KR20140127416A - A method for information sharing in medical information systems using smart card authentication - Google Patents

Abstract

The present invention relates to method of sharing information between medical information systems using smart card authentication according to an embodiment. The method comprises the following steps: compressing and converting existing medical image files to perform medical information linkage function via VHBR communication by providing an ubiquitous healthcare card system environment; using RF communication to store and search the medical image information in data in a smart card; managing access through smart card authentication for security of medical information in the smart card; and recording medical information in the smart card. The purpose of the present invention is to provide an environment of sharing information between medical information systems.

Description

Technical Field [0001] The present invention relates to a smart card authentication method and a smart card authentication method,

The present invention relates to a system and method for managing data access of a smart card using mutual authentication keys, preventing exposure of important information, and preventing negative access to medical information generated in an existing medical information system, And to a method and apparatus for performing securely and efficiently the compatibility of generated information with each other in medical information systems.

2. Description of the Related Art In recent years, various types of terminal devices such as smart phones and tablet PCs have emerged, and interest in applications that can be used in such terminal devices is being amplified.

In recent years, various services utilizing such smart cards have been actively performed in various fields, and information sharing using smart cards and smart devices has been utilized in various fields.

In the case of medical information, the information compatibility between the medical care periods is mainly due to the offline compatibility of the CD or DVD recording media due to the specificity of each medical institution and the special nature of personal information protection. It is a reality that the time efficiency during the generation and delivery of the offline recording medium and the reading of the recording medium is reduced.

That is, in the conventional method, in transferring the medical information from the first medical institution to the second medical institution, offline information such as CD or DVD is transmitted and received offline, thereby causing problems in information security and efficiency of reading and writing information And it is a reality that the expenses for such information transmission activities are being spent excessively.

FIG. 1 is a view showing a procedure in which information transfer performed between medical institutions in the conventional manner proceeds.

As shown in FIG. 1, in a procedure in which information transfer is performed between medical institutions in a conventional manner, the first medical institution issues a request for issuing medical information to the patient, and the first medical institution issues an image or image information The patient is transferred offline and requested to the second medical institution for confirmation, and the second medical institution reads the CD or DVD.

However, such an information compatible method has a problem that personal information of a patient can be leaked in case of loss of an offline medium, and the cost of issuing a CD or DVD is also excessive, and the time efficiency for performing such a procedure is reduced would.

In addition, there is a problem that the efficiency of individual health information and care information management provided by various medical institutions is reduced.

In the present invention, smart device, smart card and its authentication technology and Very High Bit Rates (VHBR) are used for patient-centered medical service that meets the needs of the patients and medical staff anytime and anywhere, We propose a u-healthcare card system, which is a method of information interoperability between medical information systems.

An object of the present invention is to provide a VHBR terminal of a first medical institution that compresses or converts a medical image original file to generate a thumbnail of the medical image and stores the generated medical image thumbnail in a smart card, And to provide such a device.

At this time, the second medical institution extracts the medical information stored in the smart card by the procedure of the reverse process, and confirms the medical image original file through the VHBR terminal.

It is still another object of the present invention to provide a VHBR terminal which compresses and converts a medical image file without re-revising a medical image information system such as PACS and a medical record (HER / EMR) The present invention provides an environment providing method and apparatus for performing access management through card authentication and performing information compatibility between medical information systems by recording on a smart card.

According to another aspect of the present invention, there is provided a method for information interoperability between medical information systems using smart card authentication, comprising the steps of: A card system environment includes compressing and converting an existing medical image file to perform medical information interlocking function through VHBR communication; A step of storing the medical image information as data in the smart card and using RF communication for inquiry processing, a step of access management through smart card authentication for securing the medical information in the smart card, And providing the information compatible environment between the medical information systems.

According to an embodiment of the present invention, a VHBR terminal of a first medical institution compresses or converts a medical image original file to generate a thumbnail of the medical image, and stores the generated medical image thumbnail in a smart card, How to perform information compatibility, and the weight of each medical facility managed and provided by providing the device. It is possible to interlink the individual's health information such as blood sugar and blood pressure with the medical care information, so that the efficiency of the integrated management of the medical care information can be reviewed.

