TWI781055B - A cloud heaith information management system, method and computer-readable medium thereof - Google Patents

Abstract

The present invention provides a cloud health information management system, method and computer readable medium thereof, including an enterprise-end device and a cloud health data management device, wherein the cloud health data management device receives a first secret data storage request sent by the enterprise-end device. When the first secret data storage request is legal, the cloud health data management device generates a first token, and sends the first token and a health data sorting style to the enterprise-end device, so that the enterprise-end device sends a second secret data storage request according to the first token and the health data sorting style. Then the cloud health data management device separately stores the employee health data to different databases. Therefore, the present invention improves the security of secret data through the design of token and data compartment.

Description

A cloud health data management system, method and computer-readable medium thereof

The present invention relates to a health data management technology, in particular to a cloud health data management system, method and computer readable medium.

At present, the common workplace health management services on the market are all based on managing the health management services of a single enterprise, and most of them are stand-alone systems that can only operate on the enterprise side, and as the enterprise-side health management system assists the enterprise to manage the health of employees every year Inspection reports, physiological measurements, workplace nursing records and other health data, and provide query management interface or provide various health risk assessments to assist enterprises in maintaining and improving the health status of employees, thereby resulting in the maintenance of systems and equipment for enterprises considerable cost.

Furthermore, although the existing technology also builds the health management system and database on the cloud to support multiple enterprises at the same time. However, this will have stricter requirements for data protection, and the authority management and data separation between enterprises are more important. If you are not careful, it is very likely that interested people can easily cross different Authorities, even different companies, to obtain various sensitive information.

Therefore, how to provide a cloud-based health data management technology that can effectively protect and manage sensitive data of enterprises or employees has become an urgent issue in the industry.

In order to solve the aforementioned conventional technical problems or provide related effects, the present invention provides a cloud-based health data management system, which includes: an enterprise-side device for a company’s health manager to input an enterprise verification data; and a cloud-based health management system The data management device is connected to the enterprise device through communication, and the cloud health data management device includes: a health data collection module, which receives the enterprise verification data from the enterprise device to verify the enterprise verification data, so that After the enterprise verification information is verified as correct, the health data collection module receives a first smart data storage request from the enterprise device; and an enterprise data management module verifies the first smart data storage request , to generate a first token according to the first smart data storage request when it is confirmed that the first smart data storage request is legal, wherein, after the health data collection module generates a health data sorting method, the health The data sorting method is bound with the first token, and then the bound health data sorting method and the first token are sent back to the enterprise device so that the enterprise device can use the health data sorting method Sort an employee's health data, and then bind the sorted employee's health data with the first token to form a second smart data storage request, so that the enterprise device will store the second smart data storage request Upload to the cloud health data management device.

The present invention further provides a cloud-based health data management method, which includes: a health manager of an enterprise inputs an enterprise verification data through an enterprise-side device; a health data collection module in a cloud-based health data management device receives data from the enterprise The company's verification information of the terminal device, to Verify the enterprise verification information; after the enterprise verification information is verified as correct, the health information collection module receives a first alert data storage request from the enterprise device; the enterprise information in the cloud health information management device The management module verifies the first smart data storage request, so that when the first smart data storage request is confirmed to be legal, the enterprise data management module generates a first token according to the first smart data storage request; The health data collection module generates a health data sorting method to bind the health data sorting method with the first token, and then returns the bound health data sorting method and the first token to the Enterprise-side device: the enterprise-side device sorts an employee's health data according to the health data sorting method, and then binds the sorted employee's health data and the first token to form a second alert data storage request; and the enterprise device uploads the second smart data storage request to the cloud health data management device.

In one embodiment, the cloud health information management device further includes a master database, which provides multiple enterprise information to the enterprise information management module, so that the enterprise information management module can combine the plurality of enterprise information with the first smart The data storage requirements are compared to confirm whether the plurality of enterprise information has the corresponding enterprise information in the first sensitive data storage request, thereby verifying the legitimacy of the first sensitive data storage request.

In one embodiment, the enterprise device sorts the measurement values or personnel data of each item of the physiological measurement data in the employee health data according to the health data sorting method.

