KR20220085623A - Medical data distribution method and system thereof - Google Patents

Abstract

The present invention relates to a method and system for distributing medical data, and an embodiment of the present invention includes the steps of: a first user terminal generating first medical data; the first user terminal receiving the first medical data registration request; Transmitting to a medical data distribution server, the medical data distribution server, in response to the first medical data registration request from the first user terminal, the step of confirming whether the authentication of the first user terminal, the medical data distribution server provides a medical data distribution method comprising the steps of, when the first user terminal is authenticated, storing the first medical data in a database, and distributing and storing distribution information of the first medical data in a block chain network .

Description

MEDICAL DATA DISTRIBUTION METHOD AND SYSTEM THEREOF

The present invention relates to a medical data distribution method and system, and more particularly, to a medical data distribution method and system using a block chain network.

Blockchain technology is a technology that generates small-scale block-structured data based on distributed ledger technology and stores it in a chain-type distributed data environment. Unlike the existing method of recording and storing transaction data between users in a centralized server, blockchain technology records and stores transaction-related data in the ledger of each distributed node whenever a transaction occurs. Perform the verification and verification process. This data collation and verification process is continuously conducted for users who make up the blockchain network, so none of the users can arbitrarily modify the transaction details, but anyone can view the results of the changes.

Recently, in the medical field, research for performing data-based personalized medicine and predictive medicine using various types of medical data such as personal biosignals measured by wearable devices as well as hospital medical records is being conducted.

However, in order for medical data to be used in various studies, a method to protect the personal information of the data subject is required. Blockchain technology is attracting attention because it can effectively record and manage medical data, but it cannot be forged or tampered with, and can safely protect personal information.

Korean Patent Publication No. 10-2111141 (2020.05.15.) relates to a medical data service system based on a block chain and a medical data service method using the same, comprising: a medical data storage storing encrypted medical data; When new medical data is input, the medical data is encrypted using an encryption key and stored in the medical data storage, the encryption key is converted and divided to generate a plurality of encryption keys, and one of the generated encryption keys is is set as a shared encryption key, and the rest is set as an individual encryption key for each terminal and distributed and stored as a medical data service server; A shared encryption key for each medical data is provided from the medical data service server, a block including information on the shared encryption key of each medical data is generated, and the generated block is recorded as the first block of the block chain, a key management server that propagates the block to a blockchain network; and a plurality of terminals configured to receive and store an individual encryption key and receive the encrypted medical data stored in the medical data storage using the individual encryption key. The medical data service server generates a decryption key using a shared encryption key and an individual encryption key assigned to each terminal, and decrypts and provides encrypted medical data using the decryption key.

The above-described medical data service system enables information subjects to identify and manage access histories to their own medical data, and can effectively protect personal information. However, it is not suitable for building big data for research in the medical field, and there is a problem in that data interoperability for medical data distribution between information subjects and institutions and between institutions and institutions is not considered.

1. Korean Patent Publication No. 10-2111141 (2020.05.15.)

The first technical problem to be solved by the present invention is to provide a medical data distribution method using a blockchain network.

The second technical problem to be solved by the present invention is to provide a medical data distribution system using a blockchain network.

In order to solve the above-described first technical problem, an embodiment of the present invention provides a first user terminal generating first medical data, the first user terminal sending the first medical data registration request to a medical data distribution server transmitting, the medical data distribution server corresponding to the first medical data registration request from the first user terminal, confirming whether the first user terminal is authenticated, the medical data distribution server is the first When the user terminal is authenticated, there is provided a medical data distribution method comprising the steps of storing the first medical data in a database, and distributing and storing distribution information of the first medical data in a block chain network.

The generating of the first medical data may include deleting first information including personal identification information of the information subject from second medical data, and second including personal information of the information subject from the second medical data. Grouping information according to a value, converting the second medical data according to a medical information transmission standard, and encrypting the transformed second medical data to generate the first medical data, the information comprising: The personal identification information of the subject may include a name, resident registration number, information subject ID and address, and the personal information of the information subject may include age, gender, income, height, and weight.

