KR102162613B1 - Medical Information Management System Using Block-chain - Google Patents

Abstract

The present invention relates to a medical information management system using a block chain, and more particularly, it is possible to securely provide identified medical information while ensuring the authenticity of medical information provided by using a block chain network and preventing forgery. It relates to a medical information management system using a blockchain.

Description

Medical Information Management System Using Block-chain

The present invention relates to a medical information management system using a block chain, and more particularly, it is possible to securely provide identified medical information while ensuring the authenticity of medical information provided by using a block chain network and preventing forgery. It relates to a medical information management system using a blockchain.

As people's interest in healthcare increases, interest and demand for medical IT services such as medical data platforms are increasing. Accordingly, related companies are continuing research to enhance data and patient privacy.

However, medical information hacking accidents are frequently occurring, and personal information issues have arisen. In addition, anxiety among users who use medical IT services is amplifying, and as the number of users of related services increases, the scale of medical information leaked during hacking is also increasing.

In addition, personal medical information can be used in a variety of ways, such as insurance and healthcare services, as well as medical services, so its value is increasing even further. Therefore, the need for medical information of individuals that is more accurate and free of forgery has increased, but there is no means to prevent forgery and forgery and verify it.

In addition, medical institutions, insurance companies, and healthcare companies can create added value by sharing a number of medical information, but security problems may arise in the process of delivering medical information, and in order to provide medical services to specific individuals It is necessary to understand personal information, but since medical information including personal information is highly sensitive information, it is difficult to trade medical information in the form of personal information.

Therefore, each medical institution, insurance company, and healthcare company can reliably share or transmit medical information while improving security, guaranteeing the authenticity of the original data, and preventing the leakage of medical information from users due to hacking. There is a need for a platform that can be used.

Korean Patent Registration No. 10-1763827 (Blockchain-based medical data transmission system, method and program, registered on July 26, 2017) Korean Patent Registration No. 10-1881045 (Blockchain-based medical information provision system and method, registered on July 17, 2018)

An object of the present invention is to provide a medical information management system using a block chain that can securely provide identified medical information while ensuring the authenticity of medical information provided using a blockchain network and preventing forgery and alteration.

In order to solve the above problems, an embodiment of the present invention is a medical information management system including a medical information providing terminal capable of accessing a blockchain network and the management server, wherein the medical information providing terminal is A hash value extracting unit for extracting a hash value for medical information; A block chain registration unit that registers the information including the hash value as a transaction in the connected block chain network; And a medical information transmission unit configured to transmit the medical information to the management server, wherein the management server comprises: a medical information receiving unit configured to receive the medical information from the medical information providing terminal; A non-identifying medical information providing unit that provides non-identified medical information in which sensitive information is de-identified in the medical information to a medical information request terminal; And an identification medical information providing unit that provides identification medical information including sensitive information in the medical information to a medical information request terminal.

In an embodiment of the present invention, the medical information transmission unit may transmit identification information of the medical information, block information of a block chain network in which a hash value of the medical information is recorded, and the medical information to the management server. .

In one embodiment of the present invention, the non-identifying medical information providing unit includes: receiving a non-identifying medical information request for corresponding medical information from the medical information requesting terminal; Deriving a hash value of the corresponding medical information received and stored from the medical information providing terminal, and verifying whether the derived hash value matches the hash value recorded in the blockchain network for the medical information; Extracting sensitive information for the corresponding medical information and masking the sensitive information; And transmitting the masked corresponding medical information to the medical information request terminal.

In an embodiment of the present invention, the identification medical information providing unit includes: receiving an identification medical information request for corresponding medical information from the medical information request terminal; Requesting consent to the medical information providing terminal that provided the medical information; Receiving consent from the medical information providing terminal that provided the medical information; Deriving a hash value of the corresponding medical information received and stored from the medical information providing terminal, and verifying whether the derived hash value matches the hash value recorded in the blockchain network for the medical information; It may include; transmitting the medical information to the medical information request terminal.

In one embodiment of the present invention, the management server further includes a reward management unit, the reward management unit, when receiving medical information from the medical information providing terminal and the sensitive information of the identification medical information providing unit from the medical information providing terminal In the case of receiving consent to the provision of medical information including, reward points may be given to the account of the medical information providing terminal.