In addition, it is possible to protect information from leakage of medical personal information caused by loss of offline media using existing offline media through information compatibility between medical information systems through smart card authentication.

In addition, the u-Healthcare card system utilizing the present invention can increase the convenience of the patient through the banking system, the credit card company, the transportation card provider, and the payment service in addition to the medical system. , Pharmacies, mobile health vehicles, emergency centers, and health check-up centers can be provided with real-time medical consultation services. In addition, it is possible to reevaluate the effectiveness of the medical system and to promote medical services and medical information industry have.

FIG. 1 is a view showing a procedure in which information transfer performed between medical institutions in the conventional manner proceeds.
2 is an example of a construction of an information network through information compatibility among all medical information systems using the u-healthcare system proposed in the present invention.
3 is a diagram schematically showing a configuration of an entire system including a method and an apparatus for information inter-medical information systems using smart card authentication according to an embodiment of the present invention.
4 is a view showing a detailed configuration of a server device including a method and an apparatus for information inter-medical information system using smart card authentication according to an embodiment of the present invention
5 is a view showing a detailed configuration of a u-healthcare apparatus for information compatibility between medical information systems using smart card authentication according to an embodiment of the present invention
FIG. 6 is a diagram illustrating a process of recording medical care medical information records to a smart card for information compatibility between medical information systems using smart card authentication according to an embodiment of the present invention.
FIG. 7 is a view illustrating a process for browsing a medical care medical information record from a smart card of a patient for medical information recording for information compatibility between medical information systems using smart card authentication according to an embodiment of the present invention.
FIG. 8 is a diagram illustrating a method of information interoperability between medical information systems and a device processing process using smart card authentication according to an embodiment of the present invention.
FIG. 9 is a diagram illustrating a server apparatus process including a method and an apparatus for information inter-medical information system using smart card authentication according to an embodiment of the present invention.
FIG. 10 is a detailed configuration diagram of a function-specific device of a u-healthcare apparatus according to an embodiment of the present invention.
FIG. 11 is a view showing a detailed configuration of a VHBR terminal device among functional configurations according to functions of a u-healthcare device according to an embodiment of the present invention.
FIG. 12 is a view showing the detailed configuration of an RF communication interface device among detailed functional configurations of a u-healthcare device according to an embodiment of the present invention.
13 is a view showing the detailed functions of the smart card among the functional configurations of the functions of the u-healthcare apparatus according to the embodiment of the present invention.
FIG. 14 is a diagram showing a data structure of a smart card among functional configurations of functions of a u-healthcare apparatus according to an embodiment of the present invention.

The following merely illustrates the principles of the invention. Thus, those skilled in the art will be able to devise various apparatuses which, although not explicitly described or shown herein, embody the principles of the invention and are included in the concept and scope of the invention. Furthermore, all of the conditional terms and embodiments listed herein are, in principle, intended only for the purpose of enabling understanding of the concepts of the present invention, and are not intended to be limiting in any way to the specifically listed embodiments and conditions .

It is also to be understood that the detailed description, as well as the principles, aspects and embodiments of the invention, as well as specific embodiments thereof, are intended to cover structural and functional equivalents thereof. It is also to be understood that such equivalents include all elements contemplated to perform the same function irrespective of the currently known equivalents as well as the equivalents to be developed in the future, i.e., the structure.

Thus, for example, the detailed configuration of the present disclosure should be understood to represent a conceptual view of an exemplary circuit embodying the principles of the invention. Similarly, all flowcharts, state transition diagrams, pseudo code, and the like are representative of various processes that may be substantially represented on a computer-readable medium and executed by a computer or processor, whether or not the computer or processor is explicitly shown .

The functions of the various elements shown in the figures, including the functional blocks depicted in the processor or similar concept, may be provided by use of dedicated hardware as well as hardware capable of executing software in connection with appropriate software. When provided by a processor, the functions may be provided by a single dedicated processor, a single shared processor, or a plurality of individual processors, some of which may be shared.

Also, the explicit use of terms such as processor, control, or similar concepts should not be interpreted exclusively as hardware capable of running software, and may be used without limitation as a digital signal processor (DSP) (ROM), random access memory (RAM), and non-volatile memory. Other hardware may also be included.

