A case manager work terminal

CN123017422APending Publication Date: 2026-10-30刘能文
View PDF 3 Cites 0 Cited by

Patent Information

Application Number
CN202611362384.0
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-09-03
Publication Date
2026-10-30

AI Technical Summary

Technical Problem

现有公开方案存在以下不足:其一,体征采集、卡证识读、音视频留证各自独立公开,如 CN102117384A 公开的便携式远程生命多参数监护终端含心电、体温、血压、血糖采集与音视频、GPS 远程传输,CN205649492U 公开便携式多体征数据检测一体机,CN108618847A 公开含箱体、展示装置与药品槽抽拉结构的移动健康随访设备,CN218162653U 公开可视频录像的移动随访设备含录像模块、主控与存储卡;其二,留证视频存储于普通存储卡,可事后补录、替换,证据链不可信;其三,封条、耗材取用无记录,无法防止私拆替换;其四,体征模块损坏需整机返厂,基层维护成本高;其五,便携终端与院内推车之间无统一充电、数据同步与锁合结构,双形态切换时留证数据需在脱机状态下另行导出,增加人为干预环节;其六,服务过程数据在服务端集中存证,同一随访工单下的评估、计划、执行、随访各节点数据彼此独立存储,节点与节点之间无哈希耦合关系,历史节点可被单独改写而不被察觉

Benefits of technology

[0010]本发明的有益效果通过可量化技术指标体现:第一,留证音视频的时间戳由硬件安全时钟芯片在采集瞬间生成并带数字签名,与体征数据、卡证信息、操作者四位一体绑定,事后替换任一环节均需同时破解固封胶物理固接与芯片签名,证据篡改在哈希上链后检测率为百分之百;第二,音视频留证模组与安全时钟芯片经固封胶物理固接,拆离即破坏时钟芯片供电回路,终端开机校验供电回路阻抗,阻抗异常即锁定留证功能,防拆联动使私拆留证模组代价显著提升;第三,体征模块经统一机械电气接口热插拔,基层现场更换体征模块耗时由整机返厂约七日缩短至现场三十秒以内;第四,推车锁合部实现院内充电归档与院外便携使用的双形态无缝切换,锁合即上传并充电、脱机即本地缓存,避免人工导出环节;第五,防拆封条仓开仓留痕、耗材防私拆;第六,各流程节点存证段的签名值滚入下一段哈希,改写任一历史节点均导致其后各段哈希断链,配合时间戳倒序与越权写入检测,使历史节点不可被单独回改。上述效果由防拆封条仓、留证模组与安全时钟芯片物理绑定、模块热插拔接口、推车锁合组合结构以及分段链式签名耦合关系所共同带来的技术改进所产生。

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN123017422A_ABST
    Figure CN123017422A_ABST
Patent Text Reader

Abstract

The application discloses a case manager work terminal. The terminal physically connects an audio and video evidence leaving module with a sealing glue and a secure clock chip. The chip generates a signed timestamp with a signature time stamp at the moment of evidence collection, which is bound with the physical data and card information as an evidence data package. The impedance of the power supply loop of the evidence leaving module, the opening of the anti-disassembly strip warehouse, the insertion and extraction of the physical module, and the in-place signal of the trolley locking part are detected to bind abnormal events and follow-up work order records. The evidence data package is subjected to a hash operation to obtain an evidence summary. The evidence is uploaded and charged through the trolley locking part electric contact when locking, and is locally cached for uploading when offline. The evidence data package is divided into evidence storage segments according to the follow-up process nodes. Each segment contains a previous segment hash and is signed by a chip internal non-directable hardware key. The signature value participates in the next segment hash calculation to form a segmented chain structure. The application is used for the credible storage and auditing of follow-up evidence chain, and does not involve medical judgment conclusion and medical treatment method.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This invention relates to the field of medical follow-up service equipment and data processing technology, specifically to a portable case manager's workstation integrating structured scale entry, card reading, vital sign collection, audio and video evidence retention, and tamper-proof structure, as well as a method, system, and storage medium for processing follow-up service evidence data. This invention only collects, timestamps, and marks the physical signals and recorded data generated during the follow-up process; it does not output any medical judgment conclusions or involve any medical treatment methods. Background Technology

