CN112751850A - Sharing method and device - Google Patents

Sharing method and device Download PDF

Info

Publication number
CN112751850A
CN112751850A CN202011590365.6A CN202011590365A CN112751850A CN 112751850 A CN112751850 A CN 112751850A CN 202011590365 A CN202011590365 A CN 202011590365A CN 112751850 A CN112751850 A CN 112751850A
Authority
CN
China
Prior art keywords
medical information
node
random function
sharing
key
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202011590365.6A
Other languages
Chinese (zh)
Inventor
黄珂
杜杏兰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China United Network Communications Group Co Ltd
Original Assignee
China United Network Communications Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China United Network Communications Group Co Ltd filed Critical China United Network Communications Group Co Ltd
Priority to CN202011590365.6A priority Critical patent/CN112751850A/en
Publication of CN112751850A publication Critical patent/CN112751850A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0442Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/602Providing cryptographic facilities or services
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/64Protecting data integrity, e.g. using checksums, certificates or signatures
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/02Details
    • H04L12/16Arrangements for providing special services to substations
    • H04L12/18Arrangements for providing special services to substations for broadcast or conference, e.g. multicast
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/10Protocols in which an application is distributed across nodes in the network
    • H04L67/1095Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0869Generation of secret information including derivation or calculation of cryptographic keys or passwords involving random numbers or seeds

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • General Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • Health & Medical Sciences (AREA)
  • Computing Systems (AREA)
  • Storage Device Security (AREA)

Abstract

The application discloses a sharing method and a sharing device, and belongs to the technical field of block chains. The method comprises the following steps: the sharing request is broadcasted on the blockchain network, wherein the sharing request comprises the medical information number, the medical information abstract corresponding to the medical information number is obtained according to the medical information number and the preset incidence relation, the random function cipher text broadcasted by the first node on the blockchain network is received, the random function cipher text is decrypted based on the pre-agreed second secret key to obtain the random function, the corresponding medical information is obtained based on the medical information abstract, the random function and the public key of the first node, and the medical information can be prevented from being stolen or tampered in the sharing process, so that safe and reliable medical information sharing is realized, and the development of medical utilities is promoted.

