KR20130094457A - A system for management of a personal medical information and for authentication of medical insurance based nfc - Google Patents

Abstract

PURPOSE: A system for managing personal medical information and authenticating medical insurance using an NFC chip is provided to store and manage personal medical information in a universal subscriber identity module (USIM) chip, communicate with a medical terminal through NFC and apply encoding algorithm for safely storing, managing, transmitting and receiving personal medical information and medical insurance information. CONSTITUTION: A medical information managing application is installed at a USIM chip mounted at a personal mobile terminal. A NFC chip inside the personal mobile terminal communicates with an NFC reading device connected to a medical management system. The USIM chip and the NFC chip deliver the personal medical information and the medical insurance information through single wire protocol (SWP). The NFC chip delivers the personal medical information and the medical insurance information received from the USIM chip to the NFC reader. The personal medical information and the medical insurance information are encoded and decoded by RSA encoding and decoding algorithm prior to being delivered.

Description

Near field communication-based personal medical information management and medical insurance certification system {A SYSTEM FOR MANAGEMENT OF A PERSONAL MEDICAL INFORMATION AND FOR AUTHENTICATION OF MEDICAL INSURANCE BASED NFC}

The present invention is a method for performing personal medical information management and medical insurance authentication using a mobile device equipped with an NFC chip, more specifically, the technology for managing the personal medical information after recording the personal information in the NFC chip, and NFC is mounted The present invention relates to a method for an authentication protocol that can perform authentication more securely by applying an encryption algorithm in transmitting and receiving personal medical insurance information by performing communication with another terminal.

The current medical insurance card is a paper card, which is easy to damage and has a lot of difficulties in maintenance and management. In addition, the amount of damage that is transferred and loaned and used illegally is increasing, and the national financial damage is greatly increased. In order to remedy this problem, the introduction of electronic health insurance in the form of a credit card has been in progress for many years, but it is easily pointed out that there is no reason to introduce this system even though it has put a lot of budget such as huge introduction cost and annual operating cost. It is true that it is not lost.

Thus, various mechanisms are being developed that can be used without enormous budget. One of the most representative and buzzwords is the use of USIM in mobile devices owned by individuals. USIM combines the role of a subscriber identity module (SIM) with subscriber information and the functionality of a universal IC card (UICC), which was initially used for simple purposes such as user authentication, global roaming, and e-commerce. Currently, it is also used in various financial fields such as credit cards and transportation cards. In addition, with the expansion of the current smartphone market, the USIM-based memory structure has evolved significantly. It also includes all the security features expected to be used when using advanced cryptographic algorithms such as ECC, RSA, and AES. It is also possible to mount an applet that can store and manage medical information in such a USIM, and many technical developments have been made.

Near Field Communication (NFC) hasn't seen much light for nearly 10 years, but as Google began supporting Android 2.3 Gingerbread, it has recently become a key keyword in the mobile market, and it has attracted worldwide attention. This is a short-range wireless communication method that exchanges data directly between terminals without using a communication network, which is a kind of RFID. Like a smart card, it can be called RFID using a frequency of 13.56 MHz band. However, unlike a smart card that communicates only in one direction, it has a crucial difference and advantage that communication can be performed in both directions. Unlike a smart card that only serves as a tag that stores and transmits specific information to the reader, NFC can serve as a reader / writer that reads or writes information of a tag as well as a tag as needed. It is also possible to exchange P2P (Point to Point) information between the terminals. NFC developed based on RFID technology has a significant advantage compared to other methods such as Bluetooth (Bluetooth), Zigbee (Zigbee) used for short-range communication. In addition, compared to other short-range wireless technologies, NFC operates only within a distance of 10 cm. This feature is a fatal disadvantage when used as a sole means of communication, but when combined with high-speed communication means such as 3G, Wi-Fi, it is a great advantage. Because of the limitation of communication distance of 10cm, it is almost necessary to face each other. In this process, the terminal to which the user wants to connect is naturally identified. There is no need to select a connection target on the terminal screen, and after the connection, the information can be delivered only to the desired terminal through encrypted communication. In other words, NFC can not communicate itself beyond 10Cm, so if the user pays attention, it can fundamentally block the possibility of hacking, this technology can satisfy the opposite properties of security and convenience.

