201218010 六、發明說明： 【發明所屬之技術領域】 [0001] 本發明有關於一種電子病歷搜尋系統與方法，其可確認 搜尋電子病歷之使用者有無被授權調閱，及保障經搜尋 所要調閱之電子病歷的内容之完整性於病歷完成後未經 竄改。 【先前技術】 [0002] 在治療過程，醫生問診病人的症狀，並將症狀記錄於病 歷之中，以作為下次為病人治療之參考，及了解治療的 過程與成效，並可作為醫學研究之用途。 [麵]對於文書作業電子化，已有不少:醫療中心開知於電腦系 統建立電子病歷（Electronic Medical Record， EMR)(如XML、PDF、DOC、TXT、IMAGE等資料格式），來 減少紙本病歷的作業流程與紙張的使用。並且，電子病 歷已為國際趨勢及我國大力推動之公共政策，在透過電 子簽早技術與法律保護’將紙本病歷以電子病歷來取代 〇 „ii: 陶]對於電子病歷之n集與醫魏所間資料流通交換技術日 •曰及i_在巨量的電子病歷儲存資料中難以讓醫療 從業人員能夠取得正確的關聯性資料再利用，而以提升 醫療服務品質水準，再者，如何兼顧病人隱私權益的保 護，也為現今社會主流價值觀的_大考量。 【發明内容】 099135663 本心月之目的係提供—種電子病歷搜尋系統與方法，專 用於搜尋歸電子絲資狀錢相關性_以及授權 表單編號A0101 油^ · 0992062331-0 [0005] 201218010 過濾功能的搜尋機制，以保障病患病歷之隱私，而又兼 顧醫師診斷輔助與醫學研究所需之用途。 [0006] 本發明之第一態樣提供一種電子病歷搜尋方法，該方法 包含下列步驟： [0007] 在一人機介面操作裝置上輸入所要搜尋之字串及操作該 人機介面操作裝置之使用者之憑證資料； [0008] 由該人機介面操作裝置將字串及憑證資料經由一電子病 歷搜尋引擎應用程式介面模組傳送至一醫學搜尋關鍵字 分解與比對模組； [0009] 由該醫學搜尋關鍵字分解與比對模組將字串分解成至少 一個醫學名詞，並讀取一電子病歷索引儲存及快取處理 模組所儲存之具有電子病歷之電子病歷索引，而將所分 解之醫學名詞與所讀取之電子病歷索引進行比對，由該 醫學搜尋關鍵字分解與比對模組將比對匹配之電子病歷 表列於一電子病歷清單中； [0010] 由該醫學搜尋關鍵字分解與比對模組將使用者之憑證資 料傳送至一病歷調閱授權模組，由該病歷調閱授權模組 之一病歷調閱授權名單比對使用者之憑證資料，以判斷 使用者是否准予授權調閱病歷，並將判斷結果傳送至該 醫學搜尋關鍵字分解與比對模組；以及 [0011] 當該醫學搜尋關鍵字分解與比對模組得知使用者准予授 權調閱病歷時，由該醫學搜尋關鍵字分解與比對模組將 具有電子病歷之該電子病歷清單經由該電子病歷搜尋引 擎應用程式介面模組傳送至該人機介面操作裝置，而在 099135663 表單編號A0101 第4頁/共27頁 0992062331-0 201218010 [0012] [0013] ❹ [0014] Ο [0015] 該人機介面操作裝置顯示該電子病歷清單。 根據本發明之第-態樣之電子病歷搜尋方法，更包含下 列步驟： 由該醫學搜相鍵字分解與比龍組讀取該電子病歷索 引儲存及快取處理模朗儲存之該電子病歷清單中之電 子病歷内之-數位憑證、—電子奸及—電子病歷本文 ，並將該數位憑證、該電子簽體及該電子病歷本文傳送 Ρ電子簽章驗證，由該電子簽章驗證模組之一演 算法驗證該數位驗、該電子簽體及該電子病歷本文的 真實性及完整性，並根據驗證結果產生對應該電子病歷 之-簽體驗證符號且傳送至該醫學料_字分解與比 對模組，而由該醫學搜尋_字分解與比龍組將該簽 體驗證符號標註於該電子病歷清單所驗證之電子病歷的 位置處；以及 由該醫學搜尋關鍵字分解與比對模組讀取該電子病歷索 引儲存及快取處理樺組所儲存之該電子病歷清單中之電 子病歷内之該電子簽體及一時戳，並將該電子簽體及該 時戳傳送至一電子時戮驗證模組，由該電子時戮驗證模 組之一演算法驗證該電子簽體及該時戳的真實性，並根 據驗證結果產生對應該電子病歷之一時戳驗證符號且傳 送至該醫學搜尋關鍵字分解與比對模組，而由該醫學搜 尋關鍵字分解與比對模組將該時戳驗證符號標註於該電 子病歷清單所驗證之電子病歷的位置處。 根據本發明之第一態樣之電子病歷搜尋方法，其中，當 099135663 表單煸號Α0101 第5頁/共27 1 0992062331-0 201218010 該醫學搜尋關鍵字分解與比對模組得知使用者准予授權 調閱病歷時，由該醫學搜尋關鍵字分解與比對模組將已 標註該簽體驗證符號與該時戳驗證符號之電子病歷之該 電子病歷清單經由該電子病歷搜尋引擎應用程式介面模 組傳送至該人機介面操作裝置，而在該人機介面操作裝 置顯示已標註該簽體驗證符號與該時戳驗證符號之該電 子病歷清單。 [0016] 根據本發明之第一態樣之電子病歷搜尋方法，其中，由 一電子病歷蒐集索引轉換模組從複數個資料庫中蒐集一 病歷之一病歷資料、該數位憑證、該電子簽體及該時戳 ，並轉換為具有該電子病歷本文、該數位憑證、該電子 簽體及該時戳之該電子病歷的格式，與產生用以比對之 該電子病歷之電子病歷索引，由該電子病歷蒐集索引轉 換模組將所轉換之該電子病歷及其電子病歷索引傳送至 並儲存於該電子病歷索引儲存及快取處理模組。 [0017] 本發明之第二態樣提供一種電子病歷搜尋系統，該系統 包含： [0018] 一人機介面操作裝置，輸入所要搜尋之字串及操作該人 機介面操作裝置之使用者之憑證資料，顯示一電子病歷 清單； [0019] 一電子病歷搜尋引擎應用程式介面模組，接收在該人機 介面操作裝置所輸入之字串及憑證資料並傳送之，及接 收該電子病歷清單以傳送至該人機介面操作裝置； [0020] 一電子病歷索引儲存及快取處理模組，儲存電子病歷及 099135663 表單編號A0101 第6頁/共27頁 0992062331-0 201218010 [0021]201218010 VI. Description of the Invention: [Technical Field] [0001] The present invention relates to an electronic medical record searching system and method, which can confirm whether a user searching for an electronic medical record is authorized to access, and to ensure that the search is to be accessed. The integrity of the content of the electronic medical record has not been tampered with after the completion of the medical record. [Prior Art] [0002] During the treatment process, the doctor asks the patient's symptoms and records the symptoms in the medical record as a reference for the next treatment of the patient, and understands the course and effect of the treatment, and can be used as a medical research. use. [Face] There are many electronic documents. The medical center has opened a computer system to establish Electronic Medical Record (EMR) (such as XML, PDF, DOC, TXT, IMAGE, etc.) to reduce paper. The workflow of this medical record and the use of paper. Moreover, the electronic medical record has become an international trend and a public policy promoted by China. It has replaced the paper medical record with an electronic medical record through electronic sign-on early technology and legal protection. ii ii: Tao] For the electronic medical record n set and medical Wei The data exchange technology day 曰 and i_ in the huge amount of electronic medical record storage data is difficult for medical practitioners to obtain the correct correlation data reuse, in order to improve the quality of medical services, and how to balance patients The protection of privacy rights is also a big consideration for the mainstream values of today's society. [Invention] 099135663 The purpose of this heart month is to provide an electronic medical record search system and method for searching for the relevance of electronic money. Authorization Form No. A0101 Oil ^ · 0992062331-0 [0005] 201218010 The search function of the filtering function to protect the privacy of the patient's medical record, while taking into account the needs of physicians' diagnostic aids and medical research. [0006] The aspect provides an electronic medical record searching method, the method comprising the following steps: [0007] on a human-machine interface operating device Entering the string to be searched and the voucher information of the user operating the HMI device; [0008] The human interface device transmits the string and voucher data via an electronic medical record search engine application interface module to a medical search keyword decomposition and comparison module; [0009] the medical search keyword decomposition and comparison module decomposes the string into at least one medical noun, and reads an electronic medical record index storage and cache processing module The electronic medical record index of the electronic medical record stored in the group is compared, and the decomposed medical term is compared with the read electronic medical record index, and the electronic medical record is matched by the medical search keyword decomposition and comparison module. The list is listed in an electronic medical record list; [0010] the medical search keyword decomposition and comparison module transmits the user's voucher data to a medical record access authorization module, and the medical record access authorization module is The medical record access authorization list compares the user's voucher data to determine whether the user is authorized to access the medical record, and transmits the judgment result to the medical search key. Decomposition and comparison module; and [0011] when the medical search keyword decomposition and comparison module learns that the user grants authorization to access the medical record, the medical search keyword decomposition and comparison module will have an electronic medical record The electronic medical record list is transmitted to the human machine interface operating device via the electronic medical record search engine application interface module at 099135663 Form No. A0101 Page 4 / Total 27 Page 0992062331-0 201218010 [0012] [0013] ❹ [ [0015] The human-machine interface operating device displays the