CN112699385A - Method and system for carrying out access control on electronic health record based on block chain - Google Patents
Method and system for carrying out access control on electronic health record based on block chain Download PDFInfo
- Publication number
- CN112699385A CN112699385A CN202011517069.3A CN202011517069A CN112699385A CN 112699385 A CN112699385 A CN 112699385A CN 202011517069 A CN202011517069 A CN 202011517069A CN 112699385 A CN112699385 A CN 112699385A
- Authority
- CN
- China
- Prior art keywords
- target object
- access
- electronic health
- health record
- record data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 230000036541 health Effects 0.000 title claims abstract description 199
- 238000000034 method Methods 0.000 title claims abstract description 42
- 238000011217 control strategy Methods 0.000 claims abstract description 57
- 238000012797 qualification Methods 0.000 claims abstract description 13
- 230000008569 process Effects 0.000 claims description 16
- 230000009471 action Effects 0.000 claims description 10
- 230000006870 function Effects 0.000 description 6
- 230000014509 gene expression Effects 0.000 description 4
- 238000003384 imaging method Methods 0.000 description 4
- 238000013475 authorization Methods 0.000 description 3
- 238000010586 diagram Methods 0.000 description 3
- 230000007246 mechanism Effects 0.000 description 3
- 230000004075 alteration Effects 0.000 description 2
- 238000002591 computed tomography Methods 0.000 description 2
- 230000000694 effects Effects 0.000 description 2
- 238000002595 magnetic resonance imaging Methods 0.000 description 2
- 238000002604 ultrasonography Methods 0.000 description 2
- 238000002059 diagnostic imaging Methods 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
- G06Q40/04—Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/27—Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/602—Providing cryptographic facilities or services
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
- G06F21/6245—Protecting personal data, e.g. for financial or medical purposes
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
-
- G—PHYSICS
- G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
- G16H—HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
- G16H10/00—ICT specially adapted for the handling or processing of patient-related medical or healthcare data
- G16H10/60—ICT specially adapted for the handling or processing of patient-related medical or healthcare data for patient-specific data, e.g. for electronic patient records
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Physics & Mathematics (AREA)
- Computer Security & Cryptography (AREA)
- Bioethics (AREA)
- General Engineering & Computer Science (AREA)
- Databases & Information Systems (AREA)
- Software Systems (AREA)
- Business, Economics & Management (AREA)
- Computer Hardware Design (AREA)
- Accounting & Taxation (AREA)
- Finance (AREA)
- Medical Informatics (AREA)
- Technology Law (AREA)
- Strategic Management (AREA)
- Marketing (AREA)
- General Business, Economics & Management (AREA)
- Computing Systems (AREA)
- Economics (AREA)
- Data Mining & Analysis (AREA)
- Epidemiology (AREA)
- Development Economics (AREA)
- Primary Health Care (AREA)
- Public Health (AREA)
- Storage Device Security (AREA)
Abstract
The invention discloses a method and a system for carrying out access control on electronic health records based on a block chain, wherein the method comprises the following steps: establishing an intelligent contract based on the block chain, wherein the intelligent contract comprises a participant and an access control strategy; acquiring electronic health record data of a target object in a participant, and sending the electronic health record data to an edge node; when a target object initiates an access event of electronic health record data corresponding to the target object, providing a disposable self-destruction first resource positioning address for the target object through an edge node; the target object accesses the electronic health record data based on an access control strategy according to the access address; when any target object associated party in the participants initiates an access event of the electronic health record data corresponding to the target object, when the identity qualification of the target object associated party meets the access condition, a disposable self-destruction second resource positioning address is provided for the target object associated party through the edge node, and the access to the electronic health record data is realized based on the access control strategy.
Description
Technical Field
The invention relates to the technical field of block chain technology application, in particular to a method and a system for performing access control on electronic health records based on a block chain.
Background
The global electronic health record market is growing dramatically and electronic health record data can collect data from multiple sources, such as wearable devices, smart sensors, and medical imaging devices. Access control is an important mechanism for managing electronic health record data. Currently, electronic health record data is facing significant access security risks, and significant electronic record data leakage events occur many times.
While encryption solves some of the basic security and privacy concerns of electronic health records, access control is difficult to implement efficiently due to the highly decentralized nature of electronic health record data and the complex relationship between the data owner and the data user. The prior art solution based on the blockchain has two significant drawbacks from the perspective of electronic medical record management. First, while blockchains can ensure data integrity, they lack the appropriate access control mechanisms to contain the operations performed by the different participants. Second, the block sizes in the block chain are too limited to accommodate electronic health record data containing images (e.g., X-rays, CT scans, and MRI) and/or video (e.g., ultrasound).
Therefore, it is important to provide a flexible and fine-grained access control solution for electronic health record data, and a technology is needed to realize access control of electronic health records based on block chains.