The medical information transmission standard may be Fast Healthcare Interoperability Resources (FHIR).

The step of determining whether the first user terminal is authenticated may include the steps of, by the medical data distribution server, requesting first authentication to the first user terminal, and when the first authentication is confirmed, the medical data distribution server Including the step of requesting a second authentication to the first user terminal,

The first authentication may be knowledge-based authentication, and the second authentication may be ownership-based authentication or biometric-based authentication.

The database may be a non-relational database.

The distribution information of the first medical data includes information related to the generation subject of the first medical data, information related to the receiving subject, transaction date information, information related to data transfer consent of the information subject, and a hash value corresponding to the first medical data. It may be a block structure including

The medical data distribution method according to an embodiment of the present invention includes the steps of: receiving, by the medical data distribution server, a medical data transfer request from a second user terminal; confirming whether the second user terminal is authenticated; and the medical data confirming whether the medical data transfer is approved by the information subject of The steps of searching for distribution information of data, and the medical data distribution server transmitting the third medical data to the second user terminal, may include updating and storing the distribution information of the third medical data.

In this case, the second user terminal may share a decryption key with the first user terminal, and the second user terminal may decrypt the third medical data using the decryption key.

The medical data distribution server may determine whether to change the third medical data by using a hash value corresponding to the third medical data included in the third medical data distribution information.

An embodiment of the present invention provides a computer program stored in a computer-readable storage medium to execute any one or more of the above-described methods using a computing device.

In order to solve the second technical problem described above, an embodiment of the present invention includes a storage medium, a communication unit, and one or more processors, wherein the one or more processors respond to a registration request for first medical data of a first user terminal , check whether the first user terminal is authenticated, and when the first user terminal is authenticated, store the first medical data in a database, and store the distribution information of the first medical data in a block chain network can be configured to

In the first medical data, the first user terminal deletes the first information including the personal identification information of the information subject from the second medical data, and adds the second information including the personal information of the information subject to the value. It may be grouped according to the standard, converted and encrypted according to the medical information transmission standard.

The distribution information of the first medical data includes information related to the generation subject of the first medical data, information related to the receiving subject, transaction date information, information related to data transfer consent of the information subject, and a hash value corresponding to the first medical data. It may be a block structure including

Whether the first user terminal is authenticated is determined whether the processor requests first authentication, which is knowledge-based authentication, from the first user terminal. It can be confirmed by requesting the second authentication, which is biometric-based authentication.

In an embodiment of the present invention, the processor receives a medical data transfer request from the second user terminal, checks whether the second user terminal is authenticated, and approves the transfer of the medical data from the information subject of the medical information , and when the second user terminal is authenticated, the third medical data corresponding to the medical data transfer request and distribution information of the third medical data are retrieved, and the third medical data is transferred to the second user. It may be configured to be transmitted to the terminal, and to update and store the distribution information of the third medical data.

The second user terminal may share a decryption key with the first user terminal, and the second user terminal may decrypt the third medical data using the decryption key.

The medical data distribution method and system according to the present invention delete personal identification information that can directly identify the information subject of medical data, and group personal information that can be combined with other information to estimate the information subject. , to prevent leakage of personal information while providing personal medical data to research of various institutions. In addition, by converting medical data according to the medical information transmission standard, interoperability is improved in the distribution of medical data between individuals and institutions, and between institutions and institutions, and high security is maintained through two-step authentication. Since medical data is stored in a non-relational database, it is possible to support various formats and provide a fast data processing speed. In addition, by storing the distribution information of medical data in the blockchain network, it is possible to prevent forgery and falsification of medical data and to manage the distribution process.

The technical effects of the present invention are not limited to those mentioned above, and other technical effects not mentioned will be clearly understood by those skilled in the art from the following description.

1 is a conceptual diagram illustrating a network environment of a medical data distribution system according to an embodiment of the present invention.
2 is a flowchart illustrating a method for storing medical data according to an embodiment of the present invention.
FIG. 3 is a block diagram illustrating a method of storing medical data shown in FIG. 2 .
FIG. 4 is a flowchart illustrating in more detail the first medical data generation step shown in FIG. 2 .
5 is a flowchart illustrating a method of transmitting medical data according to an embodiment of the present invention.
FIG. 6 is a block diagram illustrating a method of transmitting medical data illustrated in FIG. 5 .
7 is a table for explaining distribution information of medical data according to an embodiment of the present invention.
8 is a block diagram illustrating a medical data distribution system according to an embodiment of the present invention.