electronic medical record list. The electronic medical record searching method according to the first aspect of the present invention further includes the following steps: Decomposing the medical search key word and reading the group Taking the electronic medical record index storage and cache processing, the digital medical record in the electronic medical record list stored in the electronic medical record list, the electronic document and the electronic medical record, and the digital certificate, the electronic tag and the electronic The medical record is transmitted to the electronic signature verification. The algorithm of one of the electronic signature verification modules verifies the authenticity of the digital test, the electronic signature and the electronic medical record. Integrity, and according to the verification result, the signature verification symbol corresponding to the electronic medical record is generated and transmitted to the medical material_word decomposition and comparison module, and the medical search_word decomposition and the Bilong group verify the signature a symbol is marked at a location of the electronic medical record verified by the electronic medical record list; and the medical search keyword decomposition and comparison module reads the electronic medical record storage and cache processing the electronic medical record list stored by the birch group The electronic signature and the time stamp in the electronic medical record, and transmitting the electronic signature and the time stamp to an electronic time verification module, and verifying the electronic signature by an algorithm of the electronic time verification module And the authenticity of the time stamp, and generating a time stamp verification symbol corresponding to the electronic medical record according to the verification result and transmitting to the medical search keyword decomposition and comparison module, and the medical search keyword decomposition and comparison module The timestamp verification symbol is marked at the location of the electronic medical record verified by the electronic medical record list. According to the electronic medical record searching method of the first aspect of the present invention, wherein the 099135663 form nickname Α 0101 5th page / total 27 1 0992062331-0 201218010 the medical search keyword decomposition and comparison module knows that the user grants authorization When the medical record is accessed, the medical search keyword decomposition and comparison module passes the electronic medical record list of the electronic medical record that has been marked with the signature verification symbol and the time stamp verification symbol via the electronic medical record search engine application interface module. And transmitting to the human interface device, and displaying, by the human interface device, the electronic medical record list marked with the signature verification symbol and the time stamp verification symbol. [0016] The electronic medical record searching method according to the first aspect of the present invention, wherein an electronic medical record collection index conversion module collects a medical record data, a digital certificate, and the electronic signature from a plurality of databases. And the time stamp is converted into a format having the electronic medical record of the electronic medical record, the digital certificate, the electronic signature and the time stamp, and an electronic medical record index for generating the electronic medical record for comparison, The electronic medical record collection index conversion module transmits and converts the converted electronic medical record and its electronic medical record index to the electronic medical record index storage and cache processing module. [0017] A second aspect of the present invention provides an electronic medical record searching system, the system comprising: [0018] a human-machine interface operating device, inputting a string to be searched and a voucher data of a user operating the human-machine interface operating device Displaying an electronic medical record list; [0019] an electronic medical record search engine application interface module, receiving and transmitting the string and voucher data input by the human-machine interface operating device, and receiving the electronic medical record list for transmission to The human-machine interface operating device; [0020] an electronic medical record index storage and cache processing module, storing electronic medical records and 099135663 Form No. A0101 Page 6 / 27 pages 0992062331-0 201218010 [0021]
[0022] [0023] ο [0024] [0025] [0026] 其電子病歷索引； 一醫學搜尋關鍵字分解與比對模組，接收該電子病歷搜 尋引擎應用程式介面模組所傳送之字串及憑證資料，將 字串分解成至少一個醫學名詞，並讀取該電子病歷索引 儲存及快取處理模組所儲存之具有電子病歷之電子病歷 索引，而將所分解之醫學名詞與所讀取之電子病歷索引 進行比對，將比對匹配之電子病歷表列於該電子病歷清 單中，將該電子病歷清單傳送至該電子病歷搜尋引擎應 用程式介面模組；以及 一電子病歷安全保密公開金鑰基礎建設伺服器，其包含 一病歷調閱授權模組，接收由該醫學搜尋關鍵字分解與 比對模組所傳送之使用者之憑證資料，比對該病歷調閱 授權模組之一病歷調閱授權名單與使用者之憑證資料， 以判斷使用者是否准予授權調閱病歷，並將判斷結果傳 送至該醫學搜尋關鍵字分解與比對模組； 其中，當該醫學搜尋關鍵字分解與比對模組得知使用者 准予授權調閱病歷時，由該醫學搜尋關鍵字分解與比對 模組將具有電子病歷之該電子病歷清單經由該電子病歷 搜尋引擎應用程式介面模組傳送至該人機介面操作裝置 ，而在該人機介面操作裝置顯示該電子病歷清單。 根據本發明之第二態樣之電子病歷搜尋系統，其中，該 電子病歷安全保密公開金鑰基礎建設伺服器更包含： 一電子簽章驗證模組，接收由該醫學搜尋關鍵字分解與 099135663 表單編號Α0101 第7頁/共27頁 0992062331-0 201218010 比對模組讀取該電子病歷索引儲存及快取處理模組所儲 存之該電子病歷清單中之電子病歷内之一數位憑證、一 電子簽體及一電子病歷本文，該電子簽章驗證模組之一 演算法驗證該數位憑證、該電子簽體及該電子病歷本文 的真實性及完整性，並根據驗證結果產生對應該電子病 歷之一簽體驗證符號且傳送至該醫學搜尋關鍵字分解與 比對模組；以及 [0027] —電子時戳驗證模組，接收由該醫學搜尋關鍵字分解與 比對模組讀取該電子病歷索引儲存及快取處理模組所儲 存之將該電子病歷清單中之電子病歷内之該電子簽體及 一時戳，由該電子時戳驗證模組之一演算法驗證該電子 簽體及該時戳的真實性，並根據驗證結果產生對應該電 子病歷之一時戳驗證符號且傳送至該醫學搜尋關鍵字分 解與比對模組。 [0028] 根據本發明之第二態樣之電子病歷搜尋系統，其中，該 醫學搜尋關鍵字分解與比對模組將該簽體驗證符號與該 時戳驗證符號分別標註於該電子病歷清單所驗證之電子 病歷的位置處，當該醫學搜尋關鍵字分解與比對模組得 知使用者准予授權調閱病歷時，由該醫學搜尋關鍵字分 解與比對模組將已標註該簽體驗證符號與該時戳驗證符 號之電子病歷之該電子病歷清單經由該電子病歷搜尋引 擎應用程式介面模組傳送至該人機介面操作裝置，而在 該人機介面操作裝置顯示已標註該簽體驗證符號與該時 戳驗證符號之該電子病歷清單。 [0029] 根據本發明之第二態樣之電子病歷搜尋系統，更包含一 099135663 表單編號A0101 第8頁/共27頁 0992062331-0 201218010 電子病歷蒐集索引轉換模組與複數個資料庫，該電子病 歷蒐集索引轉換模組從該等資料庫中蒐集一病歷之一病 歷資料、該數位憑證、該電子簽體及該時戳，並轉換為 具有該電子病歷本文、該數位憑證、該電子簽體及該時 戳之該電子病歷的格式，與產生用以比對之該電子病歷 之電子病歷索引，該電子病歷蒐集索引轉換模組將所轉 換之該電子病歷及其電子病歷索引傳送至該電子病歷索 引儲存及快取處理模組。 ^ 【實施方式】 〇 [0030] 參考以下附圖來說明本發明之較佳實施例。 [0031] 圖1為本發明之電子病歷搜尋系統之方塊圖。在圖1中， 電子病歷搜尋系統10包含一人機介面操作裝置12、一電 子病歷搜尋引擎應用程式介面（Application Inter- f ace，API )模組14、一醫學搜尋關鍵字分解與比對模組 16、一電子病歷索引儲存及快取處理模組18、一電子病 歷蒐集索引轉換模組20、一檢驗檢查資料庫22、一醫學 Q 影像儲存與傳輸資料庫24、一醫院資訊系統資料庫26、 一電子病歷資料庫28、一憑證資料庫30、一電子簽體資 料庫32、一時戳資料庫34及一電子病歷安全保密公開金 錄基礎建設（Public Key Infrastructure，PKI)伺服 器36。電子病歷安全保密公開金鑰基礎建設伺服器36包 含一電子簽章驗證模組38、一電子時戳驗證模組40、一 病歷調閱授權模組42、一黑名單資料庫44及一白名單資 料庫46。以下將描述上述各裝置、模組之功能及操作。 [0032] 例如醫護人員之使用者在人機介面操作裝置12輸入所要 099135663 表單編號Α0101 第9頁/共27頁 0992062331-0 201218010 搜尋之字串及使用者之憑證資料’當醫學搜尋關鍵字分 解與比對模組16得知使用者准予授權調閱病歷時，由醫 學搜尋關鍵字分解與比對模組1 6將已標註—簽體驗證符 號與一時戳驗證符號之電子病歷之一電子病歷清單經由 電子病歷搜尋引擎應用程式介面模組14傳送至人機介面 操作裝置12，而在人機介面操作裝置12顯示已標註簽體 驗證符號與時戳驗證符號之電子病歷清單。 [0033] [0034] [0035] 099135663 其中’人機介面操作裝置12可裝設讀卡裳置（未圖示）， 使用者插入具有使用者之憑證資料的卡片於讀卡裝置， 由讀卡裝置讀取使用者之憑證資料。或由使用者在人機 介面操作裝置12儲存所要搜尋之字串及使用者之憑證資 料，執行人機介面操作裝置12内所建立之程式，在一預 設時間週期後自動讀取所要搜尋之字串及使用者之憑證 資料，錢人機介面操作裝置12將所要搜尋之字串及使 用者之憑證資料經由電子病歷搜尋引擎應用程式介面模 組14傳送至醫學搜尋Μ鍵字分解與比對模組16。 電子病歷搜尋51擎應用程式介面餘U接收在人機介面 操作裝置12所輸人之字串及憑證資料，並將其傳送至醫 學搜尋關鍵字分解與輯模組16，以及接收由醫學搜尋 關鍵字分解與比對模組16所傳送之電子病歷清單並將 該清單傳送至人機介面操作裝置12。 電子病歷31集㈣轉換模組2阿以從檢驗檢查資料庫 、醫學〜像儲存與傳輪資料庫24、醫院資訊系統資料庫 止負科厚2 8、憑證資料庫3 0、電子簽體資_ 庫32及時戳貝料庫34中蒐集一病歷之病歷資料(包含醫 表單編號删1 ^ 1〇 1/^ 27 1 ( 201218010 Ο 資料、病人資料、健康檢查或檢驗資料及診斷治療資料 等）、數位憑證、電子簽體（如主治大夫或護士之簽章）及 時戳，該等資料以HL7 CDA-R2C醫療健康第七層交換標 準、臨床文件架構標準第二版）在電子病歷蒐集索引轉換 模組20中進行轉換，再以W3C XML電子簽章標準 (Electronic Signature Standard)在電子病歷蒐集 索引轉換模組20中轉換為具有電子病歷本文、數位憑證 、電子簽體及時戮之電子病歷的格式，並且電子病歷策 集索引轉換模組20產生用以比對之電子病歷之電子病歷 索引。電子病歷蒐集索弓丨轉换模組2〇將所轉換之電子病 歷及其電子病歷索引傳送至電子病歷索引儲存及快取處 理模組18。 [0036] 電子病歷索弓丨儲存及快取處理模組18儲存由電子病歷蒐 集索引轉換模組20所傳送之電子病歷及其電子病歷索引 ’以供醫學搜尋關鍵字分解與比對模組16讀取之用。[0023] [0024] [0026] [0026] an electronic medical record index; a medical search keyword decomposition and comparison module, receiving the string transmitted by the electronic medical record search engine application interface module and Voucher data, the word string is decomposed into at least one medical term, and the electronic medical record index of the electronic medical record stored in the electronic medical record index storage and cache processing module is read, and the decomposed medical term is read and read The electronic medical record index is compared, and the electronic medical record matching the matching is listed in the electronic medical record list, and the electronic medical record list is transmitted to the electronic medical record search engine application interface module; and an electronic medical record security public key is displayed. The infrastructure server includes a medical record access authorization module, and receives the voucher data of the user transmitted by the medical search keyword decomposition and comparison module, and compares the medical record of the medical record authorization module. Read the authorization list and the user's voucher data to determine whether the user is authorized to access the medical record and transmit the judgment result to the medical search keyword. Decomposition and comparison module; wherein when the medical search keyword decomposition and comparison module learns that the user grants authorization to access the medical record, the medical search keyword decomposition and comparison module will have an electronic medical record The electronic medical record list is transmitted to the human interface operation device via the electronic medical record search engine application interface module, and the electronic medical record list is displayed on the human machine interface operation device. According to a second aspect of the present invention, an electronic medical record search system further includes: an electronic signature verification module, which receives the medical search keyword decomposition and the 099135663 form No. 1010101 Page 7 of 27 0992062331-0 201218010 The comparison module reads one of the digital vouchers and an electronic signature in the electronic medical record in the electronic medical record list stored in the electronic medical record storage and cache processing module. Body and an electronic medical record, an algorithm of the electronic signature verification module verifies the authenticity and integrity of the digital certificate, the electronic signature and the electronic medical record, and generates one of the corresponding electronic medical records according to the verification result. Signing the verification symbol and transmitting it to the medical search keyword decomposition and comparison module; and [0027] an electronic time stamp verification module receiving the electronic medical record index by the medical search keyword decomposition and comparison module The electronic tag and the time stamp in the electronic medical record in the electronic medical record list stored in the storage and cache processing module, by the electronic time One algorithm verification module to verify the authenticity of the electronic signature and the time stamp of the body, and when should produce on one of the electronic medical record validation stamp and sent to the medical symbol search keywords decomposition module in accordance with the ratio of the verification results. [0028] The electronic medical record searching system according to the second aspect of the present invention, wherein the medical search keyword decomposition and comparison module respectively marks the signature verification symbol and the time stamp verification symbol on the electronic medical record list At the location of the verified electronic medical record, when the medical search keyword decomposition and comparison module learns that the user grants authorization to access the medical record, the medical search keyword decomposition and comparison module will have marked the signature verification. The electronic medical record list of the electronic medical record of the symbol and the time stamp verification symbol is transmitted to the human interface operation device via the electronic medical record search engine application interface module, and the human body interface operation device displays the marked verification A list of the electronic medical records of the symbol and the time stamp verification symbol. [0029] According to the second aspect of the present invention, the electronic medical record searching system further includes a 099135663 form number A0101, page 8 / total 27 pages 0992062331-0 201218010 electronic medical record collection index conversion module and a plurality of databases, the electronic The medical record collection index conversion module collects a medical record data, a digital certificate, the electronic signature and the time stamp from the database, and converts the electronic medical record to the electronic medical record, the digital certificate, and the electronic signature And a format of the electronic medical record of the time stamp, and an electronic medical record index for generating the electronic medical record for comparison, the electronic medical record collection index conversion module transmitting the converted electronic medical record and the electronic medical record index thereof to the electronic Medical record index storage and cache processing module. [Embodiment] [0030] A preferred embodiment of the present invention will be described with reference to the following drawings. 