Disclosure of Invention
The technical scheme of the invention provides a method and a system for performing access control on an electronic health record based on a block chain, which aim to solve the problem of how to perform access control on the electronic health record based on the block chain.
In order to solve the above problem, the present invention provides a method for performing access control on an electronic health record based on a block chain, the method comprising:
establishing an intelligent contract based on the blockchain, the intelligent contract comprising a participant executing the intelligent contract and an access control policy defined by a target object in the participant;
acquiring electronic health record data of a target object in the participant, and sending the electronic health record data to an edge node; the edge node stores the electronic health record data;
when a target object initiates an access event of electronic health record data corresponding to the target object, providing a disposable self-destruction first resource location address for the target object through the edge node;
the target object analyzes the disposable self-destruction first resource positioning address to obtain an access address of the electronic health record data stored in the edge node; the target object accesses the electronic health record data based on the access control strategy according to the access address;
when any one target object associated party in the participants initiates an access event of electronic health record data corresponding to a target object, judging whether the identity qualification of the target object associated party meets an access condition or not based on the access control strategy;
when the identity qualification of the target object associated party meets the access condition, providing a disposable self-destruction second resource positioning address for the target object associated party through the edge node;
the target object correlation party analyzes the one-time self-destruction second resource positioning address to obtain an access address of the electronic health record data stored in the edge node; and the target object correlation party realizes the access to the electronic health record data according to the access address and based on the access control strategy.
Preferably, the access control policy includes:
defining participants in an access control process, wherein the participants comprise a target object and a target object associator associated with the target object;
defining operations in an access control process;
defining the participants to which the access control strategy is applicable;
defining a condition rule of an access control policy comprising a plurality of variables, and an effective time of the condition rule;
an enforcement action of the access control policy is defined.
Preferably, the method further comprises the following steps: when the target object completes the access to the electronic health record data according to the access address based on the access control strategy, deleting the disposable self-destruction first resource positioning address;
and deleting the disposable self-destruction second resource positioning address when the target object associated party completes the access to the electronic health record data according to the access address based on the access control strategy.
Preferably, the method further comprises the following steps: when the target object completes the access to the electronic health record data according to the access address and based on the access control strategy, recording the access event of the target object;
and when the target object associated party completes the access to the electronic health record data according to the access address and based on the access control strategy, recording the access event of the target object associated party.
Preferably, the method further comprises the following steps: establishing a hash abstract for the electronic health record data through the edge node, and sending the hash abstract to the target object;
and the target object compares the received hash abstract with the original hash abstract, and judges whether the electronic health record data is modified according to the comparison result.
Based on another aspect of the present invention, the present invention provides a system for access control of electronic health records based on a blockchain, the system comprising:
an initial unit configured to establish an intelligent contract based on a blockchain, the intelligent contract comprising a participant executing the intelligent contract and an access control policy defined by a target object in the participant;
the acquisition unit is used for acquiring electronic health record data of a target object in the participant and sending the electronic health record data to an edge node; the edge node stores the electronic health record data;
the first access unit is used for providing a one-time self-destruction first resource positioning address for the target object through the edge node when the target object initiates an access event of electronic health record data corresponding to the target object; the target object analyzes the disposable self-destruction first resource positioning address to obtain an access address of the electronic health record data stored in the edge node; the target object accesses the electronic health record data based on the access control strategy according to the access address;
the second access unit is used for judging whether the identity qualification of the target object associated party meets the access condition or not based on the access control strategy when any target object associated party in the participants initiates the access event of the electronic health record data corresponding to the target object; when the identity qualification of the target object associated party meets the access condition, providing a disposable self-destruction second resource positioning address for the target object associated party through the edge node; the target object correlation party analyzes the one-time self-destruction second resource positioning address to obtain an access address of the electronic health record data stored in the edge node; and the target object correlation party realizes the access to the electronic health record data according to the access address and based on the access control strategy.
Preferably, the access control policy includes:
defining participants in an access control process, wherein the participants comprise a target object and a target object associator associated with the target object;
defining operations in an access control process;
defining the participants to which the access control strategy is applicable;
defining a condition rule of an access control policy comprising a plurality of variables, and an effective time of the condition rule;
an enforcement action of the access control policy is defined.
Preferably, the first access unit is further configured to: when the target object completes the access to the electronic health record data according to the access address based on the access control strategy, deleting the disposable self-destruction first resource positioning address;
the second access unit is further configured to: and deleting the disposable self-destruction second resource positioning address when the target object associated party completes the access to the electronic health record data according to the access address based on the access control strategy.
Preferably, the recording unit is further included for: when the target object completes the access to the electronic health record data according to the access address and based on the access control strategy, recording the access event of the target object;
and when the target object associated party completes the access to the electronic health record data according to the access address and based on the access control strategy, recording the access event of the target object associated party.