While the invention is susceptible to various modifications and variations, specific embodiments thereof are illustrated and illustrated in the drawings and will be described in detail hereinafter. However, it is not intended to limit the invention to the particular form disclosed, but rather the invention includes all modifications, equivalents and substitutions consistent with the spirit of the invention as defined by the claims.

It will be appreciated that when an element, such as a layer, region, or substrate, is referred to as being “on” another component, it may be directly on the other element or intervening elements in between. .

Although the terms first, second, etc. may be used to describe various elements, components, regions, layers and/or regions, such elements, components, regions, layers and/or regions are not It will be understood that they should not be limited by these terms.

In an embodiment of the present invention, terms such as "module", "unit", "part", etc. are terms for designating a component that performs at least one function or operation, and such component is hardware or software It may be implemented with a combination of hardware and software. In addition, a plurality of "modules", "units", "parts", etc. are integrated into at least one module or chip, except when each needs to be implemented in individual specific hardware, and thus at least one processor. can be implemented as

With reference to the accompanying drawings, preferred embodiments of the present invention will be described in more detail. Hereinafter, the same reference numerals are used for the same components in the drawings, and repeated descriptions of the same components are omitted.

1 is a conceptual diagram illustrating a network environment of a medical data distribution system according to an embodiment of the present invention.

Referring to FIG. 1 , the medical data distribution system 10 includes a plurality of user terminals including a first user terminal 11 and a second user terminal 13 , a medical data distribution server 15 , and a block chain storage. (17) and a database (19).

The first user terminal 11 and the second user terminal 13 may be computing devices that generate or process medical data. In an embodiment, the first user terminal 11 may be a hospital diagnosis device or a medical record management device that generates a patient visit record, a diagnosis record, or an image image. In another embodiment, the first user terminal 11 may be a personal wearable device that measures a patient's heart rate, blood pressure, blood sugar, or exercise amount in real time. The second user terminal 13 may be an analysis device of a hospital, a research institute, or a company that collects and analyzes medical data.

The medical data distribution system 10 may include a plurality of user terminals, and the plurality of user terminals may be computing devices of individuals or institutions constituting a consortium according to the same research purpose, contract, or the like.

Each of the user terminals 11 and 13 may generate or process medical data according to the standard of the medical data distribution system 10 . Medical data may be de-identified by deleting personally identifiable information that directly identifies a data subject, and grouping personal information that can be combined with other information to infer a data subject according to a value. Also, the medical data may be converted according to a medical information transmission standard. Medical data can be encrypted, and when the user terminals 11 and 13 through which medical data are distributed form a consortium, an encryption key or a decryption key is shared between the user terminals 11 and 13. can

The medical data distribution server 15 checks whether the user terminals 11 and 13 are authenticated in response to the medical data registration or delivery request of each of the user terminals 11 and 13, and the user terminals 11, When 13) is authenticated, medical data is registered in the database 19 or transferred from the database 19 to the user terminals 11 and 13, and distribution information of the medical data is transferred to the blockchain network 17 distributed storage.

The medical data distribution server 15 may check whether the user terminals 11 and 13 are authenticated when the user terminals 11 and 13 access the stored medical data. In this case, the authentication may be two-step authentication including the first authentication of knowledge-based authentication and the second authentication of possession-based authentication or biometric-based authentication according to the belonging or purpose of the user terminals 11 and 13 .

When the first user terminal 11 or the second user terminal 13 is authenticated, the medical data distribution server 15 distributes data according to the request of the user terminals 11 and 13 .

The medical data distribution server 15 may store medical data in the database 19 . The database 19 may be included in the medical data distribution server 15 or included in an external system. The database 19 may be a non-relational database (SQL).