[0002] When case managers (follow-up nurses or members of the family doctor team) provide home visits, they need to simultaneously complete structured assessment questionnaire entry, identity and medical insurance card verification, vital sign collection, and audio / video evidence recording. Existing publicly available solutions have the following shortcomings: First, vital sign collection, card reading, and audio / video evidence recording are disclosed independently. For example, CN102117384A discloses a portable remote multi-parameter vital sign monitoring terminal that includes ECG, temperature, blood pressure, and blood glucose collection and audio / video, and GPS remote transmission; CN205649492U discloses a portable multi-vital sign data detection all-in-one machine; CN108618847A discloses a mobile health follow-up device including a cabinet, display device, and a pull-out medicine compartment; and CN218162653U... The mobile follow-up devices that can record video publicly include a recording module, main control unit, and memory card; secondly, the evidence videos are stored on ordinary memory cards, which can be re-recorded or replaced afterward, making the evidence chain unreliable; thirdly, there are no records of the use of seals and consumables, making it impossible to prevent unauthorized disassembly and replacement; fourthly, damage to the vital signs module requires the entire device to be returned to the factory, resulting in high maintenance costs for grassroots staff; fifthly, there is no unified charging, data synchronization, and locking structure between the portable terminal and the hospital cart, and the evidence data needs to be exported separately in offline mode when switching between the two modes, increasing the human intervention link; sixthly, service process data is centrally stored on the server side, and the data of each node of assessment, planning, execution, and follow-up under the same follow-up work order are stored independently, with no hash coupling relationship between nodes, and historical nodes can be rewritten individually without being detected.

[0003] The aforementioned prior publications disclosed individual features in vital sign collection, audio / video evidence retention, and card / identity card recognition, but no single document has disclosed a complete structure that integrates all four into a single shell and further achieves a reliable follow-up evidence chain and dual-form universality through tamper-proof sealing, physical binding of the evidence retention module and security clock chip, hot-swappable vital sign module, and trolley locking combination structure. Furthermore, no single document has disclosed a method for rolling the non-derivative hardware key signature value from the terminal's security chip into the hash of the next evidence storage segment, creating an unalterable coupled segmented chain evidence storage structure between each node segment. This invention aims to provide an integrated work terminal and evidence data processing solution for follow-up service processes that offers a reliable evidence chain, on-site module maintenance, and dual-form universality both inside and outside the hospital. Summary of the Invention

[0004] The technical problem to be solved by this invention is: in the scenario of case managers visiting patients at home, to ensure that the audio and video evidence of the follow-up visit, as well as the vital signs and card data, are irreplaceable afterward, and that the chain of evidence is credible; to enable the vital signs module to be hot-swapped and maintained on-site; and to enable the portable terminal and the hospital cart to achieve unified charging, data synchronization and locking dual-mode switching, while forming an unalterable chain coupling between the process data of each process node under the same follow-up work order.

[0005] To solve the above-mentioned technical problems, the present invention adopts the following technical solution: A method for processing evidence data in follow-up services is applied to a case manager's work terminal in a case manager's home follow-up scenario. The terminal includes an audio / video evidence module and a security clock chip physically secured with adhesive, a vital signs module insertion area for hot-plugging a vital signs acquisition module, an tamper-proof sealing compartment, and a trolley locking mechanism for locking with a follow-up trolley. The method includes: acquiring identity information and medical insurance card information collected by a dual-card reader module, and vital signs data measured by a vital signs acquisition module hot-plugged into the vital signs module insertion area. The vital signs data includes at least one of blood pressure and blood glucose data, or includes blood oxygen saturation data obtained by filtering and ratio calculation of transmitted or reflected light intensity signals collected by a photoelectric sensor; at the moment the audio / video evidence module acquires the follow-up audio / video data, the method further includes: The secure clock chip generates a timestamp with a digital signature and binds the timestamp, vital sign data, identity information, and medical insurance card information into an evidence data package. It detects the power supply circuit impedance of the audio / video evidence module, the opening event of the tamper-evident seal compartment, the insertion / removal event of the vital sign module's connector area, and the presence signal of the trolley's locking mechanism. It binds and records the type of any abnormal event, its corresponding timestamp, and the current follow-up work order number. It performs a hash operation on the evidence data package to obtain an evidence digest. When the presence signal is valid, the evidence digest is uploaded to the server for storage via the electrical contacts of the trolley's locking mechanism, and the follow-up trolley charges the terminal. When the presence signal is invalid, the evidence digest is cached locally on the terminal for later upload. When any link in the evidence chain is missing, the current follow-up record is marked as pending review.

