KR20220073558A - Solution for having intergrity, reliability and accuracy to assumed data employing blockchain - Google Patents

Abstract

The embodiment relates to a solution for securing the accuracy, reliability, and integrity of pseudonymized data using a blockchain used in a blockchain-based medical my data non-face-to-face platform system.
Specifically, this solution integrates a large number of different medical information for each individual by a blockchain-based medical my data non-face-to-face platform (app) in which individuals directly manage and control their medical information under consent to provide personal information. It collects and generates medical my data through corresponding text mining and encryption.
And, in this case, the blockchain-based medical my data non-face-to-face platform manages medical my data by dividing it into medical metadata (medical record) and medical data files, and only uses the medical metadata when using its own medical information. is processed and provided, and each history is managed based on the block chain.
In particular, in this case, there is a weakness that an individual can be identified only by the heuristic pseudonymization method, so after heuristic pseudonymization, a k-anonymity model is applied to perform pseudonymization (non-identification) adequacy evaluation. do.
Accordingly, when an individual receives medical services through this, the individual manages his or her medical information directly by independently managing and controlling his or her medical information from the blockchain-based medical my data non-face-to-face platform according to an embodiment.
In addition, in the case of medical data in particular in this case, it is possible to stably transmit and manage medical data to the outside by solving the weakness that an individual can be identified only by the heuristic pseudonymization method and providing appropriateness for pseudonymization processing.

Description

Solution for having intergrity, reliability and accuracy to assumed data employing blockchain}

The content disclosed in this specification relates to the field of technology for managing personal medical information, and more specifically, when personal medical information is managed, by independently managing and controlling personal medical information based on a block chain, This is a technology that directly manages medical information.

Unless otherwise indicated herein, the material described in this section is not prior art to the claims of this application, and inclusion in this section is not an admission that it is prior art.

Recently, through medical information transaction service, information and communication technology is used to improve patient health status and diagnosis, and medical information transaction service has been developed in line with rising medical expenses, an aging population, public policies for cost reduction, and customer-oriented trends. demand for it is increasing.

Therefore, the medical information transaction service health management system may bring about a change in the method of providing medical services.

In this regard, the related industry believes that if patients' personal medical information is properly used based on security, it can reduce social costs and solve emergency situations that have not been properly dealt with because patient medical information has not been shared among medical institutions. .

However, as shown in the My Data verification service project in 2019, various new services using personal information are being promoted, but how do individuals manage their information?

It is stated that there are no plans for the authority and practical means to control.

In addition, if we look at the verification service task, it is not discovered by consumers (individuals), but companies.

It can be seen that the approach was taken from a new business model dimension in hospitals and hospitals.

The prior art literature in this background is to the extent that the following patent documents appear.

(Patent Document 0001) KR1020200100412 A

(Patent Document 0002) KR102111141 Y1

For reference, the technology of Patent Document 1 relates to a medical information management system using a block chain, and it is a technology that safely shares medical information between a patient and a hospital for non-profit purposes.

And, the technology of Patent Document 2 relates to a medical data service system based on a block chain, effectively protecting key information for decrypting medical data encrypted with block chain, and ensuring that access information of medical data is recorded so that doctors, etc. Identify and manage the access history of medical data from the relevant side of the hospital.

The disclosed contents are, first of all, when an individual receives medical services, he/she manages and controls his or her medical information independently from a specific blockchain-based non-face-to-face platform, thereby allowing individuals to directly manage medical information. We want to provide a data non-face-to-face platform system.

The solution for securing the accuracy, reliability, and integrity of pseudonymized data using the blockchain used in the blockchain-based medical my data non-face-to-face platform system according to the embodiment,

Under the consent of non-face-to-face personal information provision, a number of different medical information for each individual is collected and integrated by a blockchain-based medical my data non-face-to-face platform (app) that allows individuals to directly manage and control their own medical information. Medical My Data is generated through corresponding text mining and encryption.

And, in this case, the blockchain-based medical my data non-face-to-face platform manages medical my data by dividing it into medical metadata (medical records) and medical data files, and only uses the medical metadata when using its own medical information. is processed and provided, and each history is managed based on the block chain.

In particular, in the case of medical data in this case, there is a weakness that an individual can be identified only by the heuristic pseudonymization method. characterized by performing

Specifically, these solutions are:

A blockchain-based medical my data non-face-to-face platform (app) in which individuals directly manage and control their own medical information under consent to provide personal information in a non-face-to-face manner, a number of different medical information processed under a pseudonym for each individual collect medical data, generate medical my data through corresponding text mining and encryption, manage it by dividing it into medical metadata (medical record) and medical data file, and process only the medical metadata when using one's own medical information a user terminal that provides and manages each history based on a block chain;

a hospital information processing device that pseudonymizes and provides each individual's medical information with the blockchain-based medical my data non-face-to-face platform; and

a medical data demanding information processing device that is provided and utilized as medical metadata processed under a pseudonym of each individual from the blockchain-based medical my data non-face-to-face platform; contains,

The medical my data non-face-to-face platform,

a-1) When an individual receives medical information service, he/she consents to the provision of medical my data to the pre-registered medical information exchange system and consents to the provision of personal information in a non-face-to-face manner;

b-1) Record the personal information provision consent history information based on block chain;

c-1) When an individual receives medical treatment, receiving his/her medical information from the medical information exchange system in a pseudonymized state;

d-1) The received medical information is generated as medical my data by corresponding text mining and encryption,

e-1) The generated medical my data is dualized into medical metadata and medical data file, and the medical data file is pseudonymized and encrypted;

f-1) The medical metadata is registered in the blockchain, the medical data file is registered in the storage, and the data is managed separately,

g-1) By registering the history of the medical metadata in the block chain, the medical information service is performed.

