KR20200067596A - Medical Information Management System Using Block-chain - Google Patents

Abstract

The present invention relates to a medical information management system using a blockchain. More particularly, the present invention relates to a medical information management system using a blockchain, which guarantees the authenticity of provided medical information using a blockchain network and safely provides identified medical information while preventing forgery and alteration.

Description

Medical Information Management System Using Block-chain}

The present invention relates to a medical information management system using a blockchain, and more specifically, to secure the authenticity of medical information provided using a blockchain network, and to safely provide the identified medical information while preventing forgery and alteration. It relates to a medical information management system using a blockchain.

As people's interest in healthcare increases, interest and demand for medical IT services such as medical data platforms are increasing. Accordingly, related companies are continuing to study to strengthen data and patient privacy.

However, medical information hacking accidents are frequently occurring, and personal information issues are occurring. In addition, the anxiety of users who use medical IT services is amplifying, and as the number of users of related services increases, the size of medical information leaked out during hacking is also increasing.

In addition, personal medical information can be used in various ways not only in medical services, but also in insurance and healthcare services. Therefore, the need for more accurate and falsified personal medical information has increased, but there is no means to prevent and verify forgery.

In addition, medical institutions, insurance companies, and healthcare companies can create added value by sharing a large number of medical information, but security problems may occur in the process of delivering medical information, and in order to provide medical services to specific individuals Personal information needs to be identified, but since medical information containing personal information corresponds to highly sensitive information, it is difficult for medical information containing personal information to be traded.

Therefore, each medical institution, insurance company, and healthcare company can share or transmit medical information stably while improving security, guaranteeing the authenticity of the original data, and preventing users from leaking medical information due to hacking. We need a platform that can be used.

Korean Registered Patent 10-1763827 (Blockchain-based medical data transmission system, method and program, registered on July 6, 2017) Korean Registered Patent 10-1881045 (Blockchain based medical information providing system and method, 2018.7.17 registration)

An object of the present invention is to provide a medical information management system using a blockchain capable of safely providing identified medical information while guaranteeing the authenticity of medical information provided using a blockchain network and preventing forgery and alteration.

In order to solve the above problems, an embodiment of the present invention is a medical information management system including a medical information providing terminal and the management server capable of accessing a blockchain network, wherein the medical information providing terminal is intended to be transmitted. A hash value extraction unit for extracting a hash value for medical information; A blockchain registration unit that registers information including the hash value as a transaction in a connected blockchain network; And a medical information transmission unit transmitting the medical information to the management server, wherein the management server comprises: a medical information receiving unit receiving the medical information from the medical information providing terminal; A non-identifying medical information providing unit providing non-identifying medical information in which sensitive information is de-identified in the medical information to the medical information requesting terminal; And an identification medical information providing unit that provides identification medical information including sensitive information in the medical information to the medical information requesting terminal.

In one embodiment of the present invention, the medical information transmission unit may transmit identification information of the medical information, block information of a blockchain network in which a hash value of the medical information is recorded, and the medical information to the management server. .

In one embodiment of the present invention, the non-identifying medical information providing unit, receiving a non-identifying medical information request for the medical information from the medical information request terminal; Deriving a hash value of the corresponding medical information received and stored from the medical information providing terminal, and verifying whether the derived hash value matches the hash value recorded in the blockchain network for the medical information; Extracting sensitive information for the medical information and masking the sensitive information; And transmitting the masked medical information to the medical information requesting terminal.

In one embodiment of the present invention, the identification medical information providing unit, receiving an identification medical information request for the medical information from the medical information request terminal; Requesting consent to the medical information providing terminal that provided the medical information; Receiving consent from the medical information providing terminal that provided the medical information; Deriving a hash value of the corresponding medical information received and stored from the medical information providing terminal, and verifying whether the derived hash value matches the hash value recorded in the blockchain network for the medical information; And transmitting the medical information to the medical information requesting terminal.

In one embodiment of the present invention, the management server further includes a reward management unit, the reward management unit, when receiving medical information from the medical information providing terminal and sensitive information from the identification medical information providing unit from the medical information providing terminal When receiving consent to provide medical information, including, a reward point may be assigned to the account of the medical information providing terminal.