In one embodiment, when the health data collection module receives the second smart data storage request, it makes the enterprise data management module verify the legitimacy of the first token, so that when the first token is When legal, the enterprise data management module obtains the encryption key of the enterprise, and The health data collection module restores the sorted employee health data in the second sensitive data storage request according to the health data sorting method, so as to obtain complete health data of the employee.

In one embodiment, the cloud health data management device further includes an encryption and decryption module, which uses the enterprise's encryption key to encrypt the personnel data, health check report data and physiological measurement data in the employee's health data.

In one embodiment, the cloud health data management device further includes a physiological measurement data management module for storing the encrypted physiological measurement data in a physiological measurement database, and a physiological measurement data management module for storing the encrypted health examination report A health examination report data management module for storing data in a health examination report database, and a personnel data management module for storing encrypted personnel data in a health examination report database.

In one embodiment, the enterprise device is used for the health manager of the enterprise to send a smart data query request to the cloud health data management device, so that when the enterprise data management module verifies that the smart data query request is legal, A second token is generated according to the smart data query request.

In one embodiment, the cloud health data management device further includes a smart data management module, which receives the second token returned by the enterprise data management module, and the smart data management module provides the second token To the encryption and decryption module in the cloud health data management device, the encryption and decryption module makes the enterprise data management module to confirm the validity of the second token.

In one embodiment, when the second token is legal, the enterprise data management module obtains the encryption key of the enterprise, and replies the encryption key to the encryption and decryption module, and then the encryption and decryption module After the group obtained the encrypted physiological measurement data, health examination report data and personnel data Use the company's encryption key to decrypt to form the employee's health data, and then reply to the company's device.

The present invention also provides a computer-readable medium, which is applied to a computer or computing device with a processor and/or memory, and the computer or the computing device executes a target program and the computer-readable medium through the processor and/or memory , and is used to execute the above cloud health data management method when executing the computer readable medium.

It can be seen from the above that the cloud health data management system, method and computer-readable medium of the present invention mainly confirm the sensitive data storage request and sensitive data query issued by the enterprise terminal device by generating a unique token (token) of the enterprise. The legality of the requirements, thereby improving the security of data during access, and distinguishing employee health data (that is, sensitive data) into personnel data, health check report data and physiological measurement data are encrypted and stored separately, so compared with With conventional technology, even if employee health information is stolen by someone with a heart, only part of the unidentifiable information can be obtained, thereby improving information security.

1: Cloud health data management system

10:Enterprise device

11:Enterprise end processing module

20: Cloud health data management device

21: Health data collection module

22: Smart data management module

23: Enterprise data management module

23a: Master database

24: Encryption and decryption module

241: Physiological measurement data management module

241a: Physiological measurement database

242: Health check report data management module

242a: Health check report database

243:Personnel data management module

243a: Personnel database

S21 to S28, S31 to S35, S41 to S410: steps

FIG. 1 is a schematic diagram of the architecture of the cloud health information management system of the present invention.

FIG. 2 is a schematic flow chart of the method for uploading employee health data in the cloud health data management system of the present invention.

FIG. 3 is a schematic flow chart of the method for storing employee health data in the cloud health data management system of the present invention.

FIG. 4 is a schematic flow chart of the method for querying employee health data in the cloud health data management system of the present invention.

The implementation of the present invention is described below through specific specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the content disclosed in this specification.

It should be noted that the structures, proportions, sizes, etc. shown in the drawings attached to this specification are only used to match the content disclosed in the specification, for the understanding and reading of those familiar with this technology, and are not used to limit the implementation of the present invention Therefore, it has no technical substantive meaning. Any modification of structure, change of proportional relationship or adjustment of size shall still fall within the scope of this invention without affecting the effect and purpose of the present invention. The technical content disclosed by the invention must be within the scope covered. At the same time, terms such as "a", "first", "second", "upper" and "lower" quoted in this specification are only for the convenience of description and are not used to limit the scope of the present invention. The scope of implementation, the change or adjustment of its relative relationship, without substantial change in technical content, shall be regarded as the scope of implementation of the present invention.

