CN104009974A - A method for processing radio frequency identification medical information that provides privacy protection - Google Patents

Abstract

The present invention is a new method of intelligent medical treatment based on RFID, which is mainly used to solve the problems of medical errors and patient privacy leakage in the process of digital medical treatment. avoid human error. Although these RFID-based measures are more efficient than traditional digital medical processes, patient information may be compromised during data transmission, leading to privacy exposure or medical errors. The method in the present invention adopts the following effective specific measures: 1) anonymous authentication; 2) encrypted diagnosis records; 3) the correct correlation between the laboratory label and the patient registration label; 4) record the inspection process to prevent possible medical disputes in the future; 5 ) drug prescription matching check to ensure medication safety.

Description

A method for processing radio frequency identification medical information that provides privacy protection

technical field

The invention is a radio frequency identification (Radio Frequency Identification, RFID) medical information processing method providing privacy protection, which is mainly used to solve the problems of medical errors and privacy leakage in the digital medical process, and belongs to the technical field of the Internet of Things.

Background technique

In the medical industry, the digitization process of hospitals can be accelerated with the help of RFID. In hospital management, each doctor, nurse, patient, public medical equipment, and valuable medicine can be equipped with an electronic label, so as to facilitate the management of patients, the tracking of important medical equipment and medicine, and optimize the process and reduce operating costs. , Improve service quality, work efficiency and management level.

Compared with the flat situation of RFID in other industries, the current rise of RFID in the medical industry is impressive enough, especially in developed countries such as Europe and the United States, more and more hospitals have introduced RFID technology into daily management, greatly improving the efficiency of medical operations . However, the application of RFID in the medical industry also faces some problems, such as privacy protection.

The communication between the RFID electronic tag and the reader is based on radio frequency signals, which makes the information transmitted between them completely exposed to the outside. If the transmitted medical information contains sensitive private information, anyone may Easy access. This is the source of privacy and security issues in RFID systems. In addition, the limited resources of RFID electronic tags (limited power supply, small storage space, and weak computing power, etc.) also pose difficulties and challenges to the design of privacy and security mechanisms in RFID systems. This is a big challenge, which makes the design and selection of security mechanisms by design engineers very limited.

Contents of the invention

Technical issues: In recent years, many studies have launched RFID-based digital medical solutions to improve patient medication safety and avoid human errors in the digital medical process. Although these RFID-based measures are more efficient than traditional digital medical processes, patient information may be compromised during data transmission, leading to privacy exposure or medical errors. Therefore, it is necessary to propose a privacy-protected RFID medical information processing method, which can not only improve the efficiency of patients' consultation, but also protect the patient's personal privacy information from being leaked, and at the same time ensure that there are no medical errors.

Technical solution: 1) In the registration stage, the system will associate the patient's identity information with the RFID tag number, that is, use the private key in the patient's smart card to encrypt the RFID number, and store the encrypted number information in the RFID tag respectively. Tags and backend servers.

2) In the stage of seeing a doctor, in order to protect the privacy of the patient's identity, the system adopts an anonymous authentication method. When the doctor gives a diagnosis, the number P of the background server is used to correspond to the encrypted diagnosis records of the stored patients. The patient uses the registration label to obtain the corresponding number P according to certain steps, so that he can view his own diagnosis records.

3) In the testing stage, the key is to correctly associate the blood test tube with the identity of the patient in the background server.

4) In the inspection stage, the inspecting medical personnel will first reconfirm the legitimacy of the patient through the registration label, and the patient can only be accepted for inspection after being confirmed to be legal. At this stage, the process of the patient's examination will be recorded to prevent possible medical disputes in the future.

5) The drug prescription stage mainly involves drug management, and the goal is to ensure that every drug is prescribed by a doctor. It should be noted that the doctor's recommended drug list has already been generated on the background server when the doctor completes the diagnosis, and the drug list corresponds to the patient's identity information. After all the medicines are bagged, it is still necessary to verify whether the medicines match again.