According to an embodiment of the present invention, a medical information management system using a blockchain capable of safely providing identified medical information while guaranteeing authenticity of medical information provided using a blockchain network and preventing forgery and alteration is provided. can do.

According to an embodiment of the present invention, by verifying whether the forgery of the medical information received from the management server, it is possible to exert the effect of providing more accurate medical information.

According to an embodiment of the present invention, upon request, it can exert an effect of providing medical information including sensitive information such as personal information or providing non-identified medical information about sensitive information such as personal information. Can be.

According to one embodiment of the present invention, because the medical information providing side provides an incentive for consent to provide medical information including personal information, etc., as well as an incentive for providing medical information, the management server has more It can exert the effect of collecting medical information.

According to an embodiment of the present invention, it is possible to exert the effect of more reliably verifying the authenticity of the medical information itself and the details of the medical information transaction using the blockchain network.

1 shows the overall configuration of a medical information management system according to an embodiment of the present invention.
Figure 2 schematically shows the internal configuration of a medical information providing terminal according to an embodiment of the present invention.
3 schematically shows the data details of a block of a blockchain network according to an embodiment of the present invention.
4 schematically shows a configuration of a management server according to an embodiment of the present invention.
5 schematically shows steps performed in the non-identifying medical information providing unit according to an embodiment of the present invention.
Figure 6 schematically shows the steps of the identification medical information providing unit according to an embodiment of the present invention.
7 schematically shows data details of a block of a blockchain network according to an embodiment of the present invention.
8 exemplarily shows an internal configuration of a computing device according to an embodiment of the present invention.

In the following, various embodiments and/or aspects are now disclosed with reference to the drawings. In the following description, for purposes of explanation, a number of specific details are disclosed to aid the overall understanding of one or more aspects. However, it will also be appreciated by those skilled in the art that this aspect(s) can be practiced without these specific details. The following description and the annexed drawings set forth in detail certain illustrative aspects of the one or more aspects. However, these aspects are exemplary and some of the various methods in the principles of the various aspects may be used, and the descriptions described are intended to include all such aspects and their equivalents.

In addition, various aspects and features will be presented by a system that may include multiple devices, components and/or modules, and the like. The various systems may also include additional devices, components and/or modules, and/or may not include all of the devices, components, modules, etc. discussed in connection with the drawings. It must be understood and recognized.

As used herein, "an embodiment", "yes", "a good", "an example", etc. may not be construed as any aspect or design described being better or more advantageous than the other aspect or designs. . The terms'~unit','component','module','system', and'interface' used in the following generally mean a computer-related entity, for example, hardware, hardware And software, can mean software.

Also, the terms “comprises” and/or “comprising” mean that the feature and/or component is present, but excludes the presence or addition of one or more other features, elements, and/or groups thereof. It should be understood as not.

Further, terms including ordinal numbers such as first and second may be used to describe various components, but the components are not limited by the terms. The terms are used only for the purpose of distinguishing one component from other components. For example, the first component may be referred to as a second component without departing from the scope of the present invention, and similarly, the second component may be referred to as a first component. The term and/or includes a combination of a plurality of related described items or any one of a plurality of related described items.

In addition, in the embodiments of the present invention, unless defined otherwise, all terms used herein, including technical or scientific terms, are generally understood by those skilled in the art to which the present invention pertains. It has the same meaning as that. Terms, such as those defined in a commonly used dictionary, should be interpreted as having meanings consistent with meanings in the context of related technologies, and are ideally or excessively formal meanings unless explicitly defined in the embodiments of the present invention. Is not interpreted as

1 shows the overall configuration of a medical information management system according to an embodiment of the present invention.

The medical information management system of the present invention includes a blockchain network, a medical information providing terminal 1000 that can access the blockchain network, a management server 2000 receiving medical information from the medical information providing terminal 1000, and And a medical information request terminal 3000 receiving medical information from the management server 2000.

The medical information providing terminal 1000 is a computing device capable of communicating with an individual patient, such as a smart phone, a desktop, and a medical device, or a server, desktop, or smart phone of a medical institution or a company managing medical data. It may correspond to a computing device.

The medical information providing terminal 1000 is attached to the patient's body to directly sense bio-information and the like from the patient, and may generate medical information based on the sensed information, or the medical information providing terminal 1000 It may correspond to a form in which medical information such as a patient's chart is collected and stored.