[0006] The follow-up service evidence data processing method further includes: the evidence data package is divided into several evidence storage segments according to the follow-up process nodes, each evidence storage segment includes a node type, service data digest, hash value of the previous evidence storage segment and timestamp generated by the secure clock chip, forming a segmented chain structure; each evidence storage segment is signed by the hardware key of the writing operator, the hardware key is stored in the secure clock chip and cannot be exported, the signature is bound to the device identifier and the operator identifier, and the signature value of the signature participates in the hash calculation of the next evidence storage segment; hierarchical reading permissions are configured for the segmented chain structure according to the writer role; timestamp rewriting in reverse order, hash chain rewriting, and unauthorized writing where the hardware key does not match the writer role are detected, and when any of the above situations are detected, the abnormal segment is marked and locked for manual auditing.

[0007] A follow-up service evidence data processing system includes a dual-card reading module, a vital sign collection module, an audio and video evidence retention module, a security clock chip, an tamper-proof seal compartment, a trolley locking mechanism, and a processing unit. The audio and video evidence retention module is physically fixed to the security clock chip on the same circuit board via adhesive. The trolley locking mechanism includes a dovetail groove, electrical contacts, and an electromagnetic lock. The processing unit is configured to perform the steps of the aforementioned method.

[0008] A computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the aforementioned follow-up service evidence data processing method.

[0009] A case manager's work terminal includes a housing, a touch-sensitive questionnaire input module, a dual-card reader module, an audio / video evidence retention module, a secure clock chip, a vital signs module insertion area, an tamper-proof seal compartment, and a trolley locking mechanism. The audio / video evidence retention module is fixed to the secure clock chip on the same flexible circuit board with adhesive. Removing the audio / video evidence retention module disrupts the power supply circuit of the secure clock chip. The vital signs module insertion area consists of a guide groove, spring contacts, and a latch, forming a unified mechanical and electrical interface to allow for hot-swapping of the vital signs module. The tamper-proof seal compartment includes a roll-up seal, a cutting edge, and a micro switch for the compartment door. The trolley locking mechanism includes a dovetail groove, electrical contacts, and an electromagnetic lock to engage with the follow-up trolley for charging and data synchronization. The secure clock chip stores a non-exportable hardware key, which is used to generate the digital signature and sign each evidence retention segment. Beneficial effects

[0010] The beneficial effects of this invention are manifested through quantifiable technical indicators: First, the timestamp of the retained audio and video is generated by the hardware security clock chip at the moment of acquisition and carries a digital signature. It is bound to the vital signs data, card information, and operator information in a unified whole. Subsequent replacement of any link requires simultaneously breaking the physical connection of the adhesive and the chip signature. The detection rate of evidence tampering is 100% after the hash is uploaded to the blockchain. Second, the audio and video evidence retention module and the security clock chip are physically fixed together by adhesive. Removal will destroy the power supply circuit of the clock chip. When the terminal is powered on, the impedance of the power supply circuit is checked. If the impedance is abnormal, the evidence retention function is locked. The anti-tamper linkage makes the cost of unauthorized removal of the evidence retention module significantly higher. The improvements include: Third, the vital signs module is hot-swappable via a unified mechanical and electrical interface, reducing the time for on-site replacement from approximately seven days (returning the entire unit to the factory) to less than thirty seconds. Fourth, the trolley locking mechanism allows for seamless switching between in-hospital charging and archiving and out-of-hospital portable use; locking immediately uploads and charges, while offline operation results in local caching, eliminating the need for manual export. Fifth, the tamper-proof seal compartment leaves a trace upon opening, and consumables are protected against unauthorized tampering. Sixth, the signature value of each process node's evidence storage segment rolls into the next hash segment; rewriting any historical node causes subsequent hash segments to break the chain. Combined with timestamp reversal and unauthorized write detection, historical nodes cannot be individually modified. These improvements are the result of technical enhancements brought about by the physical binding of the tamper-proof seal compartment, the evidence storage module, and the secure clock chip; the hot-swappable module interface; the trolley locking combination structure; and the segmented chain-like signature coupling relationship. Attached Figure Description

[0011] Figure 1 This is a front view of the overall structure of the case manager's work terminal, showing the location of the touch screen, dual card reader area, and evidence retention module.

