduces the risk of full data leakage from the source. Furthermore, external devices read data through the first and second sub-external service devices. The first and second sub-external service devices only store a small amount of query data. Even if hacked, the amount of data leaked is very small. The risk of full data leakage is further reduced by improving the query method. Attached Figure Description

[0022] Figure 1 This is a schematic diagram of the anesthesia nursing data management system of the present invention. Detailed Implementation

[0023] The following specific examples illustrate the implementation of the present invention. Those skilled in the art can easily understand other advantages and effects of the present invention from the content disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that, unless otherwise specified, the following embodiments and features described therein can be combined with each other.

[0024] like Figure 1 As shown, the anesthesia nursing data management system proposed in this invention includes a main external service device, a main service subsystem, and multiple regional service subsystems.

[0025] Each floor of the hospital's inpatient building is equipped with a regional service subsystem, which includes sub-storage node devices, a first sub-external service device, transmission authorization devices, and multiple local storage devices.

[0026] Each ward is equipped with a local storage device to store real-time monitoring data of patients in the current ward. The local storage device includes a control motherboard, an auxiliary motherboard, and a first storage unit. The control motherboard is connected to the auxiliary motherboard via Ethernet and physically connected to the first storage unit via a SATA interface. The control motherboard is responsible for controlling the operation of the local storage device, the auxiliary motherboard is responsible for real-time monitoring data acquisition, and the first storage unit is used to store the real-time monitoring data. The control motherboard uses an x86 architecture industrial control motherboard with WiFi communication capabilities and runs a Linux system. Specifically, it uses the BIS-6920P from Huabei Industrial Control. The BIS-6920P adds a wireless network card through a PCI / PCIe expansion slot to achieve WiFi communication capabilities. The functions of the control motherboard include: 1) transmitting relevant data to the first sub-external service device according to query instructions from the first sub-external service device; 2) when a new patient arrives in the ward, medical staff transmit the patient's hospital number and corresponding monitoring device number to the control motherboard via a terminal device. The control motherboard, based on the correspondence between the hospital number and the monitoring device number, stores the real-time monitoring data from the auxiliary motherboard in the first storage unit according to the hospital number; 3) when a patient leaves the ward, medical staff transmit the departing patient's hospital number to the control motherboard via a terminal device. The first sub-external service device transmits a communication start command to the sub-storage node device via Bluetooth. The sub-storage node device opens its communication interface, and the control motherboard establishes a communication connection with the sub-storage node device. The control motherboard transmits the corresponding data in the first storage unit to the sub-storage node device via WiFi communication according to the hospital number. After the transmission is completed, the control motherboard and the sub-storage node device immediately close the communication interface, and the control motherboard deletes the corresponding data in the first storage unit. The auxiliary motherboard uses an ARM industrial control motherboard, which can realize the StarFlash communication function. Specifically, the tactile intelligent RK3506 series industrial control motherboard is selected. The auxiliary motherboard's functions include: 1) communicating with ward monitoring equipment via wired or StarSpeed ​​communication to ensure data acquisition security. Specifically, for equipment that is not frequently moved, such as bedside ECG monitors, the auxiliary motherboard communicates with it via wired communication. Wired communication has strong anti-interference capabilities, good anti-eavesdropping properties, and more reliable transmission. For equipment that is frequently moved, such as portable blood gas analyzers temporarily configured in the ward, the auxiliary motherboard communicates with it via StarSpeed ​​communication. StarSpeed ​​communication employs multi-layered encryption, two-way authentication, and dynamic key negotiation mechanisms to construct an intrinsic security system from the physical layer to the application layer, providing high security; 2) transmitting data with authorized transmission equipment via StarSpeed ​​communication to receive communication adjustment commands from the first sub-external service equipment. The first storage unit uses industrial-grade solid-state drives to classify and store real-time monitoring data according to the patient's hospital number.

