KR101907986B1 - Secure information sharing method and system for remote consulting and collaboration - Google Patents

Abstract

The present invention relates to a method and system for sharing information for collaboration. The information sharing method comprises the steps of: connecting first to nth client devices and a management server in a communicable manner through a network; transmitting a first encrypted message from a first client device; Transmitting a push notification message corresponding to the first message to the second to the n-th client devices, transmitting at least one of the second to n-th client devices to the management server, And causing the server to perform an encrypted interactive communication service between the first client device and the device that transmitted the second message. According to the present invention, a highly secure information sharing method that can be used for remote consultation, medical collaboration, and the like is provided

Description

A secure information sharing method and system for remote consultation and collaboration,

The present invention relates to an information sharing method and system, and more particularly, to a highly secure information sharing method and system that can be used for remote consultation, collaboration, and the like.

In general, a collaborative system that combines information protection functions includes a client that handles the user interface, a server that provides collaboration services, delivers calls and notifications, stores and manages shared files, and a format And an anonymizing program.

In the case of a collaborative system in the medical field, it is necessary to efficiently share information and collaborate among healthcare persons while protecting medical information such as patient's personal information and medical records from being leaked.

To do this, all information must be encrypted and stored and encrypted during communication. If necessary, it is also necessary to anonymize the information such as name, address, resident registration number, past medical history, etc. so that it is impossible to specify who the information is, even if it is anonymized and decrypted. In addition, since personal medical information must be delivered only to the intended recipient, recipient authentication is needed so that the sender can ascertain to whom and when the message or information was delivered.

However, in general, text messages, mobile messenger, e-mail, etc., which are used for information sharing, are not highly secure, so it is appropriate to use medical information or other personal information in medical collaboration or remote counseling not.

Therefore, in order to use in this field, it is necessary to provide an information sharing method which can provide high level of security while providing the same level of easy access as a general messenger.

Accordingly, an object of the present invention is to provide a highly secure information sharing method and system for use in medical collaboration or remote consultation.

According to another aspect of the present invention, there is provided an information sharing method including: connecting first to n-th client devices and a management server through a network so as to communicate with each other; transmitting the encrypted first message from the first client device Decrypting the first message at the management server and transmitting a push notification message corresponding to the first message to the second to nth client devices, The method comprising the steps of: the device transmitting a second message corresponding to the push notification message to the management server; and an encrypted interactive communication service between the management server and the first client device .

The method according to claim 1, further comprising the step of allowing the management server to perform an interactive communication service between the second to n-th client devices, wherein the first client, the device transmitting the second message, Messages can be sent and received using an SSL (Secure Socket Layer) channel.

In addition, the related contents and information may be automatically deleted according to the selection of the user by the message transmitted / received through the encrypted interactive communication service, and the device transmitting the first message and the first client device, The public and private keys can be used to encrypt and decrypt messages.

The information sharing system according to the present invention includes a first client device transmitting an encrypted first message, second client through nth client device communicably connected to the first client device via a network, And a management server connected to the first to the n-th client devices via the first to the n-th client devices for decrypting the first message and transmitting a push notification message corresponding to the first message to the second to the n-th client devices, Wherein at least one of the second to n-th client devices transmits a second message corresponding to the push notification message, the management server transmits the second message corresponding to the push notification message to the first client device, So that an encrypted interactive communication service can be performed.

According to the present invention, a secure and highly secure information sharing method that can be used for remote consultation, medical collaboration, and the like is provided. When the information sharing method according to the present invention is applied to the field of medical collaboration, it is possible to efficiently share information and collaborate among healthcare people while protecting medical information such as patient's personal information and medical record from being leaked. In addition, when the sharing method according to the present invention is applied to a shopping mall remote counseling, the manager can conduct consultation while sharing the screen viewed by the user, and can automatically delete all information after completing the consultation.

FIG. 1 is a diagram illustrating an example of a system to which an information sharing method according to the present invention is applied.
FIG. 2 is a diagram showing a configuration of a client device in FIG. 1,
3 is a diagram showing the configuration of the management server in FIG. 1,
4 is a signal flow diagram for explaining a message deletion process in the information sharing method according to the present invention.
5 is a diagram referred to in explanation of the case where the information sharing method according to the present invention is applied to medical emergency collaboration, and
6 is a diagram for explaining a case where the information sharing method according to the present invention is applied to a shopping mall consultation.