[0012] Figure 2 This is a cross-sectional view of the side feature module insertion area of ​​the housing, showing the guide groove, spring contact, latch and micro switch.

[0013] Figure 3 This is a cross-sectional view of the structure in which the audio and video evidence module and the security clock chip are fixed together with adhesive, and is the core drawing of this invention (used as an abstract drawing).

[0014] Figure 4 This is a cross-sectional view of the tamper-evident seal compartment, showing the roll-up seal, the cutting edge, and the micro switch for the compartment door.

[0015] Figure 5 This is a schematic diagram showing the fit between the bottom trolley locking part of the housing and the follow-up trolley, illustrating the dovetail groove, electrical contacts, and electromagnetic lock.

[0016] Figure 6 It is a block diagram showing the signal connection relationships of all modules in the whole machine, for use by the method and system.

[0017] Figure 7This is a flowchart of the follow-up service evidence data processing method.

[0018] Figure 8 This is a diagram of the segmented chain signature and evidence storage structure of the evidence data packet.

[0019] Reference numerals: 1. Housing; 2. Touchscreen meter input module; 3. Dual-card reader module; 4. Audio / video evidence storage module; 5. Security clock chip; 6. Vital signs module insertion area; 7. Tamper-proof seal compartment; 8. Trolley locking mechanism; 9. Processing unit; 10. Sealing adhesive; 11. ID card reader area; 12. Medical insurance card reader area; 13. Camera; 14. Microphone; 15. Flexible circuit board; 16. Power supply solder joint; 17. Power supply circuit; 18. Guide groove; 19. Spring contact; 20. Lock; 21. Microswitch; 22. Vital signs acquisition module; 23. Roll-up seal; 24. Cutting edge; 25. Door microswitch; 26. Door; 27. Dovetail groove; 28. Electrical contact; 29. ​​Electromagnetic lock; 30. Follow-up trolley; 31. Evidence storage server; 32. Evidence data packet; 33. Evidence storage segment; 34. Front-end hash; 35. Hardware key. Specific implementation

[0020] Example 1 (Terminal Product Structure): As shown Figure 1 As shown, the housing (1) is made of ABS and PC alloy injection molding, with dimensions of 240 mm x 160 mm x 45 mm. The touch screen constitutes the touch measurement input module (2), with a size of 8 inches. The ID card reading area (11) and the medical insurance card reading area (12) of the dual card reading module (3) are arranged side by side 20 mm below the touch screen, with a spacing of 30 mm. The audio and video evidence module (4) is located on the top of the housing (1) and includes a camera (13) and a microphone (14). The audio and video evidence module (4) is fixed to the security clock chip (5) on the same flexible circuit board (15) by a sealing glue (10) (epoxy electronic glue), and the fixed area covers the power supply solder joint (16) of the security clock chip (5). Forcibly removing the audio and video evidence module (4) will tear the power supply circuit (17), and the security clock chip (5) will lose power. When the terminal is powered on again, it will check the impedance of the power supply circuit (17) of the security clock chip (5). If the impedance is abnormal, the evidence retention function will be locked and an alarm will be reported. Figure 2 As shown, the vital signs module insertion area (6) is located on the side of the housing (1), with two standard insertion positions. Each insertion position contains four spring contacts (19) (two power pins and two data pins) and an elastic latch (20). Guide grooves (18) are located on both sides of the insertion position to guide the insertion of the vital signs acquisition module (22). A micro switch (21) is connected in series with the linkage rod of the latch (20) to record insertion and removal events. Figure 4As shown, the tamper-evident seal compartment (7) is located at the rear of the housing (1), and includes a roll-up seal (23), a cutting edge (24), and a door micro switch (25). A door micro switch (25) is located at the pivot of the door (26). The opening event signal is connected to the terminal main control. The cutting edge (24) is used to cut off the pulled-out roll-up seal (23). Figure 5 As shown, the trolley locking part (8) is located at the bottom of the housing (1). The dovetail groove (27) is 40 mm wide and contains six electrical contacts (28) (two charging contacts, two data contacts, and two in-situ detection contacts) and an electromagnetic lock (29). When locked with the follow-up trolley (30), the follow-up trolley (30) charges the terminal and synchronizes the data through the electrical contacts (28). The electromagnetic lock (29) is controlled by the terminal master control.