[0027] The sub-storage node devices and the first sub-external service device are located in the server room on each floor. The sub-storage node devices are used to store monitoring data of patients whose discharge date is less than or equal to 365 days ago. The sub-storage node devices have Bluetooth communication capabilities and specifically use the Inspur NP3020M7. The Inspur NP3020M7 is configured with a Hygon 3180 processor, 16GB of memory, a 512GB SSD for the system disk, and eight Seagate Exos 7E8 hard drives for data storage, enabling 50TB of usable storage to meet data storage requirements. A USB Bluetooth adapter is inserted into the USB 3.0 port on the rear panel of the Inspur NP3020M7. The sub-storage node device inspects all data on the data storage disk every night at 11 PM, determining the time interval between the upload time of the data corresponding to each hospital number and the current time. If the time interval exceeds 365 days, it sends a data transmission request to the main service subsystem. The second sub-external service device transmits the communication start command to the main storage device via Bluetooth. The main storage device opens the communication interface, establishes a communication connection with the sub-storage node device, and the sub-storage node device transmits the data corresponding to the hospital number to the main storage device. After the transmission is completed, the main storage device and the sub-storage node device immediately close the communication interface, and the sub-storage node device deletes the corresponding data. The first sub-external service device is responsible for information interaction with devices outside the regional service subsystem, as well as data transmission between the sub-storage node device and the local storage device. It uses a Dell Latitude 7430, configured with an i7-1255U processor, 16GB of memory, and a 512GB SSD.

[0028] The transmission authorization equipment is also located in the server room on each floor, equipped with multiple gigabit network ports. It connects to the first external service device and the local storage devices in each ward via network cables. The transmission authorization equipment runs a Linux system and uses iptables firewall rules to block all outbound data from the network ports connected to the first external service device, retaining only their receiving function. It also uses iptables firewall rules to block all inbound data from the network ports connected to each local storage device, retaining only their sending function. The gigabit network port of the local storage device's control board connects to the network cable from the transmission authorization equipment. The control board uses iptables firewall rules to block all outbound data from the connected network ports, retaining only their receiving function. Specifically, the transmission authorization equipment uses a Dongtian Industrial Control DT-22320-C206B industrial computer with 34 gigabit network ports. By configuring the network ports, the transmission authorization equipment can only transmit the communication start command from the first external service device to the target local storage device, and cannot retrieve data from the local storage device. This prevents external query terminals from accessing data from the local storage device through the transmission authorization equipment, ensuring the data security of the local storage device.

[0029] The main service subsystem is located in the hospital's main server room. It includes a main storage device and a second external service device. The main storage device stores historical monitoring data for patients discharged more than 365 days ago. It comprises a processor, a network communication unit, a Bluetooth communication unit, and a second storage unit. The processor, using a Hygon processor, controls the operation of the main storage device. The network communication unit handles data transmission between the main storage device and external systems. The Bluetooth communication unit manages the communication status settings between the main storage device and the second external service device. The second storage unit stores historical monitoring data using a storage array of 20 Seagate Exos X20 processors, providing a total storage capacity of 400TB. The second external service device interacts with external systems using an ASUS ZenBook 14 2025 processor, configured with an Intel Core Ultra5 processor, 16GB of RAM, and a 1TB SSD.

[0030] The main external service equipment is also located in the hospital's main server room. The main external service equipment also uses Inspur NP3020M7, configured with Hygon 3180 processor, 16GB memory, 512GB SSD system disk, and no data storage disk.

[0031] The working process of the anesthesia nursing data management system is as follows: The main external service device verifies the query request from the query terminal. After successful verification, the main external service device obtains the hospital number corresponding to the query request based on the hospital information system (HIS) inpatient management submodule, determines the discharge time and bed information corresponding to the hospital number, and determines the main service subsystem and / or specific regional service subsystem involved in the hospital number based on the discharge time and bed information. The main external service device transmits the hospital number, discharge time, bed information, and query request from the query terminal to the main service subsystem and / or specific regional service subsystem. The main service subsystem feeds back the data to the query terminal based on the query request and hospital number, and the regional service subsystem feeds back the data to the query terminal based on the hospital number, discharge time, bed information, and query request from the query terminal.

[0032] The verification of query requests includes user identity verification, access permission verification, request data format verification, and request data content verification. The specific verification methods are common knowledge in this field and will not be elaborated here.

[0033] The query request includes a series of data filtering conditions filled in by the user on the query page of the query terminal. The main external service device obtains the hospital number that meets the conditions from the hospital management sub-module based on the series of data filtering conditions, and uses it as the hospital number corresponding to the query request.

[0034] The determination of the main service subsystem and / or specific regional service subsystem involved in the hospital number based on discharge time and bed information specifically includes: querying the discharge time and bed information corresponding to each hospital number from the hospitalization management submodule; if the discharge time is more than 365 days ago, it means that the data corresponding to the hospital number is stored in the main service subsystem; if the discharge time is less than or equal to 365 days ago, or if there is no discharge time, it means that the data corresponding to the hospital number is stored in the regional service subsystem; and combining the bed information to determine the specific regional service subsystem.