FIG. 1 is a schematic diagram of the structure of the cloud health information management system 1 of the present invention. As shown in Figure 1, the cloud health data management system 1 includes: an enterprise device 10 and a cloud health data management device 20, wherein the enterprise device 10 includes an enterprise processing module 11 and a cloud health data management device 20 includes a health data collection module 21, a smart data management module 22, an enterprise data management module 23, a master database 23a, an encryption and decryption module 24, a physiological measurement data management module 241, a A health examination report data management module 242, a personnel data management module 243, a physiological measurement database 241a, a health examination report database 242a, and a personnel database 243a.

Specifically, the enterprise device 10 can be a smart phone, a tablet computer, a personal computer or other electronic devices, etc., and the cloud health data management device 20 can be established on a server (such as a general-purpose server, a file server, Storage unit type server, etc.) and computers and other electronic devices with appropriate calculation mechanisms, wherein each module in the enterprise device 10 and the cloud health data management device 20 can be software, hardware or firmware; if it is hardware, it may be a processing unit, processor, computer or server with data processing and computing capabilities; if it is software or firmware, it may include instructions executable by a processing unit, processor, computer or server, and It can be installed on the same hardware device or distributed across multiple different hardware devices. In addition, the enterprise device 10 is communicatively connected (or electrically connected) to the cloud health data management device 20 through wired or wireless communication.

FIG. 2 is a schematic flow diagram of the method for uploading employee health data in the cloud-based health data management system 1 of the present invention, and is explained with reference to FIG. 1 , wherein the method flow includes the following steps S21 to S28:

In step S21, the enterprise-end processing module 11 in the enterprise-end device 10 of an enterprise A provides an input interface for the health manager of the enterprise A to input an enterprise verification data (such as the unified number or account password of the enterprise verification data, etc. ), and sent to the health data collection module 21 in the cloud health data management device 20 to confirm whether the enterprise verification data of enterprise A is correct.

In step S22, when the health data collection module 21 confirms that the enterprise verification data is correct, the enterprise-side processing module 11 sends a first sensitive data storage request to the health data collection module 21. In one embodiment, the first sensitive data storage request includes enterprise information of enterprise A (such as enterprise name, account password, unified number or enterprise telephone number) or identification data of enterprise end device 10, etc., wherein the identification information of enterprise end device 10 Data includes, but is not limited to, Internet Protocol addresses (Internet Protocol Address, IP Address; or IP address), conversation identification code (session identifier, session ID), etc.

In step S23, after receiving the first sensitive data storage request, the health data collection module 21 calls the enterprise data management module 23 through the smart data management module 22 to verify the first sensitive data storage request to confirm the first sensitive data Legality of Data Storage Requests.

In step S24, the enterprise data management module 23 compares whether the storage request for the first smart data is legal according to the multiple enterprise data in the master database 23a. In one embodiment, the enterprise data management module 23 compares the plural enterprise data one by one with the enterprise data (such as account password or uniform number) of enterprise A in the first sensitive data storage request to confirm whether there is any Enterprise A's enterprise information. In one embodiment, the enterprise information includes the unique information of the enterprise such as enterprise name, account password, unified number, and enterprise phone number.

In step S25, if it is impossible to compare the enterprise data of enterprise A from the plurality of enterprise data (that is, the enterprise data management module 23 is not compared successfully), then it is verified that the first smart data storage request is illegal, and the The enterprise data management module 23 replies a verification failure message to the enterprise device 10, so as to end the first sensitive data storage request.

In step S26, if the enterprise data of enterprise A is compared from the plurality of enterprise data (that is, the enterprise data management module 23 compares successfully), then it is verified that the first smart data storage request is legal, so that it can be managed by the enterprise data The module 23 generates a first token according to the enterprise data of the enterprise A and the identification data of the enterprise device 10 in the first smart data storage request. In one embodiment, the enterprise data management module 23 utilizes encryption methods (such as asymmetric encryption, symmetric encryption, etc. encryption methods, or hash algorithms, etc.) The identifying data, encrypted salt or/and timestamp are encrypted to form a first token. In an embodiment, the first token may include multiple encryption methods to facilitate subsequent encryption and decryption of different data.

In step S27 , the health data collection module 21 generates a health data sorting method in a random number manner, binds the health data sorting method with the first token, and sends it back to the enterprise-side processing module 11 .