1 is a block diagram of an electronic medical record searching system of the present invention. In FIG. 1, the electronic medical record search system 10 includes a human interface interface device 12, an electronic medical record search engine application interface (API) module 14, a medical search keyword decomposition and comparison module. 16. An electronic medical record index storage and cache processing module 18, an electronic medical record collection index conversion module 20, an inspection inspection database 22, a medical Q image storage and transmission database 24, and a hospital information system database 26 An electronic medical record database 28, a voucher database 30, an electronic tag database 32, a time stamp database 34, and an electronic medical record security public key infrastructure (PKI) server 36. The electronic medical record security public key infrastructure server 36 includes an electronic signature verification module 38, an electronic time stamp verification module 40, a medical record authorization module 42, a blacklist database 44, and a white list. Database 46. The functions and operations of the above various devices and modules will be described below. [0032] For example, the user of the medical staff inputs the required number of 099135663 Form No. 1010101, page 9/27 pages 0992062331-0 201218010 Search for the word string and the user's voucher information in the human-machine interface operation device 12 When the comparison module 16 knows that the user grants authorization to access the medical record, the medical search keyword decomposition and comparison module 16 will mark the electronic signature of the electronic medical record with the signature verification symbol and a time stamp verification symbol. The list is transmitted to the human interface device 12 via the electronic medical record search engine application interface module 14, and the electronic medical record list indicating the signature verification symbol and the time stamp verification symbol is displayed on the human interface operation device 12. [0035] [0035] 099135663 wherein the human-machine interface operating device 12 can be equipped with a card reader (not shown), the user inserts a card with the user's credential information into the card reading device, and the card is read. The device reads the user's credential data. Or the user stores the character string to be searched and the user's voucher data in the human interface device operating device 12, executes the program established in the human interface device 12, and automatically reads the searched after a preset time period. The word string and the user's voucher information, the money man-machine interface operating device 12 transmits the word string to be searched and the user's voucher data to the medical search key word decomposition and comparison via the electronic medical record search engine application interface module 14 Module 16. The electronic medical record search 51 engine application interface U receives the string and voucher data input by the human interface device 12 and transmits it to the medical search keyword decomposition and editing module 16, and receives the key from the medical search. The word is decomposed and compared to the electronic medical record list transmitted by the module 16 and transmitted to the human interface device 12. Electronic medical record 31 (4) conversion module 2 Ai from the inspection and inspection database, medical ~ image storage and transfer database 24, hospital information system database, negative account thickness 28, voucher database 30, electronic signature _ Library 32 timely stamped in the shell library 34 to collect medical records of a medical record (including the medical form number deleted 1 ^ 1〇 1 / ^ 27 1 (201218010 Ο data, patient data, health check or test data and diagnostic treatment data, etc.) , digital voucher, electronic signature (such as the signature of the attending doctor or nurse) timely stamp, the data in the HL7 CDA-R2C medical health seventh layer exchange standard, clinical document architecture standard second edition) in the electronic medical record collection index conversion The module 20 performs conversion, and then converts into an electronic medical record collection index conversion module 20 in the electronic medical record collection index conversion module 20 by using the W3C XML electronic signature standard (English) to form an electronic medical record format of the electronic medical record, the digital certificate, and the electronic signature. And the electronic medical record index conversion module 20 generates an electronic medical record index for comparing the electronic medical records. The electronic medical record collection cable conversion module 2 transmits the converted electronic medical record and its electronic medical record index to the electronic medical record index storage and cache processing module 18. [0036] The electronic medical record storage and cache processing module 18 stores the electronic medical record and its electronic medical record index transmitted by the electronic medical record collection index conversion module 20 for the medical search keyword decomposition and comparison module 16 For reading.
[0037] G 醫學搜尋關鍵字分解與比對模組16接收電子病歷搜尋引 擎應用程式介面模組14所傳送之字串及憑證資料，而將 字串分解成至少-個醫學名詞，例如使用者要搜尋之字 串為「感f上呼吸道錢發炎」，醫學搜尋關鍵字分解 與比對模組16將「感冒上呼吸道感染發炎」分解為「感 冒」、「上呼吸道感染」及「發炎」等醫學名詞。醫學 搜尋關鍵子分解與比對模組16讀取電子病歷索引儲存及 快取處理模組18所儲存之具有電子之電子病歷索引 ，而將所分解之醫學名詞與所讀取之電子病歷索引進行 比對，亦即電子病歷索引中之醫學名詞與「感冒」、「 099135663 表單編號A0101 第11頁/共27頁 0992062331-0 201218010 上呼吸道感染」及「發炎」進行比對，只要「感冒」、 「上呼吸道感染」及「發炎」中至少一個出現於電子病 歷索引中即符合比對匹配，將比對匹配之一個或數個電 子病歷以_似檔案方式表列於電子病歷清單中。醫學搜 尋關鍵字分解與比對模組1 6將電子病歷清單傳送至電子 病歷搜尋弓丨擎應用程式介面模組14。 [0038] 醫學搜尋關鍵字分解與比對模組16逐一驗證電子病歷清 單中所有的電子病歷内之數位憑證、電子簽體、電子病 歷本文及時戳是否符合真實性承完整性，而由醫學搜尋 關鍵字分解與比對模組16逐一龠鼋子病歷清單中所有的 電子病歷内之數位憑證、電子簽體、電子病歷本文及時 戳分別傳送至電子簽章驗證模組38及電子時戳驗證模組 40中進行驗證。其中，在病歷完成時由電子病歷搜尋系 統10產生時戳、或者由具有公信力之系統（例如自然人憑 證系統）產生時戳》 .. ... . :. .. ... .... ： [0039] 驗證醫學搜尋關鍵字分解與比對模組1 6讀取電子病歷索 引儲存及快取處理模組18所餐秦各電子病歷清單中之電 子病歷内之數位憑證、電子簽體及電子病歷本文，並傳 送至電子簽章驗證模組38。電子簽章驗證模組38接收電 子病歷内之數位憑證、電子簽體及電子病歷本文，由電 子簽章驗證模組38之一演算法（例如已熟知之rsa-SHA 1 演算法）驗證該數位憑證、該電子簽體及該電子病歷本文 ，以驗證當時完成病歷的電子簽章人員之真實性及電子 病歷内容之完整性❶若電子簽章驗證模組38驗證該數位 憑證、該電子簽體及該電子病歷本文符合真實性及完整 099135663 表單編號A0101 第12頁/共27頁 0992062331-0 201218010 性的驗證結果’則產生對應所驗證之電子病歷之例如r V」的簽體驗證符號；若電子簽章驗證模組38驗證該數 位憑證、遠電子簽體及該電子病歷本文不符合真實性及 完整性的驗證結果，則產生對應所驗證之電子病歷之例 如「X」的簽體驗證符號。電子簽章驗證模組38將驗證結 果所產生對應電子病歷之簽體驗證符號傳送至醫學搜尋 關鍵字分解與比對模組16。 [0040] Ο 醫學搜尋關鍵字分解與比對模組16讀取電子病歷索引儲 存及快取處理模組18所儲存之電子病歷清單中之電子病 歷内之電子簽體及時戳，並傳送至電子時戳驗證模組4〇 。