In the claims hereof, the elements represented as means for performing the functions described in the detailed description include all types of software including, for example, a combination of circuit elements performing the function or firmware / microcode etc. , And is coupled with appropriate circuitry to execute the software to perform the function. It is to be understood that the invention defined by the appended claims is not to be construed as encompassing any means capable of providing such functionality, as the functions provided by the various listed means are combined and combined with the manner in which the claims require .

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features and advantages of the present invention will become more apparent from the following detailed description of the present invention when taken in conjunction with the accompanying drawings, in which: There will be. In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail.

Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a view showing a procedure in which information transfer performed between medical institutions in the conventional manner proceeds.

As shown in FIG. 1, the procedure of transferring information performed between medical institutions in a conventional manner is a procedure in which a first medical institution issues a medical image information system (PACS) and a medical information recording system (HER, EMR), publishes image or image information to CD or DVD according to each method, and the patient transfers it offline and requests confirmation from the second medical institution, and the second medical institution issues a CD or DVD It is done by way of reading.

However, such an information compatible method has a problem that personal information of a patient can be leaked in case of loss of an offline medium, and the cost of issuing a CD or DVD is also excessive, and the time efficiency for performing such a procedure is reduced would.

In addition, there is a problem that the efficiency of individual health information and care information management provided by various medical institutions is reduced.

2 is an example of a construction of an information network through information compatibility among all medical information systems using the u-healthcare system proposed in the present invention.

As shown in FIG. 2, u-healthcare system and u-healthcare smart card can efficiently acquire medical information of a patient not only in a medical institution network but also in an individual medical institution network, thereby improving medical examination cost and personal protection efficiency.

In FIG. 2, Picture Archiving and Communication System (PACS) is a medical image information system, which is a system for managing and transmitting various medical tomography images and digital images. An electronic health record (EHR) Electronic medical record (EMR) is an electronic medical record system that refers to a system for electronically managing patient medical records.

3 is a diagram schematically showing a configuration of an entire system including a method and an apparatus for information inter-medical information systems using smart card authentication according to an embodiment of the present invention.

The configuration of the entire system including the information compatibility method and apparatus using the smart card authentication includes a medical treatment terminal 100 that receives information from the existing medical information system and manages the original image of the medical image, A u-healthcare card system 300 for managing the creation and storage of medical images, a u-healthcare server 200 for controlling and managing the series of processes to generate, collect and manage control information and security information related to transactions, .

4 is a view showing a detailed configuration of a server device including a method and an apparatus for information inter-medical information system using smart card authentication according to an embodiment of the present invention

The information interoperability method and the server apparatus 200 using the smart card authentication according to the embodiment of the present invention include a transceiver 22 for relaying communication related to the presence or absence of a state of a recording process, An authentication confirmation unit 23 for confirming whether the access management through the smart card authentication is normal or not; A record storage confirmation unit 24 for confirming whether recording of the smart card has been normally performed; And a control unit 21 associated therewith.

5 is a diagram illustrating a detailed configuration of a u-healthcare apparatus 300 for information compatibility between medical information systems using smart card authentication according to an embodiment of the present invention

The detailed configuration of the u-healthcare device 300 for information compatibility between the medical information systems using the smart card authentication according to the embodiment of the present invention includes a transmission / reception unit 32 for carrying out transaction-related control communication with the u- healthcare server, A conversion unit 33 that performs a function of compressing and converting a medical image file through the VHBR terminal device, an RF communication unit 34 that performs RF communication for smart card recording, authentication that performs authentication management through a smart card And a recording unit 36 for recording video information and the like on the smart card.

FIG. 6 is a diagram illustrating a process of recording medical care medical information records to a smart card for information compatibility between medical information systems using smart card authentication according to an embodiment of the present invention.

The medical staffs request medical identification from the u-healthcare system through authentication to the smart card through the identification request, and the medical information is recorded on the smart card through the request of the medical information recording. In this case, the u-healthcare system manages the data access of the smart card using the mutual authentication key of the medical staff through the smart card authentication, and prevents the exposure of important information and the negative access.

FIG. 7 is a view illustrating a process for browsing a medical care medical information record from a smart card of a patient for medical information recording for information compatibility between medical information systems using smart card authentication according to an embodiment of the present invention.