In step S28, the enterprise-side processing module 11 sorts the measured value or personnel data of each item (such as height, weight, systolic blood pressure, diastolic blood pressure, etc.) Such as age, employee number, etc.) are sorted, and the enterprise-side processing module 11 binds the sorted employee health data and the first token to form a second token with the sorted employee health data and the first token. The alert data storage request, whereby the enterprise-end processing module 11 uploads the second alert data storage request to the cloud health data management device 20 .

In one embodiment, employee health information includes multiple employee personnel information (such as employee name, age, etc.), health check report information (such as doctor's evaluation report), and physiological measurement data (such as height, weight, systolic blood pressure, diastolic blood pressure, etc.) equivalent measured value).

In one embodiment, the health data sorting method only includes the number of each item in the employee health data, and does not include the specific name of each item, and the enterprise-side processing module 11 and the health data collection module 21 both recognize the number of each item Therefore, the sorted employee health data does not have identification information. Even if the sorted employee health data is stolen unfortunately, it is impossible to know the meaning of each value in the sorted employee health data.

FIG. 3 is a schematic flow diagram of the method for storing employee health data in the cloud health data management system 1 of the present invention, and is explained with reference to FIG. 1 and FIG. 2 , wherein the method flow includes the following steps S31 to S35:

In step S31, the health data collection module 21 in the cloud health data management device 20 receives the second sensitive data storage request uploaded by the enterprise end processing module 11 in the enterprise end device 10 of enterprise A, and sends the second The first token in the smart data storage request is provided to the smart data management module 22 .

In step S32, the smart information management module 22 sends the first token to the encryption and decryption module 24, and the encryption and decryption module 24 instructs the enterprise information management module 23 to confirm the validity of the first token. In one embodiment, the enterprise information management module 23 decrypts the first token to determine whether the time stamp in the first token has expired and whether the identification data of the enterprise device 10 is correct, so as to be used in the enterprise information management module. When the group 23 confirms that the time stamp in the first token has not expired and the identification information of the enterprise device 10 is correct, the first token is valid.

In step S33, when the enterprise information management module 23 confirms that the first token is legal, the encryption key of the enterprise A is obtained from the enterprise information management module 23 to the master database 23a, and replied to the encryption and decryption module 24, And the enterprise data management module 23 instructs the health data collection module 21 to restore the sorted employee health data in the second alert data storage request according to the health data sorting method, so as to obtain complete employee health data.

In step S34, the encryption and decryption module 24 uses the encryption key of enterprise A to encrypt the personnel data, health check report data and physiological measurement data in the employee health data respectively. In one embodiment, the encryption/decryption module 24 can encrypt the personnel data, the health check report data, and the physiological measurement data in different ways to increase data security.

In step S35, the physiological measurement data management module 241 stores the encrypted physiological measurement data in the physiological measurement database 241a, and the health examination report data management module 242 stores the encrypted health examination report data in the health examination Report database 242a and personnel data management module 243 Store the encrypted personnel data in the health check report database 243a. In one embodiment, the encrypted personnel data, the health check report data and the physiological measurement data can be subsequently decrypted in different ways.

FIG. 4 is a schematic flow diagram of the method for querying employee health data in the cloud health data management system 1 of the present invention, and is explained with reference to FIG. 1 , wherein the method flow includes the following steps S41 to S410:

In step S41 , the enterprise-end processing module 11 in the enterprise-end device 10 of an enterprise A is for the health manager of the enterprise A to send a smart data query request to the cloud-based health information management device 20 . In one embodiment, the smart information query request includes enterprise information of enterprise A (such as enterprise name, account password, unified number or enterprise telephone number) or identification information of enterprise end device 10, etc., wherein, the identification information of enterprise end device 10 is Including but not limited to Internet Protocol Address (IP Address; or IP address), session identifier (session ID), etc.

In step S42, when the smart data management module 22 in the cloud health data management device 20 receives the smart data query request from enterprise A, the smart data management module 22 calls the enterprise data management module 23 to verify the smart data query request legality.