And, the medical my data non-face-to-face platform,

a-2) When using the medical my data in relation to the medical information service, receiving a request for medical my data from the pre-registered medical data demanding information processing device;

b-2) Record the history information about the requesting company of the medical my data in the block chain;

c-2) extracting, analyzing, and processing medical metadata from the block chain;

d-2) The processed medical metadata is provided to the medical data demanding information processing device of the corresponding requesting company.

In particular, in this case, the pseudonymization is

a) As a preset first step, when personal medical information is transmitted to the outside, heuristic pseudonymization is applied to replace multiple values corresponding to identifiers in the corresponding medical data according to a preset rule, thereby pseudonymizing first ,

b) In the second preset step, in the case of pseudonymization, k-1 records in which all records in the corresponding medical data set are identical (indistinguishable) according to the preset k-anonymity model By having, review the possibility of re-identification,

c) In the third preset step, when the possibility of re-identification is reviewed, the corresponding k-anonymity, which is an index for examining anonymity, is compared with a preset reference value, and the anonymity is higher than the reference value. to verify compliance; is characterized by

According to the embodiments, when an individual receives medical service, the individual manages and controls his or her medical information independently from the blockchain-based medical my data non-face-to-face platform according to an embodiment, thereby allowing the individual to directly manage medical information do.

And, in the case of such a block chain, the security of medical my data is strengthened by applying the block chain HyperLedger Fabric-based technology, and data reliability and transparency are secured by pseudonymization and encryption.

In addition, when individuals independently manage medical information, non-face-to-face user convenience services (electronic prescription and certificate issuance service, insurance one-stop service) are provided by this blockchain-based medical my data non-face-to-face platform. .

In addition, in the case of medical data, by solving the weakness of being able to identify individuals only with the heuristic pseudonymization method, and providing appropriateness for pseudonymization, medical data is stably transmitted to the outside and managed.

Through this, furthermore, when providing data, the platform secures reliability, such as providing guarantees for mutual trust issues, and promotes safe transaction of medical my data.

In addition, by managing personal medical records with blockchain, unnecessary costs are reduced and rational resolution is promoted in case of medical disputes.

1 is a diagram for conceptually explaining a blockchain-based medical my data non-face-to-face platform system according to an embodiment
2 is a diagram showing the entire blockchain-based medical my data non-face-to-face platform system according to an embodiment;
3 is a block diagram showing the configuration of a blockchain-based medical my data non-face-to-face platform system according to an embodiment
4 is a flow chart sequentially illustrating the operation of the blockchain-based medical my data non-face-to-face platform system according to an embodiment.
5A and 5B are diagrams for explaining a medical information service applied to a blockchain-based medical my data non-face-to-face platform system according to an embodiment;
6 is a diagram for explaining the verification service, which is one of the user convenience services applied to the blockchain-based medical my data non-face-to-face platform system according to an embodiment;
7A and 7B are diagrams for explaining an electronic prescription service, which is another one of user convenience services applied to a blockchain-based medical my data non-face-to-face platform system according to an embodiment;
8 is a diagram for explaining an insurance one-stop service applied to a blockchain-based medical my data non-face-to-face platform system according to an embodiment;
9A and 9B are diagrams for explaining a comprehensive health checkup service applied to a blockchain-based medical my data non-face-to-face platform system according to an embodiment;
10A and 10B are diagrams for explaining an image data service as another form of a comprehensive health checkup service applied to a blockchain-based medical my data non-face-to-face platform system according to an embodiment;

1 is a diagram for conceptually explaining a blockchain-based medical my data non-face-to-face platform system according to an embodiment.

As shown in Figure 1, the system of one embodiment, when an individual is provided with medical services, by autonomously managing and controlling his or her own medical information from the blockchain-based medical my data non-face-to-face platform according to an embodiment, Allow individuals to directly manage medical information.

And, in this case, the system according to an embodiment strengthens the safety of medical my data by applying the blockchain HyperLedger Fabric-based technology, and also performs pseudonymization and encryption to ensure data reliability and transparency.

In this case, the blockchain-based medical my data non-face-to-face platform is installed in the user terminal 100 provided by each individual, for example, a smartphone.

In addition, this system provides non-face-to-face user convenience services (electronic prescription and certificate issuance service, insurance one-stop service) through this blockchain-based medical my data non-face-to-face platform when individuals independently manage medical information. provides

In addition, the system provides high-quality data to pharmaceutical companies, research institutes, and big data-related institutions that are (medical) data consumers by this blockchain-based medical my data non-face-to-face platform, and users who provide medical my data You will be provided with a digital voucher.

And, in the case of image data, the system processes personal information under pseudonymization, classifies it in the medical image data center, and adds information that meets the demand and provides it.

1) Service contents

- The service of this platform consists of three main parts.

- First, the data as a whole is pseudonymized and used by data users.

* Data type: ‘Medical record summary of the medical information exchange system’ + ‘Comprehensive health checkup data’ +

‘Electronic prescription data’ + ‘medical image data’

- When selecting data users, a review committee is formed and strict and strict qualification standards are established.

Establish a system that examines and verifies demanding institutions under the

① Medical information service: Only users who have consented to the use of medical my data receive, for example, pseudonymized personal information and medical data from the hospital’s medical information exchange server.

It is provided to research institutes or pharmaceutical companies through encryption, my data, and metadata stages. and,

Data utilization revenue is shared with users (rewarded with digital vouchers).

② User convenience service: This is a service to improve the convenience of users.

Issuance / electronic prescription / insurance one-stop service is provided non-face-to-face.

However, in case of electronic prescription, it is provided to research institutes or pharmaceutical companies. Data usage revenue

Share with users (rewarded with digital vouchers).

③ Comprehensive health checkup service: Comprehensive health checkup data or image data is transferred to research institutes and pharmaceuticals

provided by companies. Data utilization revenue is shared with users (rewarded with digital vouchers).

2) Where to use the data

① My Data Owner: Medical My Data (data from the medical information exchange system and electronic

After providing prescription and comprehensive health checkup data), you will receive a digital voucher benefit. Also, users

Convenience services (certification, electronic prescription, insurance one-stop service) are provided non-face-to-face.

In the future, it is possible to use the data to obtain information about one's health status and predicted probability of various diseases through medical treatment information and receive services such as prevention methods accordingly.

② Public institutions, local governments: In case of crisis situations such as medical administration/welfare demand forecasting, Corona

It is used to establish response policies.

③ Pharmaceutical company (research institute): Acquire and use data such as actual drug development quantification and disease quantification, as well as for research purposes, through the medical information data of the owner of medical my data.

- In the case of pharmaceutical companies, they have little experience in developing new drugs, so the big data they collect

not enough. Currently, there are many restrictions on the commercial use of medical data.

Data is being used abroad

④ Startups and SMEs: Healthcare, AI medical data and image data are required

used by companies that

- Other wearable device development (IoT-based medical customized management program),

It can be used for genome analysis project promotion (predicting diseases with high probability of occurrence in the future, recommending suitable hospital medical staff), biopharmaceutical and high-performance medical device development business and demand forecasting, health consulting, and silver industry.

3) Scenario

[Consent to provide medical data and procedures for collection]

①Visit to hospital and sign up for service (application)

- Download the application and sign up for membership

② Submit an electronic document with prior consent and electronic signature

- Submission list: consent form, power of attorney, copy of patient ID

* Consent and Power of Attorney: Electronic document format including app-based electronic signature

* A copy of patient ID: photographed and scanned with a smartphone

③ Submit the patient’s submitted documents and the representative’s electronic certification documents online

- Submission list: Documents submitted by the patient, proof of proxy

* Documents submitted by the patient (consent form, power of attorney, copy of patient ID)

* Proof of agent: A copy of the corporation's business registration certificate and a copy of the employee's ID

④ Provide copies of medical records and prescriptions (hospital → platform company)

*　Collected medical my data: medical record summary sheet, prescription (using a copy of the prescription issued)

<Items to be collected in the summary of medical records>

① Diagnosis details: diagnosis date, name of disease (KCD English, Korean is optional), disease code (KCD), diagnosis KOSTOM code set (optional)

② Drug prescription details: prescription date and time, prescription drug name, prescription drug code, main ingredient name, active ingredient code, dose, dosage unit, number of times, administration period, usage

③ Inspection Result: Inspection Type Division, Inspection Date, Inspection Item Name (EDI), Inspection Name, Inspection Code, Inspection Result Value, PACS Accession Number, Web PACS Basic URL Path

④ Biosignals and status: measurement date, height, weight, blood pressure (diastolic/systolic), body temperature, heart rate

⑤ Provide a copy of comprehensive health checkup (user → platform company)

- After the user uploads the results of the comprehensive health checkup received by paper or e-mail to the platform, it is used by character recognition (OCR)

[Medical Data Utilization Procedure]

⑥ Medical My Data Request: Request medical my data from the customer

(ex - Hanmi Pharm, 50s, liver disease, living in Busan, within the last 3 years)

⑦,⑧ Consent to data owner to use data by customer. After consent, the consumer is provided with pseudonymized medical data through the non-face-to-face platform service for My Data.

⑨ As a benefit for data utilization, 90% of the total amount used is rewarded with a digital voucher

- Notification of information provision and benefits

In particular, since this non-face-to-face platform system has a weakness that an individual can be identified only by the heuristic pseudonymization method in the case of medical data, the pseudonymization (non-identification) adequacy evaluation is performed after the heuristic pseudonymization.

In this case, the re-identification adequacy is reviewed by applying k-anonymity, which is a basic model for privacy protection, in the evaluation of the adequacy of pseudonymization.

In addition, pseudonymization refers to processing in a 'form that cannot identify a specific individual' while removing the connection with the related individual by replacing the identifier with a pseudonym in information including personal information.

Examples of such pseudonymized data are, for example:

(Original patient data) Kim Ji-young, female, diabetic, 64 years old, Seo-gu, Busan, visit date June 22, 2020.

(Heuristic pseudonymization) Gil-dong Hong, female, diabetic, 64 years old, Seo-gu, Busan, visit date 2020.06.22.

(K-anonymity applied) Gil-dong Hong, female, diabetic, 60s, Busan Metropolitan City **, visit date June 2020

The specific operation is performed as follows.

a) First, as a preset first step, when personal medical information is transmitted to the outside, heuristic pseudonymization is applied to multiple values corresponding to identifiers in the corresponding medical data and replaced according to a preset rule, whereby pseudonymization is first performed. do.

For reference, briefly describing heuristic pseudonymization, it is a method of hiding detailed personal information by replacing the values corresponding to identifiers with some set rules or processing them according to human judgment.

example Input personal information Gil-dong Hong, 35 years old, male, living in Seoul, Seoul National University Hospital, high blood pressure, stomach cancer heuristic pseudonymization Lim Kkeok-jeong, 35 years old, male, living in Seoul, Seoul National University Hospital, high blood pressure, stomach cancer

This pseudonymization is easy for users to understand and utilize because all data is processed in the same way without considering the distribution of identifiers or prior analysis of the collected data. There is a vulnerability in which certain rules for substituting values are exposed. Therefore, careful consideration is required to ensure that individuals cannot be easily identified when establishing rules.

- Application information: name, hospital used, address, mobile phone number, e-mail address, etc.

b) Next, as a second preset step, in the case of the pseudonymization, all records in the corresponding medical data set have the same (indistinguishable) k-1 records according to the preset k-anonymity model. , review the possibility of re-identification.

In addition, this k-anonymity model examines whether it can be inferred that a specific person is, and makes it de-identified over a certain probability level.

- (Definition) In a given data set, the same value should exist at least k or more so that it cannot be easily combined with other information.

- To do this, it modifies part of the data set so that every record has at least k-1 records that are identical (indistinguishable) to itself.

For example, records 1 to 4, 5 to 8, and 9 to 12 in <Table 3> where the medical data of <Table 2 - Examples of public medical data> are de-identified are not distinguished from each other.

division area code age gender disease One 13053 28 other prostatitis 2 13068 21 other prostatitis 3 13068 29 female High blood pressure 4 13053 23 other High blood pressure 5 14853 50 female stomach cancer 6 14853 47 other prostatitis 7 14850 55 female High blood pressure 8 14850 49 other High blood pressure 9 13053 31 other stomach cancer 10 13053 37 female stomach cancer 11 13068 36 other stomach cancer 12 13068 35 female stomach cancer

division area code age gender disease note 1, 2, 3, 4 130** <30, <30, <30, <30 *, *, *, * Prostatitis, prostatitis, high blood pressure, high blood pressure a mixture of various diseases
Became
safety 5, 6, 7, 8 1485** >40, >40, >40, >40 *, *, *, * stomach cancer, prostatitis,
high blood pressure, high blood pressure various
disease
mixed
Became
safety 9, 10, 11, 12 130** 3* *, *, *, * stomach cancer, stomach cancer,
stomach cancer, stomach cancer all the same
disease
(stomach cancer)
by
weak

c) So, as a preset third step, when the possibility of re-identification is reviewed, the corresponding k-anonymity, which is an index for examining anonymity, is compared with a preset reference value and is greater than the reference value. Anonymity is verified.

As a specific example, if k-anonymity, which is an index for verifying anonymity, is 3 or more, the anonymity satisfaction verification is successful.

2 is a diagram showing the entire blockchain-based medical my data non-face-to-face platform system according to an embodiment.

As shown in Figure 2, the non-face-to-face platform system of an embodiment includes each individual user terminal (100-1, 100-2, ...) equipped with the blockchain-based medical my data non-face-to-face platform, It includes a hospital information processing device 200 and a medical data demand destination information processing device 300 .

In this case, in the system of one embodiment, the blockchain-based medical my data non-face-to-face platform collects a number of different medical information for each individual in the hospital information processing device 200, and collects each history based on the blockchain. It is managed and used in medical data demanding places.

Additionally, the system according to an embodiment includes the insurance company information processing device 400 in which the insurance money is paid by systematically claiming the insurance money based on this medical my data in this case.

The user terminals (100-1, 100-2, ... ) are a blockchain-based medical my data non-face-to-face platform (app) in which individuals directly manage and control their own medical information under the consent of non-face-to-face personal information provision. ), collects a number of different medical information for each individual, generates medical my data through corresponding text mining and encryption, and manages it by dividing it into medical metadata (medical record) and medical data file, and Only medical metadata is processed and provided when using one's own medical information, and each history is managed based on blockchain. In particular, in this case, this blockchain-based medical my data non-face-to-face platform has a weakness that an individual can be identified only by the method of heuristic pseudonymization in the case of medical data. A (non-identifying) adequacy assessment is performed.

The hospital information processing device 200 provides each individual's medical treatment information to the blockchain-based medical my data non-face-to-face platform. In this case, the hospital information processing device 200 provides, for example, pseudonymized personal information and medical treatment data from the hospital-internal medical information exchange server only to users who have agreed to use the medical my data.

The medical data demand destination information processing device 300 receives and utilizes each individual's medical information from the blockchain-based medical my data non-face-to-face platform, for example, a medical record managed through a blockchain. For example, the medical data consumers are pharmaceutical companies and research institutes.

3 is a block diagram illustrating the configuration of a blockchain-based medical my data non-face-to-face platform system according to an embodiment.

As shown in FIG. 3 , the blockchain-based medical my data non-face-to-face platform system of an embodiment is largely composed of a user terminal 100 , a hospital information processing device 200 , and a medical data demand destination information processing device 300 . include

In this case, the blockchain-based medical my data non-face-to-face platform (app) includes service middleware that performs overall services such as the medical treatment service, a message queue for processing large-scale requests, and a database in which data related to services in various platforms are registered. includes

And, in addition to this, this platform includes enterprise middleware for service of medical metadata in hospitals, etc., a message queue for processing a large amount of request at this time, and a blockchain network that records medical metadata and each history, and also medical data Contains the storage where the file is registered.

Additionally, in this case, the blockchain becomes HyperLedger Fabric, a private blockchain with enhanced security, and is a component of CA, peer, and orderer, and channels are configured for each service. In addition, the blockchain allows only channel participants to conduct ledger transactions. For reference, the CA is in charge of authentication-related processes.

And, the blockchain interworking middleware is a middleware that handles all processes interworking with the blockchain, and performs blockchain access management.

Also, here, blockchain nodes cluster the entire blockchain network with an orchestration tool (kubernetes or Docker Swarm) that automatically deploys, scales and manages containerized applications.

Additionally, these systems allow for openness and anyone to provide their own datasets to the system, and do not allow duplication of identical datasets, thus increasing the efficiency and integrity of datasets. And, to provide a blockchain solution to ensure data integrity of public datasets to prevent stealing datasets other than the original dataset owner and claiming it as their own.

To this end, the system performs the following operations.

That is, a first step of one of the dataset owner terminals registering dataset metadata in the block chain through the smart contract module;

a second step in which the smart contract module verifies the metadata to confirm the dataset registration;

a third step of requesting a data set from a data set owner terminal registered for a data set registered as a smart contract module by a data collection module, which is an entity that wants to acquire a data set corresponding to another node; and

The data set owner terminal transmits the dataset to the data collection module, but the dataset owner terminal signs the dataset with its own private key before transmission, so that the data collection module can know that the dataset was sent by the correct owner. Step 4; includes

In this case, the dataset metadata of the first step includes the public key of the dataset_owner, dataset_name, dataset_description, instance_number, attribute_number, It is characterized in that it includes dataset_URL, dataset_hash, and dataset_grade.

In addition, the second step is characterized in that the smart contract module rejects the registration of new data having the same hash as that already stored in the block chain, and rejects the registration of a new dataset with an invalid URL. .

And, in addition to this, the system has the following configuration to further increase the integrity.

That is, the system ensures that all batches of training data at a given epoch were trained on the machines in the system by increasing integrity, i.e. ensuring that one particular chunk of training data is truly part of the same large training data.

To this end, the system

A first step of the data collection module sending the training job metadata to the smart contract module;

a second step of querying, by the first to Nth training machines, an available job list to the smart contract module;

a third step in which the first to Nth training machines obtain job information including job_id, batch_id, epoch_id, and merkle_root; and

At a given time preset, the data collection module classifies available among the 1st to Nth training machines, and sends batch training data, along with the hash required to verify the merkle_root hash a fourth step; includes

In this case, the first stage training job metadata includes job_id, epoch_id, batch_id, job_status, and merkle_root. do it with

In addition, the first to Nth training machines of the second step repeat the most recently registered job_id, batch_id, and 'idle' state through a query for an available job list. It is characterized by finding the _id.

4 is a flowchart illustrating the operation of a blockchain-based medical my data non-face-to-face platform system according to an embodiment.

As shown in FIG. 4 , the blockchain-based medical my data non-face-to-face platform system according to an embodiment first agrees to provide medical my data to a pre-registered medical information exchange system when an individual is provided with a medical information service. Accordingly, consent is obtained from the user terminal to provide personal information in a non-face-to-face manner (S401).

Then, such personal information provision consent history information is recorded based on the block chain (S402).

In this state, when an individual receives medical treatment, his/her medical treatment information is received from the medical treatment information exchange system in a pseudonymized state (S403).

In this case, the pseudonymization process is performed as follows.

First, as a preset first step, when personal medical information is transmitted to the outside, various values corresponding to identifiers in the corresponding medical data are pseudonymized by applying heuristic pseudonymization and replacing them according to a preset rule.

Then, as a second preset step, in the case of pseudonymization, all records in the corresponding medical data set have the same (indistinguishable) k-1 records according to the preset k-anonymity model. , review the possibility of re-identification.

So, as a preset third step, when the possibility of re-identification is reviewed, the corresponding k-anonymity, which is an index for examining anonymity, is compared with a preset reference value, and the anonymity is greater than the reference value. Perform sufficiency verification.

Through this, in the case of medical data, it solves the weakness of being able to identify individuals only with the heuristic pseudonymization method, and provides appropriateness for pseudonymization, thereby stably transmitting and managing medical data to the outside.

Next, the received medical treatment information is generated as medical my data by corresponding text mining and encryption (S404).

Then, the medical my data is dualized into medical metadata and medical data file (S405), and the medical data file is pseudonymized and encrypted (S407).

So, the medical metadata is registered in the block chain (S406), and the medical data file is registered in the storage, and the data is managed separately.

Then, by registering the history of this medical metadata in the block chain (S408), the medical information service is made.

On the other hand, in this state, the use of medical data in medical data demanding destinations, for example, pharmaceutical companies or research institutes, is performed as follows.

First, when using the medical my data in relation to the medical treatment information service, the medical my data is requested from the pre-registered medical data demand destination information processing device (S409).

Then, the history information about the requesting company of this medical my data is recorded in the block chain (S410).

Then, medical metadata is extracted from the block chain and analyzed and processed (S411).

Therefore, the processed medical metadata is provided to the medical data demanding information processing device of the corresponding requesting company (S412).

Therefore, the platform according to one embodiment through this, when an individual receives medical service, by autonomously managing and controlling his or her medical information from the blockchain-based medical my data non-face-to-face platform according to the embodiment, the individual can Manage medical information directly.

And, in the case of such a block chain, the platform applies block chain HyperLedger Fabric-based technology to strengthen the safety of medical my data, and also secures reliability and transparency of data by pseudonymization and encryption.

As described above, in one embodiment, a plurality of different medical information is provided for each individual by a blockchain-based medical my data non-face-to-face platform (app) in which individuals directly manage and control their own medical information under consent to provide personal information. It collects and generates medical my data through corresponding text mining and encryption.

And, in this case, the blockchain-based medical my data non-face-to-face platform manages medical my data by dividing it into medical metadata (medical record) and medical data files, and only uses the medical metadata when using its own medical information. is processed and provided, and each history is managed based on the block chain.

In particular, since this non-face-to-face platform system has a weakness that an individual can be identified only by the heuristic pseudonymization method in the case of medical data, the pseudonymization (non-identification) adequacy evaluation is performed after the heuristic pseudonymization.

Accordingly, through this, in one embodiment, when an individual receives medical service, the individual manages and controls his or her medical information independently from the blockchain-based medical my data non-face-to-face platform according to the embodiment, thereby allowing the individual to directly receive medical information manage

And, in the case of such a block chain, the security of medical my data is strengthened by applying the block chain HyperLedger Fabric-based technology, and data reliability and transparency are secured by pseudonymization and encryption.

In addition, in particular, in the case of medical data, it solves the weakness that an individual can be identified only by the heuristic pseudonymization method and provides appropriateness for pseudonymization, thereby stably transmitting and managing medical data to the outside.

As described above, in one embodiment, a plurality of different medical information is provided for each individual by a blockchain-based medical my data non-face-to-face platform (app) in which individuals directly manage and control their own medical information under consent to provide personal information. It collects and generates medical my data through corresponding text mining and encryption.

And, in this case, the blockchain-based medical my data non-face-to-face platform manages medical my data by dividing it into medical metadata (medical record) and medical data files, and only uses the medical metadata when using its own medical information. is processed and provided, and each history is managed based on the block chain.

In particular, since this non-face-to-face platform system has a weakness that an individual can be identified only by the heuristic pseudonymization method in the case of medical data, the pseudonymization (non-identification) adequacy evaluation is performed after the heuristic pseudonymization.

Accordingly, through this, in one embodiment, when an individual receives medical service, the individual manages and controls his or her medical information independently from the blockchain-based medical my data non-face-to-face platform according to the embodiment, thereby allowing the individual to directly receive medical information manage

And, in the case of such a block chain, the security of medical my data is strengthened by applying the block chain HyperLedger Fabric-based technology, and data reliability and transparency are secured by pseudonymization and encryption.

In particular, in the case of medical data, it solves the weakness of being able to identify individuals only with the heuristic pseudonymization method and provides appropriateness for pseudonymization, thereby stably transmitting and managing medical data to the outside.

5A and 5B are diagrams for explaining a medical information service applied to a blockchain-based medical my data non-face-to-face platform system according to an embodiment.

As shown in FIGS. 5A and 5B , the medical treatment information service according to an embodiment consists of generating ( FIG. 5A ) and utilizing ( FIG. 5B ) of medical my data.

First, the generation of such medical my data is as follows.

① Non-face-to-face information provision consent: The user agrees to the provision of medical my data registered in the medical information exchange service.

② History record: Records the user's information provision consent history information.

- History records are the contents of hospital medical records

- Update records of treatment in other hospitals

③ Receiving medical information: Through the medical information exchange server, the patient's medical information is received in a pseudonymized state, and text mining and encryption are performed.

- Increased security because personal information is received in a pseudonymized state

- Data is stored through text mining and encryption

- Text mining is stored and analyzed in the form of a distributed corpus

- Execute text mining through clustering

- Encryption proceeds with AES, one of the symmetric algorithms

④ Medical My Data Dualization: Medical metadata (provided records) and medical data files are dualized for personal information protection and disposal upon request, and medical data files are pseudonymized and encrypted to protect personal information. .

⑤ Data storage: Medical metadata (provided records) and medical data files are stored separately in the block chain and storage.

⑥ History record: The history of medical metadata (provided record) is saved.

- History data (whether or not consent to personal information, date of personal information change, personal information change channel (WEB, APP), etc.)

- Blockchain TXID (updating the result value after saving the block chain)

- History data is stored as a hash value

And, in the state in which the medical my data is generated in this way, utilization in the laboratory, etc. is performed as follows.

① My Data Request (Fees): Requests for My Data required by pharmaceutical companies, research institutes, etc. are made.

② History record: Record the history information of the MyData requesting company.

③ Block chain information collection: Receive metadata and perform analysis and processing.

④ My data collection

- Provide distributed file server

- Provides caching to improve speed

- Fragment images and text files

⑤ My data provision: Process the data collected in ③ and ④ to provide data.

- Pseudonymized medical records

- Provide prescription

- Personal information and My Data are pseudonymized and encrypted.

- Analyze and process medical records, disease information, prescription records, etc.

- Provide processed data

- Can also be sold through AI analysis tools

- Visualization using big data analysis tool

⑥ User compensation: A digital voucher is provided to users who have agreed to provide medical information.

- Provide benefits (eg, Busan digital voucher) to users who provided My Data

- Providing help, such as hospital expenses, to patients with rare diseases and diseases

FIG. 6 is a diagram for explaining a verification service as one of user convenience services applied to a blockchain-based medical my data non-face-to-face platform system according to an embodiment.

As shown in FIG. 6 , the second proof service according to an embodiment is performed as follows.

① Request for proof: The user requests proof of proof online through the corresponding mobile app.

- A certificate containing a doctor's opinion is issued through confirmation and verification at a hospital, etc.

- Issued for a fee or free of charge under the agreement with the hospital when issuing the certificate

② History record: Record the request history on the platform (blockchain).

- Record the history of issuance of the certificate

③ Receiving proof: The platform requests proof from the hospital and receives it online.

④ History record: Record the reception history in the block chain.

⑤ Provision of proof file: The proof file (PDF, image, etc.) is provided to users.

- Provided for submission and proof to insurance companies and government offices

7A and 7B are diagrams for explaining an electronic prescription service as the second of user convenience services applied to the blockchain-based medical my data non-face-to-face platform system according to an embodiment.

As shown in FIGS. 7A and 7B , the electronic prescription service according to an embodiment consists of generating ( FIG. 7A ) and utilizing ( FIG. 7B ) of medical my data.

First, the generation of medical my data for these electronic prescription services is as follows.

① After treatment, request to send the original electronic prescription to the pharmacy.

- The user requests the original transmission of the electronic prescription through the corresponding mobile app, for example.

② Send the original electronic prescription and make a request for dispensing.

- The hospital sends the original electronic prescription of the user to the pharmacy and requests dispensing

③ Visit the pharmacy.

- The user visits the pharmacy and receives the prepared medicine

④ Perform online identity verification, consent, and delegation of an agent.

- An electronic document (consent/power of attorney) containing the patient's electronic signature is created through the app so that the patient's designated agent (this platform) can read or issue a copy of the patient's record

⑤ Submission of proof documents for the agent and request for a copy of the electronic prescription.

- Submit the proof documents submitted by the user (patient) and the agent's business registration/identity card to the hospital.

⑥ Receive a copy of the electronic prescription.

⑦ History record: Record the request history on the platform (blockchain).

⑧ Medical My Data Dualization: Medical metadata (provided records) and medical data files are dualized to protect personal information and discarded upon request, and medical data files (electronic prescriptions) are pseudonymized to protect personal information. and encryption processing.

⑨ Data storage: Encrypted medical data files are stored in storage.

⑩ History record: Transparency is secured by storing medical metadata (provided record) in the block chain.

Next, the operation of using such medical my data is as follows.

① Medical My Data Request: Request My Medical Data from pharmaceutical companies and research institutes.

- Personal information is processed under a pseudonym to improve security

- Write a purchase request form

② History record: Record the history of requests and fees in the block chain.

③,④ Collect medical my data in blockchain information and storage.

⑤ The collected data is processed and provided.

- Data analysis and processing

- AI analysis tool provided

⑥ Provide digital vouchers to users who have agreed to provide medical my data.

- A benefit (digital voucher) is provided to users who provide data after purchase from the customer.

8 is a diagram for explaining an insurance one-stop service as the third of user convenience services applied to the blockchain-based medical my data non-face-to-face platform system according to an embodiment.

As shown in FIG. 8 , in the insurance one-stop service according to an embodiment, ① first, a user requests an online loss insurance claim through a corresponding mobile app.

② History record: Record the history of the request.

③ Data Request: Request the medical insurance claim data requested by each insurance company from the hospital.

④ The hospital sends the insurance claim document to the insurance company.

⑤ The hospital returns the result of sending the insurance claim document.

⑥ History record: Record the history of actual loss insurance claim results in the block chain.

- Provides statistical services for several years through history inquiry, etc.

⑦ Insurance payment: The insurance company pays the insurance money to the user after insurance evaluation based on the received actual loss insurance claim document.

- Transparency of insurance payment history

9A and 9B are diagrams for explaining a comprehensive health checkup service applied to a blockchain-based medical my data non-face-to-face platform system according to an embodiment.

As shown in FIGS. 9A and 9B , the comprehensive health checkup service according to an embodiment includes generation of medical my data ( FIG. 9A ) and utilization ( FIG. 9B ).

First, the generation of My Data for this comprehensive health checkup service is as follows.

① Consent to take photos and provide information: Take photos of the general health checkup result information that the user has and proceed with consent to the provision of the information.

- Comprehensive health checkup service is uploaded with user consent and OCR analysis is carried out

- Data verification through additional verification steps

② History record: Records the history information on the consent of the medical my data provider to provide information.

③ My data dualization: Medical metadata (provided records) and medical data files are dualized for personal information protection and disposal upon request, and medical data files are pseudonymized and encrypted to protect personal information.

④ Data storage: Medical metadata (provided records) and medical data files are stored separately in the block chain and storage.

⑤ History record: The history of medical metadata (provided record) is saved.

Next, the utilization of such medical my data is done as follows.

① Medical My Data Request (Fees): Request medical My Data required by pharmaceutical companies, research institutes, etc.

② History record: Records the user's information provision consent history information.

③,④ Collect blockchain information and medical my data.

⑤ Medical My Data Provision: Process the data collected in ③④ to provide data.

⑥ User compensation: Benefits (digital vouchers) are provided to users who have agreed to provide medical information.

10A and 10B are diagrams for explaining an image data service as another form of a comprehensive health checkup service applied to a blockchain-based medical my data non-face-to-face platform system according to an embodiment.

As shown in FIGS. 10A and 10B , the image data service according to an embodiment consists of generating ( FIG. 10A ) and utilizing ( FIG. 10B ) of medical my data, as in the above cases.

First, the generation of medical my data for these image data services is as follows.

① Information provision consent: The user consents to the provision of medical information registered in the image information service online.

② History record: Record the history information on the consent of the medical my data provider to provide information, and record the video summary/classification information.

③ My data dualization: Medical metadata (provided records) and medical data files are dualized for personal information protection and disposal upon request, and medical data files are pseudonymized and encrypted to protect personal information.

④ Data storage: Save the pseudonymized image data (stored in the hospital's storage (data center) and cannot be leaked to the outside).

⑤ History record: The history of medical metadata (provided record) is saved.

Next, the utilization of such medical my data is done as follows.

① Medical My Data Request (Fees): Request medical My Data required by demanding institutions such as pharmaceutical companies and research institutes.

② History record: Record the provision history.

③ Block chain information collection: video summary/classification information

④ Medical My Data Collection: Collect processed information such as image analysis results.

⑤ Medical My Data Provision: Medical My Data by the demanding institution (visiting the data center when using medical images) is made.

⑥ User compensation: Benefits (digital vouchers) are provided to users who have agreed to provide medical information.

100: user terminal
200: hospital information processing device
300: information processing device of medical data demanding destination

Claims (7)

A blockchain-based medical my data non-face-to-face platform (app) that allows individuals to directly manage and control their medical information under consent to provide personal information in a non-face-to-face manner collect medical data, generate medical my data through corresponding text mining and encryption, manage it by dividing it into medical metadata (medical record) and medical data file, and process only the medical metadata when using one's own medical information a user terminal that provides and manages each history based on a block chain;
a hospital information processing device that pseudonymizes and provides each individual's medical information with the blockchain-based medical my data non-face-to-face platform; and
a medical data consumer information processing device that is provided and utilized as medical metadata processed under a pseudonym of each individual from the blockchain-based medical my data non-face-to-face platform; contains,

The medical my data non-face-to-face platform,
a-1) When an individual receives medical information service, he/she consents to the provision of medical my data to the pre-registered medical information exchange system and consents to the provision of personal information in a non-face-to-face manner;
b-1) Record the personal information provision consent history information based on block chain;
c-1) When an individual receives medical treatment, receiving his/her medical information from the medical information exchange system in a pseudonymized state;
d-1) The received medical information is generated as medical my data by corresponding text mining and encryption,
e-1) dualizing the generated medical my data into medical metadata and medical data file, and pseudonymizing and encrypting the medical data file;
f-1) The medical metadata is registered in the blockchain, the medical data file is registered in storage, and the data is managed separately,
g-1) By registering the history of the medical metadata in the block chain, the medical information service is made,

The medical my data non-face-to-face platform,
a-2) When using the medical my data in relation to the medical information service, receiving a request for medical my data from the pre-registered medical data demanding information processing device;
b-2) Record the history information about the requesting company of the medical my data in the block chain;
c-2) extracting, analyzing, and processing medical metadata from the block chain;
d-2) providing the processed medical metadata to the medical data demanding information processing device of the corresponding requesting company;

The pseudonymization is
a) As a preset first step, when personal medical information is transmitted to the outside, by applying heuristic pseudonymization to replace multiple values corresponding to identifiers in the corresponding medical data according to a preset rule, ,
b) In the second preset step, in the case of pseudonymization, k-1 records in which all records in the corresponding medical data set are identical (indistinguishable) according to the preset k-anonymity model By having, review the possibility of re-identification,
c) In the third preset step, when the possibility of re-identification is reviewed, the corresponding k-anonymity, which is an index for examining anonymity, is compared with a preset reference value, and the anonymity is higher than the reference value. to verify compliance; A solution for securing the accuracy, reliability, and integrity of pseudonymized data using the blockchain used in the blockchain-based medical my data non-face-to-face platform system. The method according to claim 1,
The medical my data non-face-to-face platform,
a-3) When an individual is provided with a verification service as a user convenience service, he/she requests verification through a pre-registered hospital information processing device;
b-3) Record the history of the request in the blockchain;
c-3) When the second certificate is issued according to the request, the second certificate is received from the hospital information processing device;
d-3) Record the history of the reception in the block chain,
e-3) non-face-to-face verification service is provided by providing the received verification verification in a preset file format; Blockchain-based medical my data non-face-to-face platform system featuring The method according to claim 1,
The medical my data non-face-to-face platform,
a-4) When an individual receives an electronic prescription service as a user convenience service, request the transmission of the original electronic prescription from the pre-registered hospital information processing device where the individual received treatment to the pre-registered pharmacy information processing device;
b-4) When the drug is dispensed and received at the pharmacy in accordance with the above request, an electronic document containing the patient's electronic signature so that the representative (this platform) designated by the individual patient can view or issue a copy of the patient's record ( Consent/Power of Attorney),
c-4) request a copy of the electronic prescription from the hospital information processing device based on the prepared electronic document;
d-4) receiving a copy of the electronic prescription from the hospital information processing device according to the request;
e-4) Record the request history in the block chain,
f-4) dualizing the received electronic prescription into medical metadata and medical data file, and pseudonymizing and encrypting the medical data file;
g-4) The medical metadata is registered in the blockchain, and the encrypted medical data file is registered in the storage;
h-4) non-face-to-face electronic prescription service by registering the history of the medical metadata in the block chain; Blockchain-based medical my data non-face-to-face platform system featuring The method according to claim 1,
The medical my data non-face-to-face platform,
a-5) When an individual receives an insurance one-stop service as a user convenience service, he/she requests a claim for loss insurance from a pre-registered hospital information processing device;
b-5) Record the history of the request in the blockchain;
c-5) When the hospital requests the loss insurance claim data required by each insurance company in accordance with the above request and transmits the relevant document to the insurance company, the result of document transmission is returned from the hospital information processing device;
d-5) By recording the history of the returned actual loss insurance claim result in the block chain, the insurance one-stop service is made; Blockchain-based medical my data non-face-to-face platform system featuring The method according to claim 1,
The medical my data non-face-to-face platform,
a-6) When an individual is provided with a comprehensive health checkup service, information on the results of a comprehensive health checkup is taken, consent to the provision of the information is obtained, consent to the provision of personal information is performed, and upload and OCR analysis are performed under the consent of the user;
b-6) Record the history information on consent to the provision of personal information in the block chain;
c-6) Bind the analyzed comprehensive health checkup results into medical metadata and medical data files, and pseudonymize and encrypt the medical data files;
d-6) The medical metadata is registered in the blockchain, and the encrypted medical data file is registered in the storage;
e-6) By registering the history of the medical metadata in the block chain, a comprehensive health checkup service is performed; Blockchain-based medical my data non-face-to-face platform system featuring The method according to claim 1,
The medical my data non-face-to-face platform,
a-7) When an individual receives image data service through the comprehensive examination service, he/she consents to the provision of medical information registered in advance in the image information service registered in advance online, and performs the consent to provide personal information;
b-7) Record the history information on the consent performed above in the block chain, and record the video summary/classification information in the block chain,
c-7) The image information according to the consent is dualized into medical metadata and medical data files, and the medical data files are pseudonymized and encrypted;
d-7) Record the medical metadata in the block chain, and register the encrypted image information in the corresponding data center;
e-7) providing an image data service by registering the history of the medical metadata in the block chain; Blockchain-based medical my data non-face-to-face platform system featuring 7. The method of claim 6,
The medical my data non-face-to-face platform,
a-8) When an individual provides image data service (using medical my data) as a comprehensive examination service, receive a request for medical my data from the pre-registered medical data demanding information processing device;
b-8) Record the history of the above request in the blockchain;
c-8) Collecting video summary/classification information in the block chain according to the above request,
d-8) In accordance with the above request, medical my data including the corresponding image analysis result is collected;
e-8) providing the collected results to the information processing device of the medical data demanding destination (visiting a data center when using medical images) to provide an image data service using medical my data; Blockchain-based medical my data non-face-to-face platform system featuring

Images