Description

Sharing method and device
Technical Field
The present application relates to the field of block chain technology, and in particular, to a sharing method and apparatus.
Background
Medical data sharing is of great significance to the treatment and analysis of diseases. Typically, medical data relates to sensitive information of a patient, and once the medical data is leaked, the privacy of the patient is violated. Therefore, in some medical data sharing methods, the medical data to be shared is encrypted using an encryption module to protect the security of the shared information. For example, the encryption module encrypts the information to be shared of each node by using the key, and distributes the encrypted information to be shared and the key to the corresponding node, and the corresponding node decrypts the information to be shared by using the key, thereby obtaining the shared information. However, in the process of sending the information to be shared to the encryption module by the node, the risk of stealing or tampering the information by a third party exists, and the third party can also intercept the shared information by cracking the key because the key is usually a fixed static key. Therefore, a sharing method is needed to realize safe and reliable medical data sharing.
Disclosure of Invention
Therefore, the sharing method and device are provided to solve the problem that medical data cannot be safely shared due to the risk of being stolen or tampered in the sharing process of the medical data.
In order to achieve the above object, a first aspect of the present application provides a sharing method, including:
broadcasting a sharing request in a blockchain network, wherein the sharing request comprises a medical information number;
acquiring a medical information abstract corresponding to the medical information number according to the medical information number and a preset incidence relation, wherein the preset incidence relation comprises the corresponding relation between the medical information number and an identifier of a first node, and the first node is a node for generating the medical information abstract;
receiving a random function ciphertext broadcasted by the first node in a block chain network, wherein the random function ciphertext is a message broadcasted by the first node under the condition that the sharing request is determined to be associated with the first node according to the medical information number, and the random function ciphertext is a ciphertext obtained by encrypting a random function corresponding to the medical information number based on a pre-agreed first key;
decrypting the random function ciphertext based on a pre-agreed second key to obtain the random function;
and acquiring the corresponding medical information based on the medical information abstract, the random function and the public key of the first node.
Further, the pre-agreed first key is a public key of the current second node, and the pre-agreed second key is a private key of the current second node.
Further, before broadcasting the sharing request in the blockchain network, the method further includes:
receiving a shared message broadcast by the first node in the blockchain network, wherein the shared message comprises the identification of the first node and the medical information summary;
generating the medical information number corresponding to the medical information abstract according to the identifier of the first node;
and setting the preset association relation according to the corresponding relation between the medical information number and the identifier of the first node.
Further, the acquiring the medical information summary corresponding to the medical information number according to the medical information number and the preset association relationship includes:
determining the identifier of the first node corresponding to the medical information number according to the medical information number and the preset incidence relation;
acquiring the shared message corresponding to the first node from the block chain network according to the identifier of the first node;
and acquiring the medical information abstract corresponding to the medical information number according to the shared message.
Further, the medical information summary is information generated based on the random function and encrypted medical information, and the encrypted medical information is information obtained by encrypting the medical information based on a private key of the first node;
the obtaining the corresponding medical information based on the medical information abstract, the random function and the public key of the first node comprises:
obtaining encrypted medical information based on the medical information summary and the random function;
and decrypting the encrypted medical information by using the public key of the first node to obtain the medical information.
In order to achieve the above object, a second aspect of the present application provides a sharing method, including:
receiving a sharing request broadcast by a second node in a blockchain network, wherein the sharing request comprises a medical information number;
judging whether the sharing request is a request associated with the current first node or not according to the medical information number and a preset association relation, wherein the preset association relation comprises a corresponding relation between the medical data number and an identifier of the first node;
under the condition that the sharing request is determined to be associated with the current first node, encrypting a random function corresponding to the medical information number by using a pre-agreed first key to obtain a random function ciphertext;
and broadcasting the random function cipher text in the block chain network so that the second node decrypts the random function cipher text based on a pre-agreed second key to obtain the random function, and obtains corresponding medical information based on the random function, the medical information abstract and the public key of the current first node, wherein the medical information abstract is information obtained by the second node according to the medical data number and a preset incidence relation.
Further, the receiving, by the second node, the sharing request broadcasted by the blockchain network further includes:
broadcasting a shared message over the blockchain network, wherein the shared message includes the identification of the first node and the medical information summary.
Further, before the broadcasting the shared message by the blockchain network, the method further includes:
encrypting the medical information based on the private key of the current first node to obtain encrypted medical information;
and generating the medical information summary based on the random function and the encrypted medical information.
In order to achieve the above object, a third aspect of the present application provides a sharing apparatus comprising:
the system comprises a first broadcasting module, a second broadcasting module and a sharing module, wherein the first broadcasting module is used for broadcasting a sharing request in a blockchain network, and the sharing request comprises a medical information number;
the first obtaining module is used for obtaining a medical information abstract corresponding to the medical information number according to the medical information number and a preset incidence relation, wherein the preset incidence relation comprises the corresponding relation between the medical information number and an identifier of a first node, and the first node is a node for generating the medical information abstract;
a first receiving module, configured to receive a random function ciphertext broadcasted by the first node in a block chain network, where the random function ciphertext is a message broadcasted by the first node when the first node determines that the sharing request is associated with the first node according to the medical information number, and the random function ciphertext is a ciphertext obtained by encrypting a random function corresponding to the medical information number based on a pre-agreed first key;
the decryption module is used for decrypting the random function ciphertext based on a pre-agreed second key to obtain the random function;
and the second acquisition module is used for acquiring the corresponding medical information based on the medical information abstract, the random function and the public key of the first node.
In order to achieve the above object, a fourth aspect of the present application provides a sharing apparatus comprising:
the second receiving module is used for receiving a sharing request broadcast by a second node in the blockchain network, wherein the sharing request comprises a medical information number;
the judging module is used for judging whether the sharing request is a request associated with the current first node or not according to the medical information number and a preset association relation, wherein the preset association relation comprises a corresponding relation between the medical data number and an identifier of the first node;
the encryption module is used for encrypting the random function corresponding to the medical information number by using a pre-agreed first key under the condition that the sharing request is determined to be associated with the current first node, so as to obtain a random function ciphertext;
the second broadcasting module is configured to broadcast the random function ciphertext over the block chain network, so that the second node decrypts the random function ciphertext based on a pre-agreed second key to obtain the random function, and obtains corresponding medical information based on the random function, the medical information digest, and the public key of the current first node, where the medical information digest is information obtained by the second node according to the medical data number and a preset association relationship.
This application has following advantage:
according to the sharing method and device, the sharing request is broadcasted in the blockchain network, wherein the sharing request comprises the medical information number, the medical information abstract corresponding to the medical information number is obtained according to the medical information number and the preset incidence relation, the random function ciphertext broadcasted in the blockchain network by the first node is received, the random function ciphertext is decrypted based on the pre-agreed second key to obtain the random function, the corresponding medical information is obtained based on the medical information abstract, the random function and the public key of the first node, and the medical information can be prevented from being stolen or tampered in the sharing process, so that safe and reliable medical information sharing is achieved, and the development of medical careers is facilitated.