A kind of radio frequency identification medical information processing method that provides privacy protection of the present invention comprises 5 stages, namely registration, see a doctor, laboratory test, inspection and drug prescription, and specific method is as follows:

1) Registration stage

Step 11: The RFID reader reads the unique number ID _i of the registration label, and the smart card reader reads the patient's smart card;

Step 12: The RFID reader sends the unique number ID _i of the registration label to the smart card reader;

Step 13: After receiving the ID _i , the smart card reader uses the private key in the patient's smart card to encrypt the ID _i to obtain the patient's anonymous identity I _i =Encrypt(ID _i );

Step 14: the smart card reader sends the patient's anonymous identifier I _i to the RFID reader, and the latter writes the received patient's anonymous identifier I _i into the registration label and replaces the ID _i ;

Step 15: the smart card reader sends the patient's anonymous identifier I _i to the background server for storage;

2) The stage of seeing a doctor

Step 21: The doctor generates a random number r ₁ through the RFID reader, and sends the random number r ₁ to the patient's registration tag;

Step 22: After getting the random number, the registration tag calculates the result value , where H() is a hash function;

Step 23: The registration tag sends (r ₁ , x ₁ ) to the RFID reader;

Step 24: The RFID reader forwards (r ₁ , x ₁ ) to the background server, and the background server verifies the correctness of the received x1, that is, the received x ₁ is the same as the calculated value For comparison, the same means that the identity of the patient is legal, and this verification hides the real identity information of the patient while confirming the legitimacy of the patient;

Step 25: The registration tag generates a random number r ₂ and sends it to the RFID reader;

Step 26: the RFID reader forwards the random number r ₂ to the background server;

Step 27: The background server calculates the result value , where P is a random number, and x ₂ is sent to the RFID reader;

Step 28: The RFID reader sends x ₂ to the registration tag, and the latter uses x ₂ to decrypt to obtain the number P, namely $P=x_2\⊕h(I_i\⊕r_2);$

3) Assay stage

Step 31: The RFID reader generates a random number r ₃ , and sends it to the registration label and the laboratory label, and sticks it on the blood test tube;

Step 32: Registered label calculation result value

Step 33: The registration tag sends x ₃ to the RFID reader;

Step 34: Assay label calculation , where ID _j is the identification number of the assay label;

Step 35: The test label sends x' ₃ to the RFID reader;

Step 36: After the RFID reader obtains ID _j according to x' ₃ , send information (ID _j , r ₃ , x ₃ ) to the background server;

Step 37: The background server verifies the legitimacy of the patient according to the information (ID _j , r ₃ , x ₃ ), if it is legal, the received x ₃ is the same as the calculated value equal, then the server inserts the identification number ID _j of the test label into the corresponding record of the patient;

4) Inspection stage

Step 41: the RFID reader generates a random number r ₄ and sends it to the registration tag;

Step 42: Registered label calculation result value $x_4=h(I_i\⊕r_4)\⊕\left(P\right|\left|I_i\right);$

Step 43: The registration tag sends x ₄ to the RFID reader;

Step 44: The RFID reader forwards the message (r ₄ , x ₄ ) to the background server, and the background server calculates the received x ₄ and If the results are equal, the patient's legitimacy is verified;

Step 45: The RFID reader generates a random number r ₅ and sends (T _i , r ₅ ) to the registration tag, where T _i is the current timestamp;

Step 46: Registered label calculation result value $x_5=h(I_i\⊕r_5)\⊕\left(T_i\right|\left|P\right|\left|I_i\right);$

Step 47: The registration tag sends x ₅ to the RFID reader;

Step 48: check the tag of the medical staff and send ID _k to the RFID reader, where ID _k is the identification number of the tag of the checked medical staff;

Step 49: The RFID reader forwards the message (r ₅ , x ₅ , ID _k ) to the background server;

Step 410: The background server generates a digital signature {r ₅ , x ₅ , ID _k }, which can be used as evidence for future verification;

