KR20020041225A - System for secure transmission of electronic prescriptions and its Method - Google Patents

Abstract

PURPOSE: A system and method for transmitting an electronic prescription is provided to safely transmit an electronic prescription by converting a prescription into the electronic prescription, by encoding and transmitting the prescription, and by confirming an electronic signature value of the prescription. CONSTITUTION: An electronic prescription transmitting system(102) generates and encodes an electronic prescription. In addition, the transmitting system(102) attaches a signature of a transmitter to the prescription. An electronic prescription exchange system(101) transmits the prescription to an electronic prescription receiving system(103) in case that the transmitter is proper. After that, the system(103) outputs the prescription to a terminal connected to the receiving system(103). The receiving system(103) receives and decodes the prescription. A certification authority system(105) issues a certification of the transmitter. A certification directory system(104) stores the certification of the transmitter issued.

Description

System for secure transmission of electronic prescriptions and its method

The present invention relates to a system and method for delivering an electronic prescription, and in particular, after converting a prescription to be transmitted to an electronic prescription, the converted electronic prescription is encrypted and electronically signed and transmitted, and the electronic By verifying the signature value, authenticating the integrity of the sender (i.e. doctor) and destination (i.e. pharmacy) and e-prescription of the electronic prescription, only the legitimate sender or destination can transmit / receive the electronic prescription and The present invention relates to an electronic prescription delivery system and a computer-readable recording medium having recorded thereon a program for realizing the method.

Conventional prescription delivery systems have a problem of delivering a prescription by using an e-mail or using an electronic document exchange (EDI) system, but guaranteeing message security at an SSL level communication level, but having weak sender / receiver authentication.

That is, the conventional prescription delivery system undergoes ID / PASSWORD-based simple authentication, so when an ID / password is exposed, an intruder illegally creates and sends a prescription or an intruder is illegal. In some cases, the prescription may be intercepted, and even if the prescription is forged / falsified in the transmission process, there is a problem that the risk of medical accident is late because the fact is not known.

The present invention has been made to solve the above problems, and after converting the prescription to be transmitted to an electronic prescription, the converted electronic prescription is encrypted and electronically signed and transmitted, the electronic signature for the transmitted electronic prescription A computer-readable recording system of an electronic prescription delivery system and a program for realizing the method and the method for realizing the integrity of the electronic prescription, the sender (i.e. doctor) and the destination (pharmacy), and the electronic prescription. The purpose is to provide a recording medium.

1 is a configuration diagram of an embodiment of an electronic prescription delivery system according to the present invention.

2 is a block diagram of an embodiment of an electronic prescription transmission system according to the present invention.

3 is a block diagram of an embodiment of an electronic prescription exchange system according to the present invention.

Figure 4 is a configuration diagram of an embodiment of the electronic prescription discharge system according to the present invention.

5 is an exemplary explanatory diagram of a method for transmitting an electronic prescription with a destination designated between the electronic prescription discharge system and the electronic prescription exchange system according to the present invention.

6 is a diagram illustrating an embodiment of a method for transmitting an electronic prescription with no destination specified between the electronic prescription discharge system and the electronic prescription exchange system according to the present invention.

FIG. 7 is a diagram illustrating an embodiment of a method for encrypting and digitally signing an electronic prescription with a specified destination in the electronic prescription transmitting system applied to the present invention; FIG.

FIG. 8 is a diagram illustrating an embodiment of an encryption and digital signature method for an electronic prescription with no destination specified in the electronic prescription transmission system to which the present invention is applied; FIG.

9 is a diagram illustrating an embodiment of a sender electronic signature verification method in an electronic prescription exchange system applied to the present invention.

10 is a diagram illustrating an embodiment of a method for transmitting an electronic prescription with a destination specified between the electronic prescription exchange system and the electronic prescription discharge system according to the present invention;

11 is a diagram illustrating an embodiment of a method for transmitting an electronic prescription with no destination specified between the electronic prescription exchange system and the electronic prescription discharge system according to the present invention;

12 is a diagram illustrating an embodiment of a secret key re-encryption method for document encryption and decryption in an electronic prescription exchange system applied to the present invention.

Figure 13 is an embodiment explanatory diagram for an electronic signature method in an electronic prescription exchange system applied to the present invention.

14A to 14D are diagrams illustrating one embodiment of an electronic prescription delivery document in an electronic prescription exchange system according to the present invention;

15 is a diagram illustrating an embodiment of a method for decrypting an electronic prescription and verifying an electronic signature in an electronic prescription receiving system applied to the present invention.

16A and 16B are flowcharts of an embodiment of an electronic prescription transmission method in an electronic prescription transmission system according to the present invention;

17 is a flowchart illustrating an embodiment of an electronic prescription reception method in the electronic prescription exchange system according to the present invention.

18 is a flow chart of an embodiment of a delivery method for an electronic prescription with a destination specified in the electronic prescription exchange system according to the present invention.

19 is a flowchart illustrating a method for receiving an electronic prescription with a destination specified in the electronic prescription receiving system according to the present invention.

20A and 20B are flowcharts of one embodiment of a method of delivering an electronic prescription with no destination specified in the electronic prescription exchange system according to the present invention;

21 is a flowchart illustrating a method for receiving an electronic prescription with no destination specified in the electronic prescription receiving system according to the present invention.

22 is a flowchart illustrating an embodiment of an electronic prescription state management method in the electronic prescription exchange system according to the present invention.

* Explanation of symbols on the main parts of the drawing

101: electronic prescription exchange system 102: electronic prescription discharge system

103: electronic prescription receiving system 104: certificate directory system

105: certificate issuance system 201: sender identity verification unit

202: electronic prescription discharge unit 203: electronic prescription discharge unit

204: electronic signature electronic signature department 205: patient authentication key issuing unit

206: electronic prescription discharge unit 301: electronic prescription discharge unit

302: electronic prescription management unit 303: electronic prescription management unit

304: electronic prescription delivery unit 305: encryption unit

306: electronic prescription electronic signature unit 306: electronic prescription storage unit

401: electronic prescription discharge unit 402: electronic prescription discharge unit

403: electronic prescription discharge unit 404: electronic prescription output unit

405: patient information transmission unit

According to an aspect of the present invention, there is provided an electronic prescription transmitting system for transmitting an electronic prescription, comprising: electronic prescription generating means for receiving an prescription from a sender and generating an electronic prescription; After generating a message digest from the generated electronic prescription, a sender digital signature value is generated by a public key algorithm using a sender signature private key in the generated message digest, and a sender certificate is attached to the generated sender digital signature value. An electronic prescription means for encrypting the generated message digest according to a public key algorithm using a public key for key management of the electronic prescription exchange system; And first electronic prescription transmission means for generating an electronic prescription transmission document composed of the sender electronic signature value, the sender certificate, and the encrypted message digest, and transmitting the electronic prescription message to the electronic prescription exchange system.

The present invention further includes sender identity verification means for verifying the identity of the sender.

The present invention also encrypts the electronic prescription generated by the electronic prescription generating means according to a symmetric key algorithm using a secret key for document encryption, and designates a destination key for the document prescription for the electronic prescription. Electronic prescription encryption means for encrypting according to a public key algorithm using a public key for key management according to whether or not; And second electronic prescription transmission means for including the encrypted electronic prescription and the secret key for encrypting the encrypted document in the electronic prescription transmission document for transmission to the electronic prescription exchange system.

The present invention further includes means for issuing a patient authentication key for issuing an authentication key to a patient if a destination is not designated before the electronic prescription.

On the other hand, the present invention is an electronic prescription exchange system for exchanging electronic prescription, electronic prescription discharge means for receiving the electronic prescription transmission document in accordance with the confirmation of the suitability of the electronic prescription transmission document transmitted from the electronic prescription transmission system; Electronic prescription authentication means for authenticating the sender of the electronic prescription by checking the sender's electronic signature value with respect to the received electronic prescription transmission document; Electronic prescription storage means for storing an electronic prescription transmission document authenticated by the electronic prescription authentication means; Electronic prescription management means for managing the electronic prescription transmission document stored in the electronic prescription storage means; The encrypted message digest included in the electronic prescription transmission document is decrypted according to a public key algorithm using a key management private key of the electronic prescription exchange system, and the decrypted message digest is converted into a signature private key of the electronic prescription exchange system. Electronic prescription electronic signature means for generating an electronic signature value of the electronic prescription exchange system using; And if there is a request for transmission of the electronic prescription from the destination, deletes the encrypted message digest from the electronic prescription transmission document for the destination according to the authentication of the destination, and the electronic signature value and the electronic prescription exchange system certificate of the electronic prescription exchange system. And a first electronic prescription delivery means for delivering the electronic prescription delivery document to the destination after generating the electronic prescription delivery document.

In addition, the present invention relates to a key management of an electronic prescription exchange system, wherein a secret key for encrypting an encrypted document included in the electronic prescription transmission document is used when the electronic prescription discharged from the destination is an electronic prescription with no destination specified. Decrypting according to the public key algorithm using the private key for the service; Encryption means for encrypting the decrypted secret key for document encryption again with a public key algorithm using a destination key management public key; And a second key for deleting the encrypted document encryption secret key included in the electronic prescription delivery document generated by the first electronic prescription delivery means and attaching the secret key for document encryption re-encrypted by the encryption means. It further comprises an electronic prescription delivery means.

On the other hand, the present invention, in the electronic prescription discharge system for receiving an electronic prescription discharge, the electronic prescription exchange system receives the electronic prescription discharge delivery document for the confirmed electronic prescription discharge by confirming whether there is an electronic prescription discharge as a destination Electronic prescription receiving means for; The electronic signature exchange system is verified by verifying the sender's electronic signature value using the received electronic prescription delivery document to authenticate the sender and the integrity of the electronic prescription delivery document. Electronic prescription authentication means for authenticating; Electronic prescription analysis means for decrypting the encrypted electronic prescription contained in the electronic prescription delivery document authenticated by the electronic prescription authentication means into plain text; And electronic prescription discharge output means for outputting the electronic prescription discharge decrypted by the electronic prescription discharge analyzing means.