The patient submits the PIN value for identification and receives a request for medical record reading when the identity verification is granted through the PIN authentication from the u-healthcare system to the smart card. At this time, .

At this time, the patient's PIN is submitted and the mutual authentication is performed, so that the medical information of the user can be safely browsed, and the process of protecting the personal medical information against the loss of the smart card is also possible.

FIG. 8 is a diagram illustrating a method of information interoperability between medical information systems and a device processing process using smart card authentication according to an embodiment of the present invention.

The information interoperability method and apparatus processing process using the smart card authentication according to the embodiment of the present invention receives a message from the medical information system (S1100), and if the message is a medical information storage request (S1150) (S1200).

When mutual authentication is confirmed in the mutual authentication request (S1250), the medical information is stored in the u-healthcare smart card (S1300). When the mutual authentication is confirmed (S1350), the storage record is transmitted to the medical information system and server (1400).

If mutual authentication fails in the step of confirming the mutual authentication on one side (S1280), the error occurrence information is transmitted to the medical information system and the server (S1400)

If the message is received from the medical information system (S1100) and the medical information is not requested to be stored (S1190), the smart card controller requests the PIN authentication (S1500). If the PIN authentication is confirmed (S1510) (S1600).

When the PIN authentication and the smart card mutual authentication are confirmed (S1610), the smart card information is browsed (S1800) and the processing result is transmitted to the medical information system and the server (1400)

PIN authentication request process (S1500) If the PIN authentication is not confirmed (S1550), the PIN authentication is re-requested to the medical information system (S1700) and the matters relating to the PIN authentication error are transmitted to the medical information system and the server (S1400)

If the mutual authentication of the smart card is unsuccessful (S1620), error information on the mutual authentication of the smart card is transmitted to the medical information system and the server (S1400), and the medical information system Message.

If the message is not a medical information storage request (S1180) or a medical information browse request message (S1195), the process returns to the process of re-receiving the medical information system message (S1100).

FIG. 9 is a diagram illustrating a server apparatus process including a method and an apparatus for information inter-medical information system using smart card authentication according to an embodiment of the present invention.

The server device process including the information interoperability method and apparatus using the smart card authentication according to the embodiment of the present invention receives the message from the U-healthcare processing device (S2100) and transmits the medical information recording related message (S2150) The medical information recording state and the processing result are stored (S2200) and the processing result is transmitted to the U-Healthcare apparatus (S2400).

(S2100). If it is not a medical information recording related message (S2180), and if it is a medical information browsing related processing message, the medical information browsing related recording state and processing result are stored (S2300) The result is transmitted to the U-Healthcare apparatus (S2400).

If the message is not a medical information recording related message (S2180), but is not a medical information browsing related processing message (S2195), the U-Healthcare device returns to the U-Healthcare device message reception state ( S2100).

FIG. 10 is a detailed configuration diagram of a function-specific device of a u-healthcare apparatus according to an embodiment of the present invention.

The function-specific device detailed configuration of the u-healthcare device according to the embodiment of the present invention

VHBR terminal, RF communication module and u-healthcare smart card. VHBR terminal has the function to link medical information, health record, and medical record with existing medical information system and performs compression conversion of medical information image do. The RF communication module is responsible for RF communication between the smart card and the VHBR terminal.

The u-healthcare smart card also stores medical information, health records, and medical records.

FIG. 11 is a view showing a detailed configuration of a VHBR terminal device among functional configurations according to functions of a u-healthcare device according to an embodiment of the present invention.

11 is a detailed configuration of the VHBR terminal device among the functional configurations of the u-healthcare device according to the embodiment of the present invention. As shown in the figure, the detailed functions of the VHBR terminal include image file processing, health record processing, Function of data interlocking to perform, medical certificate authentication, security authentication processing in charge of patient authentication function, image file storage, health record storage, card storage function for function record storage function, image file retrieval, health record retrieval, A smart card processing module that handles APDU creation and APDU sending and receiving functions, a security authentication module that handles encryption and authentication functions, a terminal control and a communication function And a terminal module in charge.

FIG. 12 is a view showing the detailed configuration of an RF communication interface device among detailed functional configurations of a u-healthcare device according to an embodiment of the present invention.