According to an embodiment of the present invention, a medical information management system using a block chain that can securely provide identified medical information while ensuring the authenticity of medical information provided using a block chain network and preventing forgery and alteration is provided. can do.

According to an embodiment of the present invention, by verifying whether the medical information received from the management server has been forged or altered, it is possible to exert an effect of providing more accurate medical information.

According to an embodiment of the present invention, it is possible to provide medical information de-identified with respect to sensitive information such as personal information or to provide medical information including sensitive information such as personal information upon request. I can.

According to an embodiment of the present invention, since an incentive for providing medical information including personal information as well as an incentive for providing medical information is provided to the medical information provider, there are more management servers. It can exert the effect of collecting medical information.

According to an embodiment of the present invention, it is possible to exhibit the effect of more stably verifying the authenticity of medical information itself and details of medical information transactions by using a block chain network.

1 shows the overall configuration of a medical information management system according to an embodiment of the present invention.
2 schematically shows the internal configuration of a medical information providing terminal according to an embodiment of the present invention.
3 schematically shows data details of blocks of a blockchain network according to an embodiment of the present invention.
4 schematically shows the configuration of a management server according to an embodiment of the present invention.
5 schematically shows steps performed by a non-identifying medical information providing unit according to an embodiment of the present invention.
6 schematically shows the steps performed by the identification medical information providing unit according to an embodiment of the present invention.
7 schematically shows data details of blocks of a blockchain network according to an embodiment of the present invention.
8 exemplarily shows an internal configuration of a computing device according to an embodiment of the present invention.

In the following, various embodiments and/or aspects are now disclosed with reference to the drawings. In the following description, for purposes of explanation, a number of specific details are disclosed to aid in an overall understanding of one or more aspects. However, it will also be appreciated by those of ordinary skill in the art that this aspect(s) may be practiced without these specific details. The following description and the annexed drawings set forth in detail certain illustrative aspects of one or more aspects. However, these aspects are exemplary and some of the various methods in the principles of the various aspects may be used, and the descriptions described are intended to include all such aspects and their equivalents.

Further, various aspects and features will be presented by a system that may include multiple devices, components and/or modules, and the like. It is also noted that various systems may include additional devices, components and/or modules, and/or may not include all of the devices, components, modules, etc. discussed in connection with the figures. It must be understood and recognized.

As used herein, “an embodiment,” “example,” “aspect,” “example,” and the like may not be construed as having any aspect or design described as being better or advantageous than other aspects or designs. . The terms'~part','component','module','system', and'interface' used below generally mean a computer-related entity, for example, hardware, hardware It can mean a combination of software and software, or software.

In addition, the terms "comprising" and/or "comprising" mean that the corresponding feature and/or element is present, but excludes the presence or addition of one or more other features, elements, and/or groups thereof. It should be understood as not.

In addition, terms including ordinal numbers such as first and second may be used to describe various elements, but the elements are not limited by the terms. These terms are used only for the purpose of distinguishing one component from another component. For example, without departing from the scope of the present invention, a first element may be referred to as a second element, and similarly, a second element may be referred to as a first element. The term and/or includes a combination of a plurality of related listed items or any of a plurality of related listed items.

In addition, in the embodiments of the present invention, unless otherwise defined, all terms used herein including technical or scientific terms are commonly understood by those of ordinary skill in the art to which the present invention belongs. It has the same meaning as. Terms as defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning in the context of the related technology, and unless explicitly defined in the embodiments of the present invention, an ideal or excessively formal meaning Is not interpreted as.

1 shows the overall configuration of a medical information management system according to an embodiment of the present invention.

The medical information management system of the present invention includes a block chain network, a medical information providing terminal 1000 capable of accessing the blockchain network, a management server 2000 receiving medical information from the medical information providing terminal 1000, and And a medical information request terminal 3000 receiving medical information from the management server 2000.

The medical information providing terminal 1000 is a computing device capable of individual patient communication, and may include a smartphone, a desktop, and a medical device, or a server, a desktop, a smartphone, etc. of a medical institution or a company managing medical data. May correspond to a computing device.

The medical information providing terminal 1000 may be attached to a patient's body to directly sense biometric information from the patient and generate medical information based on the sensed information, or the medical information providing terminal 1000 It may correspond to a form in which medical information such as a patient's chart is collected and stored.