In addition, the present invention, when receiving the electronic prescription delivery document in accordance with the request of the patient, patient information delivery means for receiving the patient information required for the patient authentication from the destination, and delivers to the electronic prescription exchange system It includes more.

On the other hand, the present invention, in the electronic prescription transmission method applied to the electronic prescription transmission system, the first step of receiving the prescription details from the sender to generate an electronic prescription; after generating a message digest from the generated electronic prescription, the generation A sender digital signature value is generated by a public key algorithm using a sender signature private key in the generated message digest, a sender certificate is attached to the generated sender electronic signature value, and a public key for key management of the electronic prescription exchange system is used. Encrypting the generated message digest according to a public key algorithm; And a third step of generating an electronic prescription transmission document consisting of the sender electronic signature value, the sender certificate, and the encrypted message digest and transmitting to the electronic prescription exchange system.

In addition, the method of the present invention further includes a fourth step of verifying the identity of the sender.

The method of the present invention further encrypts the electronic prescription generated in the first step using a document encryption secret key according to a symmetric key algorithm, and designates the document encryption secret key as a destination for the electronic prescription. A fifth step of encrypting according to a public key algorithm using a public key for key management according to whether or not; And a sixth step of including the encrypted electronic prescription and the secret key for encrypting the encrypted document in the electronic prescription transmission document for transmission to the electronic prescription exchange system.

The method may further include a seventh step of issuing an authentication key to the patient if a destination is not designated before the electronic prescription.

Meanwhile, the present invention provides an electronic prescription exchange method applied to an electronic prescription exchange system, comprising: a first step of receiving an electronic prescription transmission document in accordance with a confirmation of suitability of an electronic prescription transmission document transmitted from an electronic prescription discharge system; A second step of authenticating the sender of the electronic prescription by checking a sender's electronic signature value with respect to the received electronic prescription transmission document; A third step of storing the electronic prescription transmission document authenticated by the second step and managing the stored electronic prescription transmission document; The encrypted message digest included in the electronic prescription transmission document is decrypted according to a public key algorithm using a key management private key of the electronic prescription exchange system, and the decrypted message digest is converted into a signature private key of the electronic prescription exchange system. A fourth step of generating an electronic signature value of the electronic prescription exchange system; And if there is a request for transmission of the electronic prescription from the destination, deletes the encrypted message digest from the electronic prescription transmission document for the destination according to the authentication of the destination, and the electronic signature value and the electronic prescription exchange system certificate of the electronic prescription exchange system. After attaching to generate the electronic prescription delivery document, and the fifth step of delivering the electronic prescription delivery document to the destination.

In addition, the method of the present invention, if the electronic prescription discharged from the destination is an electronic prescription with no destination specified, the secret key for encrypted document encryption contained in the electronic prescription transmission document, the electronic prescription exchange system of the A sixth step of decrypting according to a public key algorithm using a private key for key management; A seventh step of re-encrypting the decrypted secret key for document encryption with a public key algorithm using a key management public key of a destination; And an eighth step of deleting the encrypted document encryption secret key included in the electronic prescription delivery document generated in the fifth step, and attaching the secret key for re-encrypted document encryption in the seventh step.

On the other hand, the present invention, in the electronic prescription discharge method applied to the electronic prescription discharge system, the electronic prescription discharge delivery document for the electronic prescription discharge confirmation by confirming whether there is an electronic prescription discharged as the destination in the electronic prescription discharge system; Receiving a first step; The electronic signature value of the sender is verified using the electronic prescription delivery document received in the first step, thereby authenticating the integrity and the sender of the electronic prescription delivery document, and verifying the electronic signature value of the electronic prescription exchange system. A second step of authenticating the prescription exchange system; A third step of decrypting the encrypted electronic prescription of the electronic prescription delivery document authenticated in the second step in plain text; And a fourth step of outputting the electronic prescription discharge decrypted in the third step.

In addition, the method of the present invention, when receiving the electronic prescription delivery document in accordance with the request of the patient, the fifth step of receiving the patient information required for the patient authentication from the destination, and forwarded to the electronic prescription exchange system It further includes.

On the other hand, the present invention, the electronic prescription transmission system having a processor, the first function for receiving the prescription details from the sender to generate an electronic prescription discharge; After generating a message digest from the generated electronic prescription, a sender digital signature value is generated by a public key algorithm using a sender signature private key in the generated message digest, and a sender certificate is attached to the generated sender digital signature value. And encrypting the generated message digest according to a public key algorithm using a public key for key management of an electronic prescription exchange system; And a program for realizing a third function of generating an electronic prescription transmission document consisting of the sender electronic signature value, the sender certificate, and the encrypted message digest and transmitting it to the electronic prescription exchange system. Provide the medium.

The present invention also provides a computer-readable recording medium having recorded thereon a program for realizing the fourth function of verifying the identity of the sender.

The present invention also encrypts the electronic prescription generated by the first function using a document encryption secret key according to a symmetric key algorithm, and the document encryption secret key according to whether a destination for the electronic prescription is specified. A fifth function of encrypting according to a public key algorithm using a public key for key management; And a program for further realizing a sixth function included in the electronic prescription transmission document for transmitting the encrypted electronic prescription and the secret key for encrypting the encrypted document to the electronic prescription exchange system. Provide a record carrier.

The present invention also provides a computer-readable recording medium having recorded thereon a program for further realizing a seventh function of issuing an authentication key to a patient if a destination is not designated before the electronic prescription.

On the other hand, the present invention provides a electronic prescription exchange system including a processor, comprising: a first function of accepting the electronic prescription transmission document in accordance with a confirmation of suitability of the electronic prescription transmission document transmitted from the electronic prescription discharge system; A second function of authenticating a sender of the electronic prescription by checking a sender's digital signature value with respect to the received electronic prescription transmission document; A third function of storing the electronic prescription transmission document authenticated by the second function and managing the stored electronic prescription transmission document; The encrypted message digest included in the electronic prescription transmission document is decrypted according to a public key algorithm using a key management private key of the electronic prescription exchange system, and the decrypted message digest is converted into a signature private key of the electronic prescription exchange system. A fourth function of generating an electronic signature value of the electronic prescription exchange system; And if there is a request for transmission of the electronic prescription from the destination, deletes the encrypted message digest from the electronic prescription transmission document for the destination according to the authentication of the destination, and the electronic signature value and the electronic prescription exchange system certificate of the electronic prescription exchange system. After generating an electronic prescription delivery document attached thereto, provides a computer-readable recording medium recording a program for realizing a fifth function of delivering the electronic prescription delivery document to the destination.

In addition, the present invention relates to a method for key management of an electronic prescription exchange system, when the electronic prescription discharged from the destination is an electronic prescription with no destination specified, the encrypted secret key for encryption of the document included in the electronic prescription transmission document. A sixth function of decrypting according to the public key algorithm using the private key; A seventh function of re-encrypting the decrypted secret key for document encryption with a public key algorithm using a destination key management public key; And

To further realize an eighth function of deleting an encrypted document encryption secret key included in the electronic prescription delivery document generated in the fifth function, and attaching a secret key for re-encrypted document encryption in the seventh function. A computer readable recording medium having recorded a program is provided.

On the other hand, the present invention is a system for receiving an electronic prescription delivery document for the identified electronic prescription by confirming whether there is an electronic prescription discharged to the electronic prescription discharge exchange system as a destination in the electronic prescription discharge receiving system having a processor; 1 function; Verifying the electronic signature value of the sender / transmitter using the electronic prescription delivery document received in the first function, authenticating the integrity and the sender of the electronic prescription delivery document, and verifying the electronic signature value of the electronic prescription exchange system; A second function of authenticating the electronic prescription exchange system; A third function of decrypting an encrypted electronic prescription of the electronic prescription delivery document authenticated in the second function in plain text; And a computer-readable recording medium having recorded thereon a program for realizing a fourth function of outputting the electronic prescription discharge decrypted in the third function.

Further, the present invention further realizes a fifth function of receiving patient information necessary for the patient authentication from the destination and delivering the electronic prescription to the electronic prescription exchange system when receiving the electronic prescription delivery document according to a patient's request. A computer readable recording medium having a program recorded thereon is provided.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of an embodiment of an electronic prescription discharge delivery system according to the present invention.

The electronic prescription delivery system includes an electronic prescription exchange system (i.e., an EDI system) 101, an electronic prescription transmission system 102, an electronic prescription reception system 103, a certificate directory system 104, and a certificate issuing system. (Certification Authority) (105).

The electronic prescription transmitting system 102 generates the electronic prescription, applies a public key-based security technique, encrypts the electronic prescription, signs the sender, and transmits the electronic prescription to the electronic prescription exchange system 101 through the Internet 106. (See Figure 2).

The electronic prescription exchange system 101 transmits the electronic prescription to the electronic prescription receiving system 103 when the legitimate sender is authenticated through the sender (ie, pseudo) authentication of the electronic prescription (see FIG. 3).

The electronic prescription receiving system 103 receives the electronic prescription and decrypts the encrypted electronic prescription, and then outputs the electronic prescription to a terminal or a printer connected to the electronic prescription receiving system 103 (see FIG. 4).

The Certificate Authority System 105 issues certificates of the sender (doctor) and the destination (pharmacy), and the Certificate Directory System (104) of the issued sender (hospital) and destination (pharmacy) Store the certificate for public viewing.

Hereinafter, an electronic prescription delivery process by the electronic prescription delivery system will be described.

The electronic prescription transmitting system 102 receives the prescription from the sender, generates an electronic prescription, sends the electronic signature to the electronic prescription before the generated electronic prescription, and transmits the electronic prescription to the electronic prescription exchange system 101.

Then, the electronic prescription exchange system 101 receives the electronically signed electronic prescription, checks the electronic signature value for the received electronic prescription, authenticates the sender, and stores the electronic prescription according to the authentication result; After authenticating the destination according to the transfer request of the destination, the electronic prescription is electronically signed and transmitted to the authenticated destination.