Drawings
The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this specification, illustrate embodiments of the application and together with the description serve to explain the principles of the application and not to limit the application.
Fig. 1 is a flowchart of a sharing method according to an embodiment of the present application;
fig. 2 is a flowchart of a sharing method according to a second embodiment of the present application;
fig. 3 is a flowchart of a sharing method according to a third embodiment of the present application;
fig. 4 is a flowchart of a sharing method according to a fourth embodiment of the present application;
fig. 5 is a block diagram illustrating a sharing device according to a fifth embodiment of the present disclosure;
fig. 6 is a block diagram illustrating a sharing device according to a sixth embodiment of the present disclosure.
In the drawings:
501: the first broadcast module 502: first acquisition module
503: the first receiving module 504: decryption module
505: the second obtaining module 601: second receiving module
602: the judging module 603: encryption module
604: second broadcast module
Detailed Description
The following detailed description of embodiments of the present application will be made with reference to the accompanying drawings. It should be understood that the detailed description and specific examples, while indicating the present application, are given by way of illustration and explanation only, and are not intended to limit the present application.
Advances in computer technology, networking technology, and the heat of data sharing have collectively driven the development of medical data sharing. In practical application, medical data generally relates to sensitive information of patients and hospitals, and once data leakage occurs in a sharing process, information leakage of the patients and medical institutions can be caused, and information safety cannot be effectively guaranteed.
In view of the above, the present application provides a sharing method and apparatus, where both a terminal node and a medical node of a patient access a blockchain network, the patient broadcasts a medical information digest in the blockchain network through the terminal node, the medical node receives a random function ciphertext returned by the terminal node after broadcasting a sharing request in the blockchain network, decrypts the random function ciphertext based on a pre-agreed second key to obtain a random function, and obtains corresponding medical information based on the medical information digest, the random function and a public key of the terminal node, so that medical information can be effectively prevented from being stolen or tampered in a sharing process, thereby achieving safe and reliable medical information sharing and facilitating development of medical utilities.
A first aspect of the present application provides a sharing method. Fig. 1 is a flowchart of a sharing method provided in an embodiment of the present application, which can be applied to a medical institution node. As shown in fig. 1, the sharing method includes the following steps:
step S101, broadcasting a sharing request in the blockchain network.
The sharing request comprises a medical information number, and the medical information number is used for identifying the medical information and the medical information abstract, so that the node can uniquely determine the medical information and the medical information abstract corresponding to the node based on the medical information number. The medical information abstract is encrypted information obtained by encrypting the medical information by a first node, and the first node is an abstract node of the patient terminal in the block chain network. Accordingly, an abstract node of a medical facility node in the blockchain network is a second node (e.g., a server of a medical facility), including but not limited to a hospital, a medical research institute, and an emergency center.
In a blockchain network, there are a number of first nodes that generate several numbers of medical information summaries. On the first hand, the second node selects the needed medical information abstract from the block chain network according to the medical information number; in a second aspect, after receiving the sharing request, the first node determines whether the sharing request is a sharing request related thereto according to the medical information number, and further determines whether the sharing request is agreed to share the corresponding medical information to the second node if it is determined that the sharing request is related thereto.
And S102, acquiring a medical information abstract corresponding to the medical information number according to the medical information number and the preset association relation.
The preset association relationship comprises a corresponding relationship between the medical information number and an identifier of a first node, and the first node is a node for generating the medical information abstract. In some embodiments, the identity of the first node may use the number of the terminal or the blockchain identity of the terminal.
In practical applications, the blockchain network includes a plurality of first nodes, the first nodes generate a plurality of medical information abstracts, and the second nodes need to select the medical information abstracts to be acquired from the blockchain network according to the medical information numbers in the sharing requirements.
In some embodiments, the second node determines, according to the medical information number and the preset association relationship, an identifier of the first node corresponding to the medical information number, and then obtains, according to the identifier of the first node, a corresponding medical information summary from the blockchain network.
Step S103, receiving a random function ciphertext broadcasted by the first node in the block chain network.
The random function ciphertext is a message broadcast by the first node under the condition that the sharing request is determined to be associated with the first node according to the medical information number, and the random function ciphertext is a ciphertext obtained by encrypting a random function corresponding to the medical information number based on a pre-agreed first key.
In one embodiment, a first node receives a sharing request broadcast by a second node, analyzes the sharing request to obtain a medical information number, and determines whether the sharing request is a request related to the current first node according to the medical information number and a preset association relation. Specifically, when the identifier of the corresponding first node is obtained according to the medical information number and the preset association relationship, and the identifier is consistent with the identifier of the current first node, it is determined that the sharing request is a request related to the current first node. In the case that it is determined that the sharing request is a request related to the current first node and the first node agrees to share the corresponding medical information to the second node, the first node encrypts a random function corresponding to the medical information number by using a pre-agreed first key (for example, a public key of the second node), obtains a random function ciphertext, and broadcasts the random function ciphertext in the blockchain network. The second node receives the random function ciphertext broadcast by the first node in the block chain network.
It can be understood that the random function ciphertext is information encrypted by the first node, and even if the random function ciphertext is intercepted by the third-party node, the third-party node cannot decrypt the random function ciphertext to obtain related plaintext (the plaintext includes the random function), so that the third-party node cannot decrypt the medical information abstract to obtain the medical information, and the safety of the medical information is guaranteed.
And step S104, decrypting the random function cipher text based on the pre-agreed second key to obtain the random function.
In order to ensure that the second node can correctly decrypt the random function ciphertext to obtain the random function, the first node and the second node agree on key information in advance, wherein the key information comprises a first key and a second key. The first node encrypts the random function according to a pre-agreed first key to obtain a random function ciphertext, and the second node receives the random function ciphertext and decrypts the random function ciphertext according to a pre-agreed second key to obtain a correct random function.
In some embodiments, the first node and the second node agree in advance that the first key is a public key of the second node and the second key is a private key of the second node. The first node encrypts the random function by using the public key of the second node, and generates and sends a random function ciphertext to the second node. And after the second node receives the random function ciphertext, decrypting the random function ciphertext by using the private key of the second node to obtain the random function.
And step S105, acquiring corresponding medical information based on the medical information abstract, the random function and the public key of the first node.
In some embodiments, the medical information digest is information generated based on a random function and encrypted medical information, and the encrypted medical information is information obtained by encrypting the medical information based on a private key of the first node. The second node obtains corresponding medical information based on the medical information abstract, the random function and the public key of the first node, and the method comprises the following steps: acquiring encrypted medical information based on the medical information abstract and the random function; and decrypting the encrypted medical information by using the public key of the first node to obtain the medical information.