Medical information transmitted and received from the medical information management system includes medical image information, prescription information, treatment chart information, medical history information, treatment reservation information, regular medical treatment information, genetic information, blood information, epidemiological analysis information, preemptive medical information, and specific diseases. It may include one or more of tracking information and biometric information collected from the medical sensing terminal.

As described above, the medical information may include not only information about the medical treatment itself, but also information about a corresponding patient or individual. For example, one or more of a name, a social security number, a phone number, and an address that can identify the patient may be included in the medical information.

On the other hand, the medical information request terminal 3000 corresponds to a computing device of an institution that can perform analysis, service provision, etc. using personal medical information such as a medical institution, an insurance company, or a healthcare service company. This may be a computing device including one or more processors and one or more memories, such as a smartphone and a server.

Preferably, communication and data transmission and reception between the medical information providing terminal 1000, the management server 2000, and the medical information requesting terminal 3000 are performed to implement the medical information management system according to an embodiment of the present invention. It is preferably performed by each dedicated application.

In the present invention, all of the medical information providing terminal 1000, the management server 2000, and the medical information requesting terminal 3000 can access the blockchain network. The block chain network is preferably a public blockchain network, and according to the present invention, data related to the contents of medical information, transmission history, etc. can be recorded, and may be used for verification and confirmation of the medical information later.

The blockchain network may correspond to a dedicated blockchain network for implementing the medical information management system according to the present invention, or may correspond to a blockchain network implemented for other purposes. In the case of a blockchain network implemented for other purposes, for example, a blockchain network implemented for the purpose of cryptocurrency, the corresponding purpose, for example, a very small amount of cryptocurrency transaction, while performing a transaction in the remaining data field. It can be implemented by recording data according to the object of the present invention.

2 schematically shows the internal configuration of a medical information providing terminal 1000 according to an embodiment of the present invention.

As described above, the medical information providing terminal 1000 may correspond to a computing device, and in some cases may include a biometric information sensor capable of acquiring the user's body information or may be connected to the biometric information sensor.

The medical information providing terminal 1000 includes a hash value extracting unit 1100 that executes an application for performing the medical information management system of the present invention and extracts a hash value for medical information to be transmitted within the application; A block chain registration unit 1200 for registering information including the hash value as a transaction in the connected block chain network; A medical information transmission unit (1300) for transmitting the medical information to the management server (2000); And a sensitive information consent unit that notifies and responds to consent when providing medical information including sensitive information such as personal information to be described later to another medical information request terminal 3000 to the management server 2000 1400).

The hash value extracting unit 1100 extracts a hash value for medical information to be transmitted from the medical tablet providing terminal to the management server 2000. For example, if the medical information to be transmitted is data including chart information (information related to the medical treatment itself) and information on the patient, the hash value extraction unit 1100 Extract the hash value for the entire information.

The block chain registration unit 1200 registers the information including the hash value in a connected block chain network as a transaction. Specifically, the block chain registration unit 1200 records an identifier for medical information to be transmitted and a hash value for the medical information extracted by the hash value extraction unit 1100 as a transaction in a block of the blockchain network. An example of this is illustrated in FIG. 3.

The medical information transmission unit 1300 transmits the medical information to the management server 2000. Specifically, the medical information transmission unit 1300 transmits the identification information of the medical information, block information of the block chain network in which the hash value of the medical information is recorded, and the medical information to the management server 2000. .

Preferably, the medical information includes not only medical information about the individual or a group of patients including two or more individuals, but also personal information that may correspond to sensitive information to the corresponding individuals. In the present invention, after firstly transmitting a form including sensitive telegrams such as such personal information from the medical information providing terminal 1000 to the management server 2000, the management server 2000 Upon request, masking may be provided, or the original may be provided without masking by obtaining consent from the medical information providing terminal 1000.

The sensitive information consent unit 1400 notifies and responds to consent when providing medical information including sensitive information such as personal information to be described later to other medical information request terminal 3000 to the management server 2000 Perform.