Thereafter, the electronic prescription discharge system 103 checks whether there is an electronic prescription for the destination that has requested the electronic prescription exchange transmission to the electronic prescription exchange exchange system 101, and if there is an electronic prescription for the destination, the electronic prescription exchange system 101 After receiving the electronic prescription, the electronic signature value of the sender is verified against the received electronic prescription, thereby authenticating the integrity of the electronic prescription and the sender, and decrypting and outputting the authenticated electronic prescription in plain text.

More specifically, the electronic prescription discharge process by the electronic prescription discharge system as follows.

The electronic prescription delivery system has an electronic prescription exchange system (101) between a hospital and a pharmacy that delivers a notarized safe electronic prescription discharge, and the electronic prescription transmission between the hospital and the electronic prescription exchange system and the electronic prescription exchange between the electronic prescription exchange system and the pharmacy It ensures the confidentiality and integrity of the electronic prescriptions delivered during the delivery process, and also securely delivers the electronic prescriptions through the authentication process for the sender (doctor) and the recipient (pharmacy) of the hospital where the electronic prescription is issued.

That is, the electronic prescription generated in the hospital is encrypted using a document encryption algorithm. At this time, if the destination is specified, the secret key for document encryption and decryption used in the electronic prescription encryption is encrypted with the public key for key management of the destination. If the destination is not specified, the public key for key management of the electronic prescription exchange system 101 is specified. Using the hash function to generate the message digest of the electronic prescription, and apply the public key cryptographic algorithm using the sender's signature private key to the message digest to authenticate the electronic prescription issuer. Ie, sender signature).

In addition, the message digest is encrypted using the key management public key of the electronic prescription exchange system so that the electronic prescription exchange system can use it to verify the sender's digital signature value.

The electronic prescription transmission system 102 transmits the encrypted electronic prescription, the encrypted document decryption secret key, the sender electronic signature value, the encrypted message digest, and the sender's signature certificate to the electronic prescription exchange system 101. Here, the sender can be authenticated by checking the transmitted electronic signature value. If the message digest of the electronic prescription is generated by using the hash function after decrypting the electronic prescription, the integrity of the electronic prescription can be checked, so that the electronic prescription can be forged. have.

The electronic prescription exchange system 101 passes the authentication of the sender through the verification of the sender electronic signature value of the electronic prescription and transmits it to the destination (pharmacy) in the case of a legitimate electronic prescription, which receives the destination (pharmacy) to receive the electronic prescription. In case of designation, it is signed by the electronic prescription exchange system and delivered directly to the designated destination.

If the patient does not designate a destination (pharmacy), it is stored in the electronic prescription storage unit 306 of the electronic prescription exchange system 101, and the electronic prescription is forwarded when a request for transmission of the electronic prescription is made at a legitimate pharmacy. . In this case, if the pharmacy is not designated, the prescription of the patient is prevented from being viewed at any pharmacy, and the patient is authenticated so that the electronic prescription can be viewed under the management of the patient. Pharmacy).

In this case, the document encryption / decryption key used for the electronic prescription encryption is restored using the private key for key management of the electronic prescription exchange system, and then encrypted again by using the public key for key management of the destination. This allows the destination to restore the encrypted electronic prescription.

2 is a block diagram of an embodiment of an electronic prescription transmission system according to the present invention.

The electronic prescription transmission system 102 is a system for safely transmitting a prescription to a pharmacy when a doctor issues a prescription after consulting a patient in a hospital, and includes a sender identification unit 201 and an electronic device. The prescription generator 202, the electronic prescription encryption unit 203, the electronic prescription electronic signature unit 204, the patient authentication key issuing unit 205, and the electronic prescription transmission unit 206.

The sender identity verification unit 201 confirms whether or not the legitimate sender (doctor) to input a prescription, and the sender (doctor) through checking the doctor ID, checking smart card information issued to each doctor, fingerprint recognition, voice recognition, and the like. Check your identity.

The electronic prescription generating unit 202 generates a prescription given by a doctor as a plaintext EDI document. When the prescription is generated as a result of an application in the hospital, the electronic prescription generating unit 202 receives the prescription data through the corresponding interface, Documents (ie, EDI documents) are converted, and if there is no hospital application, the electronic prescription input window pops up to receive prescription data from a doctor and generate it as an electronic document.

The electronic prescription encryption unit 203 performs a security process for preventing exposure of the electronic prescription data in the transmission process for the plain text electronic document generated by the electronic prescription discharge generation unit 202. Here, the security process encrypts the electronic prescription using a document encryption algorithm, and applies the public key infrastructure security technology so that only the right recipient can obtain the document decryption key used at this time. To pass. If the destination is specified, the document encryption / decryption key is encrypted using the destination key management public key. If the destination is not specified, the document encryption / decryption key is used as the key management public key of the electronic prescription exchange system 101. Encrypt

Specifically, the electronic prescription encryption unit 203 encrypts the electronic prescription generated by the electronic prescription generation unit 202 using a document encryption secret key according to a symmetric key algorithm, and encrypts the document encryption secret key. According to the public key algorithm, the public key for key management is used, depending on whether the destination is specified for the electronic prescription.

Here, the encryption process of the secret key for document encryption is performed using the public key for the key management of the destination if the destination is specified in the electronic prescription, and for the key management of the electronic prescription exchange system if the destination is not specified in the electronic prescription. Encrypt using a public key.

Electronic signature The electronic signature unit 204 is for verifying the sender (doctor) authentication and the integrity of the electronic prescription, after generating a message digest for verifying the integrity of the content of the electronic prescription, the signature (signature) unique to the sender (doctor) After the electronic prescription is signed using the private key, the certificate issuance system (CA) 105 attaches the certificate issued to the electronic prescription document.

That is, the electronic prescription electronic signature unit 204 generates a message digest from the electronic prescription generated by the electronic prescription generation unit 202, and then uses the public key algorithm to sender digital signature using the sender signature private key in the generated message digest. A value is generated, a sender certificate is attached to the generated sender electronic signature value, and the generated message digest is encrypted according to a public key algorithm using a public key for key management of the electronic prescription exchange system.

The patient authentication key issuing unit 205 issues a patient authentication key so that the electronic prescription can be received after the patient is authenticated in the electronic prescription discharge process for which the pharmacy is not designated.

The electronic prescription transmitting unit 206 is for transmitting the electronic prescription to the electronic prescription exchange system 101, and also has a function of designating a pharmacy to receive the electronic prescription. In addition, the information about the listed pharmacies is basically shown to facilitate the pharmacy designation, and the pharmacy can be searched using the pharmacy search information such as the region or the pharmacy name. If the patient does not specify a pharmacy, the patient transmits to the electronic prescription exchange system 101 without specifying a destination.

Specifically, the electronic prescription transmitting unit 206 includes the sender electronic signature value, the sender certificate, and the encrypted message digest obtained from the electronic prescription electronic signature unit 204, the encrypted electronic prescription obtained from the electronic prescription encryption unit 203, and An electronic prescription transmission document (see FIGS. 14A and 14C) including a secret key for document encryption is generated and transmitted to the electronic prescription exchange system 101 regardless of whether the destination is designated.

3 is a block diagram of an embodiment of an electronic prescription exchange system according to the present invention.

The electronic prescription exchange system 101 is a system that authenticates the sender to the electronic prescription received through the Internet, and delivers only the electronic prescription of which safety is recognized to the pharmacy (recipient). The electronic prescription receiving unit 301 and the electronic prescription certification unit 302, the electronic prescription management unit 303, the electronic prescription discharge transmission unit 304, the electronic prescription discharge encryption unit 305, the electronic prescription discharge electronic signature unit 306, and the electronic prescription storage unit 307.

The electronic prescription reception unit 301 checks the uniqueness of the electronic prescription through the electronic prescription management unit 303, in order to prevent basic errors such as duplicate reception of the same electronic prescription transmitted from the hospital, and then to verify the sender authentication of the electronic prescription. An electronic prescription stability test is requested to the electronic prescription certification unit 302.

The electronic prescription certification unit 302 obtains a certificate revocation list from the certificate directory system 104 to determine the authenticity of the electronic signature value of the received electronic prescription, and confirms that the sender's certificate is not included in the certificate revocation list. After verifying the validity of the sender's certificate, the authenticity of the sender's signature value of the transmitted electronic prescription is determined using the signature public key included in the sender's certificate.

The electronic prescription manager 303 stores the authenticated electronic prescription in the active storage 308 of the electronic prescription exchange system, and backs up the electronic prescription to the history storage 309 after the life cycle of the electronic prescription is over. Do this. In addition, the electronic prescription management unit 303 performs a function of taking out the electronic prescription discharge from the active reservoir 308 according to the electronic prescription discharge request.

The electronic prescription storage unit 307 is composed of an active storage 308 and the history storage 309, the active storage 308 stores the electronic prescription discharge during the validity period of the electronic prescription, the history storage 309 Retains (stores) the original for proof of transmission and reception of electronic prescription after the electronic prescription has expired.

The electronic prescription delivery unit 304 confirms the authentication of the recipient who requested the transmission to the electronic prescription transmission request sent by the destination (drug store), and then transfers the electronic prescription discharge request to the electronic prescription management unit 303.

Then, the electronic prescription management unit 303 searches the active storage 308 to determine whether or not to specify the destination and delivery of the electronic prescription. When the electronic prescription is a new electronic prescription that has not been designated a destination and has not yet been delivered or an electronic prescription that has been returned from another destination, the electronic prescription delivery unit 304 is required to perform patient authentication.

The electronic prescription delivery unit 304 performs patient authentication, and if the patient authentication fails or the electronic prescription has already been delivered to another pharmacy, the electronic prescription delivery unit 304 transmits the corresponding failure message to the recipient who has requested the electronic prescription transmission. When the patient's authentication is finished, the electronic prescription management unit 303 extracts the electronic prescription discharge and passes the electronic prescription to the electronic prescription encryption unit 305.

If the requested electronic prescription is specified as a destination, it is checked whether the destination specified in the electronic prescription and the destination requested to transmit the electronic prescription are identical, and if so, the electronic prescription is extracted and passed to the electronic prescription delivery unit 304.

The electronic prescription forwarding unit 304 transmits a failure message of "No authority" to the destination which has requested the electronic prescription when the electronic prescription discharge requested to be transmitted is different from the destination specified as the destination specified.