The medical data distribution server 15 may distribute and store the distribution information of medical data in the blockchain network 17 . The medical data distribution information is a block including information related to the generation subject of medical data or processed data, information related to the receiving subject, transaction date information, information related to the data transfer consent of the data subject, and a hash value corresponding to the medical data or processed data It can be a structure. The blockchain network 17 may include, as nodes, the user terminals 11 and 13 constituting the above-described consortium, but is not limited thereto.

The medical data distribution server 15 may use a hash value corresponding to the medical data included in the medical data distribution information to check whether the medical data has been forged or altered.

2 is a flowchart illustrating a medical data storage method according to an embodiment of the present invention, and FIG. 3 is a block diagram illustrating the medical data storage method.

2 and 3 , the method for storing medical data according to an embodiment of the present invention includes a medical data generation step (S110), a medical data registration request step (S120), and a first user terminal authentication check step (S130). ) and a first medical data and a first medical data distribution information storage step (S140).

In the medical data generation step ( S110 ), the first user terminal generates first medical data. The first user terminal may be a computing device for generating or processing medical information. For example, the first user terminal may be a device for managing a patient's hospital diagnosis record, drug prescription record, or medical record including image data. Alternatively, the first user terminal may be a wearable device that measures an individual's bio-signals in real time, but is not limited thereto.

The first medical data may be processed by the second medical data generated by the first user terminal. For example, the first user terminal may de-identify the second medical data, convert it according to a medical information transmission standard, and then encrypt the converted second medical data to generate the first medical data. In this case, the first user terminal may encrypt the converted second medical data using an encryption key.

In the medical data request step (S120), the first user terminal transmits the first medical data registration request to the medical data distribution server.

In the step of verifying whether the first user terminal is authenticated ( S130 ), the medical data distribution server checks whether the first user terminal is authenticated in response to the first medical data registration request from the first user terminal.

The step of confirming whether the first user terminal is authenticated may include: the medical data distribution server requesting first authentication to the first user terminal; if the first authentication is confirmed, the medical data distribution server and requesting a second authentication from the first user terminal.

In this case, the first authentication may be a password or knowledge-based authentication in the form of a question and answer. The second authentication may be ownership-based authentication or biometric-based authentication according to a user or purpose of use of the first user terminal. For example, when the first user terminal is a personal wearable device, the second authentication may be biometric-based authentication such as user's iris recognition, fingerprint recognition, and voice recognition. As another example, when the first user terminal is a computing device of a hospital or research institute, the second authentication may be ownership-based authentication such as security card authentication, ID card authentication, and OTP authentication.

In the first medical data and the first medical data distribution information storage step (S140), when the first user terminal is authenticated, the medical data distribution server stores the first medical data in a database (S140- 1), distribution information of the first medical data is distributed and stored in a blockchain network (S140-2).

The database may be a non-relational database. Therefore, it is possible to store the first medical data stored in xml or json format according to FHIR, which is a medical information transmission standard, according to a resource of FHIR without parsing.

The distribution information of the first medical data includes information related to the generation subject of the first medical data, information related to the receiving subject, transaction date information, information related to the data transfer consent of the data subject, and a hash value corresponding to the first medical data It may be a block structure that does Whether the first medical data has been forged or altered may be checked based on a hash value corresponding to the first medical data.

The distribution information of the first medical data may be distributed and stored in a block chain network, and in this case, the block chain network may be composed of a plurality of user terminals forming a consortium.

FIG. 4 is a flowchart illustrating in more detail the first medical data generation step shown in FIG. 2 .

Referring to FIG. 4 , the first medical data generation step ( S110 ) includes a personally identifiable information deletion step ( S111 ), a personal information grouping step ( S112 ), a conversion step according to the medical information transmission standard ( S113 ), and an encryption step ( S114 ) ) is included.

In the step of deleting personal identification information ( S111 ), the first user terminal may delete the first information including the personal identification information of the information subject from the second medical data that is medical data generated or processed by the first user terminal.

Personally identifiable information is information that can directly identify a data subject, and includes a name, social security number, user ID, and address.

In the grouping of the personal information ( S112 ), the first user terminal may group the second information including the personal information of the information subject from the second medical data from which the first information is deleted according to a value.

