RU98104U1 - DISTRIBUTED AUTOMATED HEALTH MONITORING SYSTEM - Google Patents

Abstract

 Distributed automated health monitoring system, including a centralized database and at least one distributed doctor database and one remote patient database, a centralized database (CBD) contains all patient data automatically received via a secure VPN connection from a remote database when gaining access to the Internet, as well as reference information, data on drugs, examination standards, the Central Clinical Hospital is based on a database management system nbsp; using client-server technology, the CDB is installed on a dedicated server using a RAID disk array of at least level 5, the remote patient database (UBDP) is based on a micro-miniature personal computer (MPC) with information protection using an electronic digital signature on based on the hardware key included in the IPC, and contains the Electronic Health Card (EHC) software, with the help of which patient data, incl. sistent with personal data, survey data, including their images, comments, reports and opinions, and information on patient history, diagnosis and ongoing medical activities; patient data, as well as reference information, data on medicines, and examination standards for a secure VPN connection, are transferred to the doctor’s distributed database (RBDV), which is based on a microminiature personal computer with information protection using a hardware key

Description

The present utility model relates to medical technology.

The prior art knows a fairly large number of medical information systems that are widely used in medical institutions and perform various functions, including collecting information about the patient, his illness, medications taken, etc. (for example, patents of the Russian Federation 2145114, 2299008, 84207).

The closest analogue of the proposed utility model is a system for remote monitoring of blood pressure and cardiovascular activity of patients with cardiovascular diseases (RF patent 86088). The known system contains a terminal with devices for measuring blood pressure and cardiovascular activity of the patient during the day, personal computers for storing the measured data and analysis, means for transmitting these data via the Internet to the Central Server database for their permanent storage and upon request of the working group of doctors consultants from the central server storage base to their personal computers.

The disadvantages of the known systems is that the most vulnerable link in any computer system is the protection of stored and transmitted information. Storage of data on standard drives does not provide sufficient protection against damage from malware, as these standard drives do not have special protection. Transmission of data via insecure communication channels also cannot guarantee the safety of information due to probable attacks or scanning by cybercriminals, which they do for unauthorized copying.

The technical result of the proposed utility model is:

- ensuring the operation of the system with a high degree of information security through the use of micro-miniature personal computers (MGG) and the use of a secure VPN connection to transfer patient data.

The essence of the proposed utility model is as follows: Distributed automated health monitoring system (RASMZ) (Fig. 1) including a centralized database and at least one distributed doctor database and one remote patient database.

The centralized database (CBD) contains data from all patients (including the entire medical history for the entire study period). The CBD automatically receives patient data via a secure VPN connection from a remote patient database when accessing the Internet. In addition, the CBD also contains background information, data on drugs, examination standards, which helps doctors by automating the process of patient care. The centralized database is based on a database management system (DBMS) using client-server technology. The CDB is installed on a dedicated server, which uses a RAID RAID array of at least level 5 to ensure fault tolerance and increase the speed of reading / writing information. Often changing data is stored on remote databases - a distributed doctor database (DBDV) and a remote patient database (DBDP), which are synchronized with a specified frequency with data stored in the CDB using replication over a secure VPN connection. The use of a client-server DBMS allows reducing network traffic between the CDB and the remote databases of UBDP and RBDV.

The remote database of the GUBDSH patient is based on a microminiature personal computer (IPC) with information protection using an electronic digital signature based on the hardware key included in the IPC. The IPC is based on a utility model protected by RF patent No. 89256. The IPC allows you to reliably store and protect the patient’s personal data from unauthorized use, satisfying the requirements of the Federal Law of the Russian Federation of July 27, 2006 No. 152-FZ “On Personal Data”.

A high degree of information security in the IPC is achieved through the use of hardware and software data encryption. Each IPC used (Fig. 2) contains interconnected at least one processor, non-volatile memory, random access memory and a unique hardware key. Structurally, the IPC is made in the form of a USB flash drive. Having portable dimensions, the IPC provides not only storage of information, but also the execution of application programs inside its RAM. For the IPC to work, an external personal computer with a free USB connector is required. After connecting to an external computer via the USB connector, the MPC receives power and input / output facilities of an external personal computer. On the screen of the external computer in a virtual window displays information about the programs running inside the IPC. Thus, on the one hand, the inalienability (inextricability of interconnections) of software and user data is ensured within one portable device, and on the other hand, it is possible to use developed input-output means of an external computer, such as a keyboard, mouse, monitor, communication channels . In addition, the use of the IPC eliminates the need to install software on external computers and protects programs and user data from unauthorized use and damage from malicious programs. IPC non-volatile memory stores software and data. As software, they can be used, for a doctor, for example, “Electronic Doctor Organizer”, and for patients, “Electronic Health Card”.

The non-volatile memory of the IPC is divided into three areas: software, user, and research. The program area is used to store the operating system and application programs. A user area is required to store personal data and patient history. The research data area serves to accumulate and subsequently transmit to the CBD general information on the results of diagnostic and clinical studies for further analysis and study in research work.

The hardware key has two purposes: a unique serial number of the product for personal binding to a specific patient or doctor and a private key of electronic digital signature (EDS) for the protection of electronic documents.