[0021] Example 2 (Evidence Data Processing Method): As follows Figure 7 As shown, at the start of the follow-up, the dual-card reading module (3) reads the identity information and medical insurance card information and starts the audio and video evidence module (4); at the moment when the audio and video evidence module (4) collects the follow-up audio and video data, the security clock chip (5) generates a timestamp with a digital signature and binds the timestamp, vital sign data, identity information and medical insurance card information into an evidence data package (32). The vital sign data is measured by the vital sign acquisition module (22) that is hot-swappable to the vital sign module plug-in area (6), including at least one of blood pressure data and blood glucose data, or includes blood oxygen saturation data obtained by filtering and ratio calculation of the transmitted light intensity signal or reflected light intensity signal collected by the photoelectric sensor; the filtering and ratio calculation is completed by the filter ratio calculation circuit built into the blood oxygen module, first filtering out the DC component and ambient light interference, and then performing a ratio calculation on the AC component and DC component of the two light intensity signals. The terminal detects the abnormal impedance of the power supply circuit (17) of the audio and video evidence module (4), the opening of the anti-tamper seal compartment (7), the unauthorized insertion and removal of the vital signs module plug-in area (6), and the presence signal of the trolley locking part (8). It binds the event type, timestamp and the current follow-up work order number and records them and reports them immediately. The evidence data packet (32) is hashed to obtain the evidence digest. When the presence signal is valid, the terminal is locked with the follow-up trolley (30) through the trolley locking part (8), and the evidence digest is uploaded to the evidence storage server (31) through the electrical contact (28) and charged by the follow-up trolley (30). When the presence signal is invalid, the evidence digest is cached locally on the terminal and is to be uploaded. If any link in the evidence chain is missing, the follow-up record is marked as pending review. The difference between CN218162653U and simple video recording storage is that the evidence data is physically bound to the hardware timestamp and the anti-tamper event and cannot be replaced afterward.

[0022] Example 3 (System Deployment): As Figure 6As shown, the follow-up service evidence data processing system is deployed on the case manager's work terminal in Example 1. The processing unit (9) is connected to the contact measurement scale entry module (2), the dual card reading module (3), the vital signs collection module (22), the audio and video evidence retention module (4), the security clock chip (5), the tamper-proof seal compartment (7), and the trolley locking part (8), and executes the method steps of Example 2. The security clock chip (5) is a real-time clock security chip with temperature compensation. Its digital signature is generated by a non-derivative hardware key (35) in the chip. The digital signature is bound to the device identifier and the operator identifier. When the trolley locking part (8) is locked, it is locked by the electromagnetic lock (29) and sends an in-situ signal to the processing unit (9), triggering charging and data synchronization.

[0023] Example 4 (Segmented Chained Signature and Evidence Storage): For example... Figure 8 As shown, the evidence data packet (32) is divided into several evidence storage segments (33) according to the follow-up process nodes. The follow-up process nodes include four categories: assessment, planning, execution, and follow-up. The fields of each evidence storage segment (33) are node type, service data digest, front-end hash (34), and timestamp generated by the secure clock chip (5). The front-end hash (34) is taken from the overall hash value of the previous evidence storage segment (33). The segments are thus connected end to end to form a segmented chain structure. Each evidence storage segment (33) is signed by the hardware key (35) of the operator. The hardware key (35) is generated and stored in the secure clock chip (5) and cannot be exported. The signature is bound to the device identifier and the operator identifier, and the signature value of the signature participates in the hash calculation of the next evidence storage segment (33). That is, the front-end hash (34) of the next segment is obtained by hashing all the fields of this segment together with the signature value of this segment. Therefore, rewriting any historical evidence storage segment (33) will break the chain of the front-end hashes (34) of all subsequent segments. The system configures hierarchical reading permissions according to the writer's role, forming a three-level structure: family members read the summary, operators read the node certificate, and supervisors read the entire chain. It also detects timestamp rewriting, hash chain break rewriting, and unauthorized writing where the hardware key (35) does not match the writer's role. If any of the above situations are detected, the abnormal segment is marked and locked for manual audit. For example, if an operator attempts to rewrite a service record from three days ago, the difference between the timestamp of the new segment and the current value of the security clock chip (5) exceeds the threshold, and the insertion of this segment into the historical position causes the hash (34) of the preceding segments of subsequent segments to break, the system will mark the rewriting and chain break as abnormal. Data compliance and ethical design