The electronic prescription encryption unit 305 operates only in an electronic prescription discharge process without a destination, and is encrypted with a public key for key management of the electronic prescription exchange system 101, and a secret key for decryption of a document used for electronic prescription encryption. Re-encrypt so that only legitimate destinations can obtain it. That is, after decrypting the secret key for document encryption and decryption using the key management private key of the electronic prescription exchange system 101, the operation is again encrypted using the public key for key management of the destination.

The electronic prescription electronic signature unit 306 performs a security operation for signing the electronic prescription exchange system for proving that the electronic prescription has been delivered by the legitimate electronic prescription exchange system 101.

Hereinafter, the operation of the electronic prescription exchange system 101 will be described in detail.

The electronic prescription acceptance unit 301 confirms the suitability of the electronic prescription transmission document transmitted from the electronic prescription discharge transmission system 102 and, if appropriate, receives the electronic prescription transmission document.

The electronic prescription authentication unit 302 authenticates the sender of the electronic prescription by checking the sender's electronic signature value with respect to the electronic prescription transmission document received by the electronic prescription reception unit 301. Here, the sender electronic signature value verification process of the electronic prescription authentication unit 302 extracts the sender signature public key from the sender certificate in the electronic prescription transmission document, and uses the extracted sender signature public key to sender electronic signature value. Decrypts the message according to the digital signature mechanism to generate a message digest; Further, decrypting the encrypted message digest in the electronic prescription transmission document using the private key for key management of the electronic prescription exchange system to generate the message digest; This is done by verifying that the two message digests are identical.

The electronic prescription storage unit 307 stores the electronic prescription transmission document authenticated by the electronic prescription discharge authentication unit 302, and the electronic prescription management unit 303 stores the electronic prescription transmission document stored in the electronic prescription storage unit 307 Manage.

The electronic signature electronic signature unit 306 decrypts the encrypted message digest included in the electronic prescription transmission document according to the public key algorithm using the private key for key management of the electronic prescription exchange system, and exchanges the decrypted message digest with the electronic prescription. The signature private key of the system is used to generate the digital signature of the electronic prescription exchange system.

The electronic prescription forwarding unit 304 deletes the encrypted message digest from the electronic prescription transmission document for the destination upon authentication of the destination, upon request for transmission of the electronic prescription from the destination, and the digital signature value of the electronic prescription exchange system. After generating the electronic prescription delivery document by attaching the electronic prescription exchange system certificate, the electronic prescription delivery document (see Fig. 14B) is delivered to the destination. Here, the destination authentication of the electronic prescription delivery unit 304 authenticates the destination when the destination is specified for the electronic prescription discharged from the destination, and authenticates the destination and the patient when the destination is not specified.

If the electronic prescription requested to be transmitted from the destination is an electronic prescription with no destination specified, the encryption unit 305 uses the private key for key management of the electronic prescription exchange system in the encrypted document encryption secret key included in the electronic prescription transmission document. After decrypting according to the public key algorithm; Re-encrypt the decrypted secret key for document encryption using a public key algorithm using the destination key management public key; The secret document encryption secret key included in the electronic prescription delivery document generated by the electronic prescription delivery unit 304 is deleted, and the secret key for document encryption re-encrypted by the encryption unit 305 is attached (FIG. 14D). Reference).

4 is a block diagram of an embodiment of an electronic prescription discharge system according to the present invention.

The electronic prescription receiving system 103 is a system for receiving an electronic prescription in order to dispense a medicine to a patient, the electronic prescription receiving unit 401, electronic prescription discharge authentication unit 402, electronic prescription discharge analysis unit 403, electronic prescription output unit 404, and patient information transmission unit 405.

The electronic prescription receiver 401 checks whether there is an electronic prescription discharged to it and receives the electronic prescription discharge.

The electronic prescription authentication unit 402 is to verify the sender authentication of the received electronic prescription and the integrity of the electronic prescription contents. First, the certificate revocation list is obtained from the certificate directory system 104 for validity of the certificate attached to the electronic prescription, and the sender's certificate is not included in the certificate revocation list. It recovers the message digest of the electronic prescription from the sender's digital signature value using the signature public key included in the sender's certificate. In addition, a message digest is generated using a hash function for the electronic prescription that has been decoded to determine whether the electronic prescription has been modulated, and the two message digests are compared to determine whether the electronic prescription has been modulated or not. The authenticity of the signature value of the prescription sender is determined.

The electronic prescription analysis unit 403 restores the encrypted electronic prescription document decryption secret key using its own key management private key, and then decrypts the electronic prescription using the secret key to generate a plain text EDI document. do.

The electronic prescription output unit 404 provides the plain text EDI document generated by the electronic prescription analysis unit 403 as input data of the application through the corresponding interface when the pharmacy has its own application program. If not, open the output window to convert the EDI document into a prescription.

When the patient information transmission unit 405 receives the electronic prescription at the patient's request, the patient information transmission unit 405 receives the information necessary for patient authentication (that is, the patient information), and the electronic prescription exchange system 101 receives the information necessary for the received patient authentication. ).

Hereinafter, the electronic prescription discharge receiving system 103 will be described in detail.

The electronic prescription receiver 401 checks whether there is an electronic prescription discharge delivered to the electronic prescription exchange exchange system 101 as a destination, and receives the electronic prescription delivery document for the electronic prescription discharge when the electronic prescription discharge is delivered.

The electronic prescription authentication unit 402 verifies the sender's digital signature value using the received electronic prescription delivery document to authenticate the integrity and sender of the electronic prescription delivery document, and also verifies the electronic signature value of the electronic prescription exchange system. Certify the electronic prescription exchange system. Here, verification of the sender's digital signature value may include: decrypting the encrypted secret key included in the received electronic prescription delivery document into a document decryption secret key according to a public key algorithm using the destination key management private key; Decrypting the encrypted electronic prescription contained in the received electronic prescription delivery document by electronic prescription according to a symmetric key algorithm using the decrypted secret key for decrypting the document; After generating the message digest using the hash function in the decrypted electronic prescription, and generating the message digest according to the digital signature mechanism using the sender signature public key for the sender digital signature value in the received electronic prescription delivery document, This is done by verifying that the message digests are identical.

On the other hand, the electronic signature value verification of the electronic prescription exchange system by the electronic prescription authentication unit 402 uses the public key for signature of the electronic prescription exchange system as the electronic signature value of the electronic prescription exchange system in the received electronic prescription delivery document. This is done by generating a message digest according to the digital signature mechanism, and then confirming that it is the same as the message digest obtained as a result of applying the hash function to the restored electronic prescription.

If the electronic prescription analysis unit 403 decrypts the encrypted electronic prescription contained in the electronic prescription delivery document certified by the electronic prescription authentication unit 402 in plain text, the electronic prescription output unit 404 is the electronic prescription analysis unit 403 Outputs the electronic prescription decoded by

When the patient information delivery unit 405 receives the electronic prescription delivery document according to the patient's request, the patient information delivery unit 405 receives the patient information necessary for patient authentication from the destination, and transmits the patient information to the electronic prescription exchange system 101.

FIG. 5 is a diagram illustrating an embodiment of a method of transmitting an electronic prescription with a destination designated between the electronic prescription discharge system and the electronic prescription exchange system according to the present invention.

The electronic prescription transmission system 102 generates an electronic prescription according to the physician's electronic prescription contents input (501), and then encrypts the generated electronic prescription with a document encryption algorithm using a document encryption decryption secret key (502).

The certificate directory system 104 retrieves the destination key management certificate (503), extracts the destination key management public key from the imported key management certificate (504), and then publishes the extracted destination key management public key. Using the key, the document encryption / decryption secret key used for electronic prescription encryption is encrypted using a public key algorithm (505).

Then, after generating the message digest of the electronic prescription using the hash function (506), the digital signature value of the sender (doctor) is generated by the public key algorithm using the sender's signature private key in the generated message digest ( 507).

After obtaining the key management certificate of the electronic prescription exchange system 101 from the certificate directory system 104 (508), the key management of the electronic prescription exchange system 101 from the key management certificate of the electronic prescription exchange system 101. Extract the public key, encrypt the message digest generated in " 506 " with the public key algorithm using the extracted key management public key of the electronic prescription exchange system 101 (509), and then encrypt the electronic message. An electronic prescription transmission document composed of a prescription, a document encryption / decryption secret key, a sender electronic signature value, an encrypted message digest, and a sender signature certificate is constructed and transmitted to the electronic prescription exchange system 101 (510).

The electronic prescription transmission system 102 transmits the electronic prescription discharge document of "510" to the electronic prescription exchange system 101 (511).

Then, the electronic prescription exchange system 101 receives the transmitted electronic prescription transmission document (512), extracts the sender certificate from the transmitted electronic prescription transmission document, and in the certificate directory system 104 to check the validity of the sender certificate. A certificate revocation list is retrieved (513) to verify the certificate revocation list and validity of the sender certificate (514).

When the verification result of "514" confirms that the sender certificate is validated, the signature public key is extracted from the sender certificate to restore the sender's digital signature value, and the encrypted message digest included in the electronic prescription transmission document is restored. Comparing the values, if the two values are the same, it is confirmed that the sender's digital signature value is true (515).

When the sender authentication is completed through the electronic signature value verification process, the electronic prescription transmission document is stored (516).

FIG. 6 is a diagram illustrating an embodiment of a method of transmitting an electronic prescription with no destination specified between the electronic prescription discharge system and the electronic prescription exchange system according to the present invention.

The electronic prescription transmission system 102 generates an electronic prescription according to the physician's electronic prescription contents input (601), and then encrypts the generated electronic prescription with a document encryption algorithm using a document encryption decryption secret key (602).

After obtaining the key management certificate of the electronic prescription exchange system 101 from the certificate directory system 104 (603), and extracting the key management public key of the electronic prescription exchange system 101 from the imported key management certificate ( 604), the document encryption / decryption secret key used for the electronic prescription encryption is encrypted using the extracted key management public key of the electronic prescription exchange system 101 by the public key algorithm (605).