In this embodiment, to ensure the security of the shared information, the medical information digest broadcast by the first node in the blockchain network is encrypted information (the medical information digest is encrypted information obtained after encrypting the medical information), and after the second node issues a sharing request in response to a sharing request, the first node broadcasts a random function ciphertext for decrypting the medical information digest in the blockchain network when the first node agrees to share the medical information. Moreover, in order to prevent the third-party node from intercepting the random function ciphertext to decrypt the medical information digest to obtain the medical information, the random function ciphertext is information encrypted by the first node, and the third-party node cannot decrypt the random function ciphertext to obtain a related plaintext, so that the third-party node cannot decrypt the medical information digest. After receiving the random function ciphertext, the second node decrypts the random function ciphertext based on a pre-agreed second key to obtain a random function, and obtains corresponding medical information based on the medical information abstract, the random function and the public key of the first node, so that safe and reliable medical information sharing is realized.
Fig. 2 is a flowchart of a sharing method provided in the second embodiment of the present application, which can be applied to a medical institution node. As shown in fig. 2, the sharing method includes the following steps:
step S201, receiving a shared message broadcast by a first node in a blockchain network.
The shared message comprises the identification of the first node and the medical information abstract, and the medical information abstract is encrypted information generated by the first node based on the medical information.
In some embodiments, the first node encrypts the medical information using its private key, obtains encrypted medical information, further encrypts the encrypted medical information based on a random function, generates a medical information digest, generates a shared message based on the medical information digest and an identification of the first node, and broadcasts the shared message over the blockchain network. The second node receives the shared message broadcast by the first node over the blockchain network.
And step S202, generating a medical information number corresponding to the medical information abstract according to the identification of the first node.
The medical information number is used for identifying the medical information abstract.
In some embodiments, after receiving the shared message broadcast by the first node, the second node generates a number of the corresponding medical information summary according to the identifier of the first node in the shared message, where the number is the medical information number.
It can be understood that, since the medical information summary is generated based on the corresponding medical information, there is a one-to-one correspondence relationship between the medical information summary and the medical information, and therefore, the medical information number can be used to identify not only the medical information summary but also the medical information.
Step S203, setting a preset association relation according to the corresponding relation between the medical information number and the identification of the first node.
The preset incidence relation comprises a mapping relation between the medical information number and the identifier of the first node. In some embodiments, the medical information number is known, the identifier of the first node is unknown, and the identifier of the first node corresponding to the medical information number can be determined according to the preset association relationship and the medical information number. In some other embodiments, knowing the identifier of the first node and the unknown medical information number, and determining the medical information number corresponding to the identifier of the first node according to the preset association relationship and the identifier of the first node.
It should be noted that, in some embodiments, after receiving the sharing request sent by the second node, the first node determines whether the sharing request is a request related to the first node according to the medical information number in the sharing request and the preset association relationship before broadcasting the random function ciphertext, and only if it is determined that the sharing request is a request related thereto, the first node broadcasts the random function ciphertext in the blockchain network. And when the medical information corresponding to the medical information number is the information generated by the current first node, the first node determines that the sharing request is a request related to the sharing request.
Step S204, broadcast the sharing request in the block chain network.
And S205, acquiring a medical information abstract corresponding to the medical information number according to the medical information number and the preset association relation.
Step S206, receiving a random function ciphertext broadcasted by the first node in the blockchain network.
Step S207, the random function cipher text is decrypted based on the pre-agreed second key, so as to obtain the random function.
And step S208, acquiring corresponding medical information based on the medical information abstract, the random function and the public key of the first node.
Steps S204 to S208 in this embodiment are the same as steps S101 to S105 in the first embodiment of the present application, and are not described herein again.
Fig. 3 is a flowchart of a sharing method provided in the third embodiment of the present application, which can be applied to a patient terminal node. As shown in fig. 3, the sharing method includes the following steps:
step S301, a sharing request broadcasted by the second node in the blockchain network is received.
The sharing request comprises a medical information number, and the medical information number is used for identifying the medical information and the medical information abstract, so that the node can uniquely determine the medical information and the medical information abstract corresponding to the node based on the medical information number. The medical information abstract is encrypted information obtained by encrypting the medical information by a first node, and the first node is an abstract node of the patient terminal in the block chain network. Accordingly, the abstract node of a medical facility node in the blockchain network is the second node, and the medical facility includes, but is not limited to, hospitals, medical research institutes, and emergency treatment centers.
Step S302, judging whether the sharing request is a request associated with the current first node or not according to the medical information number and the preset association relation.
The preset association relationship comprises a corresponding relationship between the medical data number and an identifier of a first node, and the first node is a node for generating the medical information abstract. In some embodiments, the identity of the first node may use the number of the terminal or the blockchain identity of the terminal.
In some embodiments, after receiving the sharing request sent by the second node, the first node determines, according to the medical information number and the preset association relationship in the sharing request, whether the medical information and the medical information summary corresponding to the medical information number are the information generated by the current first node (i.e., determines whether the identifier of the first node corresponding to the medical information number is consistent with the identifier of the current first node), and determines that the sharing request is a request related to the medical information and the medical information summary when determining that the medical information and the medical information summary corresponding to the medical information number are the information generated by the current first node.
Step S303, under the condition that the sharing request is determined to be associated with the current first node, encrypting the random function corresponding to the medical information number by using a pre-agreed first key to obtain a random function ciphertext.
In some embodiments, the first node further determines whether it agrees to share the corresponding medical information with the second node upon determining that the sharing request is a request associated with the current first node. Under the condition that the medical information is determined to be shared to the second node in an agreed manner, the first node encrypts a random function corresponding to the medical information number by using a first secret key (for example, a public key of the second node) agreed in advance to obtain a random function ciphertext, and broadcasts the random function ciphertext in the block chain network.
It can be understood that the random function ciphertext is information encrypted by the first node, and even if the random function ciphertext is intercepted by the third-party node, the third-party node cannot decrypt the random function ciphertext to obtain related plaintext (the plaintext includes the random function), so that the third-party node cannot decrypt the medical information abstract to obtain the medical information, and the safety of the medical information is guaranteed.
Step S304, broadcasting the random function cipher text in the block chain network, so that the second node can decrypt the random function cipher text based on the pre-agreed second key to obtain a random function, and obtain corresponding medical information based on the random function, the medical information abstract and the current public key of the first node.
The medical information abstract is information obtained by the second node according to the medical data number and the preset incidence relation.
In some embodiments, the first node and the second node agree in advance that the first key is a public key of the second node and the second key is a private key of the second node. The first node encrypts the random function by using the public key of the second node, and generates and sends a random function ciphertext to the second node. And after receiving the random function ciphertext, the second node decrypts the random function ciphertext by using the private key of the second node to obtain a random function, and obtains corresponding medical information based on the medical information abstract, the random function and the public key of the first node.