In step S43, the enterprise data management module 23 checks whether the smart data inquiry request is legal or not according to the plurality of enterprise data in the master database 23a. In one embodiment, the enterprise information management module 23 compares the enterprise information (such as account password or uniform number) of enterprise A in the smart information query request one by one with the plurality of enterprise information to confirm whether there is enterprise A in the plurality of enterprise information enterprise information.

In step S44, if it is impossible to compare the enterprise data of enterprise A from the plural enterprise data (that is, the enterprise data management module 23 is not compared successfully), then it is verified that the smart data query request is illegal, and the enterprise data The management module 23 replies a verification failure message to the enterprise device 10 to end the smart data query request.

In step S45, if the enterprise data of enterprise A is compared from the plurality of enterprise data (that is, the enterprise data management module 23 compares successfully), then it is verified that the smart data query request is legal, and the enterprise data management module 23 Generate a second token (token) according to the enterprise information of enterprise A and the identification information of the enterprise device 10 in the smart information query request. In one embodiment, the enterprise data management module 23 uses an encryption method (such as asymmetric encryption, symmetric encryption, or hash algorithm) that it and the smart data management module 22 recognize , salt or/and timestamp are encrypted to form a second token. In an embodiment, the second token may include multiple encryption methods to facilitate subsequent encryption and decryption of different data.

In step S46, the enterprise data management module 23 replies the second token to the smart data management module 22, so that the smart data management module 22 provides the second token to the encryption and decryption module 24 for encryption and decryption The module 24 instructs the enterprise data management module 23 to confirm the legitimacy of the second token. In one embodiment, the enterprise information management module 23 decrypts the second token to determine whether the time stamp in the second token has expired and whether the identification information of the enterprise device 10 is correct, so as to be used in the enterprise information management module. When the group 23 confirms that the time stamp in the second token has not expired and the identification data of the enterprise device 10 is correct, the second token is valid.

In step S47, when the enterprise information management module 23 confirms that the second token is legal, the enterprise information management module 23 obtains the encryption key of the enterprise A from the main database 23a, and sends a reply to the encryption and decryption module 24.

In step S48, the encryption and decryption module 24 obtains the encrypted data of enterprise A from the physiological measurement database 241a through the physiological measurement data management module 241, the health examination report data management module 242 and the personnel data management module 243 respectively. Physiological measurement data, obtain encrypted health check report data from the health check report database 242a, and obtain encrypted personnel data from the health check report database 243a.

In step S49, the encryption and decryption module 24 decrypts the encrypted physiological measurement data, health examination report data and personnel information through the encryption key of enterprise A to obtain the physiological measurement data, health examination report data and personnel information , and then form an employee health data, and send it back to the smart data management module 22. In one embodiment, the encryption and decryption module 24 needs to decrypt the encrypted physiological measurement data, health examination report data and personnel data at the same time, and cannot only decrypt the encrypted physiological measurement data, health examination report data and One of the personnel data is decrypted separately to ensure the security of the encrypted physiological measurement data, health examination report data and personnel data.

In step S410, the smart data management module 22 sends back the employee health data of the company A to the enterprise device 10 of the company A to complete the smart data query.

In addition, the present invention also discloses a computer-readable medium, which is applied to a computing device or computer having a processor (for example, CPU, GPU, etc.) and/or memory, and stores instructions, and can be used by this computing device or The computer executes the computer-readable medium through the processor and/or memory, so as to execute the above-mentioned method and each step when executing the computer-readable medium.

The following embodiment is an embodiment of the present invention, and will be described with reference to FIG. 1 to FIG. 3 , and the same parts will not be described again.

In this embodiment, a health manager of an enterprise A uses the enterprise-end processing module 11 of a computer (i.e. enterprise-end device 10) to input the account password (such as enterprise verification information) of enterprise A to log in The cloud health data management device 20, and the cloud health data management device 20 verifies whether the account password of the enterprise A is correct. When the cloud health data management device 20 confirms that the company's verification data is correct, the health manager of company A sends the first sensitive data storage request through the company-side processing module 11 .

Then, the cloud-based health data management device 20 verifies the legitimacy of the first smart data storage request, and compares the multiple enterprise data in the master database 23a one by one with the enterprise data of enterprise A in the first smart data storage request (such as account password or Unified number, etc.) to confirm whether the enterprise information of enterprise A exists in the plural enterprise information. When the corporate data of company A is compared from the multiple corporate data, the cloud health data management device 20 verifies that the first sensitive data storage request is legal, and according to the corporate data and identification data of company A in the first smart data storage request Generate a first token (token), for example: the first token is "xxxde3pofijsojpo3o0983jdlfsdfd".