In the present invention, medical information in a form including sensitive information such as personal information is transmitted to the management server 2000. In other words, the original medical information itself is provided to the management server 2000 without processing, and after that, the management server 2000 basically performs de-identification for it, and then transmits it to the medical information request terminal 3000. do. However, the medical information request terminal 3000 can make a request for the original itself to the management server 2000. In this case, the management server 2000 sends the corresponding medical information to the medical information providing terminal 1000. A request for consent to the provision of original data is requested, and the sensitive information consent unit 1400 notifies the management server 2000 of the interaction with the user and the result thereof.

Preferably, the sensitive information consent unit 1400, when the medical information providing terminal 1000 consents to the medical information, the purpose of consent, the time of consent, and the identifier for the medical information in the block Writes to the block of the chain network.

3 schematically shows data details of blocks of a blockchain network according to an embodiment of the present invention.

The details shown in FIG. 3 are screens performed by the block chain registration unit 1200 just before the medical information transmission unit 1300 transmits medical information, and an identifier for medical information and a medical information hash in a transaction item. The value is saved.

Meanwhile, in an embodiment of the present invention, the consent details in the sensitive information consent unit 1400 may be recorded in the transaction of the block of the blockchain network. Specifically, the purpose of consent, the time of consent, and the identifier for the medical information may be recorded in the transaction of the block, and more preferably, in addition to the information, the identifier of the medical information request terminal 3000 that requested the information May be recorded.

4 schematically shows the configuration of the management server 2000 according to an embodiment of the present invention.

The management server 2000 has a function of receiving medical information from the medical information providing terminal 1000, managing it, and providing medical information according to a request received from the medical information requesting terminal 3000. Perform.

The management server 2000 includes a medical information receiving unit 2100 for receiving the medical information from the medical information providing terminal 1000; A non-identifying medical information providing unit 2200 for providing non-identified medical information in which the sensitive information is de-identified in the medical information to the medical information request terminal 3000; An identification medical information providing unit 2300 for providing identification medical information including sensitive information in the medical information to a medical information request terminal 3000; And when receiving medical information from the medical information providing terminal 1000 and receiving consent to the provision of medical information including sensitive information from the identification medical information providing unit 2300 from the medical information providing terminal 1000 To, it includes a reward management unit 2400 for granting reward points to the account of the medical information providing terminal 1000.

The medical information receiving unit 2100 receives the medical information from the medical information providing terminal 1000.

The medical information is the original medical information received from the medical information providing terminal 1000, which may or may not include sensitive information such as personal information and specific medical history (for example, psychiatric treatment details). May not.

The medical information receiving unit 2100 stores the received medical information in a database unit (not shown) of the management server 2000. Meanwhile, the database unit (not shown) may include a security module for data security.

The non-identifying medical information providing unit 2200 provides non-identified medical information in which sensitive information is de-identified in the medical information to the medical information request terminal 3000. This will be described later with reference to FIG. 5.

The identification medical information providing unit 2300 provides identification medical information capable of identifying sensitive information in the medical information to the medical information request terminal 3000. This will be described later with reference to FIG. 6.

The reward management unit 2400 manages a user account of the medical information providing terminal 1000 connected to the management server 2000 and a reward or points for a user account of the medical information requesting terminal 3000.

In the present invention, in order to secure more medical information, a reward is provided for an account of a terminal that provides medical information. In addition, in order to obtain consent for transmission of identifiable medical information, additional rewards are provided for the account of the terminal that provided the medical information.

Specifically, the reward management unit 2400 receives medical information from the medical information providing terminal 1000 and includes sensitive information of the identification medical information providing unit 2300 from the medical information providing terminal 1000. When consent to the provision of information is received, reward points are given to the account of the medical information providing terminal 1000.

On the other hand, when a medical information request is received from the medical information request terminal 3000 and medical information is provided accordingly, a point of the medical information request terminal 3000 is deducted. In addition, in relation to the deduction of medical points, when medical information is provided by the identification medical information providing unit 2300 than when medical information is provided by the non-identified medical information providing unit 2200, a relatively larger point is It is desirable to be subtracted.

5 schematically shows steps performed by the non-identifying medical information providing unit 2200 according to an embodiment of the present invention.

