Medical Information Database Encryption Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current medical information database management systems lack effective encryption methods that consider the characteristics of medical information and the diverse user groups accessing the data, leading to potential information leaks during searches, as all information is typically encrypted with a symmetric-key cryptosystem and decrypted for searching, which is inefficient and insecure.
Innovation Solution
A method that encrypts patient treatment information using a group key and patient private information using a private key, generating indexes for encrypted data, allowing secure searching without decryption, and decrypting searched information using the appropriate key, while considering various user groups and their access policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If all medical information is encrypted with a symmetric-key cryptosystem, then encryption simplicity is improved, but information security deteriorates due to decryption risks during search operations
Solution Approach 1:
The patent segments medical information into two categories: sensitive information (encrypted with asymmetric encryption) and non-sensitive information (encrypted with symmetric encryption). This segmentation allows different encryption methods to be applied to different data types, improving both security for sensitive data and efficiency for non-sensitive data, thereby resolving the contradiction between encryption simplicity and information security.
2Ease of operation
If all encrypted medical information is decrypted for searching, then search capability is improved, but information leakage risk increases
Solution Approach 1:
The patent applies local quality by creating searchable indexes only for non-sensitive medical information while keeping sensitive information encrypted and non-searchable. This allows search operations to be performed on decrypted non-sensitive data without exposing sensitive information, thereby improving search capability while minimizing information leakage risk.
3Productivity
If typical database encryption schemes are applied, then encryption efficiency is improved, but adaptability to medical information database deteriorates due to lack of consideration for group users and information characteristics
Solution Approach 1:
The patent changes the encryption parameters by applying asymmetric encryption specifically to sensitive medical information and symmetric encryption to non-sensitive information. This parameter change adapts the encryption system to the specific characteristics of medical information databases and their group user environment, improving both encryption efficiency and adaptability.
Data Source
AI summary
Provided is a method of managing medical information in an operating system for a medical information database, the method including encrypting, by a first user, first medical information having patient treatment information by using a group key, and second medical information having patient private information by using a private key, generating, by the first user, an index corresponding to the encrypted first medical information, storing the encrypted first and second medical information and the index to the medical information database, searching, by a second user, the medical information database for the encrypted first medical information by using the index; and decrypting the searched encrypted first medical information by using the group key.