As already mentioned above, UBDP contains the software "Electronic health card" (EKZ). Using the software used, patient data, including personal data, examination data, including received images, comments, protocols and conclusions, patient history, diagnoses and treatment measures, are accumulated, processed and transmitted over a secure VPN connection to the CDB with which the doctor conducts treatment. From the CDB via a secure VPN connection, patient data, as well as reference information, data on drugs, examination standards, are transferred to a distributed doctor database.

The distributed database of the doctor (RBDV) is also based on a micro-miniature personal computer (RF patent No. 89256) with data protection using a hardware key and contains software that stores, processes and transmits via a secure VPN connection to the central dialysis center, patient data, with which the doctor is treating. For the implementation of RBDV in the IPC, for example, the software “Electronic Doctor Organizer” (EOV) can be installed.

The data stored in the UBDP and RBDV, with a given frequency when they access the Internet, are synchronized with the data stored in the CSD using replication over a secure VPN connection.

The interaction of the components of a distributed automated health monitoring system (RASMZ) is as follows.

The CBD is populated with patient data connected to the RASMZ monitoring system. Each patient receives personal health records in the form of IPC with the Electronic Health Card software. Each patient and his personal monitoring tool are registered in the CBD by the serial number of the IPC. As new patients connect, the contents of the CBD are updated by entering new data and registering a new patient and the serial number of his IPC. To conduct treatment and analyze the dynamics of the patient’s health status, consultants are registered in the Central Clinical Hospital, each of whom is issued with an IPC, for example, with the “Electronic Doctor Organizer” software. The IPC of each consultant doctor is registered with the CBD by its serial number. Each consultant physician is assigned patients whose condition he is monitoring. In the non-volatile memory of the IPC of doctors, personal data, anamnesis and research results of these patients are stored.

During the observation of the patient and the treatment, the patient’s IPC stores the results of the research, the appointment of a doctor and records the current state of health. In the case when the patient’s IPC gains access to the Internet during operation, automatic replication takes place: all changed data is transferred and stored in the CDB. Replication is performed through a secure VPN connection, which eliminates the possibility of interception or corruption of data during a communication session. Thus, the safety of data in case of loss or failure of the IPC of the patient is ensured.

In the case when the physician’s IPC gains access to the Internet during operation, automatic replication takes place: all changed patient data monitored by the doctor are updated in the non-volatile memory of the physician’s IPC by transmitting information from the CDB to the physician’s IPC via a secure VPN connection .

As a result of the interaction of the components of the RASMZ system, all information is stored only in the CDB and in the IPC of doctors and patients. No information remains on external computers and cannot be copied or transferred to a third party. During replication, data protection is ensured not only by means of a VPN connection, but also by encrypting all transmitted electronic documents using an electronic digital signature.

The interaction of the IPC of a doctor or patient with CBD is as follows. If you have access to the Internet during the IPC, a secure VPN connection with the server of the centralized communication center is automatically activated. After passing the standard authentication procedure for the IPC, access to the data of the CBD is opened. Before allowing data to be read / written, additional authentication takes place by checking for the presence of a previously registered IPC key. In case of a discrepancy between the IPC key and one of the keys registered in the CBD, access to data is denied and the connection is disconnected. If the presence of the IPC key in the CBD is confirmed, read / write access is opened. Thus, access to any computing means not previously registered with the CBD is restricted.

Summarizing the above, the proposed distributed automated system, in addition to automated monitoring of patient health, recording the fact that the doctor provided medical services to the patient and monitoring the dynamics of the medical services provided (by transmitting patient data via a secure VPN connection to a centralized database), minimizing the likelihood of medical errors (through the use of the software "Electronic health card" containing formalized in accordance etstvii with approved standards information as filling medical documentation forms, and medical assistance), also provides a high degree of protection of information systems through the use of microminiature personal computers and use data secure VPN-connections of patients.

Claims (1)

Distributed automated health monitoring system, including a centralized database and at least one distributed doctor database and one remote patient database, a centralized database (CBD) contains all patient data automatically received via a secure VPN connection from a remote database when gaining access to the Internet, as well as reference information, data on drugs, examination standards, the Central Clinical Hospital is based on a database management system nbsp; using client-server technology, the CDB is installed on a dedicated server using a RAID disk array of at least level 5, the remote patient database (UBDP) is based on a micro-miniature personal computer (MPC) with information protection using an electronic digital signature on based on the hardware key included in the IPC, and contains the Electronic Health Card (EHC) software, with the help of which patient data is accumulated, processed and transmitted via a secure VPN connection to the central dialing station, incl. sistent with personal data, survey data, including their images, comments, reports and opinions, and information on patient history, diagnosis and ongoing medical activities; patient data, as well as reference information, data on drugs, and examination standards for a secure VPN connection, are transferred to a distributed doctor database (RBDV), which is based on a micro-miniature personal computer with information protection using a hardware key and contains software , in which the data of patients with whom the doctor is treating are accumulated, processed and transmitted over a secure VPN connection to the Central Clinical Hospital; the data stored in the UBDP and RBDV, with a given frequency, when accessing the Internet is synchronized with the data stored in the CSD, using replication over a secure VPN connection.