電子時戳驗證模組40接收電子病歷内之電子簽體及時 戳’由電子時戳驗證模組4〇之演算法（例如已熟知之“八-SHA1演算法）驗證該電子簽體及該時戳的真實性。若電子 時戳驗證模組40驗證該電子簽體及該時戳符合真實性的 驗證結果，則產生對應所驗證之電子病歷之例如「V」 .. -；- ! · , ' f 的時戳驗證符號；若電子時:戳驗證模組4〇驗證該電子簽 體及該時戳不符合真實性的驗證結果，則產生對應所驗 證之電子病歷之例如「X」的時戳驗證符號。電子時戳驗 證模組40將驗證結果所產生對應電子病歷之時戳驗證符 號傳送至醫學搜尋關鍵字分解與比對模組16。 [0041] 作為病歷調閱授權名單中之黑名單資料庫44建立已離職 之醫護人員或惡意侵入人員等之名單，而作為病歷調閱 授權名單中之白名單資料庫46建立經授權調閱病歷之醫 護人員之名單及授權類別（例如可調閱所有病歷資料或僅 可調閱與本身業務相關之病歷資料，諸如主治大夫）。 099135663 表單編號A0101 第13頁/共27頁 0992062331-0 201218010 [0042] 病歷調閱授權模組42接收由醫學搜尋關鍵字分解與比對 模組16所傳送之使用者之憑證資料，病歷調閱授權模組 4 2將使用者之憑證資料與黑名單資料庫4 4中之名單進行 比對，以判斷使用者是否為禁止授權調閱病歷之黑名單 中之一，若病歷調閱授權模組42判斷使用者為黑名單中 之一，則病歷調閱授權模組42將判斷使用者為黑名單中 之一的判斷結果傳送至醫學搜尋關鍵字分解與比對模組 16 ;若病歷調閱授權模組42判斷使用者不為黑名單中之 一，則病歷調閱授權模組42判斷使用者是否為准予授權 調閱病歷之白名單中之一，並將使用者是否為白名單中 之一的判斷結果傳送至醫學搜尋關鍵字分解與比對模組 16° [0043] 醫學搜尋關鍵字分解與比對模組16將簽體驗證符號與時 戳驗證符號分別標註於電子病歷清單所驗證之電子病歷 的位置處。若醫學搜尋關鍵字分解與比對模組16得知使 用者禁止授權調閱病歷，則醫學搜尋關鍵字分解與比對 模組16不會經由電子病歷搜尋引擎應用程式介面模組14 傳送電子病歷清單至人機介面操作裝置12，因此在人機 介面操作裝置12上不會顯示任何電子病歷清單；若醫學 搜尋關鍵字分解與比對模組16得知使用者准予授權調閱 病歷，則醫學搜尋關鍵字分解與比對模組16將已標註簽 體驗證符號與時戳驗證符號之電子病歷之電子病歷清單 經由電子病歷搜尋引擎應用程式介面模組14傳送至該人 機介面操作裝置12。在人機介面操作裝置12顯示已標註 簽體驗證符號與時戳驗證符號之電子病歷清單。 099135663 表單編號A0101 第14頁/共27頁 0992062331-0 201218010 [0044] 圖2為本發明之電子病歷搜尋方法之流程圖。參考圖1之 組件以說明圖2之流程步驟。 [0045] 在圖2中，首先，在步驟S50中，例如醫護人員之使用者 在人機介面操作裝置12輸入所要搜尋之字串及使用者之 憑證資料。 [0046] 在步驟S52中，由人機介面操作裝置12所輸入之字串及憑 證資料經由電子病歷搜尋引擎應用程式介面模組14傳送 至醫學搜尋關鍵字分解與比對模組16。 〇 [0047] 由醫學搜尋關鍵字分解與比對模組16將接收之字串分解 成至少一個醫學名詞，例如上述使用者要搜尋之字串為 「感冒上呼吸道感染發炎」，醫學搜尋關鍵字分解與比 對模組16將「感冒上呼吸道感染發炎」分解為「感冒」 、「上呼吸道感染」及「發炎」等醫學名詞。 [0048] 在步驟S54中，由醫學搜尋關鍵字分解與比對模組16讀取 電子病歷索引儲存及快取處理模組18所儲存之具有電子 Q 病歷之電子病歷索引，而將所分解之醫學名詞與所讀取 之電子病歷索引進行比對，亦即電子病歷索引中之醫學 名詞與「感冒」、「上呼吸道感染」及「發炎」進行比 對，只要「感冒J、「上呼吸道感染」及「發炎」中至 少一個出現於電子病歷索引中即符合比對匹配，而將比 對匹配之一個或數個電子病歷以類似檔案方式表列於電 子病歷清單中。 [0049] 在步驟S56中，醫學搜尋關鍵字分解與比對模組16傳送使 用者之憑證資料至病歷調閱授權模組42，病歷調閱授權 099135663 表單編號A0101 第15頁/共27頁 0992062331-0 201218010 模組42先將使用者之憑證資料與黑名單資料庫44中之名 單進行比對，以判斷使用者是否為禁止授權調閱病歷之 黑名單中之一。 [0050] 若病歷調閱授權模組42判斷使用者為黑名單中之一，則 病歷調閱授權模組42將判斷使用者為黑名單中之一的判 斷結果傳送至醫學搜尋關鍵字分解與比對模組16。之後 ，在步驟S58中，醫學搜尋關鍵字分解與比對模組16不會 經由電子病歷搜尋引擎應用程式介面模組14傳送電子病 歷清單至人機介面操作裝置12，因此在人機介面操作裝 置12上不會顯示任何電子病歷清單；若病歷調閱授權模 組42判斷使用者不為黑名單中之一，則病歷調閱授權模 組42判斷使用者是否為准予授權調閱病歷之白名單中之 — 〇 [0051] 若病歷調閱授權模組42判斷使用者不為准予授權調閱病 歷之白名單中之一，則病歷調閱授權模組42將判斷使用 者不為白名單中之一的判斷結果傳送至醫學搜尋關鍵字 分解與比對模組16。同樣在步驟S58中，醫學搜尋關鍵字 分解與比對模組16不會經由電子病歷搜尋引擎應用程式 介面模組14傳送電子病歷清單至人機介面操作裝置12， 因此在人機介面操作裝置12上不會顯示任何電子病歷清 單；若病歷調閱授權模組42判斷使用者為准予授權調閱 病歷之白名單中之一，則病歷調閱授權模組42將判斷使 用者為白名單中之一的判斷結果傳送至醫學搜尋關鍵字 分解與比對模組16。之後，在步驟S60中，由驗證醫學搜 尋關鍵字分解與比對模組16讀取電子病歷索引儲存及快 099135663 表單編號A0101 第16頁/共27頁 0992062331-0 201218010 取處理模組18所儲存之電子病歷清單中之電子病歷内之 數位憑證、電子簽體及電子病歷本文，並傳送至電子簽 章驗證模組38。電子簽章驗證模組38接收電子病歷内之 數位憑證、電子簽體及電子病歷本文，而由電子簽章驗 證模組38之演算法（例如已熟知之RSA-SHA1演算法）驗證 該數位憑證、該電子簽體及該電子病歷本文，以驗證當 時完成病歷的電子簽章人員之真實性及電子病歷内容之 完整性。 八 [0052] V.) 若電子簽章驗證模組38驗證該數位憑證、該電子簽體及 該電子病歷本文赞合真實性及完整性的驗證結果，則產 生對應所驗證之電子病歷之「v」的簽體驗課符號；若 電子簽章驗證模組38驗證該數位憑證、.該電子簽體及該 電子病歷本文不符合真實性及完整性的驗證結果，則產 生對應所驗證之電子病歷之「X」的簽體驗證符號。電子 簽章驗證模組38將驗證結果所產，生對應電子病歷之「v 」或「X」之簽體驗證符號傳送至醫學搜尋關鍵字分解與 G 比對模組16。醫學搜尋關鍵字分解與比對模組16將「v 」或「X」之簽體驗證符號標註於電子病歷清單所驗證之 電子病歷的位置處。 [0053] 其中’由電子病歷蒐集索引轉換模組20從檢驗檢查資料 庫22、醫學影像儲存與傳輸資料庫24、醫院資訊系統資 料庫26、電子病歷資料庫28、憑證資料庫30、電子簽體 資料庫32及時戳資料庫34中蒐集一病歷之病歷資料（包含 醫院資料、病人資料、健康檢查或檢驗資料及診斷治療 資料等）' 數位憑證、電子簽體（如主治大夫或護士之簽 099135663 表單編號A0101 第17頁/共27頁 0992062331-0 201218010 章）及時戳’該等資料以HL7 CDA-R2在電子病歷策集索 引轉換模組20中進行轉換，再以W3C XML電子簽章桿準 在電子病歷蒐集索引轉換模組20中轉換為具有電子病歷 本文、數位憑證、電子簽體及時戳之電子病歷的格式， 並且由電子病歷蒐集索引轉換模組2〇產生用以比對之電 子病歷之電子病歷索弓丨。電子病歷蒐集索5丨轉換模組2〇 將所轉換之電子病歷及其電子病歷索引傳送至電子病歷 索引儲存及快取處理模組18。 [⑻54]接著’在步驟S62中，由醫學搜尋關鍵字分解與比對模組 16讀取電子病歷索引儲存及换取處踵猶8所儲存之電 子病歷清單中之電子病歷内之電子簽趙及時戮，並傳送 至電子時戳驗證模組40。電子時戳驗證模組4〇接收電子 病歷内之電子簽體及時戳’而由電子時戳驗證模組4 〇之 演算法（例如已熟知之RSA-SHA1演算法）驗證該電子簽體 及該時戳的真實性。 [0055] 若電子時戳驗證模組40驗證域電子簽體及該時戳符合真 實性的驗證結果，則產生對應所驗證之電子病歷之「V 」的時戳驗證符號；若電子時戳驗證模組40驗證該電子 簽體及該時戳不符合真實性的驗證結果，則產生對應所 驗證之電子病歷之「X」的時戳驗證符號。電子時戳驗證 模組40將驗證結果所產生對應電子病歷之「v」或「X」 之時戳驗證符號傳送至醫學搜尋關鍵字分解與比對模組 16。醫學搜尋關鍵字分解與比對模組16將「v」或「X」 之時戳驗證符號標註於電子病歷清單所驗證之電子病歷 的位置處。 099135663 表單編號A0101 第18頁/共27頁 0992062331-0 201218010 [0056] 在步驟S64中，由於醫學搜尋關鍵字分解與比對模組16得 知使用者准予授權調閱病歷（即病歷調閱授權模組42判斷 使用者為准予授權調閱病歷之白名單中之一），則醫學搜 尋關鍵字分解與比對模組16將已標註簽體驗證符號與時 戳驗證符號之電子病歷之電子病歷清單經由電子病歷搜 尋引擎應用程式介面模組14傳送至該人機介面操作裝置 12。在人機介面操作裝置12顯示已標註簽體驗證符號與 時戳驗證符號之電子病歷清單。 [0057] 本發明之優點係提供一種電子病歷搜尋系統與方法，專 用於搜尋醫療電子病歷資料之病歷相關性比對以及授權 過遽功能的搜尋機制，以保障病患病歷之隱私，而又兼 顧醫師診斷輔助與醫學研究所需之用途。 [0058] 雖然本發明已參照較佳具體例及舉例性附圖敘述如上， 惟其應不被視為係限制性者。熟悉本技藝者對其形態及 具體例之内容做各種修改、省略及變化，均不離開本發 明之申請專利範圍之所主張範圍。 【圖式簡單說明】 [0059] 圖1為本發明之電子病歷搜尋系統之方塊圖；以及 [0060] 圖2為本發明之電子病歷搜尋方法之流程圖。 【主要元件符號說明】 [0061] 10電子病歷搜尋系統 [0062] 12人機介面操作裝置 [0063] 14電子病歷搜尋引擎應用程式介面模組 099135663 表單編號A0101 第19頁/共27頁 0992062331-0 201218010 [0064] 16 醫學搜尋關鍵字分解與比對模組 [0065] 18 電子病歷索引儲存及快取處理模組 [0066] 20 電子病歷蒐集索引轉換模組 [0067] 22 檢驗檢查貢料庫 [0068] 24 醫學影像儲存與傳輸資料庫 [0069] 26 醫院資訊系統資料庫 [0070] 28 電子病歷資料庫 [0071] 30 憑證資料庫 [0072] 32 電子簽體資料庫 [0073] 34 時戳資料庫 [0074] 36 電子病歷安全保密公開金鑰基礎建設伺服器 [0075] 38 電子簽章驗證模組 [0076] 40 電子時戳驗證模組 [0077] 42 病歷調閱授權模組 [0078] 44 黑名單資料庫 [0079] 46 白名單資料庫 099135663 表單編號A0101 第20頁/共27頁 0992062331-0[0037] The medical search keyword decomposition and comparison module 16 receives the string and the voucher data transmitted by the electronic medical record search engine application interface module 14, and decomposes the string into at least one medical term, such as a user. The word to be searched for is "inflammation of the upper respiratory tract". The medical search keyword decomposition and comparison module 16 decomposes "inflammation of the upper respiratory tract infection" into "cold", "upper respiratory tract infection" and "inflammation". Medical noun. The medical search key sub-decomposition and comparison module 16 reads the electronic medical record index stored in the electronic medical record index storage and cache processing module 18, and performs the decomposed medical term with the read electronic medical record index. The comparison, that is, the medical terminology in the electronic medical record index is compared with "cold", "099135663 Form No. A0101 Page 11 / 27 pages 0992062331-0 201218010 Upper respiratory tract infection" and "Inflammation", as long as "cold", At least one of "Upper respiratory tract infection" and "inflammation" appears in the electronic medical record index to match the alignment, and one or several electronic medical records matching the matches are listed in the electronic medical record list in a file-like manner. The medical search keyword decomposition and comparison module 16 transmits the electronic medical record list to the electronic medical record search engine interface module 14. [0038] The medical search keyword decomposition and comparison module 16 verifies one by one whether the digital voucher, the electronic tag, and the electronic medical record in the electronic medical record list are timely and punctuated according to authenticity integrity, and