[0035] The main service subsystem feeds data back to the query terminal based on the query request and hospital number. Specifically, the second sub-external service device receives the query request and hospital number from the query terminal, transmits a communication start command to the main storage device via Bluetooth, the main storage device opens the communication interface, the second sub-external service device establishes a communication connection with the main storage device, retrieves data from the main storage device according to the query request, and after the data transmission is complete, the main storage device immediately closes the communication interface. The second sub-external service device then establishes a communication connection with the query terminal to feed back the data. After the data feedback is completed, the second sub-external service device deletes the corresponding data.

[0036] The regional service subsystem feeds data back to the query terminal based on the hospital number, discharge time, bed information, and query request from the query terminal. Specifically, the first sub-service device receives the hospital number, discharge time, bed information, and query request from the query terminal. If the discharge time is less than or equal to 365 days ago, it means that the data corresponding to the hospital number is stored in the sub-storage node device. The first sub-service device transmits a communication start command to the sub-storage node device via Bluetooth. The sub-storage node device opens its communication interface, and the first sub-service device establishes a communication connection with the sub-storage node device. Data is retrieved from the sub-storage node device according to the query request. After the data transmission is complete, the sub-storage node device immediately closes its communication interface, and the first sub-service device establishes a communication connection with the query terminal. The communication connection is established, and data feedback is performed. After the data feedback is completed, the first sub-service device deletes the corresponding data. If there is no discharge time, it means the patient is still in the ward. Based on the bed information, the specific local storage device is determined. The first sub-service device controls the transmission authorization device to transmit the communication start command to the control motherboard of the specific local storage device via the network cable. The control motherboard opens the WiFi communication interface, and the first sub-service device establishes a communication connection with the local storage device. According to the query request, it retrieves data from the local storage device. After the data transmission is completed, the local storage device immediately closes the communication interface. The first sub-service device establishes a communication connection with the query terminal to perform data feedback. After the data feedback is completed, the first sub-service device deletes the corresponding data.

[0037] In the technical solution proposed in this invention, data is distributed and stored across a local storage device, sub-storage node devices, and a main storage device based on its timeliness. This distributed storage reduces the risk of total data leakage at the source. Furthermore, external devices read data through a first and a second sub-external service device. During the reading process, the communication interfaces of the local storage device, sub-storage node devices, and the main storage device are opened under the control of either the first or second sub-external service device to transmit data. After transmission, the local storage device, sub-storage node devices, and the main storage device immediately close the communication interfaces, disconnecting from the outside world and reducing the risk of external intrusion. The first and second sub-external service devices establish communication connections with external devices for data feedback. Since the first and second sub-external service devices only store a small amount of query data, even if hacked, the amount of data leaked is very small. This improved query method further reduces the risk of total data leakage.

[0038] The embodiments described above are merely illustrative of specific implementations of the present invention, and while the descriptions are detailed, they should not be construed as limiting the scope of the present invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these modifications and improvements all fall within the scope of protection of the present invention.

Claims

1. An anesthesia nursing data management system, characterized in that: The anesthesia nursing data management system includes a main external service device, a main service subsystem, and multiple regional service subsystems. Each floor of the hospital's inpatient building is equipped with a regional service subsystem, which includes a sub-storage node device, a first sub-external service device, a transmission authorization device, and multiple local storage devices. Each ward is equipped with a local storage device, which is used to store real-time monitoring data of patients in the current ward. The local storage device includes a control motherboard, an auxiliary motherboard, and a first storage unit. The sub-storage node device and the first sub-external service device are located in the computer room on each floor. The sub-storage node device is used to store monitoring data of patients whose discharge date is less than or equal to 365 days ago. The transmission authorization equipment is also located in the computer room on each floor. It has multiple gigabit network ports and is connected to the first sub-external service equipment and the local storage devices in each ward via network cables. The gigabit network port of the control motherboard of the local storage device is connected to the network cable from the transmission authorization equipment. The transmission authorization equipment is equipped with a Linux system. By setting firewall rules, the network port connected to the first sub-external service equipment can only receive data and not send data. By setting firewall rules, the network port connected to each local storage device can only send data and not receive data. The control motherboard can also set firewall rules to make its network port only receive data and not send data. Both the main external service device and the main service subsystem are located in the hospital's main computer room. The main service subsystem includes a main storage device and a second external service device. The main storage device is used to store historical monitoring data of patients whose discharge date is more than 365 days ago. The communication interfaces of the local storage device, the sub-storage node device, and the main storage device are only opened in the working state.