Hereinafter, the present invention will be described in detail with reference to the drawings.

1 shows an example of a system applied to an information sharing method according to the present invention.

Referring to FIG. 1, a plurality of client devices 100a to 100n are communicably connected to a management server 200 through a communication network 50. FIG.

The communication network 50 refers to a mobile communication network, the Internet, and other networks capable of transmitting and receiving data.

The client devices 100a to 100n can be connected to the Internet or other networks such as a mobile phone, a smart phone, a notebook computer, a tablet computer, All electronic devices are included.

In this configuration, the client devices 100a to 100n can transmit the encrypted message, decrypt the message encrypted by the other device, and interpret the message content. In addition, the client devices 100a to 100n can authenticate the recipient, check the message status, and perform one-to-one chat or group chat with other devices.

The management server 200 controls the transmission and reception of an encrypted message between the client devices 100a to 100n and can provide a push notification or a paging function. The management server 200 manages the message lifetime, and can also provide functions such as authentication, access control, logging, auditing, and monitoring.

FIG. 2 is a diagram showing a configuration of a client device in FIG.

2, the client device 100 includes a Signin template unit 101, a member template unit 103, a channel template unit 105, a message template unit 107, a Callout An event template unit 109, an admin page template unit 111, a web RTC template unit 113, a common libraries unit 115, a view router 117, A Mongo unit 119, and a local memory 121, and the like. When such components are implemented in practical applications, two or more components may be combined into one component, or one component may be divided into two or more components as necessary.

A sign template unit 101, a member template unit 103, a channel template unit 105, a message template unit 107, a callout / event template unit 109, page template unit 111, a web RTC template unit 113, a common libraries unit 115 and a view router 117 can be configured with HTML and JS (JavaScript) .

The signin template unit 101 provides functions such as user registration, login, password search, and the like. The member template unit 103 provides functions related to the registration, modification, and deletion views of the member list of the chat room. The channel template unit 105 provides functions related to the registration, modification, and deletion views of the chat room list. The message template unit 107 provides a function related to a chat content list view, and also provides functions such as Message Recall and Message Delivery Confirmation.

The callout / event template unit 109 provides a notification function for emergency call and event generation. The administrator page template unit 111 manages the authority of an administrator page or the like in connection with the account service unit 201 of the management server 200, which will be described later. The Web RTC template unit 113 provides functions related to video chatting and screen sharing. The common library unit 115 provides a utility JS used by other client components. The view router 117 provides a service for managing page switching in a single page application.

The mini Mongo unit 119 can provide a synchronization operation with the Mongo unit 225 of the management server 200 through the DDP as a client side Mongo library. The local memory 121 stores data input to or output from the client device 100.

3 is a diagram showing the configuration of the management server in FIG.

3, the management server 200 includes an account service unit 201, an organization service unit 203, a team service unit 205, a channel service unit 207, a message, Service unit 209, a file service unit 211, a callout service unit 213, an event service unit 215, an API service unit 217, a HIPAA log service unit 219, a lifespan service unit 221 ), A Mylar server unit 223, a Mongo unit 225, and a MangoDB 227. When these components are implemented in an actual application, two or more components are combined into one component as needed Or one component may be subdivided into two or more components.

An account service unit 201, an organization service unit 203, a team service unit 205, a channel service unit 207, a message service unit 209, a file service unit 211, the callout service unit 213, the event service unit 215, the API service unit 217, the HIPAA log service unit 219, and the lifespan service unit 221 can be configured as JS.

The account service unit 201 provides user authentication, a user information query service, and a rights management service. The organization service unit 203 provides a service for managing organization information of a user group. The team service unit 205 provides a service for managing team information in the organization.

The channel service unit 207 provides a service for managing channels (chat rooms) in a specific team. The message service unit 209 provides a service for managing chat messages. The file service unit 211 provides a service for managing the file upload and download, and a service for storing the file in the MongoDB 227.

The callout service unit 213 provides a service for notifying a smartphone or a user with a beep sound in a Desktop view when the user calls a service, a doctor, or a nurse that provides functions such as a beeper used in a current hospital to provide. The event service unit 215 provides a service for managing a notification service other than a callout.

The API service unit 217 provides a service for providing a Rest API for interworking with an external legacy system. The HIPAA log service unit 219 provides a service for recording information on patient information in the MongoDB 227 in accordance with the HIPAA standard. The lifespan service unit 221 provides a service for managing the life cycle of a message.

The Mylar server unit 223 provides a platform for building a secure web application.

The Mongo unit 225 can provide synchronization with the client side Mongo through DDP. MongoDB (227) provides a document-based NoSQL database.

MongoDB (227) can store all data in JSON format, provides Document-Oriented Storage, provides full index support that is not inferior to RDBMS. Data replication can improve availability (Replication & High Availability), scale-out (Auto-Sharding) to divide data among multiple servers based on primary key, key-based get and put, It can support high-performance atomic operations (Fast In-Place Updates), MapReduce (Map / Reduce), and can store files through a separate storage engine (GridFS).

Meanwhile, in the information sharing method according to the present invention, message encryption, SSL (Secure Socket Layer) channel usage, message lifetime control, privacy mode & recall, etc. are used for security.

Message encryption encrypts a message by providing a private key for each user, decrypting the message, and sharing a public key. By using the private key and the public key, the message can not be decrypted even if an error occurs

The use of the SSL channel ensures data security when transmitting data using the SSL channel. The SSL channel maintains security by using methods such as authentication, message privacy, message integrity, and certification authority chain, so that the queue manager can securely communicate with other queue managers or clients.

The message lifespan control allows the message Lifespan to be set for each channel, so that the message is automatically deleted

Privacy mode & Recall allows the user to select the privacy mode so that all consultation contents are automatically deleted after consultation. Make sure that you can delete messages you send at any time. This deleted message is immediately deleted from another user's view.

Separate data and format to signify HTML / JS (Format) as a public key to ensure that it has not been tampered with.

4 is a signal flow diagram illustrating a message deletion process in the information sharing method according to the present invention.

Referring to FIG. 4, when a user of the first client device 100a requests to delete a message (S305), the first client device 100a intercepts the request, encrypts the encrypted request message, 200 (S310).

The message service unit 209 requests the Mongo unit 225 to delete the message from the management server 200 in step S315 and the Meteor unit 225 updates the MongoDB 227 in step S320.

After the deletion of the message, the management server 200 searches for a user query related to the message and transmits message deletion request information to all client devices of the related users (S325).

The message is decrypted in the second client device 100b which has received the information in step S330, the message is deleted in the mini-mongo unit 119, the client application reflects the mini-mongo unit 119 data change in the view, The message is also deleted in the view (HTML), and the related message content is deleted (S335).

The message can be deleted by this process. In addition, the message deletion can be performed not only in the data storage device but also in a view displayed on the client device of another user viewing the message in real time.

FIG. 5 is a diagram for explaining a case where the information sharing method according to the present invention is applied to medical emergency collaboration.

In the medical field, it is necessary to efficiently share information and collaborate among healthcare people while protecting medical information such as patient's personal information and medical record from being leaked.

Referring to FIG. 4, the first client device 100a may be a terminal carried by a 119th member or a device installed in an emergency vehicle, and the second through fourth client devices 100b, 100c and 100d may be disposed in a hospital emergency room .

In such an arrangement, when an emergency patient occurs, the member transmits a request message to the management server 100 through the first client device 100a (1 & cir &). At this time, the patient status can be photographed and transmitted in real time by a video chat through the first client device 100a.

The management server 200 pushes a notification message corresponding to the request message to the second to third client devices 100b, 100c, and 100d disposed in the emergency room (②) Exposure to the emergency room monitor.

It is determined in real time whether an emergency room where the nearest hospital or an emergency patient can be treated is determined in real time. When the determined fourth client device 100d transmits a response message to the management server 200, the first client device 100a and the fourth client An interactive communication service such as a chat is performed between the mobile communication terminal 100d and the mobile communication terminal 100d. At this time, the interactive communication service can prevent the related information from being leaked.

As a result, the doctor can view the patient status via video chat and issue additional emergency treatment to 119 members. Also, in the emergency room, you can know everything about the patient's condition in advance and make all necessary preparations in advance, such as patients who need surgery.

In addition, since the status of emergency patients can be confirmed by other hospital specialists, it is possible to make quick and more accurate decisions by collaborating with specialists before the emergency patients arrive at the hospital (④).

Therefore, when an emergency occurs, 119 members respond to the nearest hospital emergency room and respond to the emergency treatment of 119 members at the hospital transportation. If the hospital does not receive the patient after the hospital transportation, the general method In contrast, when using the information sharing method according to the present invention, medical collaboration can be performed more efficiently while enhancing security.

6 is a diagram for explaining a case where the information sharing method according to the present invention is applied to a shopping mall consultation.

Referring to FIG. 6, the first client device 100a may be a terminal of a user, and the second client device 100b may be disposed of a shopping mall manager.

In this configuration, the user requests the consultation through the first client device 100a (1 & cir &). The notification message corresponding to the user's consultation request is pushed to the second client device 100b of the administrator (2).

Accordingly, an interactive communication service capable of screen sharing between the first client device 100a and the second client device 100b is performed (3), and the screen sharing between the user and the manager allows the user to select a product You can consult with the person directly on the screen. Therefore, the manager does not need to know the product image to consult in advance.

According to the user's choice, it is possible to provide a space for chatting among the customers viewing the product page in real time, or to invite a friend to the current product page and enjoy chatting while viewing the products (④).

In addition, the general consultation chat service stores the user ID (when logged in), location / IP information, and chat contents for the customer conversion rate statistics. However, when the information sharing method according to the present invention is used, In this case, all the information can be automatically deleted after completing the consultation.

Meanwhile, the information sharing method and system according to the present invention are not limited to the configurations of the embodiments described above, but all or a part of the embodiments may be modified so that various modifications may be made. Or may be selectively combined.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It should be understood that various modifications may be made by those skilled in the art without departing from the spirit and scope of the present invention.

100a to 100n: client device
200: management server

Claims (10)

A first client device which is one of a terminal carried by a 119 member and a device installed in an emergency vehicle, second to nth client devices respectively arranged in different hospital emergency rooms, and a management server connected to the management server through a network step;
Transmitting an encrypted first message from the first client device to the management server when an emergency patient occurs;
Decrypting the first message at the management server and transmitting a push notification message corresponding to the first message to the second to nth client devices;
Transmitting, by the client device, a second message corresponding to the push notification message to the management server, the client device disposed in a hospital emergency room capable of treating the emergency patient among the second to nth client devices;
Causing the management server to perform an encrypted interactive communication service between the client device that transmitted the second message and the first client device;
The management server deletes content and information related to the encrypted interactive service in response to a message deletion request of the first client device and the client device that transmitted the second message, Retrieving a user query related to the service and delivering the message deletion request information to the client devices of all related users; And
And deleting contents and information related to the encrypted interactive service from the client device which has received the message deletion request information. The method according to claim 1,
Further comprising the step of causing the management server to perform an interactive communication service between the client device that has transmitted the second message and at least one of the second to nth client devices. The method according to claim 1,
Wherein a message transmitted and received between the first client device, the client device transmitting the second message, and the management server is transmitted and received using a Secure Socket Layer (SSL) channel. delete The method according to claim 1,
Wherein the client device transmitting the second message and the first client device encrypts and decrypts the message using the public key and the private key. delete A first client device for transmitting an encrypted first message when an emergency patient occurs, the first client device being any one of a terminal carried by a 119 member and an apparatus installed in an emergency vehicle;
Second to n-th client devices respectively disposed in different hospital emergency rooms and communicably connected to the first client device via a network; And
And a management unit connected to the first to the n-th client apparatus via the network to decrypt the first message to transmit a push notification message corresponding to the first message to the second to the n-th client apparatus, Server,
Wherein the management server transmits a second message corresponding to the push notification message to a client device disposed in a hospital emergency room capable of treating the emergency patient among the second to nth client devices, An encrypted interactive communication service is performed between the client device that transmitted the second message,
Deletes content and information related to the encrypted interactive service in response to a message deletion request of the first client device and the client device that transmitted the second message, Searches for a query and transmits message deletion request information to all client devices of related users so that contents and information related to the encrypted interactive service are deleted from the client device which has received the message deletion request information Information sharing system. 8. The method of claim 7,
And a document-based NoSQL database is installed in the management server. delete 8. The method of claim 7,
Wherein the management server makes an interactive communication service between at least one of the client device that has transmitted the second message and the second to nth client devices.

Images