The non-identifying medical information providing unit 2200 includes the steps of receiving a non-identifying medical information request for the medical information from the medical information request terminal 3000 (S10); Deriving a hash value of the corresponding medical information received and stored from the medical information providing terminal 1000, and verifying whether the derived hash value matches the hash value recorded in the blockchain network for the medical information (S11) ; Extracting sensitive information for the medical information and performing masking on the sensitive information (S12); And transmitting the masked corresponding medical information to the medical information request terminal 3000 (S13).

In step S11, when the medical information to be provided to the medical information requesting terminal 3000 is initially transmitted by the medical information providing terminal 1000, the information and consistency are verified. According to such a procedure, after the medical information is stored in the management server 2000, forgery or alteration occurs or the transmission of the false medical information can be prevented.

In step S12, personal information or sensitive medical details (image information, treatment details for specific sensitive diseases, etc.) are parsed for the original medical information to be transmitted, and masking is processed to de-identify the information detected by the parsing. Perform. If the parsed sensitive information is text information, some or all of the parsed sensitive information is replaced with a non-identifying character such as “****”, and if the parsed sensitive information is image information, some or all of the parsed sensitive information is scrambled or blurred Carry out processing.

In this way, the management server 2000 selectively provides medical information to the request of the medical information request terminal 3000 for the received medical information while storing all medical information including sensitive information such as personal information. can do.

6 schematically shows steps performed by the identification medical information providing unit 2300 according to an embodiment of the present invention.

The identification medical information providing unit 2300 includes the steps of receiving a request for identification medical information for the medical information from the medical information request terminal 3000 (S20); Requesting consent to the medical information providing terminal 1000 that provided the medical information (S21); Receiving consent from the medical information providing terminal 1000 that provided the medical information (S22); Deriving a hash value of the corresponding medical information received and stored from the medical information providing terminal 1000, and verifying whether the derived hash value matches the hash value recorded in the blockchain network for the medical information (S23) ; Transmitting the medical information to the medical information request terminal 3000 (S24); Recording consent reception details and medical information transmission details in a blockchain network (S25); And a step (S26) of granting a reward to the account of the medical information providing terminal 1000 that has performed the consent.

In steps S21 to S22, a request is made to the medical information providing terminal 1000 for consent on whether to transmit identification medical information that may include sensitive information, and a response thereto is received.

The management server 2000 basically stores the original medical information, and basically provides de-identified medical information. However, in some cases, when medical information including personal information is required by an insurance company, a medical institution, a healthcare service company, etc., the management server 2000 may request this.

In this case, the management server 2000 does not request medical information including personal information from the medical information providing terminal 1000 again, but receives medical information including personal information from the beginning, and provides medical information thereto. After requesting consent for the provision of the original medical information including personal information to the terminal 1000 to the medical information request terminal 3000, and receiving the consent, after passing through the original verification process as in step S23, As in S24, medical information is transmitted.

In this process, the present invention receives non-identifying medical information for the entire patient group, among which there is a possibility, in order to find a target patient in a specific medical institution. After extracting de-identified medical information that requires (patient management at the public institution level), if identification medical information is required for the de-identified medical information, identification medical information including identification information for the relevant medical information Request for information (original medical information).

Thereafter, the management server 2000 queries the relevant parties for consent requests, and provides identification medical information (original medical information) to the medical information request terminal 3000 only when a response to the consent is received.

Preferably, in the step S21, information related to the medical information request terminal 3000 that has performed the corresponding identification medical information request, for example, information including the name of the institution and the use of the medical information is determined by the medical information providing terminal ( 1000). Accordingly, the user or the administrator of the medical information providing terminal 1000 can check from which institution for what purpose the request was received, and respond accordingly.

In step S25, the consent details and medical information transmission details are recorded in the blockchain network. This is to prevent a user who has consented to provide identification medical information in the future from denying the consent to provide. Likewise, medical information transmission details are left so that the institution that has received the medical information does not abuse the information, so that the institution of the medical information request terminal 3000 uses the medical information within the scope of the purpose for which it was previously notified.

7 schematically shows data details of blocks of a blockchain network according to an embodiment of the present invention.

FIG. 7 shows block details of the blockchain network recorded in step S25 of FIG. 6. As shown in FIG. 7, after receiving the consent of the provider, when the medical information is transmitted to the corresponding medical information request terminal 3000, the identifier for the medical information and the time of consent at the medical information providing terminal 1000 , The identifier of the medical information request terminal 3000 and the purpose of use that was notified at the time of requesting consent from the medical information request terminal 3000 are recorded in the block of the blockchain network, thereby preventing future denial.