[0024] The data processing in this implementation follows the following compliance and ethical requirements: the legal basis is the explicit authorization of the careee and the case manager under the follow-up service agreement and the principle of minimum necessity; the scope of collection includes identity information, medical insurance card information, vital sign data (blood pressure, blood oxygen, blood glucose) and follow-up audio and video evidence data, without collecting voice content recognition results, and without outputting any medical judgment conclusions or medical treatment plans; health data is de-identified locally and then transmitted encrypted, and the original evidence audio and video does not leave the terminal or upload to unauthorized nodes; the secure clock chip signature key is generated and stored on the terminal side and cannot be exported, and the hash value of the evidence data packet is stored on the blockchain; under the hierarchical reading permissions, family members can only read the summary, the handler can read the node certificate, and the supervisor can read the entire chain, and any reading request is verified by permissions and does not contain unauthorized amplification; this invention does not change any medical or nursing judgment conclusions, and the output is only the quantitative record data and evidence records of the follow-up process; the preset assessment scale and rule base do not contain any discriminatory labels based on region, gender, or age, and the rule settings meet the requirements of fairness and non-discrimination. The aforementioned minimum necessary requirements, hierarchical reading, and data leaving the domain design are implemented in accordance with Article 5 of the 2026 revised review guidelines.

Claims

1. A method for processing evidence data from follow-up services, characterized in that, A case manager's work terminal for home follow-up scenarios, comprising an audio / video evidence module and a security clock chip physically secured with adhesive, a vital signs module insertion area for hot-plugging a vital signs collection module, an tamper-proof sealing compartment, and a trolley locking mechanism for locking with a follow-up trolley; the method includes: acquiring identity information and medical insurance card information collected by a dual-card reader module, and vital signs data measured by a vital signs collection module hot-plugged into the vital signs module insertion area, the vital signs data including at least one of blood pressure and blood glucose data; at the instant the audio / video evidence module collects the follow-up audio / video data, the security clock chip generates a timestamp with a digital signature, and the timestamp, the... Vital signs data, identity information, and medical insurance card information are bound together to form an evidence data package; the power supply circuit impedance of the audio and video evidence module, the opening event of the tamper-evident seal compartment, the insertion and removal event of the vital signs module plug-in area, and the presence signal of the trolley locking part are detected, and the type of any abnormal event, the corresponding timestamp, and the current follow-up work order number are bound and recorded; the evidence data package is hashed to obtain an evidence digest; when the presence signal is valid, the evidence digest is uploaded to the server for storage via the electrical contacts of the trolley locking part and the follow-up trolley charges the terminal; when the presence signal is invalid, the evidence digest is cached locally on the terminal for later upload; when any link in the evidence chain is missing, the current follow-up record is marked as pending review.

2. The follow-up service evidence data processing method according to claim 1, characterized in that, The security clock chip is a real-time clock security chip with temperature compensation. The sealing adhesive that fixes the audio and video evidence module to the security clock chip covers the power supply solder joints of the security clock chip. Removing the audio and video evidence module will tear the power supply circuit and de-energize the security clock chip.

3. The follow-up service evidence data processing method according to claim 1, characterized in that, The terminal checks the power supply circuit impedance of the security clock chip upon the next power-on. If the impedance is abnormal, the record-keeping function is locked and an alarm is reported.

4. The follow-up service evidence data processing method according to claim 1, characterized in that, The evidence summary is uploaded to the server for storage via a blockchain light node structure.

5. The follow-up service evidence data processing method according to claim 1, characterized in that, The vital signs data also include blood oxygen saturation data. The blood oxygen saturation data is obtained by the photoelectric sensor in the vital signs acquisition module collecting the transmitted light intensity signal or the reflected light intensity signal, filtering out the DC component and ambient light interference by the filtering circuit, and then the ratio calculation circuit calculates the ratio between the AC component and the DC component of the two light intensity signals.

6. The follow-up service evidence data processing method according to claim 1, characterized in that, The evidence data package is divided into several evidence storage segments according to the follow-up process nodes. Each evidence storage segment includes a node type, a service data digest, a hash value of the previous evidence storage segment, and a timestamp generated by the secure clock chip, forming a segmented chain structure. Each evidence storage segment is signed by the hardware key of the writing operator. The hardware key is stored in the secure clock chip and cannot be exported. The signature is bound to the device identifier and the operator identifier, and the signature value of the signature participates in the hash calculation of the next evidence storage segment.