are searched by medicine. The keyword decomposition and comparison module 16 successively transmits the digital certificate, the electronic signature, and the electronic medical record in the electronic medical record to the electronic signature verification module 38 and the electronic time stamp verification mode. Verification is performed in group 40. Wherein, the time stamp is generated by the electronic medical record searching system 10 when the medical record is completed, or the time stamp is generated by a system having a credibility (for example, a natural person voucher system).. . . : . . . . [0039] The verification medical search keyword decomposition and comparison module 16 reads the digital medical certificate, the electronic signature and the electronic in the electronic medical record in the electronic medical record list of the electronic medical record index storage and cache processing module 18 The medical record is transmitted to the electronic signature verification module 38. The electronic signature verification module 38 receives the digital certificate, the electronic signature and the electronic medical record in the electronic medical record, and the digital signature verification module 38 algorithm (for example, the well-known rsa-SHA 1 algorithm) verifies the digit. The voucher, the electronic tag and the electronic medical record are used to verify the authenticity of the electronic signature person who completed the medical record at the time and the integrity of the electronic medical record content. If the electronic signature verification module 38 verifies the digital certificate, the electronic signature And the electronic medical record is true and complete. 099135663 Form No. A0101 Page 12 / Total 27 Page 0992062331-0 201218010 The verification result of the property 'generates the signature verification symbol corresponding to the verified electronic medical record such as r V "; The electronic signature verification module 38 verifies that the digital certificate, the remote electronic signature, and the electronic medical record do not conform to the verification result of authenticity and integrity, and generates a signature verification symbol corresponding to the verified electronic medical record such as “X”. . The electronic signature verification module 38 transmits the signature verification symbol corresponding to the electronic medical record generated by the verification result to the medical search keyword decomposition and comparison module 16. [0040] Ο The medical search keyword decomposition and comparison module 16 reads the electronic signature time stamp in the electronic medical record in the electronic medical record list stored in the electronic medical record storage and cache processing module 18, and transmits the electronic signature to the electronic Time stamp verification module 4〇. The electronic time stamp verification module 40 receives the electronic signature in the electronic medical record and timely stamps the algorithm by the electronic time stamp verification module 4 (for example, the well-known "eight-SHA1 algorithm") to verify the electronic signature and the time The authenticity of the stamp. If the electronic time stamp verification module 40 verifies that the electronic signature and the time stamp meet the verification result of the authenticity, for example, "V" corresponding to the verified electronic medical record is generated..;;-! a time stamp verification symbol of 'f; if the electronic time: the stamp verification module 4 verifies that the electronic signature body and the time stamp do not conform to the verification result of the authenticity, a time corresponding to the verified electronic medical record such as "X" is generated. Stamp verification symbol. The electronic time stamp verification module 40 transmits the time stamp verification symbol corresponding to the electronic medical record generated by the verification result to the medical search keyword decomposition and comparison module 16. [0041] As a blacklist database 44 in the medical record authorization list, a list of retired medical staff or malicious intruders is established, and the whitelist database 46 in the medical record authorization list is established to authorize the medical records. The list of medical staff and the type of authorization (for example, access to all medical records or only medical records related to their own business, such as the attending doctor). 099135663 Form No. A0101 Page 13 of 27 0992062331-0 201218010 [0042] The medical record access authorization module 42 receives the voucher data of the user transmitted by the medical search keyword decomposition and comparison module 16, and the medical record is read. The authorization module 42 compares the user's voucher data with the list in the blacklist database 44 to determine whether the user is one of the blacklists for which the medical record is prohibited from being authorized, and if the medical record is accessed, the authorization module is accessed. 42. If the user is determined to be one of the blacklists, the medical record access authorization module 42 transmits the determination result that the user is one of the blacklists to the medical search keyword decomposition and comparison module 16; If the authorization module 42 determines that the user is not one of the blacklists, the medical record access authorization module 42 determines whether the user is authorized to access one of the medical records of the medical record, and whether the user is in the white list. The judgment result of one is transmitted to the medical search keyword decomposition and comparison module 16° [0043] The medical search keyword decomposition and comparison module 16 respectively marks the signature verification symbol and the time stamp verification symbol on the electronic medical record clear The location of the electronic medical record verified by a single. If the medical search keyword decomposition and comparison module 16 knows that the user prohibits authorization to access the medical record, the medical search keyword decomposition and comparison module 16 does not transmit the electronic medical record via the electronic medical record search engine application interface module 14. The list is displayed to the human interface device 12, so that no electronic medical record list is displayed on the human interface device 12; if the medical search keyword decomposition and comparison module 16 knows that the user is authorized to access the medical record, then the medical The search keyword decomposition and comparison module 16 transmits the electronic medical record list of the electronic medical record that has been marked with the signature verification symbol and the time stamp verification symbol to the human interface operation device 12 via the electronic medical record search engine application interface module 14. The human-machine interface operating device 12 displays an electronic medical record list with the tag verification symbol and the time stamp verification symbol. 