It can be understood that, because the private key of the second node is owned only by the second node, other nodes cannot know the private key of the second node, so that a third party can be prevented from acquiring a random function by intercepting and decrypting a random function ciphertext, and the secure transmission of the random function is ensured.
In this embodiment, a first node receives a sharing request broadcast by a second node in a blockchain network, where the sharing request includes a medical information number; judging whether the sharing request is a request associated with the current first node or not according to the medical information number and a preset association relation, wherein the preset association relation comprises a corresponding relation between the medical data number and the identifier of the first node; under the condition that the sharing request is determined to be associated with the current first node, encrypting a random function corresponding to the medical information number by using a pre-agreed first key to obtain a random function ciphertext; and broadcasting the random function cipher text in the blockchain network so that the second node decrypts the random function cipher text based on a pre-agreed second key to obtain a random function, and obtains corresponding medical information based on the random function, the medical information abstract and the current public key of the first node, so that the medical information can be prevented from being stolen or tampered in the sharing process, safe and reliable medical information sharing is realized, and the development of medical utilities is promoted.
Fig. 4 is a flowchart of a sharing method provided in the fourth embodiment of the present application, which can be applied to a patient terminal node. As shown in fig. 4, the sharing method includes the following steps:
step S401, the medical information is encrypted based on the private key of the current first node, and the encrypted medical information is obtained.
After the first node generates the medical information, in order to prevent leakage of personal information or medical institution information due to leakage of the medical information, the first node encrypts the medical information to generate encrypted medical information.
In some embodiments, the first node encrypts the medical information using its private key, obtaining encrypted medical information.
Step S402, generating a medical information summary based on the random function and the encrypted medical information.
The random function is a function with a function of generating summary information. The encrypted medical information is used as an independent variable of a random function, and an obtained result is a medical information abstract after the random function is operated.
It is understood that in practical applications, the medical information may include medical image examination results, which results in a large amount of medical information data, and increases data storage and data processing pressure. Compared with the encrypted medical information or medical information, the medical information summary generated based on the random function has the advantage that the data size is greatly reduced, so that the data storage pressure and the data processing pressure can be relieved.
It should be noted that the medical information summary processed by the random function has a higher encryption degree than the encrypted medical information and is less likely to be decrypted by a third party, so that the security of the medical information to be shared is improved.
In step S403, the sharing message is broadcasted in the blockchain network.
Wherein the shared message comprises the identification of the first node and the medical information summary.
After the first node broadcasts the shared message in the blockchain network, the second node can acquire the medical information summary from the blockchain network, and then the medical information summary is decrypted through the random function provided by the first node and the public key of the first node, so that the corresponding medical information is acquired, and the medical information sharing is realized.
Step S404, receiving a sharing request broadcast by the second node in the blockchain network.
Step S405, judging whether the sharing request is a request associated with the current first node or not according to the medical information number and the preset association relation.
Step S406, under the condition that the sharing request is determined to be associated with the current first node, encrypting the random function corresponding to the medical information number by using a pre-agreed first key to obtain a random function ciphertext.
Step S407, broadcasting the random function cipher text in the block chain network, so that the second node decrypts the random function cipher text based on the pre-agreed second key to obtain a random function, and obtains corresponding medical information based on the random function, the medical information abstract and the current public key of the first node.
Steps S404 to S407 in this embodiment are the same as steps S301 to S304 in the third embodiment of the present application, and are not described again here.
The steps of the above methods are divided for clarity, and the implementation may be combined into one step or split some steps, and the steps are divided into multiple steps, so long as the same logical relationship is included, which are all within the protection scope of the present patent; it is within the scope of the patent to add insignificant modifications to the algorithms or processes or to introduce insignificant design changes to the core design without changing the algorithms or processes.
A second aspect of the present application provides a sharing apparatus. Fig. 5 is a block diagram of a sharing device according to a fifth embodiment of the present application, which is applicable to a medical institution node. As shown in fig. 5, the sharing apparatus includes: a first broadcasting module 501, a first obtaining module 502, a first receiving module 503, a decrypting module 504 and a second obtaining module 505.
A first broadcasting module 501 is configured to broadcast a sharing request in a blockchain network.
The sharing request comprises a medical information number, and the medical information number is used for identifying the medical information and the medical information abstract, so that the node can uniquely determine the medical information and the medical information abstract corresponding to the node based on the medical information number. The medical information abstract is encrypted information obtained by encrypting the medical information by a first node, and the first node is an abstract node of the patient terminal in the block chain network. Accordingly, the abstract node of a medical facility node in the blockchain network is the second node, and the medical facility includes, but is not limited to, hospitals, medical research institutes, and emergency treatment centers.
In a blockchain network, there are a number of first nodes that generate several numbers of medical information summaries. On the first hand, the second node selects the needed medical information abstract from the block chain network according to the medical information number; in a second aspect, after receiving the sharing request, the first node determines whether the sharing request is a sharing request related thereto according to the medical information number, and further determines whether the sharing request is agreed to share the corresponding medical information to the second node if it is determined that the sharing request is related thereto.
The first obtaining module 502 is configured to obtain a medical information summary corresponding to the medical information number according to the medical information number and a preset association relationship.
The preset association relationship comprises a corresponding relationship between the medical information number and an identifier of a first node, and the first node is a node for generating the medical information abstract. In some embodiments, the identity of the first node may use the number of the terminal or the blockchain identity of the terminal.
In practical applications, the blockchain network includes a plurality of first nodes, the first nodes generate a plurality of medical information abstracts, and the second nodes need to select the medical information abstracts to be acquired from the blockchain network according to the medical information numbers in the sharing requirements.
In some embodiments, the second node determines, through the first obtaining module 502, an identifier of the first node corresponding to the medical information number according to the medical information number and the preset association relationship, and further obtains the corresponding medical information summary from the blockchain network according to the identifier of the first node.
The first receiving module 503 is configured to receive a random function ciphertext broadcast by the first node in the blockchain network.
The random function ciphertext is a message broadcast by the first node under the condition that the sharing request is determined to be associated with the first node according to the medical information number, and the random function ciphertext is a ciphertext obtained by encrypting a random function corresponding to the medical information number based on a pre-agreed first key.
In one embodiment, a first node receives a sharing request broadcast by a second node, analyzes the sharing request to obtain a medical information number, and determines whether the sharing request is a request related to the current first node according to the medical information number and a preset association relation. Specifically, when the identifier of the corresponding first node is obtained according to the medical information number and the preset association relationship, and the identifier is consistent with the identifier of the current first node, it is determined that the sharing request is a request related to the current first node. In the case that it is determined that the sharing request is a request related to the current first node and the first node agrees to share the corresponding medical information to the second node, the first node encrypts a random function corresponding to the medical information number by using a pre-agreed first key (for example, a public key of the second node), obtains a random function ciphertext, and broadcasts the random function ciphertext in the blockchain network. The second node receives the random function ciphertext broadcast by the first node in the blockchain network through the first receiving module 503.