5) Drug prescription stage

Step 51: The background server generates a random number r ₆ and sends r ₆ to the RFID reader;

Step 52: The RFID reader forwards the random number r ₆ to the drug label 1;

Step 53: drug label 1 generates random number r ₇ and calculates the result value , where MID ₁ is the identification number of drug label 1;

Step 54: Drug label 1 sends (x ₆ , r ₇ ) to the RFID reader;

Step 55: The RFID reader forwards the random number r ₆ to the drug label 2;

Step 56: drug label 2 generates a random number r ₈ and calculates the result value , where MID ₂ is the identification number of drug label 2;

Step 57: Drug label 2 sends (x ₇ , r ₈ ) to the RFID reader;

Step 58: Similarly, for drug label 3, drug label 4 to drug label n-1, repeat steps 55 to 57;

Step 59: The RFID reader forwards the random number r ₆ to the drug label n;

Step 510: Drug label n generates a random number r _n+6 and calculates the result value , where MID _n is the identification number of drug label n;

Step 511: Drug label n sends (x _n+5 , r _n+6 ) to the RFID reader;

Step 512: The RFID reader forwards (x _i+5 , r _{i+6 )} (1≤i≤n) to the background server, and the background server verifies ( Whether MID _i )(1≤i≤n) is in the drug prescription prescribed by the doctor, if the verification is passed, the received (x _i+5 )(1≤i≤n) is the same as the calculated value equal, the background server notifies the pharmacist that the medicine can be put into the bag, and calculates the result value , store _yi in the background server and the medicine bag label attached to the patient's medicine bag at the same time;

Step 513: the RFID reader generates a random number r _n+7 , and sends r _n+7 to the registration label and the medicine bag label;

Step 514: The registered label sends the calculation result value Send the calculation result value to the RFID reader and the label of the medicine bag $x_{\mathrm{no}+7}=h({\mathrm{the\; y}}_i\⊕r_{\mathrm{no}+7})\⊕{\mathrm{the\; y}}_i$ to the RFID reader;

Step 515: After receiving x _n+6 and x _n+7 , the RFID reader sends information (x _n+6 , x _n+7 , r _n+7 ) to the background server for matching verification, that is, the background server verifies x _n Are ₊₆ and x _n+7 the same as the calculated value and Equal, if and only if the verifications are all equal, it can be concluded that the medicine bag has no error and indeed belongs to patient I _i .

Beneficial effects: the present invention can reduce improper medication, enhance the medical safety of outpatients (inpatients), and promote health care management by adopting RFID technology. In particular, the method improves the efficiency of medical treatment, strengthens the security of the medical system, and especially fully considers and protects the privacy of patient users. Specifically, the method takes the following beneficial measures:

1) Anonymous authentication;

2) Encrypted diagnostic records;

3) The laboratory label is correctly associated with the patient registration label;

4) Record the inspection process to prevent possible medical disputes in the future;

5) Drug prescription matching check to ensure drug safety.

Description of drawings

Figure 1 is a schematic diagram of medical treatment,

Figure 2 is a schematic diagram of the registration process,

Figure 3 is a schematic diagram of the medical treatment process,

Figure 4 is a schematic diagram of the assay process,

Figure 5 is a schematic diagram of the inspection process,

Fig. 6 is a schematic flow chart of drug prescription.

Detailed ways

1) Registration stage

The registration process is shown in Figure 2, and the specific steps are as follows.

Step 1: The RFID reader reads the unique number ID _i of the registration label, and the smart card reader reads the patient's smart card;

Step 2: The RFID reader sends the unique number ID _i of the registration label to the smart card reader;

Step 3: After receiving the ID _i , the smart card reader uses the private key in the patient's smart card to encrypt the ID _i to obtain the patient's anonymous identity I _i = Encrypt(ID _i );

Step 4: The smart card reader sends the patient's anonymous identifier I _i to the RFID reader, and the latter writes the received patient's anonymous identifier I _i into the registration label and replaces the ID _i ;

Step 5: The smart card reader sends the patient's anonymous identifier I _i to the background server for storage.