Thereafter, after generating the message digest of the electronic prescription using the hash function (606), the digital signature value of the sender (doctor) is generated by the public key algorithm using the sender's signature private key in the generated message digest ( 607).

After encrypting the message digest generated in "606" with the public key algorithm using the public key for key management of the electronic prescription exchange system 101 extracted in "604" (608), the encrypted prescription and document encryption are performed. An electronic prescription transmission document consisting of the decryption secret key, the sender electronic signature value, the encrypted message digest, and the sender signature certificate is constructed and transmitted to the electronic prescription exchange system 101 (609).

The electronic prescription transmission system 102 transmits the electronic prescription discharge document of "609" to the electronic prescription exchange system 101 (610).

Then, the electronic prescription exchange system 101 receives the transmitted electronic prescription transmission document (611), extracts the sender certificate from the transmitted electronic prescription transmission document and then in the certificate directory system 104 for validity of the sender certificate. The certificate revocation list is retrieved (612), and the certificate revocation list is checked and the sender certificate is validated (613).

As a result of the verification of "613", when the validity of the sender certificate is verified, the signature public key is extracted from the sender certificate to restore the sender's digital signature value, and the encrypted message digest included in the electronic prescription transmission document is restored. If the two values are the same by comparing the two values, it is confirmed that the sender's digital signature value is true (614).

When the sender authentication is completed through the electronic signature value verification process, the electronic prescription transmission document is stored (615).

5 and 6, only the difference is briefly described as follows.

The electronic prescription transmitting system 102 obtains a certificate for key management of the pharmacy designated as the destination from the certificate directory system 104 in case of the destination-specified transmission (503), and from the certificate directory system 104 in the case of unspecified destination. After obtaining the key management certificate of the prescription exchange system 101 (603), the key management public key is extracted from the key management certificate and used to encrypt the secret key for document encryption (505, 605).

In addition, in the message digest encryption process, in the case of specifying a destination, a process of extracting a key management certificate of the electronic prescription exchange system from the certificate directory system 104 and extracting a key management public key of the electronic prescription exchange system is further added. (508), in the case of the destination designation / unspecification, the public management key of the electronic prescription exchange system is used to encrypt the message digest of the electronic prescription (509, 608).

7 and 8 are diagrams illustrating an embodiment of an electronic prescription encryption and digital signature method in an electronic prescription transmission system according to the present invention. FIG. 7 illustrates a case in which a destination is designated, and FIG. 8 specifies a destination. If not.

Hereinafter, FIGS. 7 and 8 will be described together with a focus on differences.

The electronic prescription transmission system 102 encrypts the electronic prescription (701, 801) with the message encryption password secret key (702, 802) according to a symmetric key encryption algorithm (703, 803), the encrypted electronic prescription (704) 804, then encrypt the document encryption / decryption secret keys 702 and 802 used for the electronic prescription encryption using the public key algorithm (705 and 805).

In this case, if a destination is designated, the key management public key 706 of the 'destination' is encrypted according to the public key algorithm. If the destination is not specified, the public key 806 of the key management of the 'prescription system' is specified. By encrypting according to the public key algorithm, the encrypted secret keys 707 and 807 are generated.

Meanwhile, the message digests 711 and 811 are generated using the hash functions 710 and 810 of the electronic prescriptions 701 and 801, and then the private key for the digital signature is generated in the generated message digests 711 and 811. The digital signatures are used in accordance with the digital signature mechanisms 713 and 813 to generate the digital signature values 714 and 814 for the electronic prescription.

In addition, the message digest 717 encrypted using the public key algorithms 713 and 813 using the key management public keys 716 and 816 of the electronic prescription exchange system in the generated message digests 711 and 811. , 817).

Thereafter, encrypted electronic prescriptions 704 and 804, encrypted secret keys 707 and 807, sender digital signature values 714 and 814, encrypted message digests 717 and 817, sender signing certificates 718 and 818, and the like. The electronic prescription transmission document 720, 820 consisting of the transmission to the electronic prescription exchange system 101.

9 is a diagram illustrating an embodiment of a sender electronic signature verification method in an electronic prescription exchange system applied to the present invention.

The electronic prescription exchange system 101 receives the electronic prescription transmission document 720, 820, and then inspects the electronic signature values 714, 814 of the electronic prescription contained in the received electronic prescription transmission document 720, 820. Sender authentication.

That is, the sender signature public key 902 is extracted from the sender certificates 718 and 818 in the received electronic prescription transmission document 720 and 820, and the sender signature public key 902 is used to extract the sender's electronic signature. Decrypting the signature values 714, 814 according to the digital signature mechanism 903 to produce a message digest 904; Further, the encrypted message digests 717 and 817 in the electronic prescription transmission document are decrypted using their own key management private key (i.e., public key for key management of the electronic prescription exchange system) 906 (905). ) Generates a message digest 907; The two message digests 904 and 907 are compared to confirm an electronic signature value (908).

10 and 11 are diagrams illustrating one embodiment of a method of transmitting an electronic prescription between an electronic prescription exchange system and an electronic prescription reception system according to the present invention. FIG. 10 illustrates an electronic prescription reception method when a destination is designated. 11 shows an electronic prescription discharge method when no destination is specified.

Hereinafter, FIG. 10 and FIG. 11 will be described together with a focus on differences.

The electronic prescription reception system 103 requests the electronic prescription exchange system 101 to transmit the electronic prescription. If a destination is specified, the electronic prescription is periodically transmitted (1001, 1002), and if the destination is not specified, the patient request is sent to the patient request. The transmission request is made in response to the occurrence of the electronic prescription inquiry (1101 to 1103).

The electronic prescription exchange system 101 receives the transmission request from the electronic prescription discharge system 103 (1003, 1104), and retrieves the received electronic prescription discharge from the electronic prescription storage unit 306 (1004, 1105).

If the destination of the electronic prescription is specified, an electronic signature value of the electronic prescription exchange system is generated (1005), an electronic prescription delivery document is constructed, and then transmitted to the electronic prescription reception system 103 of the designated destination (1006, 1007).

On the other hand, when the destination of the electronic prescription is not specified, after decrypting the secret key for document encryption / decryption using the private key for key management of the electronic prescription exchange system (1106), the destination of the destination from the certificate directory system 104 is determined. Obtain the key management certificate (1107), extract the public key for key management (1108), and use the key management public key of the destination (i.e., the receiver of the electronic prescription) requested for transmission to recover the secret key for the electronic prescription encryption. The digital signature is generated (1109), the electronic signature value of the electronic prescription exchange system is generated (1110), the electronic prescription delivery document is constructed, and then transmitted to the electronic prescription reception system 103 at the destination (1111, 1112).

The electronic prescription receiving system 103 receives the electronic prescription prescription delivery document from the electronic prescription exchange system 101 (1008, 1113), and the certificate directory system 104 for validating the sender certificate included in the electronic prescription delivery document. ), The certificate revocation list is checked (1009, 1114), the certificate revocation list is checked and the sender certificate is validated (1010, 1115), and when the sender certificate is validated, the signature public key is extracted from the sender certificate and Used to verify digital signature values. When the sender authentication is confirmed through digital signature value verification (1011, 1116), the received electronic prescription is decrypted (1012, 1117) and output to the receiver (pharmacist) (1013, 1118).

12 is a diagram illustrating an embodiment of a method for re-encrypting a secret key for decryption of a document in an electronic prescription exchange system according to the present invention, wherein the secret key for decryption of a document used for encryption of an electronic prescription in an electronic prescription exchange system is shown. It shows how to re-encrypt.

After decrypting the encrypted secret key 1201 included in the electronic prescription transmission document through the public key algorithm 1203 using the private key 1202 of the key management system of the electronic prescription exchange system, 1204, using a destination key management public key 1205, encrypting (1206) with a public key algorithm to generate a re-encrypted secret key 1207.

13 is a diagram illustrating an embodiment of an electronic signature method in an electronic prescription exchange system applied to the present invention.

The encrypted message digest 1301 included in the electronic prescription transmission document is decrypted (1303) by using a public key algorithm using a private key 1302 for key management of the electronic prescription exchange system to generate a decrypted message digest 1304. Thereafter, using the signature private key 1305 of the electronic prescription exchange system, the electronic signature mechanism 1306 generates the electronic signature value 1307 of the electronic prescription exchange system.

14A to 14D are diagrams illustrating one embodiment of an electronic prescription delivery document in an electronic prescription exchange system applied to the present invention.

First, the case where the destination is specified for the electronic prescription is described as follows.

After receiving the electronic prescription transmission document (refer to FIG. 14A) from the electronic prescription transmission system 102, the electronic prescription exchange system 101 removes the encrypted message digest 717 from the electronic prescription transmission document, The electronic signature value 1307 and the signing certificate 1401 of the electronic prescription exchange system are attached to form an electronic prescription delivery document 1410 (FIG. 14B), and are transmitted to the electronic prescription reception system 103.

On the other hand, the case where the destination is not specified for the electronic prescription is described as follows.

After receiving the electronic prescription transmission document (see FIG. 14C) from the electronic prescription transmission system 102, the electronic prescription exchange system 101 removes the encrypted message digest 817 from the electronic prescription transmission document, The electronic signature value 1307 and the signing certificate 1401 of the electronic prescription exchange system are attached to form an electronic prescription delivery document 1410 (FIG. 14D), and are transmitted to the electronic prescription reception system 103.

FIG. 15 is a diagram for explaining an electronic prescription decryption and electronic signature verification method in an electronic prescription reception system according to the present invention.

After receiving the electronic prescription delivery document 1410, the electronic prescription reception system 103 decrypts the encrypted secret key included in the electronic prescription delivery document into its own key management private key and uses the key to encrypt the electronic prescription. Decode the prescription. In addition, the sender electronic signature values 714 and 814 of the electronic prescription are inspected to verify sender authentication and integrity of the electronic prescription.

More detailed description is as follows.

After receiving the electronic prescription delivery document 1410, the electronic prescription receiving system 103 uses the encrypted private key 1501 included in the electronic prescription delivery document using the private key 1502 for its key management. According to the algorithm 1503, it is decrypted with the secret key 1504 for document decryption.