The decryption module 504 is configured to decrypt the random function ciphertext based on a pre-agreed second key to obtain a random function.
In order to ensure that the second node can correctly decrypt the random function ciphertext to obtain the random function, the first node and the second node agree on key information in advance, wherein the key information comprises a first key and a second key. The first node encrypts the random function according to a pre-agreed first key to obtain a random function ciphertext, and the second node receives the random function ciphertext and decrypts the random function ciphertext according to a pre-agreed second key to obtain a correct random function.
In some embodiments, the first node and the second node agree in advance that the first key is a public key of the second node and the second key is a private key of the second node. The first node encrypts the random function by using the public key of the second node, and generates and sends a random function ciphertext to the second node. After receiving the random function ciphertext, the second node decrypts the random function ciphertext by using the private key of the second node through the decryption module 504, so as to obtain the random function.
And a second obtaining module 505, configured to obtain corresponding medical information based on the medical information abstract, the random function, and the public key of the first node.
In some embodiments, the medical information digest is information generated based on a random function and encrypted medical information, and the encrypted medical information is information obtained by encrypting the medical information based on a private key of the first node. The second obtaining module 505 obtains corresponding medical information based on the medical information abstract, the random function, and the public key of the first node, including: acquiring encrypted medical information based on the medical information abstract and the random function; and decrypting the encrypted medical information by using the public key of the first node to obtain the medical information.
In this embodiment, the first node broadcasts a sharing request in the blockchain network, where the sharing request includes the medical information number, acquires a medical information digest corresponding to the medical information number according to the medical information number and a preset association relationship, receives a random function ciphertext broadcasted by the first node in the blockchain network, decrypts the random function ciphertext based on a pre-agreed second key to obtain a random function, and obtains corresponding medical information based on the medical information digest, the random function, and a public key of the first node, so that the medical information can be prevented from being stolen or tampered in the sharing process, thereby realizing safe and reliable medical information sharing and contributing to the development of medical utilities.
Fig. 6 is a block diagram of a sharing device according to a sixth embodiment of the present application, which is applicable to a patient terminal node. As shown in fig. 6, the sharing apparatus includes: a second receiving module 601, a judging module 602, an encrypting module 603 and a second broadcasting module 604.
A second receiving module 601, configured to receive a sharing request broadcast by a second node in the blockchain network.
The sharing request comprises a medical information number, and the medical information number is used for identifying the medical information and the medical information abstract, so that the node can uniquely determine the medical information and the medical information abstract corresponding to the node based on the medical information number. The medical information abstract is encrypted information obtained by encrypting the medical information by a first node, and the first node is an abstract node of the patient terminal in the block chain network. Accordingly, the abstract node of a medical facility node in the blockchain network is the second node, and the medical facility includes, but is not limited to, hospitals, medical research institutes, and emergency treatment centers.
The determining module 602 is configured to determine whether the sharing request is a request associated with the current first node according to the medical information number and the preset association relationship.
The preset association relationship comprises a corresponding relationship between the medical data number and the identifier of the first node.
In some embodiments, after receiving the sharing request sent by the second node, the first node determines, by the determining module 602, whether the medical information and the medical information summary corresponding to the medical information number are the information generated by the current first node according to the medical information number and the preset association relationship in the sharing request (i.e., determines whether the identifier of the first node corresponding to the medical information number is consistent with the identifier of the current first node), and in a case that the medical information and the medical information summary corresponding to the medical information number are the information generated by the current first node, determines that the sharing request is a request related thereto.
The encrypting module 603 is configured to encrypt the random function corresponding to the medical information number by using a pre-agreed first key to obtain a random function ciphertext under the condition that it is determined that the sharing request is associated with the current first node.
In some embodiments, the first node further determines whether it agrees to share the corresponding medical information with the second node upon determining that the sharing request is a request associated with the current first node. Under the condition that it is determined that the medical information is shared to the second node with the same intention, the first node encrypts, through the encryption module 603, the random function corresponding to the medical information number by using a first key (for example, a public key of the second node) agreed in advance, and obtains a random function ciphertext.
The second broadcasting module 604 is configured to broadcast the random function ciphertext over the blockchain network, so that the second node decrypts the random function ciphertext based on a second key agreed in advance to obtain a random function, and obtains corresponding medical information based on the random function, the medical information digest, and the public key of the current first node.
The medical information abstract is information obtained by the second node according to the medical data number and the preset incidence relation.
In some embodiments, the first node and the second node agree in advance that the first key is a public key of the second node and the second key is a private key of the second node. The first node encrypts the random function using the public key of the second node to generate a random function ciphertext, and broadcasts the random function ciphertext in the blockchain network through the second broadcasting module 604. And after receiving the random function ciphertext broadcasted by the first node, the second node decrypts the random function ciphertext by using the private key of the second node to obtain a random function, and obtains corresponding medical information based on the medical information abstract, the random function and the public key of the first node.
In this embodiment, a first node receives a sharing request broadcast by a second node in a blockchain network, where the sharing request includes a medical information number; judging whether the sharing request is a request associated with the current first node or not according to the medical information number and a preset association relation, wherein the preset association relation comprises a corresponding relation between the medical data number and the identifier of the first node; under the condition that the sharing request is determined to be associated with the current first node, encrypting a random function corresponding to the medical information number by using a pre-agreed first key to obtain a random function ciphertext; and broadcasting the random function cipher text in the blockchain network so that the second node decrypts the random function cipher text based on a pre-agreed second key to obtain a random function, and obtains corresponding medical information based on the random function, the medical information abstract and the current public key of the first node, so that the medical information can be prevented from being stolen or tampered in the sharing process, safe and reliable medical information sharing is realized, and the development of medical utilities is promoted.
It should be noted that each module referred to in this embodiment is a logical module, and in practical applications, one logical unit may be one physical unit, may be a part of one physical unit, and may be implemented by a combination of multiple physical units. In addition, in order to highlight the innovative part of the present application, a unit that is not so closely related to solving the technical problem proposed by the present application is not introduced in the present embodiment, but it does not indicate that no other unit exists in the present embodiment.
It is to be understood that the above embodiments are merely exemplary embodiments that are employed to illustrate the principles of the present application, and that the present application is not limited thereto. It will be apparent to those skilled in the art that various changes and modifications can be made therein without departing from the spirit and scope of the application, and these changes and modifications are to be considered as the scope of the application.

Claims (10)

1. A sharing method, comprising:
broadcasting a sharing request in a blockchain network, wherein the sharing request comprises a medical information number;
acquiring a medical information abstract corresponding to the medical information number according to the medical information number and a preset incidence relation, wherein the preset incidence relation comprises the corresponding relation between the medical information number and an identifier of a first node, and the first node is a node for generating the medical information abstract;
receiving a random function ciphertext broadcasted by the first node in a block chain network, wherein the random function ciphertext is a message broadcasted by the first node under the condition that the sharing request is determined to be associated with the first node according to the medical information number, and the random function ciphertext is a ciphertext obtained by encrypting a random function corresponding to the medical information number based on a pre-agreed first key;
decrypting the random function ciphertext based on a pre-agreed second key to obtain the random function;
and acquiring the corresponding medical information based on the medical information abstract, the random function and the public key of the first node.
2. The sharing method according to claim 1, wherein the pre-agreed first key is a public key of the current second node, and the pre-agreed second key is a private key of the current second node.
3. The sharing method according to claim 1, wherein before broadcasting the sharing request in the blockchain network, further comprising:
receiving a shared message broadcast by the first node in the blockchain network, wherein the shared message comprises the identification of the first node and the medical information summary;
generating the medical information number corresponding to the medical information abstract according to the identifier of the first node;
and setting the preset association relation according to the corresponding relation between the medical information number and the identifier of the first node.
4. The sharing method according to claim 3, wherein the obtaining of the medical information summary corresponding to the medical information number according to the medical information number and a preset association relationship comprises:
determining the identifier of the first node corresponding to the medical information number according to the medical information number and the preset incidence relation;
acquiring the shared message corresponding to the first node from the block chain network according to the identifier of the first node;
and acquiring the medical information abstract corresponding to the medical information number according to the shared message.
5. The sharing method according to claim 1, wherein the medical information digest is information generated based on the random function and encrypted medical information, and the encrypted medical information is information obtained by encrypting the medical information based on a private key of the first node;
the obtaining the corresponding medical information based on the medical information abstract, the random function and the public key of the first node comprises:
obtaining encrypted medical information based on the medical information summary and the random function;
and decrypting the encrypted medical information by using the public key of the first node to obtain the medical information.
6. A sharing method, comprising:
receiving a sharing request broadcast by a second node in a blockchain network, wherein the sharing request comprises a medical information number;
judging whether the sharing request is a request associated with the current first node or not according to the medical information number and a preset association relation, wherein the preset association relation comprises a corresponding relation between the medical data number and an identifier of the first node;
under the condition that the sharing request is determined to be associated with the current first node, encrypting a random function corresponding to the medical information number by using a pre-agreed first key to obtain a random function ciphertext;
and broadcasting the random function cipher text in the block chain network so that the second node decrypts the random function cipher text based on a pre-agreed second key to obtain the random function, and obtains corresponding medical information based on the random function, the medical information abstract and the public key of the current first node, wherein the medical information abstract is information obtained by the second node according to the medical data number and a preset incidence relation.
7. The sharing method according to claim 6, wherein the receiving the sharing request broadcasted by the second node over the blockchain network further comprises:
broadcasting a shared message over the blockchain network, wherein the shared message includes the identification of the first node and the medical information summary.
8. The sharing method according to claim 7, wherein before the broadcasting of the shared message by the blockchain network, further comprising:
encrypting the medical information based on the private key of the current first node to obtain encrypted medical information;
and generating the medical information summary based on the random function and the encrypted medical information.
9. A sharing device, comprising:
the system comprises a first broadcasting module, a second broadcasting module and a sharing module, wherein the first broadcasting module is used for broadcasting a sharing request in a blockchain network, and the sharing request comprises a medical information number;
the first obtaining module is used for obtaining a medical information abstract corresponding to the medical information number according to the medical information number and a preset incidence relation, wherein the preset incidence relation comprises the corresponding relation between the medical information number and an identifier of a first node, and the first node is a node for generating the medical information abstract;
a first receiving module, configured to receive a random function ciphertext broadcasted by the first node in a block chain network, where the random function ciphertext is a message broadcasted by the first node when the first node determines that the sharing request is associated with the first node according to the medical information number, and the random function ciphertext is a ciphertext obtained by encrypting a random function corresponding to the medical information number based on a pre-agreed first key;
the decryption module is used for decrypting the random function ciphertext based on a pre-agreed second key to obtain the random function;
and the second acquisition module is used for acquiring the corresponding medical information based on the medical information abstract, the random function and the public key of the first node.
10. A sharing device, comprising:
the second receiving module is used for receiving a sharing request broadcast by a second node in the blockchain network, wherein the sharing request comprises a medical information number;
the judging module is used for judging whether the sharing request is a request associated with the current first node or not according to the medical information number and a preset association relation, wherein the preset association relation comprises a corresponding relation between the medical data number and an identifier of the first node;
the encryption module is used for encrypting the random function corresponding to the medical information number by using a pre-agreed first key under the condition that the sharing request is determined to be associated with the current first node, so as to obtain a random function ciphertext;
the second broadcasting module is configured to broadcast the random function ciphertext over the block chain network, so that the second node decrypts the random function ciphertext based on a pre-agreed second key to obtain the random function, and obtains corresponding medical information based on the random function, the medical information digest, and the public key of the current first node, where the medical information digest is information obtained by the second node according to the medical data number and a preset association relationship.
CN202011590365.6A 2020-12-29 2020-12-29 Sharing method and device Pending CN112751850A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011590365.6A CN112751850A (en) 2020-12-29 2020-12-29 Sharing method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011590365.6A CN112751850A (en) 2020-12-29 2020-12-29 Sharing method and device

Publications (1)

Publication Number Publication Date
CN112751850A true CN112751850A (en) 2021-05-04

Family

ID=75647612

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011590365.6A Pending CN112751850A (en) 2020-12-29 2020-12-29 Sharing method and device

Country Status (1)

Country Link
CN (1) CN112751850A (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113486393A (en) * 2021-06-16 2021-10-08 中国联合网络通信集团有限公司 Block chain-based personal information sharing method, node, device and storage medium
CN113486385A (en) * 2021-07-29 2021-10-08 深圳市至诚峰汇科技有限公司 Jewelry sharing method, device, equipment and storage medium based on block chain

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090217043A1 (en) * 2008-02-26 2009-08-27 Motorola, Inc. Method and system for mutual authentication of nodes in a wireless communication network
CN108702287A (en) * 2018-04-16 2018-10-23 深圳前海达闼云端智能科技有限公司 Information publication based on block chain and acquisition methods, device and block chain node
CN109831501A (en) * 2019-01-30 2019-05-31 京东数字科技控股有限公司 Information dispensing method and system based on block chain
CN111357023A (en) * 2018-10-23 2020-06-30 北京嘀嘀无限科技发展有限公司 Method and system for transferring data in a blockchain system
CN111935080A (en) * 2020-06-24 2020-11-13 布比(北京)网络技术有限公司 Data sharing method and device for block chain, computer equipment and storage medium

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090217043A1 (en) * 2008-02-26 2009-08-27 Motorola, Inc. Method and system for mutual authentication of nodes in a wireless communication network
CN108702287A (en) * 2018-04-16 2018-10-23 深圳前海达闼云端智能科技有限公司 Information publication based on block chain and acquisition methods, device and block chain node
CN111357023A (en) * 2018-10-23 2020-06-30 北京嘀嘀无限科技发展有限公司 Method and system for transferring data in a blockchain system
CN109831501A (en) * 2019-01-30 2019-05-31 京东数字科技控股有限公司 Information dispensing method and system based on block chain
CN111935080A (en) * 2020-06-24 2020-11-13 布比(北京)网络技术有限公司 Data sharing method and device for block chain, computer equipment and storage medium

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113486393A (en) * 2021-06-16 2021-10-08 中国联合网络通信集团有限公司 Block chain-based personal information sharing method, node, device and storage medium
CN113486385A (en) * 2021-07-29 2021-10-08 深圳市至诚峰汇科技有限公司 Jewelry sharing method, device, equipment and storage medium based on block chain
CN113486385B (en) * 2021-07-29 2022-03-01 深圳市至诚峰汇科技有限公司 Jewelry sharing method, device, equipment and storage medium based on block chain

Similar Documents

Publication Publication Date Title
CN111556025A (en) Data transmission method, system and computer equipment based on encryption and decryption operations
CN107317677B (en) Secret key storage and equipment identity authentication method and device
EP2743842A1 (en) Secure search processing system and secure search processing method
US11831753B2 (en) Secure distributed key management system
US20180013832A1 (en) Health device, gateway device and method for securing protocol using the same
CN112751850A (en) Sharing method and device
CN115314313A (en) Information encryption method and device, storage medium and computer equipment
CN115348023A (en) Data security processing method and device
CN115348085B (en) Epidemic prevention management method based on quantum encryption and epidemic prevention terminal
CN114785527B (en) Data transmission method, device, equipment and storage medium
CN112437436B (en) Identity authentication method and device
US20220166615A2 (en) Protecting secret software and confidential data in a secure enclave
WO2021129012A1 (en) Privacy information transmission method, apparatus, computer device and computer-readable medium
CN111431846B (en) Data transmission method, device and system
CN114584299A (en) Data processing method and device, electronic equipment and storage medium
CN112688781A (en) Key processing method and device
CN112804195A (en) Data security storage method and system
CN111586011A (en) Information sharing method and device
CN112866209B (en) Dialysis data safety management system and method
CN115643113B (en) Secure transmission method and device for private data and financial private data
CN117373599B (en) Medical information sharing system and method based on block chain
CN117254913B (en) Interactive data identification method and device
US11934516B2 (en) Method and system for enabling secure processing of data using untrusted processing application in a trusted execution environment
CN117478401A (en) Data transmission method, system, device and computer readable storage medium
CN113452654B (en) Data decryption method

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20210504