The present invention has been proposed to solve the above problems of the conventionally proposed methods, the object of which is to store and manage personal medical information in a physically secure USIM chip, and to communicate with the medical terminal through NFC do. In this case, an encryption algorithm is applied to securely store, manage, and transmit and receive personal medical information and medical insurance information.

Method of NFC-based personal medical information management and medical insurance authentication system, according to a feature of the present invention for achieving the above object,

(1) mounting a medical information management application in a USIM chip mounted on a personal mobile terminal;

(2) communicating the NFC chip in the personal mobile terminal and the NFC reader connected with the medical management system;

(3) the USIM chip and the NFC chip transferring personal medical and insurance information through a single wire protocol (SWP) protocol;

(4) the NFC chip transferring personal medical and insurance information received from the USIM chip to the NFC reader;

(5) encrypting and decrypting with a high performance RSA encryption algorithm prior to delivering personal medical and insurance information;

As shown in Fig.

Preferably, in step (1), it is assumed that the medical information management application is correctly loaded in the USIM.

Preferably, in step (2), both the USIM and the NFC chip are mounted in the personal mobile terminal, and the NFC reader is connected to the medical information authentication center.

More preferably, in the step (3), the USIM chip and the NFC chip communicate with the NFC chip through the C6 contact of the USIM chip which is physically and electrically connected to the outside of the chip through the eight contacts in using the SWP protocol. do.

According to the NFC-based personal medical information management and medical insurance authentication system of the present invention, by storing and managing personal medical information in a physically secure USIM chip, primarily because of the characteristics of the USIM, it is impossible to forge and duplicate to secure safety. Can be. In addition, since information is transmitted by encrypting with RSA algorithm, which is a high-performance encryption algorithm, even if information is exposed, it is not easy to infer and verify, but it is possible to communicate at a distance of 10 cm, which is the biggest advantage of NFC chip. For example, the source of information can be blocked. Thus, the combination of the two advantages of USIM and NFC allows for convenient and secure transfer of personal medical and insurance information to and from the reader. Therefore, safety and ease of use can be guaranteed at the same time.

1 is a diagram showing the configuration and concept of a proposal system.
2 is a USIM file system design diagram.
3 is a detailed step of installing a personal medical information management and medical insurance certification application, and the personal information generated in conjunction with the random number generated by the public of the Medical Center to encrypt and transmit, decrypted with his private key in the Medical Center A diagram showing a step of registering medical information.
4 is a diagram illustrating a step of authenticating personal medical information and insurance information.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram showing the configuration of the entire system of the present invention. It consists of the structure of USIM and NFC Chip to be installed in the product, and the Medical Center AuC to authenticate and verify the information stored in USIM through NFC Reader and NFC Reader. At this time, there is an applet to perform personal information authentication in USIM, which is transmitted through C6 contact of NFC chip to secure double security. In addition, the USIM is designed to have a file system that will store and manage various types of information.

2 is a view for explaining the file system of the USIM Chip of the USIM and NFC that is the center of the present invention. Important personal and medical information is stored in the corresponding USIM Chip file system. The method of storing information in the USIM includes a method of directly writing to Applet and a method of storing and managing through the File System. In the present invention, personal information and medical information is stored in the USIM file system for safe and stable storage and management. Designed to manage. The file system is designed according to the ISO 7816-4 standard, and is organized into sub-layers based on the highest MF.

-MEDICALEXAM_INFO =

{HospitalName, HexaMDate, Prescription, Unusual}

PATIENT_INFO =

{PName, PSex, PbirthDate, PMid}

You can safely store the above information. In addition, the present invention not only stores information in a physically secure USIM chip, but also has a double physical safety device as an interface with the NFC chip, thereby ensuring higher safety.