As shown in FIG. 12, among the functional configurations of the u-healthcare device according to the embodiment of the present invention, the RF communication interface device includes an RF interface for performing RF card control, data communication, a VHBR control, a VHBR Module, I / O communication control, and I / O interface function to perform SPI interface function.

13 is a view showing the detailed functions of the smart card among the functional configurations of the functions of the u-healthcare apparatus according to the embodiment of the present invention.

As shown in FIG. 13, among the functional configurations of the u-healthcare device according to the embodiment of the present invention, the smart card has a file system for storing medical image information and medical record using a contactless card It has a file system control function that performs memory control, security authentication processing, access authority management, data storage, data inquiry, and the interface function that performs RF interface, VHBR communication, data transmission and reception, data backup function, An information file, a health information file, a disease information file, a medical image file, and a health record file.

FIG. 14 is a diagram showing a data structure of a smart card among functional configurations of functions of a u-healthcare apparatus according to an embodiment of the present invention.

As shown in FIG. 14, the data structure of the smart card among the function-specific device configurations of the u-healthcare device according to the embodiment of the present invention includes a health information directory including medical information, health information and disease information, medical images, and medical record information It consists of a master file that contains the matching medical information directory and contains authentication key information and PIN information.

The method for providing an application development environment according to the present invention may be stored in a computer-readable recording medium. The computer-readable recording medium may be a ROM, a RAM, a CD- ROM, a magnetic tape, a floppy disk, an optical data storage device, and the like, and may also be implemented in the form of a carrier wave (for example, transmission over the Internet).

The computer readable recording medium may be distributed over a networked computer system so that computer readable code can be stored and executed in a distributed manner. And, functional programs, codes and code segments for implementing the above method can be easily inferred by programmers of the technical field to which the present invention belongs.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It should be understood that various modifications may be made by those skilled in the art without departing from the spirit and scope of the present invention.

Claims (7)

The U-healthcare card system environment includes a step of compressing and converting an existing medical image file to perform a medical information interlocking function through VHBR communication as an information compatible method between medical information systems using smart card authentication; A step of storing the medical image information as data in the smart card and using RF communication for inquiry processing, a step of access management through smart card authentication for securing the medical information in the smart card, The method comprising the steps of;
The method according to claim 1,
The ubiquitous healthcare (u-healthcare) card system compresses or converts a medical image original file received from a first medical institution to generate a thumbnail of the medical image and stores the generated medical image thumbnail in a smart card, And providing an environment for performing information compatibility between systems.
The method according to claim 1,
The ubiquitous healthcare (u-healthcare) card system is an environment providing method that the second medical institution extracts the medical information stored in the smart card by the procedure of the reverse process and performs a function of checking the original image of the medical image
The method according to claim 1,
Ubiquitous healthcare (u-healthcare) card system is composed of VHBR terminal function, RF communication function, u-healthcare smart card function, and VHBR terminal is a function to link medical information, health record and medical record with existing medical information system The RF communication module is responsible for RF communication between the smart card and the VHBR terminal. The u-healthcare smart card plays a role of storing medical information, health record, and medical record. Providing an environment.
The method according to claim 1,
Ubiquitous healthcare (u-healthcare) card system is a non-contact (contactless) card with a detailed function of the card to store medical image information and medical records for the file system for memory control, security authentication processing, Management function, data storage, data retrieval, etc., RF interface, VHBR communication, interface function to perform data transmission / reception, data backup function, security authentication file, personal information file, health information file, disease information file , A medical image file, a health record file, etc.
In claim 1,
Ubiquitous healthcare (u-healthcare) card system provides RF communication interface function, RF card control, RF interface function to perform data communication, VHBR control, VHBR module to perform VHBR communication, I / O communication control, SPI Interface And performing an I / O interface function performing a function.
In claim 1,
Ubiquitous healthcare (u-healthcare) card system is composed of VHBR terminal function, data interlock function that performs image file processing, health record processing, medical record processing, medical certificate authentication, security authentication processing for patient authentication function, Card reading function, communication function, data parsing, medical information interlocking function, APDU creation, etc., which is responsible for storing a file, storing a health record, storing a card for function of storing a medical record, A smart card processing module that is responsible for transmitting and receiving APDUs, a security authentication module that performs encryption and authentication functions, a terminal control method, and an environment providing method for providing communication functions.

Images