In a preferred embodiment of the present invention, in step S25, the identifier for the medical information, the time of consent at the medical information providing terminal 1000, the identifier of the medical information request terminal 3000, and the consent at the medical information request terminal 3000 A hash value is derived for the data including the purpose of use that was notified at the time of obtaining the hash value, and the hash value and the identifier for the transmission of the identification medical information are recorded in the blockchain network.

Thereafter, the management server 2000 at S25, the identifier for the medical information, the time of consent at the medical information providing terminal 1000, the identifier of the medical information request terminal 3000, the consent at the medical information request terminal 3000 The data including the purpose of use, the hash value for the data, and the identifier for the transmission of the identification medical information, which were notified when obtaining is transmitted to the medical information requesting terminal 3000 and the medical information providing terminal 1000, and the It is stored in the management server 2000.

Through such a procedure, it is possible to effectively prevent mutual denial of the details while making the details of the delivery of medical information including sensitive information private.

8 exemplarily shows an internal configuration of a computing device according to an embodiment of the present invention. The management server according to FIG. 4 may include one or more modules of the computing device illustrated in FIG. 8.

As shown in FIG. 8, the computing device 11000 includes at least one processor 11100, a memory 11200, a peripheral interface 11300, and an input/output subsystem ( I/Osubsystem) 11400, a power circuit 11500, and a communication circuit 11600 may be included at least. In this case, the computing device 11000 may correspond to the user terminal A connected to the tactile interface device or the aforementioned computing device B.

The memory 11200 may include, for example, high-speed random access memory, magnetic disk, SRAM, DRAM, ROM, flash memory, or nonvolatile memory. have. The memory 11200 may include a software module, an instruction set, or other various data necessary for the operation of the computing device 11000.

In this case, accessing the memory 11200 from another component such as the processor 11100 or the peripheral device interface 11300 may be controlled by the processor 11100. The processor 11100 may be configured as a single unit or a plurality of units, and may include a processor in the form of a GPU and a TPU in order to improve operation processing speed.

The peripheral device interface 11300 may couple input and/or output peripheral devices of the computing device 11000 to the processor 11100 and the memory 11200. The processor 11100 may perform various functions for the computing device 11000 and process data by executing a software module or instruction set stored in the memory 11200.

The input/output subsystem 11400 may couple various input/output peripherals to the peripherals interface 11300. For example, the input/output subsystem 11400 may include a monitor, a keyboard, a mouse, a printer, or a controller for coupling a peripheral device such as a touch screen or a sensor to the peripheral device interface 11300 as needed. According to another aspect, the input/output peripheral devices may be coupled to the peripheral device interface 11300 without going through the input/output subsystem 11400.

The power circuit 11500 may supply power to all or part of the components of the terminal. For example, the power circuit 11500 may include a power management system, one or more power sources such as batteries or alternating current (AC), a charging system, a power failure detection circuit, a power converter or inverter, a power status indicator or power. It may contain any other components for creation, management, and distribution.

The communication circuit 11600 may enable communication with another computing device using at least one external port.

Alternatively, as described above, the communication circuit 11600 may enable communication with other computing devices by transmitting and receiving an RF signal, also known as an electromagnetic signal, including an RF circuit, if necessary.

The embodiment of FIG. 8 is only an example of the computing device 11000, and the computing device 11000 omits some of the components shown in FIG. 8, further includes additional components not shown in FIG. It can have a configuration or arrangement that combines two or more components. For example, a computing device for a communication terminal in a mobile environment may further include a touch screen or a sensor in addition to the components shown in FIG. 8, and various communication methods (WiFi, 3G, LTE) in the communication circuit 1160 , Bluetooth, NFC, Zigbee, etc.) may include a circuit for RF communication. Components that may be included in the computing device 11000 may be implemented as hardware, software, or a combination of hardware and software including one or more signal processing or application-specific integrated circuits.

Methods according to an embodiment of the present invention may be implemented in the form of program instructions that can be executed through various computing devices and recorded in a computer-readable medium. In particular, the program according to the present embodiment may be configured as a PC-based program or an application dedicated to a mobile terminal. An application to which the present invention is applied may be installed in a user terminal through a file provided by a file distribution system. For example, the file distribution system may include a file transmission unit (not shown) that transmits the file according to the request of the user terminal.