Furthermore, the health data collection module 21 in the cloud health data management device 20 generates a health data sorting method in a random number manner, binds the health data sorting method with the first token, and sends it back to the enterprise for processing Module 11, where the health information sorting method is shown in Table 1 below:

Table 1: Sorting method of health information

It should be noted that the health data sorting method sent to the enterprise-side processing module 11 only includes the number of each item in the health data, and does not have a name, and both the enterprise-side processing module 11 and the health data collection module 21 recognize each item number to improve information security.

After receiving the health data sorting method and the first token, the enterprise-side processing module 11 of the computer (that is, the enterprise-side device 10) sorts the items of the physiological measurement data in the employee's health data according to the number in the health data sorting method. Sort the measured values or personnel data to generate sorted employee health data, for example: "64,89,36.4,172,135". The enterprise-side processing module 11 then binds the sorted employee health data and the first token to form a second alert data storage request with the sorted employee health data and the first token, wherein the second alert The sorted employee health data and the first token included in the data storage request are shown in Table 2 below:

Sorted Employee Health Data and First Token

The enterprise-end processing module 11 sends a second smart data storage request to the cloud health data management device 20, and the token validity is performed after the health data collection module 21 in the cloud health data management device 20 receives the second smart data storage request Confirm that when the first token is legal, the enterprise data management module 23 in the cloud health data management device 20 obtains the encrypted key of enterprise A from the master database 23a, and replies to the cloud health data management device 20 The encryption and decryption module 24, and the enterprise data management module 23 makes the health data collection module 21 sort the health data according to the second Restore the sorted employee health data in the sensitive data storage request to obtain complete employee health data. For example: weight=64, systolic blood pressure=89, body temperature=36.4, height=172, diastolic blood pressure=135.

Finally, the encryption and decryption module 24 uses the encryption key of enterprise A to encrypt the personnel data, health check report data and physiological measurement data in the employee health data, so that the encrypted physiological measurement data management module 241 The physiological measurement data is stored in the physiological measurement database 241a, the health examination report data management module 242 stores the encrypted health examination report data in the health examination report database 242a, and the personnel data management module 243 stores the encrypted personnel data Save to the health check report database 243a.

To sum up, the cloud health data management system and method and its computer-readable medium of the present invention use the enterprise data management module to generate an enterprise-specific token (token) to confirm the sensitive information sent by the enterprise-end device. The legitimacy of storage requirements and sensitive data query requirements, thereby improving the security of data during access, and distinguishing employee health data into personnel data, health check report data, and physiological measurement data are encrypted and stored separately, so compared with With conventional technology, even if employees' health data is stolen by malicious persons, only part of the unidentifiable data can be obtained, thereby improving information security.

In addition, the cloud-based health data management system, method and computer-readable medium of the present invention have the following advantages or technical effects.

1. The present invention generates a unique token (token) of the enterprise based on the enterprise information and the identification information of the enterprise device (such as a computer). Therefore, the legitimacy of the transaction can be confirmed through the token check method, and the token check will not only confirm the legitimacy of the token, but also check the use of the transaction Whether it is legal or not, so as to ensure that the data between different companies cannot communicate with each other, which can effectively prevent interested parties from cross-enterprise querying smart data, so as to improve the security of smart data.

2. The present invention classifies employee health data according to different types (personnel data, health examination report data, and physiological measurement data) to store them in different databases, and the personnel data and health examination reports in the employee health data Data and physiological measurement data are encrypted, so even if any sensitive data is lost, it cannot be restored and interpreted to maintain data security.

3. The health data sorting method of the present invention only includes the number of each item in the employee health data, and does not include the specific name of each item, and both the enterprise-side processing module and the health data collection module recognize the number of each item, so The sorted employee health data does not have identifiable information. Even if the sorted employee health data is unfortunately stolen, it is impossible to know the meaning of each value in the sorted employee health data, thereby ensuring information security.