2) The stage of seeing a doctor

The process of seeing a doctor is shown in Figure 3, and the specific steps are as follows.

Step 1: The doctor generates a random number r1 through the RFID reader, and sends the random number r1 to the patient's registration tag;

Step 2: After getting the random number, the registration tag calculates the result value , where H() is a hash function;

Step 3: The registration tag sends (r ₁ ,x ₁ ) to the RFID reader;

Step 4: The RFID reader forwards (r ₁ , x ₁ ) to the background server, and the background server verifies the correctness of the received x1, and the received x ₁ is the same as the calculated value For comparison, the same means that the identity of the patient is legal, and this verification hides the real identity information of the patient while confirming the legitimacy of the patient;

Step 5: The registration tag generates a random number r ₂ and sends it to the RFID reader;

Step 6: The RFID reader forwards the random number r ₂ to the background server;

Step 7: The background server calculates the result value , and send x ₂ to the RFID reader;

Step 8: The RFID reader sends x ₂ to the registration tag, and the latter uses x ₂ to decrypt to get the number P, namely $P=x_2\⊕h(I_i\⊕r_2).$

3) Assay stage

The assay process is shown in Figure 4, and the specific steps are as follows.

Step 1: The RFID reader generates a random number r ₃ and sends it to the registration label and the laboratory label (attached to the blood test tube);

Step 2: Registered label calculation result value

Step 3: The registration tag sends x ₃ to the RFID reader;

Step 4: Assay label calculation , where ID _j is the identification number of the assay label;

Step 5: The test label sends x' ₃ to the RFID reader;

Step 6: After the RFID reader obtains ID _j according to x' ₃ , send information (ID _j , r ₃ , x ₃ ) to the background server;

Step 7: The background server verifies the legitimacy of the patient according to the information (ID _j , r ₃ , x ₃ ), if it is legal, the received x ₃ is the same as the calculated value If they are equal, the server inserts the identification number ID _j of the test label into the corresponding record of the patient.

4) Inspection stage

The inspection process is shown in Figure 5, and its specific steps are as follows.

Step 1: The RFID reader generates a random number r ₄ and sends it to the registration tag;

Step 2: Registered label calculation result value $x_4=h(I_i\⊕r_4)\⊕\left(P\right|\left|I_i\right);$

Step 3: The registration tag sends x ₄ to the RFID reader;

Step 4: The RFID reader forwards the message ₍ r ₄ , x ₄ ) to the background server, and the background server calculates the If the results are equal, the patient's legitimacy is verified.

Step 5: The RFID reader generates a random number r ₅ and sends (T _i , r ₅ ) to the registration tag, where T _i is the current timestamp;

Step 6: Registered label calculation result value $x_5=h(I_i\⊕r_5)\⊕\left(T_i\right|\left|P\right|\left|I_i\right);$

Step 7: The registration tag sends x ₅ to the RFID reader;

Step 8: Check the tag of the medical staff and send ID _k to the RFID reader, where ID _k is the identification number of the tag of the checked medical staff;

Step 9: The RFID reader forwards the message (r ₅ , x ₅ , ID _k ) to the background server;

Step 10: The background server generates a digital signature {r ₅ , x ₅ , ID _k }, which can be used as evidence for future verification.

5) Drug prescription stage

The drug prescription process is shown in Figure 6, and its specific steps are as follows.