7. The follow-up service evidence data processing method according to claim 6, characterized in that, Configure hierarchical read permissions for the segmented chain structure according to the writer role; detect timestamp rewriting in reverse order, hash chain rewriting, and unauthorized writing where the hardware key does not match the writer role, and mark the abnormal segment and lock the abnormal segment for manual audit when any of the above situations are detected.

8. A follow-up service evidence data processing system, characterized in that, The system includes a dual-card reader module, a vital signs module insertion area, a vital signs acquisition module hot-swappable via the vital signs module insertion area, an audio / video evidence module, a security clock chip, an tamper-proof seal compartment, a trolley locking mechanism, and a processing unit. The audio / video evidence module is physically fixed to the security clock chip on the same circuit board via adhesive. The trolley locking mechanism includes a dovetail groove, electrical contacts, and an electromagnetic lock. The processing unit is configured to acquire the identity information and medical insurance card information collected by the dual-card reader module, as well as the vital signs data measured by the vital signs acquisition module, including blood pressure. At least one of the following: data and blood glucose data; at the moment the audio and video evidence module collects the follow-up audio and video data, the security clock chip is controlled to generate a timestamp with a digital signature, and the timestamp, the vital signs data, the identity information and the medical insurance card information are bound together as an evidence data package; the power supply circuit impedance of the audio and video evidence module, the opening event of the anti-tamper seal compartment, the insertion and removal event of the vital signs module plug-in area and the presence signal of the trolley locking part are detected, and the type of any abnormal event, the corresponding timestamp and the current follow-up work order number are bound and recorded; The evidence data packet is hashed to obtain an evidence digest. When the presence signal is valid, the evidence digest is uploaded to the server for storage via the electrical contact. When the presence signal is invalid, the evidence digest is cached locally. When any link in the evidence chain is missing, the current follow-up record is marked as pending review.

9. The follow-up service evidence data processing system according to claim 8, characterized in that, The secure clock chip stores a non-extractable hardware key, and the digital signature is generated by the hardware key. The digital signature is bound to the device identifier and the operator identifier.

10. The follow-up service evidence data processing system according to claim 8, characterized in that, The tamper-evident seal compartment includes a roll-up seal, a cutting edge, and a micro switch for the compartment door. The signal output terminal of the micro switch for the compartment door is connected to the processing unit.

11. The follow-up service evidence data processing system according to claim 8, characterized in that, The vital signs module insertion area consists of a guide groove, spring contacts, and a latch forming a unified mechanical and electrical interface. The insertion and removal events are detected by a micro switch connected in series with the latch.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the follow-up service evidence data processing method as described in any one of claims 1 to 7. The method is applied to a case manager's work terminal in a case manager's home follow-up scenario. The terminal includes an audio / video evidence module and a security clock chip physically fixed with adhesive, a vital signs module insertion area for hot-plugging a vital signs acquisition module, an anti-tamper seal compartment, and a trolley locking part for locking with the follow-up trolley. The method includes: acquiring identity information and medical insurance card information collected by a dual-card reader module, and vital signs data measured by a vital signs acquisition module hot-plugged into the vital signs module insertion area, the vital signs data including at least one of blood pressure and blood glucose data; at the moment the audio / video evidence module collects the follow-up audio / video data, the security clock chip... The chip generates a timestamp with a digital signature and binds the timestamp, vital sign data, identity information, and medical insurance card information into an evidence data package; it detects the power supply circuit impedance of the audio and video evidence module, the opening event of the tamper-evident seal compartment, the insertion and removal event of the vital sign module's plug-in area, and the presence signal of the trolley locking part, binding and recording the type of any abnormal event, the corresponding timestamp, and the current follow-up work order number; it performs a hash operation on the evidence data package to obtain an evidence digest; when the presence signal is valid, the evidence digest is uploaded to the server for storage via the electrical contacts of the trolley locking part and the follow-up trolley charges the terminal; when the presence signal is invalid, the evidence digest is cached locally on the terminal for later upload; when any link in the evidence chain is missing, the current follow-up record is marked as pending review.

Citation Information

Patent Citations

  • Portable remote life multi-parameter monitoring terminal and constructed remote monitoring system

    CN102117384A

  • Moving health follow-up visiting equipment

    CN108618847A

  • Mobile follow-up visit device with video recording function

    CN218162653U