Medical information transmitted/received from the medical information management system includes medical image information, prescription information, medical chart information, medical history information, medical appointment information, routine medical information, genetic information, blood information, epidemiological analysis information, preemptive medical information, and specific diseases. It may include one or more of tracking information and biometric information collected from a medical sensing terminal.

The medical information may include information on the patient or the individual as well as information on the medical itself as described above. For example, personal information of one or more of a name, a resident registration number, a telephone number, and an address to identify the patient may be included in the medical information.

Meanwhile, the medical information request terminal 3000 corresponds to a computing device of an institution that can perform analysis, service provision, etc. by using personal medical information of a medical institution, an insurance company, or a health care service company, which is a desktop. , A smart phone, a server, or the like, and a computing device including one or more processors and one or more memories.

Preferably, communication and data transmission and reception between the medical information providing terminal 1000, the management server 2000, and the medical information requesting terminal 3000 is for implementing a medical information management system according to an embodiment of the present invention. It is preferably performed by each dedicated application.

In the present invention, both the medical information providing terminal 1000, the management server 2000, and the medical information requesting terminal 3000 can access the blockchain network. The blockchain network is preferably a public blockchain network, and according to the present invention, data related to the contents of medical information, transmission history, etc. can be recorded, and later used for verification and verification of the medical information.

The blockchain network may correspond to a dedicated blockchain network for implementing the medical information management system according to the present invention, or may be a blockchain network implemented for other purposes. In the case of a blockchain network implemented for other purposes, for example, in the case of a blockchain network implemented for the purpose of cryptocurrency, it performs the transaction for a very small amount of cryptocurrency in the residual data field. It can be implemented by recording data according to the object of the present invention.

Figure 2 schematically shows the internal configuration of the medical information providing terminal 1000 according to an embodiment of the present invention.

The medical information providing terminal 1000 may correspond to a computing device as described above, and in some cases, may include a biometric information sensor capable of obtaining user's body information or may be connected to the biometric information sensor.

The medical information providing terminal 1000 is an application for executing the medical information management system of the present invention is executed, within the application, a hash value extracting unit 1100 for extracting a hash value for the medical information to be transmitted; A blockchain registration unit 1200 for registering information including the hash value as a transaction in a connected blockchain network; A medical information transmission unit 1300 transmitting the medical information to the management server 2000; And a sensitive information consent unit performing notification and response on consent when providing medical information including sensitive information such as personal information to the management server 2000 to other medical information request terminal 3000, which will be described later. 1400).

The hash value extracting unit 1100 extracts a hash value for medical information to be transmitted from the medical provision terminal to the management server 2000. For example, when the medical information to be transmitted is data including chart information for the patient (information related to the medical care itself) and information about the patient, the hash value extracting unit 1100 may transmit the medical information to be transmitted. The hash value for the entire information is extracted.

The blockchain registration unit 1200 registers information including the hash value as a transaction in the connected blockchain network. Specifically, the blockchain registration unit 1200 records the identifier of the medical information to be transmitted and the hash value for the medical information extracted by the hash value extraction unit 1100 as a transaction in a block of the blockchain network. FIG. 3 shows an example of this.

The medical information transmission unit 1300 transmits the medical information to the management server 2000. Specifically, the medical information transmission unit 1300 transmits identification information of the medical information, block information of a blockchain network in which a hash value of the medical information is recorded, and the medical information to the management server 2000. .

Preferably, the medical information includes not only medical information pertaining to the individual or a patient group including two or more individuals, but also personal information that may correspond to sensitive information to the individual. In the present invention, after transmitting the form including the sensitive telegram such as personal information to the management server 2000 from the medical information providing terminal 1000, the management server 2000 for the information When requested, the masking may be provided or the original information may be provided without masking with consent from the medical information providing terminal 1000.

When the sensitive information consent unit 1400 provides medical information including sensitive information such as personal information, which will be described later, to the management server 2000 to another medical information request terminal 3000, a notification and response to consent are given. To perform.

In the present invention, medical information in the form of sensitive information such as personal information is transmitted to the management server 2000. That is, the original medical information itself is provided to the management server 2000 without processing, and afterwards, the management server 2000 basically performs de-identification, and then transmits it to the medical information request terminal 3000 do. However, the medical information request terminal 3000 may make a request for the original itself to the management server 2000, and in this case, the management server 2000 may transmit the medical information to the medical information providing terminal 1000. Request for consent to the provision of original data, and the sensitive information consent unit 1400 performs notification to the management server 2000 about the interaction and results with the user.

Preferably, the sensitive information consent unit 1400, if the medical information providing terminal 1000 agrees to the medical information, the purpose of consent, the time of consent, and the identifier for the medical information in the block Record in the block of the chain network.

3 schematically shows the data details of a block of a blockchain network according to an embodiment of the present invention.

The details shown in FIG. 3 are screens performed by the blockchain registration unit 1200 immediately before the medical information transmission unit 1300 transmits medical information, and an identifier for the medical information and a medical information hash in the transaction item The value is stored.

On the other hand, in one embodiment of the present invention, in the sensitive information consent unit 1400, the consent history may be recorded in a transaction of a block of the blockchain network. Specifically, the purpose of consent, the time of consent and the identifier for the medical information can be recorded in the transaction of the block, and more preferably, in addition to the information, the identifier of the medical information request terminal 3000 that requested the information May be recorded.

4 schematically shows a configuration of a management server 2000 according to an embodiment of the present invention.

The management server 2000 receives the medical information from the medical information providing terminal 1000, performs management thereof, and provides a function of providing medical information according to a request received from the medical information requesting terminal 3000 Perform.

The management server 2000, the medical information receiving unit 2100 for receiving the medical information from the medical information providing terminal 1000; A non-identifying medical information providing unit 2200 providing non-identifying medical information in which sensitive information is de-identified in the medical information to the medical information requesting terminal 3000; An identification medical information provider 2300 providing identification medical information including sensitive information in the medical information to the medical information requesting terminal 3000; And when receiving medical information from the medical information providing terminal 1000 and when receiving consent to provide medical information including sensitive information of the identification medical information providing unit 2300 from the medical information providing terminal 1000. In addition, it includes a reward management unit 2400 for granting a reward point for the account of the medical information providing terminal 1000.

The medical information receiving unit 2100 receives the medical information from the medical information providing terminal 1000.

The medical information is original medical information received from the medical information providing terminal 1000, which may or may not include sensitive information such as personal information and specific medical history (for example, psychiatric medical history). It may not.

The medical information receiving unit 2100 stores the received medical information in a database unit (not shown) of the management server 2000. Meanwhile, the database unit (not shown) may include a security module for data security.

The non-identifying medical information providing unit 2200 provides non-identifying medical information in which sensitive information is de-identified in the medical information to the medical information requesting terminal 3000. This will be described later with reference to FIG. 5.

The identification medical information providing unit 2300 provides the identification medical information that can also be sensitive information in the medical information to the medical information request terminal 3000. This will be described later with reference to FIG. 6.

The reward management unit 2400 manages rewards or points for the user account of the medical information providing terminal 1000 and the user account of the medical information requesting terminal 3000 connected to the management server 2000.

In the present invention, in order to secure more medical information, a reward is provided for an account of a terminal providing medical information. In addition, in order to obtain consent to transmit medical information that can be identified, additional rewards are provided for the account of the terminal that provided the medical information.

Specifically, the reward management unit 2400 receives medical information from the medical information providing terminal 1000 and medical information including sensitive information from the identification medical information providing unit 2300 from the medical information providing terminal 1000. When receiving consent to provide information, reward points are given to the account of the medical information providing terminal 1000.

On the other hand, on the contrary, when receiving a medical information request from the medical information request terminal 3000 and providing medical information accordingly, a point of the medical information request terminal 3000 is deducted. In addition, in relation to the subtraction of medical points, a relatively larger point is provided when medical information is provided by the identification medical information providing unit 2300 than when the medical information is provided by the non-identifying medical information providing unit 2200. It is desirable to be subtracted.

Figure 5 schematically shows the steps performed by the non-identifying medical information providing unit 2200 according to an embodiment of the present invention.

The non-identifying medical information providing unit 2200, receiving a non-identifying medical information request for the medical information from the medical information request terminal (3000) (S10); Deriving a hash value of the medical information received and stored from the medical information providing terminal 1000, and verifying whether the derived hash value matches the hash value recorded in the blockchain network for the medical information (S11). ; Extracting sensitive information about the medical information and performing masking on the sensitive information (S12); And transmitting the masked medical information to the medical information request terminal 3000 (S13).

In step S11, when the medical information to be provided to the medical information request terminal 3000 is transmitted by the first medical information providing terminal 1000, information and consistency are verified. After the medical information is stored in the management server 2000 by the above-described procedure, it is possible to exert an effect of preventing forgery or transmission of the false medical information.

In step S12, personal information or sensitive medical history (image information, medical history for a specific sensitive disease, etc.) is parsed for the original medical information to be transmitted, and masking processing is performed to de-identify information detected by parsing. To perform. If the parsed sensitive information is text information, a part or all of it is replaced with a non-identifying character such as “****”. When the parsed sensitive information is image information, scrimble or blur for some or all Processing is performed.

In this way, the management server 2000 selectively provides medical information to the request of the medical information request terminal 3000 for the received medical information while keeping all the medical information including sensitive information such as personal information. can do.

6 schematically illustrates steps performed by the identification medical information providing unit 2300 according to an embodiment of the present invention.

The identification medical information providing unit 2300 comprises: receiving an identification medical information request for the medical information from the medical information request terminal 3000 (S20); Requesting consent to the medical information providing terminal 1000 that provided the medical information (S21); Receiving consent from the medical information providing terminal 1000 that provided the medical information (S22); Deriving a hash value of the corresponding medical information received and stored from the medical information providing terminal 1000, and verifying whether the derived hash value matches the hash value recorded in the blockchain network for the medical information (S23). ; Transmitting the medical information to the medical information request terminal 3000 (S24); Recording the consent reception history and medical information transmission history in the blockchain network (S25); And granting a reward for the account of the medical information providing terminal 1000 that has performed the consent (S26).

In steps S21 to S22, it is a step of requesting the medical information providing terminal 1000 to agree on whether or not to transmit identification medical information that may include sensitive information, and receiving a response thereto.

The management server 2000 basically stores original medical information, and basically provides unidentified medical information. However, in some cases, when an insurance company, a medical institution, a healthcare service company, etc. needs medical information including personal information, it may make a request to the management server 2000.

In this case, the management server 2000 does not request medical information including personal information from the medical information providing terminal 1000 again, but receives medical information including personal information from the beginning, and provides medical information about it. After requesting the consent for providing the medical information request terminal 3000 with respect to the original medical information containing personal information to the terminal 1000, and after receiving the consent, after undergoing the original verification process as in step S23, As in S24, medical information is transmitted.

In the process of the present invention, for example, in order to find a patient to be targeted at a specific medical institution, for example, firstly possible non-identifying medical information is received for the entire patient group, among which services such as medical treatment or management After extracting de-identified medical information that requires (patient management at the public institution level), if identifying medical information is needed for the de-identified medical information, identifying medical information including identification information for the medical information Request to provide information (original medical information).

Thereafter, the management server 2000 queries the concerned parties for a consent request, and provides identification medical information (original medical information) to the medical information request terminal 3000 only when a response to the consent is received.

Preferably, in the step S21, the information related to the medical information request terminal 3000 that performed the request for the identification medical information, for example, information including the name of the institution and the use of the medical information is the medical information providing terminal ( 1000). Thereby, the user or administrator of the corresponding medical information providing terminal 1000 can check for what purpose the request came from which institution and perform a response accordingly.

In step S25, the agreement and medical information transmission history are recorded in the blockchain network. This is to prevent a user who consents to providing identification medical information later from denying the consent to provide the medical information. Similarly, by leaving the medical information transmission history so that the institution that received the medical information does not abuse the information, the institution of the medical information request terminal 3000 is to be used only within the scope of the purpose of notifying the medical information.

7 schematically shows data details of a block of a blockchain network according to an embodiment of the present invention.

FIG. 7 shows the block history of the blockchain network recorded in step S25 of FIG. 6. As shown in FIG. 7, after receiving the consent of the provider, when the medical information is transmitted to the corresponding medical information requesting terminal 3000, the identifier of the medical information and the point of consent of the medical information providing terminal 1000 , The identifier of the medical information request terminal 3000 and the purpose of use when the medical information request terminal 3000 obtains consent is recorded in a block of the blockchain network, thereby preventing further denial.

In a preferred embodiment of the present invention, in step S25, the identifier for the medical information, the time of consent in the medical information providing terminal 1000, the identifier of the medical information request terminal 3000, and the medical information request terminal 3000 agree A hash value is derived for data including the purpose of use that was notified at the time of requesting, and an identifier for transmission of the hash value and corresponding identification medical information is recorded in the blockchain network.

Thereafter, the management server 2000, in S25, the identifier for the medical information, the time of consent in the medical information providing terminal 1000, the identifier of the medical information request terminal 3000, the medical information request terminal 3000 agrees The data including the purpose of use that was notified when obtaining the data, a hash value for the data, and an identifier for transmitting the identified medical information are transmitted to the medical information requesting terminal 3000 and the medical information providing terminal 1000, and It is stored in the management server 2000.

Through such a procedure, it is possible to effectively prevent mutual non-repudiation of the details while keeping the details of the delivery of medical information including sensitive information private.

8 exemplarily shows an internal configuration of a computing device according to an embodiment of the present invention. The management server according to FIG. 4 may include one or more modules of the computing device shown in FIG. 8.

As illustrated in FIG. 8, the computing device 11000 includes at least one processor 11100, a memory 11200, a peripheral interface 11300, and an input/output subsystem ( I/Osubsystem) 11400, a power circuit 11500, and a communication circuit 11600. At this time, the computing device 11000 may correspond to the user terminal A connected to the tactile interface device or the computing device B described above.

The memory 11200 may include, for example, high-speed random access memory, magnetic disk, SRAM, DRAM, ROM, flash memory, or non-volatile memory. have. The memory 11200 may include software modules, instruction sets, or other various data necessary for the operation of the computing device 11000.

At this time, access to the memory 11200 from other components such as the processor 11100 or the peripheral interface 11300 may be controlled by the processor 11100. The processor 11100 may be configured in a single or plural form, and may include a processor in the form of a GPU and a TPU to improve the processing speed.

The peripheral interface 11300 may couple input and/or output peripherals of the computing device 11000 to the processor 11100 and the memory 11200. The processor 11100 may execute various functions for the computing device 11000 and process data by executing a software module or a set of instructions stored in the memory 11200.

The input/output subsystem 11400 can couple various input/output peripherals to the peripheral interface 11300. For example, the input/output subsystem 11400 may include a controller for coupling a peripheral device such as a monitor or keyboard, mouse, printer or a touch screen or sensor to the peripheral interface 11300 as required. According to another aspect, the input/output peripherals may be coupled to the peripheral interface 11300 without going through the input/output subsystem 11400.

The power circuit 11500 may supply power to all or part of the components of the terminal. For example, the power circuit 11500 may include a power management system, one or more power sources such as a battery or alternating current (AC), a charging system, a power failure detection circuit, a power converter or inverter, a power status indicator, or power. It can include any other components for creation, management, and distribution.

The communication circuit 11600 may enable communication with other computing devices using at least one external port.

Alternatively, as described above, if necessary, the communication circuit 11600 may enable communication with other computing devices by transmitting and receiving an RF signal, also known as an electromagnetic signal, including an RF circuit.

The embodiment of FIG. 8 is only an example of the computing device 11000, and the computing device 11000 may omit some components illustrated in FIG. 8, or further include additional components not illustrated in FIG. 8, or 2 It may have a configuration or arrangement that combines more than one component. For example, a computing device for a communication terminal in a mobile environment may further include a touch screen or a sensor, etc. in addition to the components illustrated in FIG. 8, and various communication methods (WiFi, 3G, LTE) in the communication circuit 1160. , Bluetooth, NFC, Zigbee, etc.) may include a circuit for RF communication. Components that may be included in the computing device 11000 may be implemented by hardware, software, or a combination of both hardware and software including integrated circuits specialized for one or more signal processing or applications.

Methods according to embodiments of the present invention may be implemented in a form of program instructions that can be executed through various computing devices and may be recorded in a computer-readable medium. In particular, the program according to the present embodiment may be configured as a PC-based program or an application dedicated to a mobile terminal. The application to which the present invention is applied may be installed on a user terminal through a file provided by a file distribution system. As an example, the file distribution system may include a file transmission unit (not shown) that transmits the file according to a request of the user terminal.

The device described above may be implemented with hardware components, software components, and/or combinations of hardware components and software components. For example, the devices and components described in the embodiments include, for example, processors, controllers, arithmetic logic units (ALUs), digital signal processors (micro signal processors), microcomputers, field programmable gate arrays (FPGAs). , A programmable logic unit (PLU), microprocessor, or any other device capable of executing and responding to instructions, may be implemented using one or more general purpose computers or special purpose computers. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. In addition, the processing device may access, store, manipulate, process, and generate data in response to the execution of the software. For convenience of understanding, a processing device may be described as one being used, but a person having ordinary skill in the art, the processing device may include a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that may include. For example, the processing device may include a plurality of processors or a processor and a controller. In addition, other processing configurations, such as parallel processors, are possible.

The software may include a computer program, code, instruction, or a combination of one or more of these, and configure the processing device to operate as desired, or process independently or collectively You can command the device. Software and/or data may be interpreted by a processing device or to provide instructions or data to a processing device, of any type of machine, component, physical device, virtual equipment, computer storage medium or device. , Or may be permanently or temporarily embodied in the transmitted signal wave. The software may be distributed on a networked computing device and stored or executed in a distributed manner. Software and data may be stored in one or more computer-readable recording media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded on a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, or the like alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiments or may be known and usable by those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs, DVDs, and magnetic media such as floptical disks. -Hardware devices specifically configured to store and execute program instructions such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of program instructions include high-level language codes that can be executed by a computer using an interpreter, etc., as well as machine language codes produced by a compiler. The hardware device described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

As described above, although the embodiments have been described by a limited embodiment and drawings, those skilled in the art can make various modifications and variations from the above description. For example, the described techniques are performed in a different order than the described method, and/or the components of the described system, structure, device, circuit, etc. are combined or combined in a different form from the described method, or other components Alternatively, even if replaced or substituted by equivalents, appropriate results can be achieved.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

Claims (5)

As a medical information management system including a medical information providing terminal and the management server that can access the blockchain network,
The medical information providing terminal,
A hash value extraction unit for extracting a hash value for the medical information to be transmitted;
A blockchain registration unit that registers information including the hash value as a transaction in a connected blockchain network; And
Includes; medical information transmission unit for transmitting the medical information to the management server,
The management server,
A medical information receiving unit receiving the medical information from the medical information providing terminal;
A non-identifying medical information providing unit providing non-identifying medical information in which sensitive information is de-identified in the medical information to the medical information requesting terminal; And
Medical information management system comprising a; identification medical information providing unit for providing the medical information to the medical information request terminal containing sensitive information in the medical information.
The method according to claim 1,
The medical information transmission unit,
A medical information management system that transmits identification information of the medical information, block information of a blockchain network in which a hash value of the medical information is recorded, and the medical information to the management server.
The method according to claim 1,
The non-identifying medical information providing unit,
Receiving a non-identifying medical information request for the medical information from the medical information request terminal;
Deriving a hash value of the corresponding medical information received and stored from the medical information providing terminal, and verifying whether the derived hash value matches the hash value recorded in the blockchain network for the medical information;
Extracting sensitive information for the medical information and masking the sensitive information; And
And transmitting the masked medical information to the medical information requesting terminal.
The method according to claim 1,
The identification medical information providing unit,
Receiving an identification medical information request for the medical information from the medical information request terminal;
Requesting consent to the medical information providing terminal that provided the medical information;
Receiving consent from the medical information providing terminal that provided the medical information;
Deriving a hash value of the corresponding medical information received and stored from the medical information providing terminal, and verifying whether the derived hash value matches the hash value recorded in the blockchain network for the medical information;
Transmitting the medical information to the medical information request terminal; including, medical information management system.
The method according to claim 1,
The management server further includes a reward management unit,
The reward management unit,
When receiving medical information from the medical information providing terminal and receiving consent from the medical information providing terminal to provide medical information including sensitive information of the identification medical information providing unit, for the account of the medical information providing terminal Medical information management system that gives reward points.

Images