Preferably, the device further comprises a judging unit, configured to: establishing a hash abstract for the electronic health record data through the edge node, and sending the hash abstract to the target object;
and the target object compares the received hash abstract with the original hash abstract, and judges whether the electronic health record data is modified according to the comparison result.
The technical solution of the present invention uses a hybrid architecture of blockchains and edge nodes to facilitate electronic health record based data access control. In the technical scheme of the invention, the block chain executes an intelligent contract which uses an access control list, namely an access control strategy programming, so as to implement the access control of the electronic health record data based on the identity, and the legal access event is recorded in the block chain to realize traceability and responsibility system. In collaboration, the edge nodes store the electronic health record data and further enforce attribute-based access control of the electronic health record data using policies specified in the abbreviated authorization language.
Drawings
A more complete understanding of exemplary embodiments of the present invention may be had by reference to the following drawings in which:
FIG. 1 is a flow diagram of a method for block chain based access control to electronic health records in accordance with a preferred embodiment of the present invention;
FIG. 2 is a block chain-based framework for access control to electronic health records in accordance with a preferred embodiment of the present invention; and
fig. 3 is a block diagram of a system for access control to an electronic health record based on a blockchain in accordance with a preferred embodiment of the present invention.
Detailed Description
The exemplary embodiments of the present invention will now be described with reference to the accompanying drawings, however, the present invention may be embodied in many different forms and is not limited to the embodiments described herein, which are provided for complete and complete disclosure of the present invention and to fully convey the scope of the present invention to those skilled in the art. The terminology used in the exemplary embodiments illustrated in the accompanying drawings is not intended to be limiting of the invention. In the drawings, the same units/elements are denoted by the same reference numerals.
Unless otherwise defined, terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Further, it will be understood that terms, such as those defined in commonly used dictionaries, should be interpreted as having a meaning that is consistent with their meaning in the context of the relevant art and will not be interpreted in an idealized or overly formal sense.
Fig. 1 is a flow chart of a method for access control to an electronic health record based on a blockchain in accordance with a preferred embodiment of the present invention. As shown in fig. 1, the present invention provides a method for controlling access to an electronic health record based on a block chain, the method comprising:
step 101: an intelligent contract is established based on the blockchain, the intelligent contract including a participant executing the intelligent contract and an access control policy defined by a target object in the participant.
Preferably, the access control policy comprises:
defining participants in the access control process, wherein the participants comprise a target object and a target object associator associated with the target object;
defining operations in an access control process;
defining the participants to which the access control strategy is applicable;
defining a condition rule of an access control policy including a plurality of variables, and an effective time of the condition rule;
an enforcement action of the access control policy is defined.
The invention realizes intelligent contracts through a block chain, and the first part of the intelligent contracts is to define network functions including participants, URL addresses, transactions and access control logs. The second part is to define access control policies for different participants of the access control. Finally, a database query pattern and requirements are defined in the query file.
The present invention is authorized by an access control policy, allowing a doctor to retrieve the electronic health record address of his patient, and only allowing the patient to retrieve his own electronic health record address.
The search query function in the present invention is defined as the transaction process in the intelligent contract and is invoked by the participant who submitted his request. All historical retrieval events are saved as an electronic health record access control log that is not modifiable and traceable on the blockchain network.
Step 102: acquiring electronic health record data of a target object in a participant, and sending the electronic health record data to an edge node; the edge node stores the electronic health record data. The present invention collects electronic health record data from a patient via smart sensors and imaging devices and uploads it to an edge node.
Step 103: when a target object initiates an access event of electronic health record data corresponding to the target object, providing a disposable self-destruction first resource positioning address for the target object through an edge node;
step 104: the target object analyzes the disposable self-destruction first resource positioning address to obtain an access address of the electronic health record data stored in the edge node; and the target object realizes the access to the electronic health record data based on the access control strategy according to the access address.
The invention sets access authority for the electronic health record data by applying the access control strategy through the edge node, and returns a disposable self-destruction URL (uniform resource locator) containing the address of the electronic health record on the edge node to a target object, such as a patient.
The present invention allows a patient to perform an access control policy on his or her electronic health record data after the edge node collects the electronic health record data from the patient. By defining an access control policy, it can determine data that allows a user to read, write, and update content. When an access control policy is available in the blockchain network, a data user (e.g., a doctor or nurse) may send an access request to the patient for access approval and receive the URL address of the actual electronic health record data stored in the edge node.
The access control policy in the present invention is defined by the following components:
subject matter: it defines the individuals or entities involved in the access control process.
The operation is as follows: indicating the operation of rule management. Such as the operations: READ, WRITE and UPDATE.
Object: it defines the objects to which the access control policy applies. It may be a single document of electronic health record data or a complex union of electronic health record data.