Personal information is information that can be combined with other information to estimate the data subject, and includes age, gender, income, height, and weight. The first user terminal groups the personal information according to a range of a predetermined value. For example, when the personal information is age, the first user terminal may classify the group in units of 5 years and convert the age value of the personal information into the age group.

Therefore, when the data subject agrees to provide research data of various individuals or institutions, each medical data removes personally identifiable information and groups them, thereby minimizing the risk of infringement of the data subject's rights.

In the conversion step S113 according to the medical information transmission standard, the de-identified second medical data is converted according to the medical information transmission standard. The medical information transmission standard may be Fast Healthcare Interoperability Resources (FHIR). That is, the second medical data may be classified in units of resources and made by a combination of the resources.

In the encryption step (S114), the first user terminal encrypts the converted second medical data to generate the first medical data.

The first user terminal may encrypt the converted second medical data using an encryption key.

5 is a flowchart illustrating a method of transmitting medical data according to an embodiment of the present invention, and FIG. 6 is a block diagram illustrating the method of transmitting medical data.

5 and 6 , the medical data distribution method according to an embodiment of the present invention includes a medical data request signal reception step (S210), an authentication check step (S220) of the second user terminal, and approval of delivery of medical data Confirmation step (S230), the third medical data and the third medical data distribution information search step (S240), the step of transmitting the third medical data (S250), and the step of updating the distribution information of the third medical data (S260) ) may be further included.

In the medical data request signal receiving step (S210), the medical data distribution server receives the medical data transfer request from the second user terminal. The second user terminal may be a computing device of an institution or an individual that provides a service to a user by collecting, researching, or processing the medical data.

In the verification step (S220) of whether the second user terminal is authenticated, the medical data distribution server checks whether the second user terminal is authenticated.

The step of determining whether the second user terminal is authenticated may include the step of the medical data distribution server requesting first authentication to the second user terminal, and when the first authentication is confirmed, the medical data distribution server and requesting a second authentication from the second user terminal.

In this case, the first authentication may be a password or knowledge-based authentication in the form of a question and answer. The second authentication may be ownership-based authentication or biometric-based authentication according to a user or purpose of use of the first user terminal.

In the step of confirming whether to approve the transfer of the medical data ( S230 ), the medical data distribution server checks whether the transfer of the medical data is approved by the information subject.

The medical data distribution server notifies the terminal of the information subject of the medical data transfer request of the second user terminal, and checks whether the transfer of the medical data is approved by the information subject. The terminal of the information subject may display a selection window for selecting whether to approve the transfer, and transmit the selection of the information subject to the medical data distribution server.

In the third medical data and distribution information search step (S240) of the third medical data, when the second user terminal is authenticated and the information subject approves the delivery of the medical data, the medical data distribution server The third medical data corresponding to the medical data transfer request of the user terminal and distribution information of the third medical data may be retrieved.

In the step of transmitting the third medical data ( S250 ), the medical data distribution server may select the retrieved third medical data and transmit the third medical data to the second user terminal. The third medical data may be encrypted, and the second user terminal may decrypt the third medical data using a decryption key. The second user terminal may share a decryption key with the first user terminal, or may share a decryption key with a plurality of user terminals constituting a consortium including the second user terminal.

In the step of updating the distribution information of the third medical data (S250), the medical data distribution server updates the distribution information of the third medical data and stores it distributedly on the block chain network.

The distribution information of the third medical data includes information related to the generation (processing) subject of the third medical data, information related to the receiving subject, transaction date information, information related to the data transfer consent of the data subject, and a hash corresponding to the third medical data It may be a block structure containing a value.

The medical data distribution server may compare a hash value corresponding to the third medical data with the third medical data to determine whether the third medical data is forged or forged.

The second user terminal may process the received third medical data to produce fourth medical data. The fourth medical data is retransmitted to the medical data distribution server according to the medical data distribution method described above, and is stored in a database and blockchain network. In an embodiment of the present invention, the fourth medical data may be transmitted to the information subject terminal to deliver medical related information to the information subject.