Then, the electronic prescription (1507) according to the symmetric key algorithm (1506) using the encrypted electronic prescription 1505 included in the received electronic prescription delivery document 1410 using the decrypted secret key 1504 for decryption of the document. Decrypt with

Thereafter, a message digest 1509 is generated using the hash function 1508 in the decrypted electronic prescription 1507, and the sender signature public key 1510 in the received electronic prescription delivery document 1410 is transmitted. 1515 generates the message digest 1513 according to the signature mechanism 1512, and then compares both message digests 1509 and 1513 to verify the sender digital signature value (1514).

In addition, the digital signature value 1515 of the electronic prescription exchange system in the received electronic prescription delivery document 1410 using the signature public key 1516 of the electronic prescription exchange system in accordance with the signature mechanism 1517, the message digest 1518. ), And if the two message digests 1509 and 1518 are the same as compared to the message digest 1509 that is the result of the hash function of the restored prescription, the electronic signature value of the electronic prescription exchange system is determined to be true. (1519)

16A and 16B are flowcharts illustrating an electronic prescription transmission method in the electronic prescription transmission system according to the present invention.

The electronic prescription transmission system 102 creates an electronic prescription from the prescription contents input from the sender (doctor) (1601), and then encrypts the electronic prescription using a document encryption algorithm (1602).

Check if there is a request for specifying a destination (pharmacy) from the sender (1603). If the result of the check indicates that there is a request for specifying a destination, the certificate directory system 104 retrieves the key management certificate of the 'destination' (1604). If there is no designation request, the certificate directory system 104 retrieves the key management certificate of the 'electronic prescription exchange system' (1605). Here, the reason for obtaining the certificate for key management in the certificate directory system 104 is to obtain a public key necessary for encrypting and delivering the document encryption / decryption secret key used in the electronic prescription encryption.

The key management public key is extracted from the key management certificate of the electronic prescription exchange system 101 obtained at " 1604 " and " 1605 " (1606), and the extracted key management public key is used for the electronic prescription encryption. The encrypted document secret key is encrypted with the public key algorithm (1607).

After generating the message digest of the electronic prescription by applying the hash function to the electronic prescription (1608), the sender electronic signature value is generated by the public key algorithm using the sender's digital signature in the generated message digest (1609). .

Thereafter, the message digest generated at "1608" is encrypted using a public key algorithm using a key management public key of the electronic prescription exchange system (1613), and the electronic prescription transmission document (i.e., encrypted electronic prescription, encrypted secret key). , Sender digital signature value, encrypted message digest, and sender certificate). In this process, when there is a request for designating a destination (pharmacy) in the electronic prescription (that is, when the electronic prescription transmitting system does not have a certificate for key management of the electronic prescription exchange system), the certificate directory system 104 receives the electronic message from the certificate directory system 104. Take the certificate for key management of the prescription exchange system (1611), extract the key management public key from the key management certificate of the electronic prescription exchange system, and use it for the message digest encryption process (1612); On the other hand, when there is no request for specifying a destination before the electronic prescription, since the key management certificate of the electronic prescription exchange system is already extracted from the "1605", the "1611" and "1612" are not necessary.

Thereafter, it is checked whether there is a request for designating a destination (that is, a pharmacy) (1615), and if there is a request for specifying a destination, the destination is designated (1607). The electronic prescription transmission document is transmitted to the electronic prescription exchange system 101 (1618). In this case, in the case of the electronic prescription transmission that does not specify a destination, a one-time patient authentication key is issued to undergo a patient authentication process together with pharmacy authentication.

17 is a flowchart illustrating an electronic prescription discharge method in the electronic prescription exchange system according to the present invention.

The electronic prescription exchange system 101 receives the electronic prescription transmission document transmitted from the electronic prescription transmission system 102 (1701), performs a validity check and certificate revocation list check of the sender's certificate included in the electronic prescription transmission document; If the certificate is valid, the signature public key is extracted from the certificate to verify (authenticate) the sender electronic signature value (1703).

As a result of the verification, if the sender electronic signature value verification (authentication) succeeds, the electronic prescription transmission document received in the electronic prescription storage unit 307 is stored (1706).

As a result of the verification, if the sender digital signature value verification (authentication) fails, an error message indicating that the authentication has failed is notified to the sender side (1705).

18 is a flowchart illustrating an embodiment of a method of delivering an electronic prescription with a specified destination in the electronic prescription exchange system according to the present invention.

After the electronic prescription exchange system 101 receives the electronic prescription discharge request from the electronic prescription discharge reception system 103 of the destination (pharmacy) (1801), and obtains the electronic prescription transmission document from the electronic prescription discharge storage unit 307 of the recipient ( 1802, an electronic signature value of the electronic prescription exchange system is generated (1803), an electronic prescription delivery document (see FIG. 14B) is constructed (1804), and then delivered to the designated destination (1805).

Here, the electronic prescription delivery document (refer to FIG. 14B) when the destination is specified includes an encrypted electronic prescription, an encrypted secret key, a sender electronic signature value, a sender certificate, an electronic signature value of the electronic prescription exchange system, and an electronic prescription exchange system certificate. It consists of.

19 is a flowchart illustrating a method of receiving an electronic prescription discharge with a specified destination in the electronic prescription discharge system according to the present invention, and receiving the electronic prescription prescribed with the destination in the electronic prescription discharge receiving system 103 of the destination (pharmacy). It shows.

The electronic prescription discharge reception system 103 of the destination (pharmacy) checks from the electronic prescription exchange exchange system 101 whether the electronic prescription discharge that has designated itself as a destination arrives (1901), and if it has not arrived, confirms whether it has still arrived. If it arrives, after receiving the electronic prescription delivery document (1902), and validates the certificate attached to the received electronic prescription delivery document (1903).

If the certificate is valid, the private key for decrypting the document is decrypted using its own key management private key, and then the electronic prescription is decrypted using the secret key for decrypting the document (1904). ).

On the other hand, the signature public key is extracted from the sender signing certificate and the electronic prescription signing certificate, respectively, to verify the authenticity of the electronic signature value of the electronic prescription exchange system 101 and the sender's electronic signature value, thereby verifying the integrity of the electronic prescription. In addition, the electronic prescription exchange system 101 authenticates the sender (1905).

Thereafter, the electronic prescription exchange system 101 is notified that the electronic prescription has been received (1906), and the decoded electronic prescription is output (1907).

The destination (pharmacy) confirms whether or not the preparation is possible based on the prescription (1908). If the preparation is possible, the preparation (notation) is notified to the electronic prescription exchange system 101 after the completion of the preparation (1909). If it is impossible, the electronic prescription exchange system 101 is notified of the abandonment of the electronic prescription (1910).

That is, after the user of the receiving side (pharmacy side) confirms the contents of the electronic prescription, and if the medicine cannot be prepared based on the electronic prescription, the electronic prescription exchange system 101 notifies the intention of giving up the electronic prescription, and If the drug is used, the drug will be notified.

20A and 20B are flow charts of an embodiment of a method for delivering an electronic prescription with no destination specified in the electronic prescription exchange system according to the present invention. Indicates how to deliver a prescription.

The electronic prescription exchange system 101 receives the electronic prescription discharge request, the patient information, and the single-use authentication key from the electronic prescription discharge reception system 103 (2001), and verifies the destination which requested the electronic prescription transmission (2002).

The electronic prescription storage unit 307 searches for the electronic prescription (2003), and checks whether a destination (pharmacy) is designated in the electronic prescription (2004).

As a result of the check, if the destination is designated, the person who has requested the transmission of the electronic prescription is notified that the authority to receive the electronic prescription is not received (2007), and the process ends.

As a result of the check, if the destination is not designated, it is determined whether the electronic prescription is a new electronic prescription that no one has yet received or returned from a previously received destination (2005).

As a result of the determination, if it is not new or returned (i.e., if it is already received and used by another destination or has already been prepared), the person who requested the transmission of the electronic prescription is not informed that the authority to receive the electronic prescription is not authorized. 2007).

As a result of the determination, in the case of a new or returned electronic prescription with no destination specified, the patient's authentication key is checked to perform patient authentication (2006), and the patient authentication is successful (2008). If it fails, the recipient who notified the electronic prescription transmission is notified of the patient authentication failure (2009). If the patient authentication is successful, the certificate directory system 104 obtains the certificate for key management of the destination that requested the electronic prescription transmission (2010). After decrypting the secret key for document decryption with the private key for key management of the electronic prescription exchange system 101, the secret key for document decryption is re-encrypted using the public key for key management of the destination (2011).

Thereafter, the electronic signature value of the electronic prescription exchange system is generated to construct the electronic prescription delivery document (2012, 2013), and then the electronic prescription delivery document is delivered to the destination requesting the transmission of the electronic prescription (2014).

21 is a flowchart illustrating a method for receiving an electronic prescription with no destination specified in the electronic prescription receiving system according to the present invention.

The electronic prescription receiving system 103 requests the electronic prescription exchange search system 101 to search for the electronic prescription and also transmits the disposable authentication key of the patient for patient authentication (2101), and then retrieves the electronic prescription exchange system 101. The electronic prescription delivery document is received (2102), and the validity of the certificate attached to the electronic prescription is checked (2103).

As a result of the check, if the certificate is valid, after decrypting the encrypted document decryption secret key using its own key management private key, the electronic prescription is decrypted using the secret key for decryption of the document ( 2104).

On the other hand, the signature public key is extracted from the sender signing certificate and the electronic prescription signing certificate, respectively, to verify the authenticity of the electronic signature value of the electronic prescription exchange system 101 and the sender's electronic signature value, thereby verifying the integrity of the electronic prescription. In addition, the electronic prescription exchange system 101 authenticates the sender (2105).

Thereafter, the electronic prescription exchange system 101 is notified that the electronic prescription has been received (2106), and the decrypted electronic prescription is output (2107).

The destination (pharmacy) confirms whether or not the preparation is possible based on the prescription (2108), and if the preparation is possible, informs the electronic prescription exchange system (101) of the completion of the preparation (2109). If it is impossible to notify the electronic prescription exchange return system 101 to return the electronic prescription (2110).