Conditions are as follows: it is a policy composition expression of multiple variables. In addition, our scheme can support if (..) expressions for complex access control policy conditions.
The actions are as follows: representing the final action of the access control policy. Such as ALLOW or DENY. We define two types of access control policies: unconditional rules and conditional rules. Unconditional rules are used to control access control policies to a particular group of participants. Instead, the conditional access control policy may represent various AND gate access control policies AND return a boolean result on the operation result. For example, only doctors in a people's hospital can read a patient's electronic health record data.
Time: a valid period of time for the rule to take effect is specified.
The access policy in the present invention is exemplified as follows:
rule1
The following steps are described: ' only doctors in people ' hospitals can read data '
Subject matter: doctor in people's hospital "
The operation is as follows: reading
Object: "renmin. parent # number. data"
Conditions are as follows: "role ═ sector & & institution ═ people hospital"
The operation is as follows: ALLOW
Time: "2020.1.1 to 2020.5.1" }
The invention can provide an access control log electronic health record data of an event by using an access control strategy, and determines the capacity of reading, writing or updating.
According to the invention, the patient can analyze the access address of the electronic health record at the edge node according to the disposable self-destruction URL. The patient electronic health record address is maintained as a personal asset in a blockchain network. That is, the patient and the electronic health record asset have a one-to-one relationship, both identified by the patient ID.
At the same time the patient will register on the blockchain and define access control list policies to assert access rights to the healthcare provider.
The one-time self-destruction URL comprises the address of the electronic health record data stored in the edge node, and can be realized in many ways, such as https://1ty.me/, without limitation. The one-time self-destruction URL service is typically run on HTTPS and the electronic health record data address information is encrypted. The key to decrypt the address is a portion of the data contained in the URL. The generated URL is not stored on the one-time self-destruct URL server. As a result, only valid one-time URL links can display and decrypt the address information. After viewing the address information, the encrypted information will be deleted from the system and the URL link will disappear and not be accessible again.
Step 105: when any one of the target object associated parties initiates an access event of the electronic health record data corresponding to the target object, whether the identity qualification of the target object associated party meets the access condition is judged based on the access control strategy.
Step 106: and when the identity qualification of the target object associated party meets the access condition, providing a disposable self-destruction second resource positioning address for the target object associated party through the edge node.
In the present invention, a healthcare provider (such as a doctor/nurse) associated with a patient may send an access request via an intelligent contract that will check identity information according to an access control policy. If the conditions are met, the intelligent contract generates a one-time self-destruction URL and returns a corresponding URL address to locate the edge node for separately storing the electronic health record data.
In the invention, as long as a doctor or a nurse meets the requirement of an access control strategy executed on the electronic health record data, the electronic health record data can be accessed.
Step 107: the target object correlation party analyzes the disposable self-destruction second resource positioning address to obtain an access address of the electronic health record data in the edge node; and the target object correlation party realizes the access to the electronic health record data based on the access control strategy according to the access address.
Preferably, the method further comprises the following steps: establishing a hash abstract for the electronic health record data through the edge node, and sending the hash abstract to a target object;
and the target object compares the received hash abstract with the original hash abstract and judges whether the electronic health record data is modified or not according to the comparison result.
In the invention, the edge node creates a hash summary for the electronic health record data, and when the edge node sends the URL result back to the patient, the edge node comprises the hash summary result of the electronic health record data. The hash digest result contains a string of numbers created by a one-way hash formula. The summarization function may protect the integrity of the electronic health record data and detect changes or alterations to any portion of the data. Comparing the hash digest results, it may be determined whether any changes have been made to the electronic health record data. If the electronic health record data has been modified, the hash digest is different from the original digest, and a sophisticated hash algorithm, such as SHA-3, may be used, without limitation.
Preferably, the method further comprises the following steps: when the target object completes the access to the electronic health record data according to the access address based on the access control strategy, deleting the disposable self-destruction first resource positioning address;
and when the target object associated party completes the access to the electronic health record data based on the access control strategy according to the access address, deleting the disposable self-destruction second resource positioning address.
Preferably, the method further comprises the following steps: when the target object completes the access to the electronic health record data based on the access control strategy according to the access address, recording the access event of the target object;
and when the target object associated party completes the access to the electronic health record data based on the access control strategy according to the access address, recording the access event of the target object associated party.