7 is a table for explaining distribution information of medical data according to an embodiment of the present invention.

Referring to FIG. 7 , as described above, the medical data distribution information corresponds to the medical data generation (processing) subject-related information, the receiving subject-related information, the transaction date information, the data transfer consent-related information of the data subject, and the medical data. It may be a block structure including a hash value of

The information related to the data transfer consent of the data subject may be obtained by confirming whether the data subject consents to the transfer to the receiving subject from the data subject through on-line or off-line when generating medical data.

The hash value corresponding to the medical data may be compared with medical data stored in a database and used to determine whether the medical data is forged or forged.

The medical data distribution system according to an embodiment of the present invention can manage the distribution process of medical data and check whether the medical data is forged or altered by storing the distribution information on the block chain network. In addition, by using a separate database to store de-identified and encrypted medical data, it is possible to overcome the problem of blockchain networks in which the amount of data that can be stored in one block structure is limited. In addition, by deleting medical data from the database, not from the blockchain network, which cannot be substantially changed or discarded, it is possible to satisfy the medical data disposal requirements under the Medical Act and ensure the choice of information subjects.

8 is a block diagram illustrating a medical data distribution server according to an embodiment of the present invention.

The medical data distribution server 100 may include a storage medium 110 , a communication unit 120 , an input/output unit 130 , and a processor 140 .

The medical data distribution server 100 includes a storage medium 110 storing various data for overall operations, such as a program for processing or controlling the processor 140 . The storage medium may store a plurality of application programs (application programs or applications) driven in the medical data distribution server 100 , data for the operation of the medical data distribution server 100 , and instructions. At least some of these application programs may be downloaded from an external server through wireless communication. In addition, at least some of these application programs may exist on the medical data distribution server 100 from the time of shipment for a basic function of the medical data distribution server 100 . The application program may be stored in a storage medium and driven to perform an operation (or function) of the medical data distribution server 100 by the processor 140 .

The communication unit 120 is configured to transmit and receive data to and from devices such as a server and other user terminals. The communication unit 120 includes a Bluetooth communication unit, a BLE (Bluetooth Low Energy) communication unit, a near field communication unit, a WLAN (Wi-Fi) communication unit, a Zigbee communication unit, an infrared (IrDA, infrared Data Association) communication unit, a WFD ( It may include a Wi-Fi Direct) communication unit, an ultra wideband (UWB) communication unit, a short-distance communication unit such as an Ant+ communication unit, a mobile communication network, or a wired Ethernet network.

The input/output unit 130 may display an interface generated by the medical data distribution server 100 by the storage medium 110 . According to an embodiment of the present invention, the input/output unit 130 may display a user interface for an input user input. The input/output unit 130 may output stored graphic data, visual data, auditory data, and vibration data under the control of the storage medium 110 . The input/output unit 130 may be implemented with various types of display panels. For example, the display panel is a liquid crystal display (LCD), organic light emitting diode (OLED), active-matrix organic light-emitting diode (AM-OLED), liquid crystal on silicon (LcoS), digital light processing (DLP), etc. It can be implemented with various display technologies. Also, the input/output unit 130 may be coupled to at least one of a front area, a side area, and a rear area of the display panel in the form of a flexible display.

The input/output unit 130 may be implemented as a touch screen having a layer structure. The touch screen may have a function of detecting not only a display function but also a touch input position and a touched area, as well as a touch input pressure, and also has a function of detecting a proximity touch as well as a real-touch. can

The input/output unit 130 may include a user interface for inputting various information to the medical data distribution server 100 .

The processor 140 is a configuration for controlling the medical data distribution server 100 as a whole. Specifically, the processor 140 controls the overall operation of the platform server 100 using various programs stored in the storage medium 110 of the medical data distribution server 100 . For example, the processor 120 may include a CPU, a RAM, a ROM, and a system bus. Here, the ROM is a configuration in which an instruction set for system booting is stored, and the CPU copies the operating system stored in the storage medium 110 of the platform server 100 to the RAM according to the instructions stored in the ROM, and executes the O/S. Boot the system. Upon completion of booting, the CPU may perform various operations by copying various applications stored in the storage medium 110 to the RAM and executing them. Although it has been described above that the platform server 100 includes only one CPU, it may be implemented with a plurality of CPUs (or DSPs, SoCs, etc.).