The apparatus described above may be implemented as a hardware component, a software component, and/or a combination of a hardware component and a software component. For example, the devices and components described in the embodiments are, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate array (FPGA). , A programmable logic unit (PLU), a microprocessor, or any other device capable of executing and responding to instructions, such as one or more general purpose computers or special purpose computers. The processing device may execute an operating system (OS) and one or more software applications executed on the operating system. In addition, the processing device may access, store, manipulate, process, and generate data in response to the execution of software. For the convenience of understanding, although it is sometimes described that one processing device is used, one of ordinary skill in the art, the processing device is a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that it may include. For example, the processing device may include a plurality of processors or one processor and one controller. In addition, other processing configurations are possible, such as a parallel processor.

The software may include a computer program, code, instructions, or a combination of one or more of these, configuring the processing unit to operate as desired or processed independently or collectively. You can command the device. Software and/or data may be interpreted by a processing device or to provide instructions or data to a processing device, of any type of machine, component, physical device, virtual equipment, computer storage medium or device. , Or may be permanently or temporarily embodyed in a transmitted signal wave. The software may be distributed over networked computing devices and stored or executed in a distributed manner. Software and data may be stored on one or more computer-readable recording media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiment, or may be known and usable to those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -A hardware device specially configured to store and execute program instructions such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of the program instructions include not only machine language codes such as those produced by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware device described above may be configured to operate as one or more software modules to perform the operation of the embodiment, and vice versa.

As described above, although the embodiments have been described by the limited embodiments and drawings, various modifications and variations are possible from the above description by those of ordinary skill in the art. For example, the described techniques are performed in a different order from the described method, and/or components such as a system, structure, device, circuit, etc. described are combined or combined in a form different from the described method, or other components Alternatively, even if substituted or substituted by an equivalent, an appropriate result can be achieved.

Therefore, other implementations, other embodiments, and claims and equivalents fall within the scope of the claims to be described later.

Claims (5)

As a medical information management system including a medical information providing terminal and a management server that can access a blockchain network,
The medical information providing terminal,
A hash value extracting unit for extracting a hash value for medical information to be transmitted;
A block chain registration unit that registers the information including the hash value as a transaction in the connected block chain network; And
Including; a medical information transmission unit for transmitting the identification information of the medical information, block information of the block chain network in which the hash value of the medical information is recorded, and the medical information to the management server,
The management server,
A medical information receiving unit for receiving the medical information from the medical information providing terminal;
A non-identifying medical information providing unit that provides non-identified medical information in which sensitive information is de-identified in the medical information to a medical information request terminal; And
Including; an identification medical information providing unit for providing identification medical information including sensitive information in the medical information to a medical information request terminal,
The non-identifying medical information providing unit,
Receiving a non-identifying medical information request for corresponding medical information from the medical information request terminal;
Deriving a hash value of the corresponding medical information received and stored from the medical information providing terminal, and verifying whether the derived hash value matches the hash value recorded in the blockchain network for the medical information;
Extracting sensitive information for the corresponding medical information and masking the sensitive information; And
Transmitting the masked corresponding medical information to the medical information request terminal; Including,
The identification medical information providing unit,
Receiving a request for identification medical information for the medical information from the medical information request terminal;
Requesting consent to the medical information providing terminal that provided the medical information;
Receiving consent from the medical information providing terminal that provided the medical information;
Deriving a hash value of the corresponding medical information received and stored from the medical information providing terminal, and verifying whether the derived hash value matches the hash value recorded in the blockchain network for the medical information;
Transmitting the medical information to the medical information request terminal; And
Containing, medical information management system comprising; recording consent received from the medical information providing terminal and medical information transmission details of the corresponding medical information transmitted to the medical information requesting terminal in a blockchain network.
delete delete delete The method according to claim 1,
The management server further includes a reward management unit,
The reward management unit,
In the case of receiving medical information from the medical information providing terminal and receiving consent to the provision of medical information including sensitive information of the identification medical information providing unit from the medical information providing terminal, the account of the medical information providing terminal A medical information management system that gives reward points.

Images