Fig. 2 is a block chain-based framework for access control of electronic health records according to a preferred embodiment of the present invention. The invention provides an access control method for an electronic health record based on a block chain. In particular, all access events may be verified and recorded by a consensus mechanism before being added to the blockchain. The present invention uses a hybrid architecture of blockchains and edge nodes to facilitate attribute-based electronic health record data access control. In particular, the blockchain executes intelligent contracts programmed with access control lists (access control) to enforce identity-based electronic health record data access control and to record legitimate access events into the blockchain to enable traceability and accountability. In collaboration, the edge nodes store the electronic health record data and further enforce attribute-based access control of the electronic health record data using policies specified in the abbreviated authorization language. In addition, the hash digest is used to protect the integrity of the electronic health record data stored in the edge node, which helps detect any changes to the electronic health record. In addition, one-time self-destruct URLs containing the data addresses of electronic health records on edge nodes are referenced in smart contracts that are returned to the healthcare provider after successful execution of the access control policy. The healthcare provider then uses the URL to access the electronic health record data from the edge node. Thus, only qualified users with attribute-based access control applied by the edge node can access the requested electronic health record data.
Patient (electronic health record data owner and manufacturer): a patient is an entity that has electronic health record data to access. The patient may specify an access control policy for the electronic health record data he/she owns.
Healthcare provider (electronic health record data visitor): general healthcare providers (e.g., doctors and nurses) are entities that need access to electronic health record data owned by patients. Medical personnel actively seek access authorization for the patient.
Smart diagnostic/medical device: typically a sensor/imaging device, is a device that collects electronic health record data from a patient and sends it to an edge node. Imaging devices may include X-rays, CT scans, MRI and ultrasound, which generate electronic health record data from a patient.
Electronic health record data: electronic health record data is a piece of information that a patient possesses and that can be accessed by authorized healthcare providers.
Edge nodes: an edge node is a computing and storage device that stores electronic health record data and enforces attribute-based access control policies.
Block chains: the blockchain is used as a controller for the architecture that manages access control policies and provides a tamper resistant access log.
Fig. 3 is a block diagram of a system for access control to an electronic health record based on a blockchain in accordance with a preferred embodiment of the present invention. As shown in fig. 3, the present invention provides a system for access control to an electronic health record based on a blockchain, the system comprising:
an initial unit 301 is configured to establish an intelligent contract based on a blockchain, the intelligent contract including a participant executing the intelligent contract and an access control policy defined by a target object in the participant. Preferably, the access control policy comprises:
defining participants in the access control process, wherein the participants comprise a target object and a target object associator associated with the target object;
defining operations in an access control process;
defining the participants to which the access control strategy is applicable;
defining a condition rule of an access control policy including a plurality of variables, and an effective time of the condition rule;
an enforcement action of the access control policy is defined.
The invention realizes intelligent contracts through a block chain, and the first part of the intelligent contracts is to define network functions including participants, URL addresses, transactions and access control logs. The second part is to define access control policies for different participants of the access control. Finally, a database query pattern and requirements are defined in the query file.
The present invention is authorized by an access control policy, allowing a doctor to retrieve the electronic health record address of his patient, and only allowing the patient to retrieve his own electronic health record address.
The search query function in the present invention is defined as the transaction process in the intelligent contract and is invoked by the participant who submitted his request. All historical retrieval events are saved as an electronic health record access control log that is not modifiable and traceable on the blockchain network.
An obtaining unit 302, configured to obtain electronic health record data of a target object in a participant, and send the electronic health record data to an edge node; the edge node stores the electronic health record data. The present invention collects electronic health record data from a patient via smart sensors and imaging devices and uploads it to an edge node.
A first accessing unit 303, configured to provide a one-time self-destruction first resource location address to a target object through an edge node when the target object initiates an access event of electronic health record data corresponding to the target object; the target object analyzes the disposable self-destruction first resource positioning address to obtain an access address of the electronic health record data stored in the edge node; and the target object realizes the access to the electronic health record data based on the access control strategy according to the access address.
The present invention allows a patient to perform an access control policy on his or her electronic health record data after the edge node collects the electronic health record data from the patient. By defining an access control policy, it can determine data that allows a user to read, write, and update content. When an access control policy is available in the blockchain network, a data user (e.g., a doctor or nurse) may send an access request to the patient for access approval and receive the URL address of the actual electronic health record data stored in the edge node.
The access control policy in the present invention is defined by the following components:
subject matter: it defines the individuals or entities involved in the access control process.
The operation is as follows: indicating the operation of rule management. Such as the operations: READ, WRITE and UPDATE.
Object: it defines the objects to which the access control policy applies. It may be a single document of electronic health record data or a complex union of electronic health record data.
Conditions are as follows: it is a policy composition expression of multiple variables. In addition, our scheme can support if (..) expressions for complex access control policy conditions.
The actions are as follows: representing the final action of the access control policy. Such as ALLOW or DENY. We define two types of access control policies: unconditional rules and conditional rules. Unconditional rules are used to control access control policies to a particular group of participants. Instead, the conditional access control policy may represent various AND gate access control policies AND return a boolean result on the operation result. For example, only doctors in a people's hospital can read a patient's electronic health record data.
Time: a valid period of time for the rule to take effect is specified.