Step 1: The background server generates a random number r ₆ and sends r ₆ to the RFID reader;

Step 2: The RFID reader forwards the random number r ₆ to the drug label 1;

Step 3: Drug label 1 generates random number r ₇ and calculates the result value , where MID ₁ is the identification number of drug label 1;

Step 4: Drug label 1 sends (x ₆ , r ₇ ) to the RFID reader;

Step 5: The RFID reader forwards the random number r ₆ to the drug label 2;

Step 6: Drug label 2 generates a random number r ₈ and calculates the result value , where MID ₂ is the identification number of drug label 2;

Step 7: Drug label 2 sends (x ₇ , r ₈ ) to the RFID reader;

Step 8: Similarly, for drug label 3, drug label 4 to drug label n-1, repeat steps 5 to 7;

Step 9: The RFID reader forwards the random number r ₆ to the drug label n;

Step 10: Drug label n generates a random number r _n+6 and calculates the result value , where MID _n is the identification number of drug label n;

Step 11: Drug label n sends (x _n+5 , r _n+6 ) to the RFID reader;

Step 12: The RFID reader forwards (x _i+5 ,r _{i+6 )} (1≤i≤n) to the background server, and the background server verifies ( Whether MID _i )(1≤i≤n) is in the drug prescription prescribed by the doctor, if the verification is passed, the received (x _i+5 )(1≤i≤n) is the same as the calculated value equal, the background server notifies the pharmacist that the medicine can be put into the bag, and calculates the result value , store _yi in the background server and the medicine bag label attached to the patient's medicine bag at the same time;

Step 13: The RFID reader generates a random number r _n+7 , and sends r _n+7 to the registration label and medicine bag label;

Step 14: Registered label sends result value Send result value to RFID reader, medicine bag label $x_{\mathrm{no}+7}=h({\mathrm{the\; y}}_i\⊕r_{\mathrm{no}+7})\⊕{\mathrm{the\; y}}_i$ to the RFID reader;

Step 15: After receiving x _n+6 and x _n+7 , the RFID reader sends information (x _n+6 , x _n+7 , r _n+7 ) to the background server for matching verification, that is, the background server verifies x _n Are ₊₆ and x _n+7 the same as the calculated value and Equal, if and only if the verifications are all equal, it can be concluded that the medicine bag has no error and indeed belongs to patient I _i .

Claims (1)

1. a radio frequency identification medical information processing method for secret protection is provided, it is characterized in that the method comprises 5 stages, register, go to a doctor, chemical examination, inspection and drug prescription, concrete grammar is as follows:

1) register the stage

Step 11:RFID reader reads the unique number ID of registered mail label _i, intelligent card reading reads patient's smart card;

Step 12:RFID reader is by registered mail label unique number ID _isend to intelligent card reading;

Step 13: intelligent card reading is received ID _iafter, the private key in employing patient smart card is to ID _ibe encrypted operation, obtain patient's anonymous identification I _i=Encrypt (ID _i);

Step 14: intelligent card reading is by patient's anonymous identification I _isend to RFID reader, the latter is by the patient's anonymous identification I receiving _iwrite registered mail label and replace ID _i;

Step 15: intelligent card reading sends patient's anonymous identification I _igive background server is preserved;

2) the medical stage

Step 21: doctor generates a random number r by RFID reader ₁, send random number r ₁give patient's registered mail label;

Step 22: obtain after random number registered mail label result of calculation value wherein H () is hash function;

Step 23: registered mail label sends (r ₁, x ₁) to RFID reader;

Step 24:RFID reader is by (r ₁, x ₁) being transmitted to background server, background server is verified the correctness of the x1 receiving, is about to received x ₁same calculated value compare, identically represent that patient status is legal, this checking has been hidden its true identity information in the legitimacy of confirming patient;

Step 25: registered mail label generates a random number r ₂, and send it to RFID reader;

Step 26:RFID reader is by random number r ₂be transmitted to background server;

Step 27: background server result of calculation value wherein P is random number, and by x ₂send to RFID reader;

Step 28:RFID reader sends x ₂give registered mail label, the latter utilizes x ₂deciphering obtains digital P, $P=x_2\⊕H(I_i\⊕r_2);$

3) the chemical examination stage

Step 31:RFID reader generates a random number r ₃, and send it to registered mail label and chemical examination label, be attached on blood count test tube;

Step 32: registered mail label result of calculation value

Step 33: registered mail label is by x ₃send to RFID reader;