3 is a detailed step of installing a personal medical information management and medical insurance certification application in the USIM, and with the random number that generated the personal information, encrypted and transmitted to the public of the Medical Center, decrypted with his private key in the Medical Center In this case, as described above, the NFC chip exists as an interface between the USIM chip and the NFC reader, and serves to relay data transmitted / received. In addition, AuC, a certification center of the Medical Center, decrypts the data read from the reader and verifies the subject's eligibility. Or AuC generates its own random number R _MC, and concatenating the individual information corresponding to the random number R _MC and medical subjects and basic information PATIENT_INFO retransmission encrypted with his public. Finally, this message is structured to be stored in the USIM Chip file system.

4 is a diagram illustrating a step of authenticating personal medical information and insurance information. After the first medical information management and authentication applet is installed, the medical certification information is used to authenticate and utilize the information of the medical subjects that are actually stored and managed in the AuC. This step begins in response to a series of actions of the NFC chip and the NFC reader in the medical institution. The signaled NFC chipr and the USIM also communicate with each other, and the USIM communicates with the patient name P _NAME of the medical applet stored in its file system. P _MID , which is the patient's medical ID, is obtained, its own random number R _UM is generated, the two values are concatenated, and encrypted by AuC's public key. NFC chip transmits the encrypted value to AuC as it is. AuC decrypts with its own private key and checks it in the server's account. Acquire the subject's medical insurance number that matches the sent value, create their own random number R _MC , concatenate the two values, encrypt them with their private key, and send them to the HOST of the medical institution. The HOST of the medical institution decrypts with the public key of the AuC, and then confirms the medical insurance number, so that the medical institution is authenticated as a subject of medical insurance. Next, after the medical treatment of the medical institution is performed, the step of storing the information about the USIM and AuC is performed. This step allows future medical information to be managed accurately and securely, allowing medical institutions to share medical information, promote better practice, and prevent financial damage from unnecessary medical and examination procedures. Specifically, this step adds and stores the information necessary for USIM and AuC for prescriptions issued by the HOST of the medical institution. First, the information sent to the USIM is designed so that only the occurrence of medical treatment can be easily identified. Important and detailed information is stored in the AuC, so it is stored and managed twice. If necessary, the information can be obtained from the AuC through authentication on the HOST of the medical institution. That is, simple information such as the name of the hospital H _HNAME , the _date H _HEXAMDATE and the prescription serial number H _HPSN , are included. On the other hand, AuC is designed so that it can be stored additionally also H _UNUSUAL for recording specific information and the call-specific information with the details of H _{HPRESCRIPTION} prescription and medical person with the information stored in the USIM. This process is also repeatedly added and updated for each occurrence of medical practice. As described above, the stored information can be shared by all medical institutions, and the information can be provided to the practice of treatment. In addition, the inconvenience of having to perform the duplication or copying of the photographs in the inspection accompanied by various photographs Can be eliminated. In addition, the present invention is based on the NFC chip, so that it can be stored and managed more easily and efficiently.

RUM: Random number generated from USIM Chip
UNM: username
UPNB: User Personal Phone Number
USNB: Serial number of USIM
RMC: Random number generated by Host of Medical Center
PNAME: Name of the subject of medical insurance
PSEX: Gender
PBIRTHDATE: Date of Birth
PMID: Personal Care Number

Claims (1)

As NFC-based personal medical information management and medical insurance certification system,
(1) mounting a medical information management application in a USIM chip mounted on a personal mobile terminal;
(2) communicating the NFC chip in the personal mobile terminal and the NFC reader connected with the medical management system;
(3) the USIM chip and the NFC chip transferring personal medical and insurance information through a single wire protocol (SWP) protocol;
(4) the NFC chip transferring personal medical and insurance information received from the USIM chip to the NFC reader;
(5) encrypting and decrypting with a high performance RSA encryption algorithm prior to delivering personal medical and insurance information;
Personal medical information management and medical insurance authentication method comprising a.

Images