The access policy in the present invention is exemplified as follows:
rule1
The following steps are described: ' only doctors in people ' hospitals can read data '
Subject matter: doctor in people's hospital "
The operation is as follows: reading
Object: "renmin. parent # number. data"
Conditions are as follows: "role ═ sector & & institution ═ people hospital"
The operation is as follows: ALLOW
Time: "2020.1.1 to 2020.5.1" }
The invention can provide an access control log electronic health record data of an event by using an access control strategy, and determines the capacity of reading, writing or updating.
According to the invention, the patient can analyze the access address of the electronic health record at the edge node according to the disposable self-destruction URL. The patient electronic health record address is maintained as a personal asset in a blockchain network. That is, the patient and the electronic health record asset have a one-to-one relationship, both identified by the patient ID.
At the same time the patient will register on the blockchain and define access control list policies to assert access rights to the healthcare provider.
The one-time self-destruction URL comprises the address of the electronic health record data stored in the edge node, and can be realized in many ways, such as https://1ty.me/, without limitation. The one-time self-destruction URL service is typically run on HTTPS and the electronic health record data address information is encrypted. The key to decrypt the address is a portion of the data contained in the URL. The generated URL is not stored on the one-time self-destruct URL server. As a result, only valid one-time URL links can display and decrypt the address information. After viewing the address information, the encrypted information will be deleted from the system and the URL link will disappear and not be accessible again.
A second accessing unit 304, configured to, when any one of the participants initiates an access event of the electronic health record data corresponding to the target object, determine, based on the access control policy, whether the identity qualification of the target object associated meets the access condition; when the identity qualification of the target object associated party meets the access condition, providing a disposable self-destruction second resource positioning address for the target object associated party through the edge node; the target object correlation party analyzes the disposable self-destruction second resource positioning address to obtain an access address of the electronic health record data stored in the edge node; and the target object correlation party realizes the access to the electronic health record data based on the access control strategy according to the access address. The invention sets access authority for the electronic health record data by applying the access control strategy through the edge node, and returns a disposable self-destruction URL (uniform resource locator) containing the address of the electronic health record on the edge node to a target object, such as a patient.
In the present invention, a healthcare provider (such as a doctor/nurse) associated with a patient may send an access request via an intelligent contract that will check identity information according to an access control policy. If the conditions are met, the intelligent contract generates a one-time self-destruction URL and returns a corresponding URL address to locate the edge node for separately storing the electronic health record data.
In the invention, as long as a doctor or a nurse meets the requirement of an access control strategy executed on the electronic health record data, the electronic health record data can be accessed.
Preferably, the first access unit is further configured to: when the target object completes the access to the electronic health record data according to the access address based on the access control strategy, deleting the disposable self-destruction first resource positioning address; the second access unit is further configured to: and when the target object associated party completes the access to the electronic health record data based on the access control strategy according to the access address, deleting the disposable self-destruction second resource positioning address.
Preferably, the recording unit is further included for: when the target object completes the access to the electronic health record data based on the access control strategy according to the access address, recording the access event of the target object; and when the target object associated party completes the access to the electronic health record data based on the access control strategy according to the access address, recording the access event of the target object associated party.
Preferably, the device further comprises a judging unit, configured to: establishing a hash abstract for the electronic health record data through the edge node, and sending the hash abstract to a target object;
and the target object compares the received hash abstract with the original hash abstract and judges whether the electronic health record data is modified or not according to the comparison result.
In the invention, the edge node creates a hash summary for the electronic health record data, and when the edge node sends the URL result back to the patient, the edge node comprises the hash summary result of the electronic health record data. The hash digest result contains a string of numbers created by a one-way hash formula. The summarization function may protect the integrity of the electronic health record data and detect changes or alterations to any portion of the data. Comparing the hash digest results, it may be determined whether any changes have been made to the electronic health record data. If the electronic health record data has been modified, the hash digest is different from the original digest, and a sophisticated hash algorithm, such as SHA-3, may be used, without limitation.
The invention has been described with reference to a few embodiments. However, other embodiments of the invention than the one disclosed above are equally possible within the scope of the invention, as would be apparent to a person skilled in the art from the appended patent claims.
Generally, all terms used in the claims are to be interpreted according to their ordinary meaning in the technical field, unless explicitly defined otherwise herein. All references to "a/an/the [ device, component, etc ]" are to be interpreted openly as referring to at least one instance of said device, component, etc., unless explicitly stated otherwise. The steps of any method disclosed herein do not have to be performed in the exact order disclosed, unless explicitly stated.