That is, if the user of the receiving side (pharmacy side) confirms the contents of the electronic prescription, and cannot prepare medicine based on the electronic prescription, the electronic prescription exchange system 101 is notified of the intention to return the electronic prescription and the electronic prescription is discharged. If the drug is used, the drug will be notified.

22 is a flowchart illustrating a method for managing an electronic prescription state in the electronic prescription exchange system according to the present invention.

The electronic prescription switching system 101 receives (2201) the electronic prescription processing status from the destination (pharmacy), and confirms whether the notification is a preparation completion notification (2202).

As a result of confirmation of "2202", if the preparation completion notification is changed, the state changes to the electronic prescription completion state indicating that the electronic prescription has properly arrived at the destination (2203). If it is not the preparation completion notification, it is determined whether or not the return of the received electronic prescription has been received (2204). ).

As a result of the determination of "2204", if it is the return notification, the electronic prescription is switched to a state capable of receiving (2205). If it is not the return notification, it is checked again whether it is abandonment notification (2206).

If the check result of "2206" indicates that the abandonment notification is made, the electronic prescription discharge abandonment state is changed (2207), and if the abandonment notification is not received, it is determined whether it is within a certain effective time from when the electronic prescription exchange exchange system 101 transmits the electronic prescription to the destination. Check (1506), and return to " 2201 " to continuously receive the electronic prescription processing state if within a certain valid time, and maintain the existing electronic prescription state and transmit from another destination if the predetermined valid time is exceeded. Wait for the request

The present invention described above is capable of various substitutions, modifications, and changes without departing from the spirit of the present invention for those skilled in the art to which the present invention pertains, and the above-described embodiments and accompanying It is not limited by the drawings.

The present invention as described above, by using a public key infrastructure (Public Key Infrastructure) technique for the confidentiality, integrity, and sender / receiver authentication of the electronic prescription, to ensure the confidentiality and integrity of the electronic prescription delivered and the electronic prescription It is possible to prevent medical accidents by preventing forgery / falsification, and also has the effect of reducing the preparation waiting time of patients such as reservation preparation by delivering electronic prescriptions promptly.

In addition, the present invention has an effect that can be applied in any medical environment for issuing an electronic prescription to prepare the drug to the patient after the patient's care and to prepare the medicine based on the electronic prescription.

In addition, in the actual medical environment, in addition to the case of designating and transmitting a pharmacy to receive the electronic prescription in the actual medical environment, after transmitting the electronic prescription without specifying a destination, the patient later goes to any pharmacy to prepare a drug, that is, the destination In the case of an electronic prescription that is not specified, the electronic prescription can be transmitted through a patient authentication process, thereby preventing illegal reception of the electronic prescription.

Claims (39)

In the electronic prescription transmission system for transmitting an electronic prescription, Electronic prescription generating means for receiving the prescription details from the sender (ie, the hospital side user) to generate the electronic prescription; After generating a message digest from the generated electronic prescription, a sender digital signature value is generated by a public key algorithm using a sender signature private key in the generated message digest, and a sender certificate is attached to the generated sender digital signature value. And an electronic prescription means for encrypting the generated message digest according to a public key algorithm using a public key for key management of the electronic prescription exchange system; And First electronic prescription transmission means for generating an electronic prescription transmission document consisting of the sender electronic signature value, the sender certificate, and the encrypted message digest and transmitting it to the electronic prescription exchange system; Electronic prescription transmission system comprising a. The method of claim 1, And a sender identity verification means for verifying the identity of the sender. The method of claim 1, The electronic prescription generated by the electronic prescription generating means is encrypted using a document encryption secret key according to a symmetric key algorithm, and the document encryption secret key is disclosed for key management according to whether a destination for the electronic prescription is specified. Electronic prescription encryption means for encrypting according to a public key algorithm using a key; And Second electronic prescription transmission means for including the encrypted electronic prescription and the secret key for encrypting the encrypted document in the electronic prescription transmission document for transmission to the electronic prescription exchange system; Electronic prescription transmission system further comprising. The method of claim 3, wherein The encryption process of the secret key for document encryption of the electronic prescription encryption means, Encrypting using the public key for key management of the destination if the destination is specified in the electronic prescription; encrypting using the public key for key management of the electronic prescription exchange system in the electronic prescription exchange system if the destination is not specified in the electronic prescription. Electronic prescription transmission system characterized in that. The method according to any one of claims 1 to 4, And a patient authentication key issuing means for issuing an authentication key to a patient if a destination is not specified in the electronic prescription. The method of claim 5, The first electronic prescription discharge means, And the electronic prescription transmission document is transmitted to the electronic prescription exchange system regardless of whether a destination for the electronic prescription is specified. In the electronic prescription exchange system for exchanging the electronic prescription, Electronic prescription reception means for receiving the electronic prescription transmission document in accordance with the confirmation of suitability of the electronic prescription transmission document transmitted from the electronic prescription transmission system; Electronic prescription authentication means for authenticating the sender of the electronic prescription by checking the sender's electronic signature value with respect to the received electronic prescription transmission document; Electronic prescription storage means for storing an electronic prescription transmission document authenticated by the electronic prescription authentication means; Electronic prescription management means for managing the electronic prescription transmission document stored in the electronic prescription storage means; The encrypted message digest included in the electronic prescription transmission document is decrypted according to a public key algorithm using a key management private key of the electronic prescription exchange system, and the decrypted message digest is converted into a signature private key of the electronic prescription exchange system. Electronic prescription electronic signature means for generating an electronic signature value of the electronic prescription exchange system using; And If there is a request for transmission of the electronic prescription from the destination, the encrypted message digest is deleted from the electronic prescription transmission document for the destination according to the authentication of the destination, and the electronic signature value and the electronic prescription exchange system certificate of the electronic prescription exchange system are deleted. First electronic prescription delivery means for delivering the electronic prescription delivery document to the destination after generating the electronic prescription delivery document; Electronic prescription exchange system comprising a. The method of claim 7, wherein If the electronic prescription requested to be transmitted from the destination is an electronic prescription with no destination specified, the private key for encrypting the encrypted document included in the electronic prescription transmission document is disclosed using a private key for key management of the electronic prescription exchange system. After decrypting according to a key algorithm; Encryption means for encrypting the decrypted secret key for document encryption again with a public key algorithm using a destination key management public key; And A second electronic device for deleting the encrypted document encryption secret key included in the electronic prescription delivery document generated by the first electronic prescription delivery means and attaching the secret key for document encryption re-encrypted by the encryption means. Prescription delivery means Electronic prescription exchange system further comprising. The method according to claim 7 or 8, The sender electronic signature value verification process of the electronic prescription authentication means, Extracting a sender signature public key from the sender certificate in the electronic prescription transmission document, and using the extracted sender signature public key to decrypt the sender's electronic signature value according to an electronic signature mechanism to generate a message digest; Further, decrypting the encrypted message digest in the electronic prescription transmission document using the private key for key management of the electronic prescription exchange system to generate the message digest; And wherein the two message digests are identical. The method of claim 9, The destination authentication process of the first electronic prescription delivery means, The electronic prescription exchange system, characterized in that for the electronic prescription requested to be transmitted from the destination, the destination is authenticated when the destination is specified, and the destination and the patient are authenticated when the destination of the sender is not specified. The method of claim 9, The electronic prescription storage means, Active storage means for storing the electronic prescription transmission document authenticated by the electronic prescription authentication means for a predetermined validity period; And History storage means for receiving and storing the electronic prescription transmission document exceeding the predetermined validity period from the active storage means; Electronic prescription exchange system comprising a. In the electronic prescription discharge system for receiving an electronic prescription, Electronic prescription receiving means for confirming whether there is an electronic prescription discharged to the electronic prescription exchange system as a destination, and receiving the electronic prescription delivery document for the identified electronic prescription; The electronic signature exchange system is verified by using the received electronic prescription delivery document to verify the sender's electronic signature value, authenticating the integrity of the electronic prescription delivery document and the sender, and verifying the electronic signature value of the electronic prescription exchange system. Electronic prescription authentication means for authenticating the; Electronic prescription analysis means for decrypting the encrypted electronic prescription contained in the electronic prescription delivery document authenticated by the electronic prescription authentication means into plain text; And Electronic prescription output means for outputting the electronic prescription discharge decoded by the electronic prescription discharge means; Electronic prescription receiving system comprising a. The method of claim 12, In the case of receiving the electronic prescription delivery document according to a patient's request, the electronic prescription reception means further comprises a patient information transmission means for receiving the patient information necessary for the patient authentication from the destination, and delivers to the electronic prescription exchange system system. The method according to claim 12 or 13, The electronic signature value verification process of the sender of the electronic prescription authentication means, Decrypting the encrypted secret key included in the received electronic prescription delivery document into a document encryption / decryption secret key according to a public key algorithm using a key management private key of the destination; Decrypting the encrypted electronic prescription contained in the received electronic prescription delivery document by electronic prescription according to a symmetric key algorithm using the decrypted secret key for decrypting the document; After generating a message digest using a hash function before the decrypted electronic prescription, and using the sender signature public key to generate a message digest by using the sender signature public key in the received electronic prescription delivery document, Electronic prescription receiving system, characterized in that both message digests are identical The method of claim 14, The electronic signature value verification process of the electronic prescription exchange system of the electronic prescription authentication means, After generating the message digest according to the electronic signature mechanism by using the electronic signature value of the electronic prescription exchange system in the electronic prescription exchange exchange system in the received electronic prescription delivery document, the hash function for the restored electronic prescription The electronic prescription receiving system, characterized in that checking whether the same as the message digest result. In the electronic prescription transmission method applied to the electronic prescription transmission system, A first step of receiving a prescription from a sender and generating an electronic prescription; After generating a message digest from the generated electronic prescription, a sender digital signature value is generated by a public key algorithm using a sender signature private key in the generated message digest, and a sender certificate is attached to the generated sender digital signature value. And encrypting the generated message digest according to a public key algorithm using a public key for key management of an electronic prescription exchange system; And A third step of generating an electronic prescription transmission document consisting of the sender electronic signature value, the sender certificate, and the encrypted message digest and transmitting to the electronic prescription exchange system; Electronic prescription transmission method comprising a. The method of claim 16, And a fourth step of confirming the identity of the sender. The method of claim 16, The electronic prescription generated in the first step is encrypted using a document encryption secret key according to a symmetric key algorithm, and the document encryption secret key is stored according to whether a destination for the electronic prescription is specified. A fifth step of encrypting according to a public key algorithm; And A sixth step of including the encrypted electronic prescription and the secret key for encrypting the encrypted document in the electronic prescription transmission document for transmission to the electronic prescription exchange system; Electronic prescription transmission method further comprising. The method of claim 18, The encryption process of the secret key for document encryption of the fifth step, Encrypting using the public key for key management of the destination if the destination is specified in the electronic prescription; encrypting using the public key for key management of the electronic prescription exchange system in the electronic prescription exchange system if the destination is not specified in the electronic prescription. An electronic prescription discharge method characterized by the above-mentioned. The method according to any one of claims 16 to 19, And a seventh step of issuing an authentication key to the patient if a destination is not designated before the electronic prescription. The method of claim 20, The transmission of the electronic prescription transmission document of the third step, And transmitting the electronic prescription discharge document to the electronic prescription exchange system regardless of whether a destination for the electronic prescription is specified. In the electronic prescription exchange method applied to the electronic prescription exchange system, A first step of receiving the electronic prescription transmission document in accordance with the confirmation of suitability of the electronic prescription transmission document transmitted from the electronic prescription transmission system; A second step of authenticating the sender of the electronic prescription by checking a sender's electronic signature value with respect to the received electronic prescription transmission document; A third step of storing the electronic prescription transmission document authenticated by the second step and managing the stored electronic prescription transmission document; The encrypted message digest included in the electronic prescription transmission document is decrypted according to a public key algorithm using a key management private key of the electronic prescription exchange system, and the decrypted message digest is converted into a signature private key of the electronic prescription exchange system. A fourth step of generating an electronic signature value of the electronic prescription exchange system; And If there is a request for transmission of the electronic prescription from the destination, the encrypted message digest is deleted from the electronic prescription transmission document for the destination according to the authentication of the destination, and the electronic signature value and the electronic prescription exchange system certificate of the electronic prescription exchange system are deleted. A fifth step of generating an electronic prescription delivery document, and then delivering the electronic prescription delivery document to the destination; Electronic prescription exchange method comprising a. The method of claim 22, If the electronic prescription requested to be transmitted from the destination is an electronic prescription with no destination specified, the private key for encrypting the encrypted document included in the electronic prescription transmission document is disclosed using a private key for key management of the electronic prescription exchange system. A sixth step of decrypting according to a key algorithm; A seventh step of re-encrypting the decrypted secret key for document encryption with a public key algorithm using a key management public key of a destination; And An eighth step of deleting the encrypted document encryption secret key included in the electronic prescription delivery document generated in the fifth step, and attaching the secret key for re-encrypted document encryption in the seventh step. Electronic prescription exchange method further comprising. The method of claim 22 or 23, The sender electronic signature value verification process of the second step, Extracting a sender signature public key from a sender certificate in the electronic prescription transmission document, and using the extracted sender signature public key to decrypt the sender's electronic signature value according to an electronic signature mechanism to generate a message digest; Generating a message digest by decrypting the encrypted message digest in the electronic prescription transmission document using a key management private key of the electronic prescription exchange system; And confirming that both message digests are the same. The method of claim 24, The destination authentication process of the fifth step, The electronic prescription exchange method according to claim 1, wherein, when the destination is designated, the destination is authenticated, and when the destination of the sender is not specified, the destination and the patient are authenticated. The method of claim 24, The storage and management of the electronic prescription transmission document of the third step, And preserving and managing the electronic prescription transmission document authenticated by the second step according to a predetermined expiration date. In the electronic prescription receiving method applied to the electronic prescription receiving system, A first step of confirming whether there is an electronic prescription discharge delivered to the electronic prescription exchange system as a destination, and receiving an electronic prescription delivery document for the identified electronic prescription; The electronic signature value of the sender is verified using the electronic prescription delivery document received in the first step, thereby authenticating the integrity and the sender of the electronic prescription delivery document, and verifying the electronic signature value of the electronic prescription exchange system. A second step of authenticating the electronic prescription exchange system; A third step of decrypting the encrypted electronic prescription of the electronic prescription delivery document authenticated in the second step in plain text; And A fourth step of outputting the electronic prescription discharged in the third step Electronic prescription receiving method comprising a. The method of claim 27, When receiving the electronic prescription delivery document in accordance with the request of the patient, the electronic prescription receiving method further comprises the step of receiving the patient information necessary for the patient authentication from the destination, and forwarded to the electronic prescription exchange system. The method of claim 27 or 28, The digital signature value verification process of the sender of the second step is Decrypting the encrypted secret key included in the received electronic prescription delivery document into a document encryption / decryption secret key according to a public key algorithm using a key management private key of the destination; Decrypting the encrypted electronic prescription contained in the received electronic prescription delivery document by electronic prescription according to a symmetric key algorithm using the decrypted secret key for decrypting the document; Generate a message digest using a hash function before the decrypted electronic prescription; Generating a message digest according to an electronic signature mechanism using the sender signature public key in the received electronic prescription delivery document; And confirming that both message digests are the same. The method of claim 29, The digital signature value verification process of the electronic prescription exchange system of the second step, After generating the message digest according to the electronic signature mechanism by using the electronic signature value of the electronic prescription exchange system in the electronic prescription exchange exchange system in the received electronic prescription delivery document, the hash function for the restored electronic prescription The method of claim 1 characterized in that it is confirmed whether it is the same as the message digest as a result of the application. The method of claim 27 or 28, The decoding process of the third step, Decrypting the encrypted secret key included in the received electronic prescription delivery document into a document encryption / decryption secret key according to a public key algorithm using a key management private key of the destination; And encrypting the encrypted electronic prescription contained in the received electronic prescription delivery document by plain text electronic prescription according to a symmetric key algorithm using the decrypted secret key for decrypting the document. In an electronic prescription transmission system having a processor, A first function of receiving a prescription from a sender and generating an electronic prescription; After generating a message digest from the generated electronic prescription, a sender digital signature value is generated by a public key algorithm using a sender signature private key in the generated message digest, and a sender certificate is attached to the generated sender digital signature value. And encrypting the generated message digest according to a public key algorithm using a public key for key management of an electronic prescription exchange system; And A third function of generating an electronic prescription transmission document consisting of the sender electronic signature value, the sender certificate, and the encrypted message digest and transmitting to the electronic prescription exchange system; A computer-readable recording medium having recorded thereon a program for realizing this. The method of claim 32, A fourth function of verifying the identity of the sender A computer-readable recording medium that records a program for further realization. The method of claim 32, The electronic prescription generated in the first function is encrypted according to a symmetric key algorithm using a secret key for document encryption, and the secret key for document encryption is stored in the key management public key according to whether a destination for the electronic prescription is specified. A fifth function of encrypting according to a public key algorithm using; And A sixth function that includes the encrypted electronic prescription and the secret key for encrypting the encrypted document in the electronic prescription transmission document for transmission to the electronic prescription exchange system; A computer-readable recording medium that records a program for further realization. The method according to any one of claims 32 to 34, wherein A seventh function of issuing an authentication key to a patient if a destination is not designated before the electronic prescription; A computer-readable recording medium that records a program for further realization. In an electronic prescription exchange system having a processor, A first function of receiving the electronic prescription transmission document in accordance with the confirmation of suitability of the electronic prescription transmission document transmitted from the electronic prescription transmission system; A second function of authenticating a sender of the electronic prescription by checking a sender's digital signature value with respect to the received electronic prescription transmission document; A third function of storing the electronic prescription transmission document authenticated by the second function and managing the stored electronic prescription transmission document; The encrypted message digest included in the electronic prescription transmission document is decrypted according to a public key algorithm using a key management private key of the electronic prescription exchange system, and the decrypted message digest is converted into a signature private key of the electronic prescription exchange system. A fourth function of generating an electronic signature value of the electronic prescription exchange system; And If there is a request for transmission of the electronic prescription from the destination, the encrypted message digest is deleted from the electronic prescription transmission document for the destination according to the authentication of the destination, and the electronic signature value and the electronic prescription exchange system certificate of the electronic prescription exchange system are deleted. A fifth function of generating an electronic prescription delivery document and then delivering the electronic prescription delivery document to the destination; A computer-readable recording medium having recorded thereon a program for realizing this. The method of claim 36, If the electronic prescription requested to be transmitted from the destination is an electronic prescription with no destination specified, the private key for encrypting the encrypted document included in the electronic prescription transmission document is disclosed using a private key for key management of the electronic prescription exchange system. A sixth function for decrypting according to a key algorithm; A seventh function of re-encrypting the decrypted secret key for document encryption with a public key algorithm using a destination key management public key; And An eighth function for deleting an encrypted document encryption secret key included in the electronic prescription delivery document generated in the fifth function and attaching a secret key for re-encrypted document encryption in the seventh function; A computer-readable recording medium that records a program for further realization. In an electronic prescription receiving system having a processor, A first function of confirming whether there is an electronic prescription discharged to the electronic prescription exchange system as a destination, and receiving an electronic prescription delivery document for the identified electronic prescription; The electronic signature value of the sender is verified using the electronic prescription delivery document received in the first function, thereby authenticating the integrity and the sender of the electronic prescription delivery document, and also verifying the electronic signature value of the electronic prescription exchange system. A second function of authenticating a switching system; A third function of decrypting an encrypted electronic prescription of the electronic prescription delivery document authenticated in the second function in plain text; And A fourth function of outputting the electronic prescription discharge decoded in the third function A computer-readable recording medium having recorded thereon a program for realizing this. The method of claim 38, A fifth function of receiving patient information necessary for the patient authentication from the destination and delivering the electronic prescription to the electronic prescription exchange system when receiving the electronic prescription delivery document according to a patient's request; A computer-readable recording medium that records a program for further realization.