Step 34: chemical examination tag computation , wherein ID _jit is the identification number of chemical examination label;

Step 35: chemical examination label sends x' ₃give RFID reader;

Step 36:RFID reader is according to x' ₃obtain ID _jafter, transmission information (ID _j, r ₃, x ₃) to background server;

Step 37: background server is according to information (ID _j, r ₃, x ₃) checking patient legitimacy, if legal, the x that received ₃same calculated value equate, server is by the identification number ID of chemical examination label _jbe inserted in this patient's corresponding record;

4) examination phase

Step 41:RFID reader generates a random number r ₄, and send it to registered mail label;

Step 42: registered mail label result of calculation value $x_4=H(I_i\⊕r_4)\⊕\left(P\right|\left|I_i\right);$

Step 43: registered mail label sends x ₄give RFID reader;

Step 44:RFID reader forwarding messages (r ₄, x ₄) give background server, background server is according to received x ₄with calculate whether equate to judge patient's legitimacy, if result is equal, patient's legitimacy is verified;

Step 45:RFID reader generates a random number r ₅, and by (T _i, r ₅) send to registered mail label, wherein T _iit is current timestamp;

Step 46: registered mail label result of calculation value $x_5=H(I_i\⊕r_5)\⊕\left(T_i\right|\left|P\right|\left|I_i\right);$

Step 47: registered mail label sends x ₅give RFID reader;

Step 48: check that medical worker's label sends ID _kgive RFID reader, wherein ID _kit is the identification number that checks medical worker's label;

Step 49:RFID reader forwarding messages (r ₅, x ₅, ID _k) to background server;

Step 410: background server generating digital signature { r ₅, x ₅, ID _k, this digital signature can be used as the evidence of checking in the future;

5) the drug prescription stage

Step 51: background server generates random number r ₆, send r ₆give RFID reader;

Step 52:RFID reader forwards random number r ₆give medicine label 1;

Step 53: medicine label 1 generates random number r ₇, and result of calculation value , wherein MID ₁it is the identification number of medicine label 1;

Step 54: medicine label 1 sends (x ₆, r ₇) to RFID reader;

Step 55:RFID reader forwards random number r ₆give medicine label 2;

Step 56: medicine label 2 generates random number r ₈, and result of calculation value , wherein MID ₂it is the identification number of medicine label 2;

Step 57: medicine label 2 sends (x ₇, r ₈) to RFID reader;

Step 58: similarly, for medicine label 3, medicine label 4 until medicine label n-1, repeating step 55～step 57;

Step 59:RFID reader forwards random number r ₆give medicine label n;

Step 510: medicine label n generates random number r _n+6, and result of calculation value , wherein MID _nit is the identification number of medicine label n;

Step 511: medicine label n sends (x _n+5, r _n+6) to RFID reader;

Step 512:RFID reader forwards (x _i+5, r _i+6) (1≤i≤n) give background server, background server is according to (the x receiving _i+5) (1≤i≤n) checking (MID _i) (in the drug prescription of 1≤i≤n) whether open doctor, if be verified, (the x that received _i+5) (1≤i≤n) same to calculated value equate, background server just notifies pharmacist powder charge to enter bag, and result of calculation value , by y _ibe stored in background server simultaneously and be attached in the medicine bag label on patient's medicine bag;

Step 513:RFID reader generates a random number r _n+7, send r _n+7give registered mail label and medicine bag label;

Step 514: registered mail label sends result of calculation value give RFID reader, medicine bag label sends result of calculation value $x_{n+7}=H(y_i\⊕r_{n+7})\⊕y_i$ Give RFID reader;

Step 515:RFID reader receives x _n+6and x _n+7after, transmission information (x _n+6, x _n+7, r _n+7) mate checking to background server, i.e. background server checking x _n+6and x _n+7whether respectively with calculated value with equate, and if only if, and checking all equates, just can conclude that this medicine bag do not make mistakes and really belong to patient I _i.