Claims (10)
1. A method of access control to an electronic health record based on a blockchain, the method comprising:
establishing an intelligent contract based on the blockchain, the intelligent contract comprising a participant executing the intelligent contract and an access control policy defined by a target object in the participant;
acquiring electronic health record data of a target object in the participant, and sending the electronic health record data to an edge node; the edge node stores the electronic health record data;
when a target object initiates an access event of electronic health record data corresponding to the target object, providing a disposable self-destruction first resource location address for the target object through the edge node;
the target object analyzes the disposable self-destruction first resource positioning address to obtain an access address of the electronic health record data stored in the edge node; the target object accesses the electronic health record data based on the access control strategy according to the access address;
when any one target object associated party in the participants initiates an access event of electronic health record data corresponding to a target object, judging whether the identity qualification of the target object associated party meets an access condition or not based on the access control strategy;
when the identity qualification of the target object associated party meets the access condition, providing a disposable self-destruction second resource positioning address for the target object associated party through the edge node;
the target object correlation party analyzes the one-time self-destruction second resource positioning address to obtain an access address of the electronic health record data stored in the edge node; and the target object correlation party realizes the access to the electronic health record data according to the access address and based on the access control strategy.
2. The method of claim 1, the access control policy comprising:
defining participants in an access control process, wherein the participants comprise a target object and a target object associator associated with the target object;
defining operations in an access control process;
defining the participants to which the access control strategy is applicable;
defining a condition rule of an access control policy comprising a plurality of variables, and an effective time of the condition rule;
an enforcement action of the access control policy is defined.
3. The method of claim 1, further comprising: when the target object completes the access to the electronic health record data according to the access address based on the access control strategy, deleting the disposable self-destruction first resource positioning address;
and deleting the disposable self-destruction second resource positioning address when the target object associated party completes the access to the electronic health record data according to the access address based on the access control strategy.
4. The method of claim 1, further comprising: when the target object completes the access to the electronic health record data according to the access address and based on the access control strategy, recording the access event of the target object;
and when the target object associated party completes the access to the electronic health record data according to the access address and based on the access control strategy, recording the access event of the target object associated party.
5. The method of claim 1, further comprising: establishing a hash abstract for the electronic health record data through the edge node, and sending the hash abstract to the target object;
and the target object compares the received hash abstract with the original hash abstract, and judges whether the electronic health record data is modified according to the comparison result.
6. A system for access control to an electronic health record based on a blockchain, the system comprising:
an initial unit configured to establish an intelligent contract based on a blockchain, the intelligent contract comprising a participant executing the intelligent contract and an access control policy defined by a target object in the participant;
the acquisition unit is used for acquiring electronic health record data of a target object in the participant and sending the electronic health record data to an edge node; the edge node stores the electronic health record data;
the first access unit is used for providing a one-time self-destruction first resource positioning address for the target object through the edge node when the target object initiates an access event of electronic health record data corresponding to the target object; the target object analyzes the disposable self-destruction first resource positioning address to obtain an access address of the electronic health record data stored in the edge node; the target object accesses the electronic health record data based on the access control strategy according to the access address;
the second access unit is used for judging whether the identity qualification of the target object associated party meets the access condition or not based on the access control strategy when any target object associated party in the participants initiates the access event of the electronic health record data corresponding to the target object; when the identity qualification of the target object associated party meets the access condition, providing a disposable self-destruction second resource positioning address for the target object associated party through the edge node; the target object correlation party analyzes the one-time self-destruction second resource positioning address to obtain an access address of the electronic health record data stored in the edge node; and the target object correlation party realizes the access to the electronic health record data according to the access address and based on the access control strategy.
7. The system of claim 6, the access control policy comprising:
defining participants in an access control process, wherein the participants comprise a target object and a target object associator associated with the target object;
defining operations in an access control process;
defining the participants to which the access control strategy is applicable;
defining a condition rule of an access control policy comprising a plurality of variables, and an effective time of the condition rule;
an enforcement action of the access control policy is defined.
8. The system of claim 6, the first access unit further to: when the target object completes the access to the electronic health record data according to the access address based on the access control strategy, deleting the disposable self-destruction first resource positioning address;
the second access unit is further configured to: and deleting the disposable self-destruction second resource positioning address when the target object associated party completes the access to the electronic health record data according to the access address based on the access control strategy.
9. The system of claim 6, further comprising a recording unit to: when the target object completes the access to the electronic health record data according to the access address and based on the access control strategy, recording the access event of the target object;
and when the target object associated party completes the access to the electronic health record data according to the access address and based on the access control strategy, recording the access event of the target object associated party.