099135663 Form No. A0101 Page 14 of 27 0992062331-0 201218010 [0044] FIG. 2 is a flow chart of the electronic medical record searching method of the present invention. Referring to the components of Figure 1, the flow steps of Figure 2 are illustrated. In FIG. 2, first, in step S50, for example, the user of the medical staff inputs the character string to be searched and the user's voucher data in the human interface device 12. [0046] In step S52, the string and the credential data input by the human interface device 12 are transmitted to the medical search keyword decomposition and comparison module 16 via the electronic medical record search engine application interface module 14. 00[0047] The medical search keyword decomposition and comparison module 16 decomposes the received string into at least one medical term, for example, the string to be searched by the user is "inflammation of a cold upper respiratory tract infection", medical search keyword The decomposition and comparison module 16 decomposes "inflammation of the upper respiratory tract infection" into medical terms such as "cold", "upper respiratory tract infection" and "inflammation". [0048] In step S54, the medical search keyword decomposition and comparison module 16 reads the electronic medical record index of the electronic medical record stored by the electronic medical record index storage and cache processing module 18, and the decomposition is performed. The medical term is compared with the index of the electronic medical record being read, that is, the medical term in the electronic medical record index is compared with "cold", "upper respiratory tract infection" and "inflammation" as long as "cold J," upper respiratory tract infection At least one of the "inflammations" appears in the electronic medical record index to match the alignment, and one or several electronic medical records matching the matches are listed in the electronic medical record list in a similar file. [0049] In step S56, the medical search keyword decomposition and comparison module 16 transmits the user's voucher information to the medical record access authorization module 42, the medical record access authorization 099135663, form number A0101, page 15 / total 27 pages 0992062331 -0 201218010 The module 42 first compares the user's voucher data with the list in the blacklist database 44 to determine whether the user is one of the blacklists for which the medical record is prohibited from being authorized. [0050] If the medical record access authorization module 42 determines that the user is one of the blacklists, the medical record access authorization module 42 transmits the determination result of determining that the user is one of the blacklists to the medical search keyword decomposition and Align the module 16. Thereafter, in step S58, the medical search keyword decomposition and comparison module 16 does not transmit the electronic medical record list to the human-machine interface operating device 12 via the electronic medical record search engine application interface module 14, and thus the human-machine interface operating device 12 will not display any electronic medical record list; if the medical record authorization module 42 determines that the user is not one of the blacklists, the medical record access authorization module 42 determines whether the user is authorized to access the white list of medical records. If the medical record access authorization module 42 determines that the user is not authorized to authorize one of the white lists of the medical records, the medical record access authorization module 42 will determine that the user is not in the white list. The result of the determination is transmitted to the medical search keyword decomposition and comparison module 16. Also in step S58, the medical search keyword decomposition and comparison module 16 does not transmit the electronic medical record list to the human-machine interface operating device 12 via the electronic medical record search engine application interface module 14, and thus the human-machine interface operating device 12 The electronic medical record list is not displayed; if the medical record authorization module 42 determines that the user is authorized to authorize one of the medical records, the medical record authorization module 42 determines that the user is in the white list. The result of the determination is transmitted to the medical search keyword decomposition and comparison module 16. Then, in step S60, the electronic medical record index storage and fast reading by the verification medical search keyword decomposition and comparison module 16 are 099135663, and the form number A0101 is 16th/27 pages 0992062331-0 201218010. The digital certificate, electronic signature and electronic medical record in the electronic medical record in the electronic medical record list are transmitted to the electronic signature verification module 38. The electronic signature verification module 38 receives the digital certificate, the electronic signature and the electronic medical record in the electronic medical record, and the algorithm of the electronic signature verification module 38 (for example, the well-known RSA-SHA1 algorithm) verifies the digital certificate. The electronic signature and the electronic medical record are used to verify the authenticity of the electronic signature holder who completed the medical record at the time and the integrity of the electronic medical record content. [002] V.) If the electronic signature verification module 38 verifies that the digital certificate, the electronic signature, and the electronic medical record text agree with the verification result of authenticity and integrity, a corresponding electronic medical record is generated. v" signing experience class symbol; if the electronic signature verification module 38 verifies the digital certificate, the electronic tag and the electronic medical record does not meet the verification result of authenticity and integrity, the corresponding verified electronic medical record is generated The "X" sign verification symbol. The electronic signature verification module 38 transmits the signature verification symbol of the "v" or "X" corresponding to the electronic medical record to the medical search keyword decomposition and G comparison module 16 by the verification result. The medical search keyword decomposition and comparison module 16 marks the signature verification symbol of "v" or "X" at the position of the electronic medical record verified by the electronic medical record list. [0053] wherein the electronic medical record collection index conversion module 20 from the inspection inspection database 22, the medical image storage and transmission database 24, the hospital information system database 26, the electronic medical record database 28, the voucher database 30, the electronic signature The physical database 32 timely stamps the database 34 to collect medical records of a medical record (including hospital data, patient data, health check or test data and diagnostic treatment data, etc.) 