According to an embodiment of the present invention, the processor 140 may be implemented as a digital signal processor (DSP) processing a digital signal, a microprocessor, or a time controller (TCON). However, the present invention is not limited thereto, and a central processing unit (CPU), a micro controller unit (MCU), a micro processing unit (MPU), a controller, an application processor (AP), or It may include one or more of a communication processor (CP) and an ARM processor, or may be defined by a corresponding term. In addition, the processor 140 may be implemented as a system on chip (SoC), large scale integration (LSI), or a field programmable gate array (FPGA) having a built-in processing algorithm.

In response to the registration request of the first medical data of the first user terminal, the processor 140 checks whether the first user terminal is authenticated, and when the first user terminal is authenticated, the first medical data It is configured to store in a database, and to store the distribution information of the first medical data in a blockchain network.

Here, in the first medical data, the first user terminal deletes the first information including the personal identification information of the information subject from the second medical data, and adds the second information including the personal information of the information subject to the value. It may be grouped according to the standard, converted and encrypted according to the medical information transmission standard.

Here, the distribution information of the first medical data includes information related to the generation subject of the first medical data, information related to the receiving subject, transaction date information, information related to data transfer consent of the data subject, and a hash corresponding to the first medical data. It may be a block structure containing a value.

Here, whether the first user terminal is authenticated is determined by the processor 140 requesting the first authentication that is the knowledge-based authentication to the first user terminal, and when the first authentication is confirmed, the first user terminal It can be verified by requesting second authentication, which is ownership-based authentication or biometric-based authentication.

In addition, the processor 140 receives a medical data transfer request from the second user terminal, checks whether the second user terminal is authenticated, and checks whether the medical data transfer is approved by the information subject of the medical information, , when the second user terminal is authenticated, search for third medical data corresponding to the medical data transfer request and distribution information of the third medical data, and transmit the third medical data to the second user terminal And, it may be configured to update and store the distribution information of the third medical data.

In this case, the second user terminal may share a decryption key with the first user terminal, and the second user terminal may decrypt the third medical data using the decryption key.

The system described above may be implemented as a hardware component, a software component, and/or a combination of the hardware component and the software component. For example, devices and components described in the embodiments may include, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate array (FPGA). , a programmable logic unit (PLU), microprocessor, or any other device capable of executing and responding to instructions, may be implemented using one or more general purpose or special purpose computers. The processing device may execute an operating system (OS) and one or more software applications executed on the operating system. A processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For convenience of understanding, although one processing device is sometimes described as being used, one of ordinary skill in the art will recognize that the processing device includes a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that can include For example, the processing device may include a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as parallel processors.

Software may comprise a computer program, code, instructions, or a combination of one or more thereof, which configures a processing device to operate as desired or is independently or collectively processed You can command the device. The software and/or data may be any kind of machine, component, physical device, virtual equipment, computer storage medium or apparatus, to be interpreted by or to provide instructions or data to the processing device. , or may be permanently or temporarily embody in a transmitted signal wave. The software may be distributed over networked computer systems and stored or executed in a distributed manner. Software and data may be stored in one or more computer-readable recording media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc. alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiment, or may be known and available to those skilled in the art of computer software. Examples of the computer-readable recording medium include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic such as floppy disks. - includes magneto-optical media, and hardware devices specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like.

Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

In the above, the configuration and features of the present invention have been described based on the embodiments according to the present invention, but the present invention is not limited thereto. Various changes or modifications can be made by those skilled in the art to which the present invention pertains within the spirit and scope of the present invention, and therefore such changes or modifications fall within the scope of the appended claims.

100: medical data distribution server
110: storage medium 120: communication unit
130: input/output unit 140: processor

Claims (16)

generating, by the first user terminal, first medical data;
transmitting, by the first user terminal, the first medical data registration request to a medical data distribution server;
checking, by the medical data distribution server, whether the first user terminal is authenticated in response to the first medical data registration request from the first user terminal;
The medical data distribution server, when the first user terminal is authenticated, storing the first medical data in a database, and distributing and storing the distribution information of the first medical data in a blockchain network; Data distribution methods. According to claim 1,
The step of generating the first medical data includes:
deleting first information including personally identifiable information of the data subject from the second medical data;
grouping second information including personal information of the information subject from the second medical data according to a value;
converting the second medical data according to a medical information transmission standard; and
Including; encrypting the converted second medical data to generate the first medical data;
The personally identifiable information of the data subject includes name, resident registration number, data subject ID and address;
The personal information of the information subject includes age, gender, income, height and weight, medical data distribution method. 3. The method of claim 2,
wherein the medical information transmission standard is Fast Healthcare Interoperability Resources (FHIR). According to claim 1,
The step of confirming whether the first user terminal is authenticated,
requesting, by the medical data distribution server, a first authentication to the first user terminal; and
When the first authentication is confirmed, the medical data distribution server requesting a second authentication to the first user terminal; including,
The first authentication is knowledge-based authentication,
wherein the second authentication is ownership-based authentication or biometric-based authentication. According to claim 1,
wherein the database is a non-relational database. According to claim 1,
The distribution information of the first medical data is,
The first medical data generation subject-related information, receiving subject-related information, transaction date information, data transfer consent-related information of the information subject, and a block structure including a hash value corresponding to the first medical data, a medical data distribution method . According to claim 1,
receiving, by the medical data distribution server, a medical data transfer request from a second user terminal;
checking whether the second user terminal is authenticated;
checking whether the medical data is approved for delivery by the information subject of the medical data;
retrieving, by the medical data distribution server, third medical data corresponding to the medical data transmission request and distribution information of the third medical data when the second user terminal is authenticated; and
The medical data distribution server transmits the third medical data to the second user terminal, and updates and stores the distribution information of the third medical data. 8. The method of claim 7,
The second user terminal shares a decryption key with the first user terminal,
The second user terminal decrypts the third medical data using the decryption key, the medical data distribution method. 8. The method of claim 7,
The medical data distribution method further comprising the step of determining, by the medical data distribution server, whether to change the third medical data by using a hash value corresponding to the third medical data included in the third medical data distribution information . It includes a storage medium, a communication unit, and one or more processors,
the one or more processors
In response to the registration request of the first medical data of the first user terminal, check whether the authentication of the first user terminal,
When the first user terminal is authenticated, the first medical data is stored in a database,
A medical data distribution system, configured to store the distribution information of the first medical data in a blockchain network 11. The method of claim 10,
The first medical data is
The first user terminal deletes the first information including the personal identification information of the information subject from the second medical data,
grouping the second information including the personal information of the data subject according to a value;
A medical data distribution system that is converted and encrypted according to the medical information transmission standard. 11. The method of claim 10,
The distribution information of the first medical data is,
A medical data distribution system, which is a block structure including generation subject-related information of the first medical data, receiving subject-related information, transaction date information, data transfer consent-related information of the information subject, and a hash value corresponding to the first medical data . 11. The method of claim 10,
Whether the first user terminal is authenticated,
The processor requests a first authentication that is a knowledge-based authentication to the first user terminal,
When the first authentication is confirmed, the medical data distribution system is confirmed by requesting a second authentication, which is an ownership-based authentication or a biometric-based authentication, from the first user terminal. 11. The method of claim 10,
The processor is
receiving a medical data transfer request from the second user terminal;
Check whether the second user terminal is authenticated,
Check whether the transfer of the medical data is approved by the information subject of the medical data,
If the second user terminal is authenticated, search for third medical data corresponding to the medical data transfer request and distribution information of the third medical data;
transmitting the third medical data to the second user terminal;
and update and store the distribution information of the third medical data. 15. The method of claim 14,
The second user terminal shares a decryption key with the first user terminal,
The second user terminal decrypts the third medical data using the decryption key, a medical data distribution system. A computer program stored in a computer-readable storage medium for executing the method of any one of claims 1 to 9 using a computing device.

Images