10. The system of claim 6, further comprising a determination unit to: establishing a hash abstract for the electronic health record data through the edge node, and sending the hash abstract to the target object;
and the target object compares the received hash abstract with the original hash abstract, and judges whether the electronic health record data is modified according to the comparison result.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011517069.3A CN112699385A (en) | 2020-12-21 | 2020-12-21 | Method and system for carrying out access control on electronic health record based on block chain |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011517069.3A CN112699385A (en) | 2020-12-21 | 2020-12-21 | Method and system for carrying out access control on electronic health record based on block chain |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN112699385A true CN112699385A (en) | 2021-04-23 |
Family
ID=75509210
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011517069.3A Pending CN112699385A (en) | 2020-12-21 | 2020-12-21 | Method and system for carrying out access control on electronic health record based on block chain |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112699385A (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2015183783A1 (en) * | 2014-05-27 | 2015-12-03 | Machnick Frank | Method and system for encrypting and transmitting information over unsecured communication channel |
| CN108734575A (en) * | 2018-04-03 | 2018-11-02 | 平安科技（深圳）有限公司 | Financing method, system based on block chain and storage medium |
| CN110049016A (en) * | 2019-03-21 | 2019-07-23 | 深圳壹账通智能科技有限公司 | Data query method, apparatus, system, equipment and the storage medium of block chain |
| CN110729028A (en) * | 2019-10-15 | 2020-01-24 | 腾讯科技（深圳）有限公司 | Health data processing method and device, electronic equipment and storage medium |
| CN111128322A (en) * | 2019-12-06 | 2020-05-08 | 北京先通康桥医药科技有限公司 | Block chain-based medical data processing method, server and system |
| CN111125468A (en) * | 2020-02-05 | 2020-05-08 | 天津大学 | Structural health monitoring system and method based on block chain technology and intelligent contract |
-
2020
- 2020-12-21 CN CN202011517069.3A patent/CN112699385A/en active Pending
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2015183783A1 (en) * | 2014-05-27 | 2015-12-03 | Machnick Frank | Method and system for encrypting and transmitting information over unsecured communication channel |
| CN108734575A (en) * | 2018-04-03 | 2018-11-02 | 平安科技（深圳）有限公司 | Financing method, system based on block chain and storage medium |
| WO2019192119A1 (en) * | 2018-04-03 | 2019-10-10 | 平安科技（深圳）有限公司 | Blockchain-based financing method and system, and storage medium |
| CN110049016A (en) * | 2019-03-21 | 2019-07-23 | 深圳壹账通智能科技有限公司 | Data query method, apparatus, system, equipment and the storage medium of block chain |
| CN110729028A (en) * | 2019-10-15 | 2020-01-24 | 腾讯科技（深圳）有限公司 | Health data processing method and device, electronic equipment and storage medium |
| CN111128322A (en) * | 2019-12-06 | 2020-05-08 | 北京先通康桥医药科技有限公司 | Block chain-based medical data processing method, server and system |
| CN111125468A (en) * | 2020-02-05 | 2020-05-08 | 天津大学 | Structural health monitoring system and method based on block chain technology and intelligent contract |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| Guo et al. | Access control for electronic health records with hybrid blockchain-edge architecture | |
| Seol et al. | Privacy-preserving attribute-based access control model for XML-based electronic health record system | |
| van der Linden et al. | Inter-organizational future proof EHR systems: A review of the security and privacy related issues | |
| Arbabi et al. | A survey on blockchain for healthcare: Challenges, benefits, and future directions | |
| US20070192139A1 (en) | Systems and methods for patient re-identification | |
| CA2642080A1 (en) | System and method for privacy managemen | |
| KR102113806B1 (en) | Method and system for managing personal medical information data | |
| Zhao et al. | Research on electronic medical record access control based on blockchain | |
| Jafari et al. | A rights management approach to protection of privacy in a cloud of electronic health records | |
| Baysal et al. | Blockchain technology applications in the health domain: a multivocal literature review | |
| US8019620B2 (en) | System and method for medical privacy management | |
| Yasnoff | A secure and efficiently searchable health information architecture | |
| Kolan et al. | Medical blockchains and privacy in Austria-technical and legal aspects | |
| Raj et al. | Smart Contract-Based Secure Decentralized Smart Healthcare System | |
| Al Amin et al. | Informed Consent as Patient Driven Policy for Clinical Diagnosis and Treatment: A Smart Contract Based Approach. | |
| EP4035095A1 (en) | Utilizing a user's health data stored over a health care network for disease prevention | |
| CN112699385A (en) | Method and system for carrying out access control on electronic health record based on block chain | |
| Habibi | Consent based privacy for eHealth systems | |
| Al-Ghuraybi et al. | Ensuring authentication in Medical Cyber-Physical Systems: a comprehensive literature review of blockchain technology integration with machine learning | |
| Clarke III et al. | CONSUMER PRIVACY ISSUES ASSOCIATED WITH THE USE OF ELECTRONIC HEALTH RECORDS. | |
| Wimalasiri et al. | Maintaining security in an ontology driven multi-agent system for electronic health records | |
| Hoang et al. | Health data in cloud environments | |
| Yue et al. | Blockchain Enabled Privacy Security Module for Sharing Electronic Health Records (EHRs) | |
| Salih et al. | The active bundle scheme for protecting electronic medical records | |
| Song et al. | SHOES: secure healthcare oriented environement service model |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |