KR101301237B1 - System, apparatus and method for providing health information - Google Patents

Abstract

The present invention relates to a system, apparatus, and method for providing health information, and more particularly, to transmit authentication information received from an RFID tag possessed by a patient in a hospital to a database server, and from the database server to the patient. A system, apparatus, and method for providing health information for receiving medical history information.
An apparatus for providing health information according to an embodiment of the present invention is generated by using a random number generator for generating a first random number and the first random number in response to transmitting the first random number to a tag device of a patient. And a communication unit for receiving the health information of the patient in response to receiving the authentication information and transmitting the authentication information to the database server, and an output unit for outputting the received health information of the patient.

Description

System, apparatus and method for providing health information

The present invention relates to a system, apparatus, and method for providing health information, and more particularly, to transmit authentication information received from an RFID tag possessed by a patient in a hospital to a database server, and from the database server to the patient. A system, apparatus, and method for providing health information for receiving medical history information.

Ubiquitous is a Latin word meaning that it exists anytime, anywhere. It refers to an information and communication environment in which a user can freely access a network regardless of a network or a computer.

Recently, with the development of ubiquitous computing technology, there is an increasing demand for Ubiquitous Heathcare service that can monitor and manage patient information in real time anytime and anywhere.

Nevertheless, there are no services that provide information of patients while ensuring security in hospitals.

Therefore, there is a need for the emergence of the invention that provides medical history information of a patient while ensuring security and efficiency.

An object of the present invention is to transmit authentication information received from an RFID tag possessed by a patient in a hospital to a database server, and receive medical history information about the patient from the database server.

The objects of the present invention are not limited to the above-mentioned objects, and other objects not mentioned can be clearly understood by those skilled in the art from the following description.

In order to achieve the above object, the apparatus for providing health information according to an embodiment of the present invention includes a random number generating unit for generating a first random number and the first random number in response to the transmission of the first random number to the tag device of the patient; Receiving the authentication information generated by using a random number, the communication unit for receiving the health information of the patient in response to the transmission of the authentication information to the database server and the output unit for outputting the received health information of the patient.

A system for providing health information according to an embodiment of the present invention includes a tag device for transmitting authentication information generated using the first random number in response to receiving a first random number, and for receiving the authentication information. And a database server for transmitting the health information of the patient in response, and a health information providing device for receiving and outputting the health information of the patient.

The method for providing health information according to an embodiment of the present invention includes generating authentication information generated by using the first random number in response to generating a first random number and transmitting the first random number to a tag device of a patient. And receiving the health information of the patient in response to transmitting the authentication information to the database server, and outputting the received health information of the patient.

According to another aspect of the present invention, there is provided a method of providing health information, the method comprising: transmitting, by a tag device, authentication information generated by using the first random number in response to receiving a first random number; And transmitting the health information of the patient in response to receiving the information, and receiving and outputting the health information of the patient.

The details of other embodiments are included in the detailed description and drawings.

According to the system, apparatus and method for providing health information of the present invention as described above, the authentication information received from the RFID tag possessed by the patient in the hospital is transmitted to the database server, the medical care for the patient from the database server By receiving the history information, there is an advantage that can provide the medical history information of the patient in a state of security and efficiency to the hospital personnel.

1 is a diagram showing a system for providing health information according to an embodiment of the present invention.
2 is a block diagram illustrating an apparatus for providing health information according to an exemplary embodiment of the present invention.
3 is a block diagram illustrating a tag apparatus according to an exemplary embodiment of the present invention.
4 is a block diagram illustrating a database server according to an exemplary embodiment of the present invention.
5 is a flowchart illustrating a process of providing health information according to an embodiment of the present invention.
6 is a flowchart illustrating a process of providing health information according to another embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating a system for providing health information according to an exemplary embodiment of the present invention, wherein the health information providing system 100 includes a database server 400, a health information providing apparatus 200, and a tag apparatus 300. It is configured by.

The database server 400 stores health information such as medical history and treatment history of at least one patient in the form of a list (hereinafter, referred to as a health information list), and then requests a message for health information of a specific patient (hereinafter, If a health information request message) is received, the health information for the patient is provided.

On the other hand, it is preferable that the health information is not provided when an unauthenticated user requests the patient's health information. For this purpose, the database server 400 does not arbitrarily provide health information, but the authentication included in the health information request message. After checking the information, extract the health information.

That is, the authentication information is generated by reflecting the patient's identifier and a separate random number, and the like. The database server 400 combines the information and the identifier of each patient included in the health information list and the received random number. It is to perform authentication on the authentication information by comparing the result generated by combining.

Thus, the database server 400 provides the patient's health information if there is a match among the result values of the authentication information and the result value of the health information list, and if there is no match, does not provide any response or an error message. Can be provided.

The health information providing apparatus 200 transmits authentication information to the database server 400, and receives and outputs health information of the patient in response thereto.

The communication between the health information providing apparatus 200 and the database server 400 may be a wired communication method or a wireless communication method, or may be a direct communication or a communication method through various relay processes. That is, the health information providing apparatus 200 and the database server 400 may be included in one network or may be included in different networks.

In the present invention, the health information providing apparatus 200 refers to a terminal of a hospital official, which may be a fixed terminal or a portable terminal.

The health information providing apparatus 200 communicates with the tag apparatus 300 carried by the patient, and transmits the authentication information received through the communication with the tag apparatus 300 to the database server 400 and in response thereto. Receive health information about the patient.

While the communication between the health information providing device 200 and the database server 400 may be indirect communication involving a relaying process, the health information providing device 200 and the tag device 300 preferably perform direct communication. For this, a radio frequency identification (RFID) communication system may be used among various communication systems.

An RFID system consists of a transponder that stores unique information, and a transceiver (reader or reader) that functions to read and decrypt.

Transponders, commonly called tags, consist of IC chips and antennas and come in a variety of shapes and sizes.

The main functions of the IC chip are data storage as memory size (25 bit ~ 512 kb or more), memory type (read only, read and write type, write once and read multiple times), memory type (EEPROM, FRAM) There are many different types.

The RFID system may be classified into an inductively coupled method and an electromagnetic wave method according to a wireless access method. The mutual induction method is short-range (within 1m), the electromagnetic wave method is used for medium and long distance RFID, the mutual induction method uses a coil antenna and the electromagnetic wave method uses a high frequency antenna to wirelessly connect to each other.

In mutual induction, the transponders are operated almost manually. That is, all the energy needed for the IC chip of the transponder to operate is supplied by the transceiver. Thus, the antenna coil of the transceiver generates a strong magnetic field in the surrounding area. Part of the emitted magnetic field generates an inductive voltage at the coil antenna of the transponder away from the transceiver, rectifies it, and supplies it with energy for the IC. Electromagnetic wave transponders do not receive enough power from the transceiver to drive IC chips, so they may contain additional batteries for long-range recognition (active).

Transceivers and transponders use a variety of digital encodings to process baseband data. The wireless signal is mainly converted into a high frequency signal and transmitted using a basic three digital modulation schemes, namely, Amplitude Shift Keying (ASK), Frequency Shift Keying (FSK), and Phase Shift Keying (PSK). However, in a specific frequency band (UHF band of the United States), only a specific modulation scheme is required to reduce the human body influence of electromagnetic waves or interference with other communication systems, and the most widely used is spread spectrum (SS). Among the frequency spreading methods, a direct sequence (DS) used for a CDMA mobile phone or a wireless LAN and a frequency hopping (FS) used for Bluetooth are mainly used. However, applying this modulation scheme to a tag requires more complicated circuits and increases the price, so in practice, only the transceiver uses this modulation scheme, and the transponders are made wideband to cover the entire frequency of frequency spreading and ASK, etc. To transmit the signal.

In addition, various signal processing is performed to increase the reliability of data information, and an error rate reduction method using a cyclic redundancy check (CRC) method, an Aloha or a CSMA (Carrier) used in a wireless LAN, etc. to distinguish multiple transponders An anti-collision method using a similar method to Sense Multiple Access, and a data security method using a symmetric or asymmetric encryption algorithm for protecting data are applied. In particular, such signal processing depends on the functionality of the memory of the transponder.

In the present invention, it can be understood that the role of the transceiver of the RFID system is performed by the health information providing apparatus 200, and the role of the transponder is performed by the tag apparatus 300.

That is, when the tag device 300 is approached to the health information providing device 200, communication between the tag device 300 and the health information providing device 200 is started to perform data transmission and reception.

On the other hand, the RFID system is used only as a communication method between the health information providing device 200 and the tag device 300, various other communication methods may be used, of course, rather than a wired communication method It is preferable that it is a wireless communication system.

The tag device 300 stores the identifier of the patient and transmits it to the health information providing device 200. Meanwhile, as wireless communication is performed between the tag device 300 and the health information providing device 200 in the present invention, the possibility of information leakage becomes greater than in the case of wired communication. Accordingly, the tag device 300 identifies an identifier of a patient. Instead of transmitting the data as it is, it may be transmitted after a separate processing process.

In the present invention, a separate process by the tag device 300 may be understood as generating a hash value by using a random number provided from the identifier of the patient and the health information providing device 200. When receiving a hash value, it is not easy to decrypt the hash value.

Authentication information according to an embodiment of the present invention can be understood to be a hash value, authentication information, that is, authentication to the hash value is performed by the database server 400. Here, since the authentication for the hash value is performed by using random numbers generated by the health information providing apparatus 200 and the tag apparatus 300, the database server 400 transmits the authentication information to the health information providing apparatus 200. It can be understood that even the authentication of) is performed.

In addition, the database server 400 may perform authentication by reflecting the biometric information of the patient. The authentication information according to another embodiment of the present invention may be understood as an exclusive logical sum generated from the hash value and the biometric information of the patient. have.

In the present invention, the biometric information expresses information uniquely assigned to the individual patient, such as the iris and fingerprint of the patient, and reflects the biometric information of the patient so that authentication information is generated and authentication is performed. This can be further improved.

2 is a block diagram illustrating a health information providing apparatus according to an exemplary embodiment of the present invention, wherein the health information providing apparatus 200 includes a communication unit 210, a storage unit 220, a control unit 230, and a random number generation unit 240. And an output unit 250.

The communication unit 210 performs a role of communicating with the database server 400 and the tag device 300. As described above, the health information providing apparatus 200 may not communicate with the database server 400 and the tag apparatus 300 in the same communication method, and accordingly, the communication unit 210 communicates with the database server 400. Means and means for communication with the tag device 300 may be provided separately.

In particular, the communication unit 210 may be understood to include an RFID transceiver for communication with the tag device 300 which is an RFID transponder.

Specifically, looking at the data transmitted and received by the communication unit 210, the communication unit 210 serves to transmit a random number to the tag device (300). Here, the random number refers to the random number generated by the generation unit 240, hereinafter referred to as the first random number.

In addition, the communication unit 210 serves to receive authentication information generated by using the first random number from the tag device 300 in response to the transmission of the first random number. The communication unit 210 may receive a separate random number together with the authentication information, which means that the separate random number is generated by the tag device 300. Hereinafter, the random number generated by the tag device 300 is referred to as a second random number.

The authentication information received from the tag device 300 may be a hash value generated by using the first random number and the second random number, or may be an exclusive logical sum of the corresponding hash value and the biometric information of the patient.

The communication unit 210 transmits authentication information to the database server 400 and receives the health information in response thereto. At this time, the communication unit 210 may transmit the first random number and the second random number together with the authentication information.

The storage unit 220 temporarily stores data transmitted and received between the tag device 300 and the database server 400 device or temporarily stores the first random number generated by the random number generator 240.

The storage unit 220 may include a hard disk, a flash memory, a compact flash card (CF), a secure digital card (SD), a smart card (SM), a multimedia card (MMC), or a memory stick. May be provided inside the health information providing apparatus 200 as a module capable of inputting and outputting the data, or may be provided in a separate device.

The random number generator 240 serves to generate the first random number. When the first random number is generated by the random number generator 240 in the following equation.

[Equation 1]

r ← prng ()

In Equation 1, r denotes a first random number, and prng () denotes a random number generation function that generates a random number using a predetermined algorithm. Since the random number generated by the random number generation function is an arbitrary value, each random number generated may be a different value.

The output unit 250 serves to output the health information of the patient received from the database server 400.

The health information of the patient may be output as an image and an audio. For this purpose, the output unit 250 may include an image output unit (not shown) and an audio output unit (not shown).

Image output unit Cathode Ray Tube (CRT), Liquid Crystal Display (LCD), Light-Emitting Diode (LED), Organic Light Emitting Diode (OLED) A module having an image display means such as a light-emitting diode (PDP) or a plasma display panel (PDP) serves to display the received image information.

The voice output unit outputs a voice signal. In other words, by converting an electrical signal containing voice information into vibration of the diaphragm to generate a small wave in the air to radiate sound waves, a speaker may generally function as a voice output unit.

The voice output unit may convert an electrical signal into a sound wave using a method such as a coin type, an electromagnetic type, an electrostatic type, a dielectric type, or a magnetostriction.

The controller 230 performs overall control of the communication unit 210, the storage unit 220, the random number generator 240, and the output unit 250, and relays data transmission and reception between modules.

3 is a block diagram illustrating a tag device according to an exemplary embodiment of the present invention, wherein the tag device 300 includes a communication unit 310, a storage unit 320, a control unit 330, a random number generation unit 340, and authentication information generation. It is configured to include a portion 350.

The communication unit 310 receives the first random number from the health information providing apparatus 200 and transmits authentication information in response thereto. At this time, the second random number can be transmitted together with the authentication information.

As described above, the communication method between the health information providing device 200 and the communication unit 310 is preferably an RFID communication method, but is not limited thereto.

For example, as the tag apparatus 300 approaches the health information providing apparatus 200, RFID communication between the communication unit 310 and the health information providing apparatus 200 is started, and data transmission and reception by the communication unit 310 may be performed. According to a specific operation of the tag device 300 or the health information providing apparatus 200, communication between the communication unit 310 and the health information providing apparatus 200 may be started, and data transmission and reception by the communication unit 310 may be performed. It is.

On the other hand, whether or not the communication unit 310 and the health information providing apparatus 200 initiates communication by any communication method, a detailed description of the communication start is beyond the scope of the present invention, so a detailed description thereof will be omitted.

The storage unit 320 temporarily stores data transmitted and received by the communication unit 310 or temporarily stores random numbers and authentication information generated by the random number generator 340 and the authentication information generator 350. do. In addition, the storage 320 stores a patient's identifier and biometric information.

The storage unit 320 of the tag device 300 may be implemented in a form similar to that of the storage unit 220 of the health information providing apparatus 200. Since this has been described above, a detailed description thereof will be omitted.

The random number generator 340 serves to generate the second random number. When the second random number is generated by the random number generation unit 340 in the following equation.

&Quot; (2) "

t ← prng ()

In Equation 2, t denotes a second random number, and prng () denotes a random number generation function that generates a random number using a predetermined algorithm. Here, the random number generation function may be the same as the random number generation function of the health information providing apparatus 200. That is, the random number generator 240 of the health information providing apparatus 200 and the random number generator 340 of the tag apparatus 300 generate random numbers using a random number generation function of the same algorithm.

In this case, the first random number and the second random number may be generated with the same value. In this case, security may be vulnerable. Therefore, when the second random number having the same value as the first random number received from the health information providing apparatus 200 is generated, the random number generation unit 340 of the tag device 300 performs a random number generation process until a different value is generated. Can be repeated

When generation of the second random number is completed, the authentication information generator 350 generates authentication information. That is, the authentication information generator 350 generates a hash value or generates an exclusive logical sum of the hash value and the biometric information of the patient, wherein the hash value is generated by using the patient's identifier, the first random number, and the second random number. It means.

When the hash value is generated by the authentication information generator 350 is expressed as a following equation.

&Quot; (3) "

mac ← h (ID || r || t)

Here, h () denotes a one-way hash function, || denotes a concatenation operation, and mac denotes a hash value generated by the hash function.

In addition, when the exclusive logical sum is generated by the authentication information generation unit 350 is expressed as follows.

&Quot; (4) "

biomac

bio

는 배타적 논리합 연산을 의미한다.Here, mac means a hash value generated by a hash function, bio means biometric information of the patient,

Denotes an exclusive OR operation.

The authentication information (hash value or exclusive logical sum) generated by the authentication information generator 350 is transmitted to the health information providing apparatus 200 along with the second random number through the communication unit 310.

The controller 330 performs overall control of the communication unit 310, the storage unit 320, the random number generator 340, and the authentication information generator 350, and relays data transmission and reception between modules. .

4 is a block diagram illustrating a database server according to an exemplary embodiment of the present invention. The database server 400 includes a communication unit 410, a storage unit 420, a control unit 430, and an authentication unit 440. .

The communication unit 410 receives authentication information from the health information providing apparatus 200 and transmits health information in response thereto. At this time, the communication unit 410 may receive the first random number and the second random number together with the authentication information.

As described above, the authentication information received by the communication unit 410 may be a hash value or an exclusive logical sum of the hash value and the biometric information.

The storage unit 420 stores a list of health information. The health information list refers to health information such as medical history and treatment history for at least one or more patients. The health information for each patient is stored in the storage unit 420 by matching an identifier uniquely assigned to the patient.

Therefore, if there is health information corresponding to the received authentication information among the stored health information of the patient, it is possible to extract it.

In addition, the storage unit 420 temporarily stores data transmitted and received between the communication unit 410 and the health information providing apparatus 200.

The storage unit 420 of the database server 400 may be implemented in a form similar to that of the storage unit 220 of the health information providing apparatus 200. Since this has been described above, a detailed description thereof will be omitted.

The authenticator 440 authenticates the received authentication information. Authentication information authentication by the authentication unit 440 may be divided into a case where the authentication information is a hash value and an exclusive logical sum.

When the authentication information is a hash value, the communication unit 410 receives the first random number and the second random number together with the authentication information from the health information providing apparatus 200, and the authentication unit 440 receives the received first random number and the second random number. The hash value is calculated using the random number and the identifier stored in the storage unit 420. That is, the storage unit 420 stores a plurality of identifiers for a plurality of patients, and the authentication unit 440 calculates a hash value by sequentially applying each identifier.

If the authentication information is a hash value, the equation for calculating the hash value by the authenticator 440 is as follows.

&Quot; (5) "

mac = h (ID (i) || r || t)?

Here, mac means authentication information (hash value) received from the health information providing device 200, h () means a one-way hash function, r is the first random number received from the health information providing device 200 T denotes a second random number received from the health information providing apparatus 200, ID (i) denotes an identifier of the i-th patient stored in the storage unit 420, and || it means.

The hash function of equation (5) can be understood to use the same algorithm as the hash function of equation (3). Accordingly, when the hash value is calculated by the authentication unit 440 by extracting and applying the same identifier from the storage unit 420 when the mac is generated, the calculated hash value and mac become the same, thereby authenticating. This is done.

When the authentication information is the exclusive OR, the communication unit 410 receives the first random number and the second random number together with the authentication information from the health information providing apparatus 200, and the authentication unit 440 receives the received first random number and the second random number. An exclusive logical sum between the hash value and the biometric information is calculated by using the random number and the biometric information among the identifier stored in the storage unit 420 and the stored health information corresponding to the identifier. That is, the storage unit 420 stores a plurality of identifiers for a plurality of patients, and the health information for each patient may include biometric information. The authentication unit 440 may correspond to each identifier and identifier. The biometric information is sequentially applied to calculate an exclusive OR.

If the authentication information is the exclusive logical OR, the equation for the authentication unit 440 calculating the exclusive logical OR is as follows.

&Quot; (6) "

bio = h(ID(i) || r || t)

bio(i) ?mac

bio = h (ID (i) || r || t)

bio (i)?

bio는 건강 정보 제공 장치(200)로부터 수신된 인증 정보(배타적 논리합)를 의미하고, h()는 일방향 해쉬 함수를 의미하고, r은 건강 정보 제공 장치(200)로부터 수신된 제 1 난수를 의미하고, t는 건강 정보 제공 장치(200)로부터 수신된 제 2 난수를 의미하고, ID(i)는 저장부(420)에 저장된 i번째 환자의 식별자를 의미하고, bio(i)는 저장부(420)에 저장된 i번째 환자의 생체 정보를 의미하며, ||는 연접 연산을 의미한다.Where mac

bio means authentication information (exclusive logical sum) received from the health information providing apparatus 200, h () means a one-way hash function, and r means a first random number received from the health information providing apparatus 200. T denotes a second random number received from the health information providing apparatus 200, ID (i) denotes an identifier of the i-th patient stored in the storage unit 420, and bio (i) denotes a storage unit ( 420 denotes biometric information of the i-th patient, and || denotes a concatenation operation.

bio가 생성될 당시의 식별자 및 생체 정보와 동일한 식별자 및 생체 정보가 저장부(420)에서 추출되어 적용됨으로써 인증부(440)에 의하여 배타적 논리합이 산출되는 경우 산출된 배차적 논리합과 mac

bio가 동일하게 되고, 이로써 인증이 완료되는 것이다.The hash function of equation (6) can be understood to use the same algorithm as the hash function of equation (3). Accordingly, mac

When the exclusive OR is calculated by the authenticator 440 by extracting and applying the same identifier and biometric information as the identifier and the biometric information at the time of bio generation, the computed logical OR and mac

The bio is the same, which completes the authentication.

The authentication result by the authentication unit 440 is delivered to the control unit 430, the control unit 430 extracts the health information from the storage unit 420 and delivers the health information to the communication unit 410 according to the received authentication result or transmits an error message. It generates and delivers to the communication unit 410. Accordingly, the communication unit 410 transmits the received health information or error message to the health information providing apparatus 200.

5 is a flowchart illustrating a process of providing health information according to an exemplary embodiment of the present invention, and illustrates a flowchart when authentication information is a hash value.

When the tag device 300 enters within a predetermined radius of the health information providing device 200, communication between the tag device 300 and the health information providing device 200 is started (S510).

When the communication is started, the health information providing apparatus 200 generates a first random number (S520), and transmits the generated first random number to the tag device 300 (S530).

The tag device 300 receiving the first random number generates the second random number using the same random number generation function that generated the first random number (S540).

The tag device 300 generates a hash value by applying the received first random number, the generated second random number, and an identifier stored in the dictionary to the one-way hash function (S550).

When the hash value generation is completed, the tag device 300 transmits the generated hash value and the second random number to the health information providing apparatus 200 (S560), and the received health information providing apparatus 200 receives the received hash. The value and the second random number and the first random number generated in step S520 are transmitted to the database server 400 (S570).

The database server 400 receiving the hash value, the first random number, and the second random number generates a hash value by applying the received first and second random numbers and the stored identifier as parameters to the one-way hash function, and receives the hash value. The authentication is performed on the authentication information by determining whether the same is compared with the hash value (S580).

That is, the database server 400 stores a plurality of identifiers, and generates a hash value by using the first random number and the second random number and the identifiers sequentially extracted, which is equal to the received hash value. It is repeated until the operation on the calculated or last identifier is performed.

Thus, when the calculated hash value is equal to the received hash value, the database server 400 extracts health information corresponding to the identifier and transmits the health information to the health information providing apparatus 200 (S590). Accordingly, the health information providing apparatus 200 outputs the received health information.

On the other hand, if all of the stored identifiers are applied but the same hash value as the received hash value is not calculated, the database server 400 transmits an error message, and the health information providing apparatus 200 receives the error message and outputs the error message. Done.

6 is a flowchart illustrating a process of providing health information according to another exemplary embodiment of the present invention, and illustrates a flowchart when the authentication information is an exclusive OR.

When the tag device 300 enters within a predetermined radius of the health information providing device 200, communication between the tag device 300 and the health information providing device 200 is started (S610).

When the communication is started, the health information providing apparatus 200 generates a first random number (S620), and transmits the generated first random number to the tag device 300 (S630).

Upon receiving the first random number, the tag device 300 generates the second random number using the same random number generation function that generated the first random number (S640).

The tag device 300 generates a hash value by applying the received first random number, the generated second random number, and an identifier stored in the dictionary to the one-way hash function (S650).

When the hash value generation is completed, the tag device 300 extracts biometric information (S660), and generates an exclusive logical sum of the hash value and biometric information (S670).

When generation of the exclusive OR is completed, the tag apparatus 300 transmits the generated exclusive OR and the second random number to the health information providing apparatus 200 (S680), and the received health information providing apparatus 200 receives the received exclusive information. The logical sum, the second random number, and the first random number generated in step S620 are transmitted to the database server 400 (S690).

The database server 400 receiving the exclusive OR, the first random number and the second random number generates a hash value by applying the received first and second random numbers and the stored identifier as parameters to the one-way hash function, and generates the hash value and the hash value. An exclusive logical OR is generated for the stored biometric information, and the authentication is performed on the authentication information by determining whether the same is compared with the received exclusive logical OR (S700).

That is, the database server 400 stores a plurality of identifiers and biometric information for each identifier, and generates an exclusive logical OR by using the received first random numbers and the second random numbers and sequentially extracted identifiers and biometric information. This is repeated until a value equal to the received exclusive OR is calculated or an operation on the last identifier is performed.

Thus, when the calculated exclusive OR is equal to the received exclusive OR, the database server 400 extracts health information corresponding to the corresponding identifier and transmits the health information to the health information providing apparatus 200 (S710). Accordingly, the health information providing apparatus 200 outputs the received health information.

On the other hand, even if all of the stored identifiers are applied, but if the exclusive logical sum equal to the received exclusive logical sum is not calculated, the database server 400 transmits an error message and outputs the error message to the received health information providing apparatus 200. Done.

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, It will be understood. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive.

210: communication unit 220:
230: control unit 240: random number generation unit
250; Output portion

Claims (20)

A random number generator for generating a first random number;
Receive authentication information generated using the first random number in response to sending the first random number to the tag device of the patient, and receive health information of the patient in response to sending the authentication information to a database server. A communication unit; And
It includes an output unit for outputting the received health information of the patient,
The authentication information includes a hash value generated by using the identifier of the patient, the first random number and the second random number generated by the tag device.
The communication unit provides health information for receiving the health information of the patient in response to the transmission of the first random number and the second random number generated by the device different from the hash value to the database server. delete delete The method of claim 1,
The authentication information provides health information including an exclusive logical sum generated from the hash value generated by using the identifier of the patient, the second random number generated by the tag device, and the first random number, and the biometric information of the patient. Device. 5. The method of claim 4,
And the communicator is configured to provide health information for receiving health information of the patient in response to transmitting the exclusive OR, the first random number, and the second random number to the database server. A tag device which transmits authentication information generated using the first random number in response to receiving the first random number;
A database server for transmitting health information of a patient in response to receiving the authentication information; And
It includes a health information providing device for receiving and outputting the health information of the patient,
The authentication information includes a hash value generated by using the identifier of the patient, the first random number and the second random number generated by the tag device.
And the database server provides health information for transmitting health information of the patient in response to receiving the first random number and the second random number generated by a device different from the hash value. delete delete The method according to claim 6,
The authentication information provides health information including an exclusive logical sum generated from a hash value generated using the identifier of the patient, a second random number generated by the tag device, and the first random number, and the biometric information of the patient. system. The method of claim 9,
And the health information providing apparatus receives health information of the patient in response to sending the exclusive logical OR, the first random number and the second random number to the database server. In the information providing device having information output means for outputting the health information of the patient,
Generating a first random number;
Receiving authentication information generated by using the first random number in response to transmitting the first random number to a tag device of a patient;
Receiving health information of a patient in response to sending the authentication information to a database server; And
Outputting the received health information of the patient,
The authentication information includes a hash value generated by using the identifier of the patient, the first random number and the second random number generated by the tag device.
The receiving of the health information of the patient may include receiving the health information of the patient in response to transmitting the first random number and the second random number generated by a device different from the hash value to the database server. How to provide health information comprising. delete delete 12. The method of claim 11,
The authentication information provides health information including an exclusive logical sum generated from a hash value generated using the identifier of the patient, a second random number generated by the tag device, and the first random number, and the biometric information of the patient. Way. The method of claim 14,
Receiving the health information of the patient includes receiving the health information of the patient in response to sending the exclusive logical OR, the first random number and the second random number to the database server. How to. Transmitting authentication information generated using the first random number in response to a tag device receiving the first random number;
Transmitting, by the database server, health information of the patient in response to receiving the authentication information; And
And receiving and outputting health information of the patient by a health information providing device.
The authentication information includes a hash value generated by using the identifier of the patient, the first random number and the second random number generated by the tag device.
The transmitting of the health information of the patient includes transmitting the health information of the patient in response to receiving the first random number and the second random number generated by a device different from the hash value. How to Provide Information. delete delete 17. The method of claim 16,
The authentication information provides health information including an exclusive logical sum generated from a hash value generated using the identifier of the patient, a second random number generated by the tag device, and the first random number, and the biometric information of the patient. Way. 20. The method of claim 19,
And the health information providing apparatus receives health information of the patient in response to sending the exclusive logical OR, the first random number and the second random number to the database server.

Images