2. The anesthesia nursing data management system according to claim 1, characterized in that: The control motherboard is an x86 architecture industrial control motherboard with WiFi communication capability and a Linux system installed.

3. The anesthesia nursing data management system according to claim 2, characterized in that: The auxiliary motherboard is an ARM industrial control motherboard, which implements the StarFlash communication function.

4. The anesthesia nursing data management system according to claim 3, characterized in that: The sub-storage node device has Bluetooth communication capability.

5. The anesthesia nursing data management system according to claim 4, characterized in that: The transmission authorization device uses a DT-22320-C206B industrial computer with 34 gigabit network ports.

6. The anesthesia nursing data management system according to claim 5, characterized in that: The main storage device includes a processor, a network communication unit, a Bluetooth communication unit, and a second storage unit.

7. The anesthesia nursing data management system according to claim 6, characterized in that: The working process of the anesthesia nursing data management system is as follows: The main external service device verifies the query request from the query terminal. After successful verification, the main external service device obtains the hospital number corresponding to the query request based on the hospital information system's inpatient management submodule, determines the discharge time and bed information corresponding to the hospital number, and determines the main service subsystem and / or specific regional service subsystem involved in the hospital number based on the discharge time and bed information. The main external service device transmits the hospital number, discharge time, bed information, and query request from the query terminal to the main service subsystem and / or specific regional service subsystem. The main service subsystem feeds back the data to the query terminal based on the query request and hospital number, and the regional service subsystem feeds back the data to the query terminal based on the hospital number, discharge time, bed information, and query request from the query terminal.

8. The anesthesia nursing data management system according to claim 7, characterized in that: The step of determining the main service subsystem and / or specific regional service subsystem involved in determining the hospital number based on discharge time and bed information specifically includes querying the discharge time and bed information corresponding to each hospital number from the hospital management submodule. If the discharge time is more than 365 days ago, the hospital number involves the main service subsystem. If the discharge time is less than or equal to 365 days ago, or if there is no discharge time, the specific regional service subsystem is determined in conjunction with the bed information.

9. The anesthesia nursing data management system according to claim 7, characterized in that: The main service subsystem feeds data back to the query terminal based on the query terminal's query request and hospital number. Specifically, this involves a second sub-external service device receiving the query terminal's query request and hospital number, transmitting a communication start command to the main storage device via Bluetooth, the main storage device opening its communication interface, the second sub-external service device establishing a communication connection with the main storage device, retrieving data from the main storage device according to the query request, and after the data transmission is complete, the main storage device immediately closes the communication interface. The second sub-external service device then establishes a communication connection with the query terminal to feed back the data. After the data feedback is complete, the second sub-external service device deletes the corresponding data.

10. The anesthesia nursing data management system according to claim 7, characterized in that: The regional service subsystem feeds data back to the query terminal based on the hospital number, discharge time, bed information, and query request from the query terminal. Specifically, the first sub-service device receives the hospital number, discharge time, bed information, and query request from the query terminal. If the discharge time is less than or equal to 365 days ago, it means that the data corresponding to the hospital number is stored in the sub-storage node device. The first sub-service device transmits a communication start command to the sub-storage node device via Bluetooth. The sub-storage node device opens its communication interface, and the first sub-service device establishes a communication connection with the sub-storage node device. Data is retrieved from the sub-storage node device according to the query request. After the data transmission is complete, the sub-storage node device immediately closes its communication interface, and the first sub-service device establishes a communication connection with the query terminal. Establish a communication connection and provide data feedback. After the data feedback is completed, the first sub-service device deletes the corresponding data. If there is no discharge time, it means the patient is still in the ward. Based on the bed information, determine the specific local storage device. The first sub-service device controls the transmission authorization device to transmit the communication start command to the control motherboard of the specific local storage device via the network cable. The control motherboard opens the WiFi communication interface, and the first sub-service device establishes a communication connection with the local storage device. According to the query request, it retrieves data from the local storage device. After the data transmission is completed, the local storage device immediately closes the communication interface. The first sub-service device establishes a communication connection with the query terminal and provides data feedback. After the data feedback is completed, the first sub-service device deletes the corresponding data.

Images