'digital voucher, electronic signature (such as the attending doctor or nurse sign 099135663 Form No. A0101 Page 17 / Total 27 Page 0992062331-0 201218010 Chapter) Time Stamp 'This information is converted in the electronic medical record index conversion module 20 with HL7 CDA-R2, and then W3C XML electronic signature The electronic medical record collection index conversion module 20 is converted into an electronic medical record format having an electronic medical record, a digital certificate, and an electronic signature in time stamp, and the electronic medical record collection index conversion module 2 generates an electronic for comparison. The medical record of the medical record is bowed. The electronic medical record collection module 2 transmits the converted electronic medical record and its electronic medical record index to the electronic medical record index storage and cache processing module 18. [(8)54] Next, in step S62, the medical search keyword decomposition and comparison module 16 reads the electronic medical record index storage and exchanges the electronic medical record in the electronic medical record list stored in the electronic medical record list stored in the file 8 Then, it is transmitted to the electronic time stamp verification module 40. The electronic time stamp verification module 4 receives the electronic signature in the electronic medical record and timely verifies the electronic signature and the algorithm by the algorithm of the electronic time stamp verification module 4 (for example, the well-known RSA-SHA1 algorithm) The authenticity of the time stamp. [0055] if the electronic timestamp verification module 40 verifies the domain electronic signature and the verification result of the timestamp conforms to the authenticity, a timestamp verification symbol corresponding to the "V" of the verified electronic medical record is generated; if the electronic timestamp verification The module 40 verifies that the electronic tag and the time stamp do not conform to the verification result of the authenticity, and generates a time stamp verification symbol corresponding to the "X" of the verified electronic medical record. The electronic time stamp verification module 40 transmits the time stamp verification symbol corresponding to the "v" or "X" of the electronic medical record generated by the verification result to the medical search keyword decomposition and comparison module 16. The medical search keyword decomposition and comparison module 16 marks the time stamp verification symbol of "v" or "X" at the position of the electronic medical record verified by the electronic medical record list. 099135663 Form No. A0101 Page 18 of 27 0992062331-0 201218010 [0056] In step S64, since the medical search keyword decomposition and comparison module 16 knows that the user is authorized to access the medical record (ie, the medical record authorization) The module 42 determines that the user is authorized to access one of the medical records of the medical record, and the medical search keyword decomposition and comparison module 16 will mark the electronic medical record of the electronic medical record with the signature verification symbol and the time stamp verification symbol. The list is transmitted to the human interface operating device 12 via the electronic medical record search engine application interface module 14. The human-machine interface operating device 12 displays an electronic medical record list with the tag verification symbol and the time stamp verification symbol. [0057] An advantage of the present invention is to provide an electronic medical record searching system and method, which is dedicated to searching for medical record correlation comparison of medical electronic medical record data and a search mechanism for authorizing excessive function to protect the privacy of the medical record, and at the same time The use of physicians for diagnostic aids and medical research. The present invention has been described above with reference to the preferred embodiments and the accompanying drawings, and should not be considered as limiting. It will be apparent to those skilled in the art that various modifications, omissions and changes may be made without departing from the scope of the invention. BRIEF DESCRIPTION OF THE DRAWINGS [0059] FIG. 1 is a block diagram of an electronic medical record searching system of the present invention; and FIG. 2 is a flow chart of an electronic medical record searching method of the present invention. [Main component symbol description] [0061] 10 electronic medical record search system [0062] 12 human machine interface operation device [0063] 14 electronic medical record search engine application interface module 099135663 Form No. A0101 Page 19 / Total 27 Page 0992062331-0 201218010 [0064] 16 Medical Search Keyword Decomposition and Alignment Module [0065] 18 Electronic Medical Record Index Storage and Cache Processing Module [0066] 20 Electronic Medical Record Collection Index Conversion Module [0067] 22 Inspection and inspection tribute library [ 0068] 24 Medical Image Storage and Transmission Database [0069] 26 Hospital Information System Database [0070] 28 Electronic Medical Record Database [0071] 30 Document Database [0072] 32 Electronic Tag Database [0073] 34 Time Stamp Data Library [0074] 36 Electronic Medical Record Security and Confidential Public Key Infrastructure Server [0075] 38 Electronic Signature Verification Module [0076] 40 Electronic Time Stamp Verification Module [0077] 42 Medical Record Access Authorization Module [0078] 44 Blacklist Database [0079] 46 Whitelist Database 099135663 Form Number A0101 Page 20 / Total 27 Page 0992062331-0