The above-mentioned embodiments are only illustrative to illustrate the principles and effects of the present invention, and are not intended to limit the present invention. Anyone skilled in the art can modify and change the above-mentioned embodiments without departing from the spirit and scope of the present invention. Therefore, the scope of protection of the rights of the present invention should be listed in the scope of the patent application.

1: Cloud health data management system

10:Enterprise device

11:Enterprise end processing module

20: Cloud health data management device

21: Health data collection module

22: Smart data management module

23: Enterprise data management module

23a: Master database

24: Encryption and decryption module

241: Physiological measurement data management module

241a: Physiological measurement database

242: Health check report data management module

242a: Health check report database

243:Personnel data management module

243a: Personnel database

Claims (15)

A cloud health information management system, including: An enterprise-side device for a company's health manager to input a company's verification information; and a cloud-based health data management device that is communicatively connected to the enterprise-side device, and the cloud-based health data management device includes: A health information collection module, which receives the enterprise verification data from the enterprise device to verify the enterprise verification data, so that after the enterprise verification data is verified to be correct, the health data collection module receives the enterprise verification data. A first sensitive data storage request issued by the device; and An enterprise data management module is used to verify the first smart data storage request, so as to generate a first token according to the first smart data storage request when it is confirmed that the first smart data storage request is legal, Wherein, after the health data collection module generates a health data sorting method, bind the health data sorting method with the first token, and then bind the health data sorting method with the first token Send back to the enterprise device, so that the enterprise device sorts an employee's health data according to the health data sorting method, and then binds the sorted employee health data and the first token to form a The second sensitive data storage request enables the enterprise device to upload the second sensitive data storage request to the cloud health data management device. The cloud-based health data management system as described in Claim 1, wherein the cloud-based health data management device further includes a master database that provides multiple enterprise data to the enterprise data management module, so that the enterprise data management module will The multiple enterprise data and the storage requirements for the first sensitive data Comparison is required to confirm whether the plurality of enterprise information has the corresponding enterprise information in the first sensitive data storage request, thereby verifying the legitimacy of the first smart data storage request. The cloud health data management system as described in Claim 1, wherein the enterprise device sorts the measurement values or personnel data of each item of the physiological measurement data in the employee health data according to the health data sorting method. The cloud health data management system as described in Claim 1, wherein, when the health data collection module receives the second sensitive data storage request, the enterprise data management module verifies the legitimacy of the first token , so that when the first token is legal, the enterprise data management module obtains the encryption key of the enterprise, and the health data collection module stores the second sensitive data according to the health data sorting method The sorted employee health information is restored to obtain the complete employee health information. The cloud-based health data management system as described in Claim 4, wherein the cloud-based health data management device further includes an encryption and decryption module, which uses the encryption key of the enterprise to store personnel data and health check reports in the employee's health data Data and physiological measurement data are encrypted. The cloud health data management system as described in claim 1, wherein the enterprise-side device is for the health manager of the enterprise to send a smart data query request to the cloud health data management device for verification in the enterprise data management module When the smart data query request is valid, a second token is generated according to the smart data query request. The cloud-based health data management system as described in claim 6, wherein the cloud-based health data management device further includes a smart data management module, which receives the second token returned by the enterprise data management module and uses the smart data The management module provides the second token to the cloud health data manager The encryption and decryption module in the management device, so that the encryption and decryption module can make the enterprise data management module to confirm the token validity of the second token. A cloud health data management method, comprising: The health manager of an enterprise enters an enterprise's verification information through an enterprise-end device; The health data collection module in a cloud health data management device receives the enterprise verification data from the enterprise device to verify the enterprise verification data; After the enterprise verification information is verified as correct, the health information collection module receives a first alert data storage request from the enterprise device; The enterprise data management module in the cloud health data management device verifies the first sensitive data storage request, so that when the first sensitive data storage request is confirmed to be legal, the enterprise data management module relies on the first sensitive data The storage request generates a first token; A health data sorting method is generated by the health data collection module to bind the health data sorting method with the first token, and then return the bound health data sorting method and the first token to the enterprise device; The enterprise device sorts an employee's health data according to the health data sorting method, and then binds the sorted employee's health data and the first token to form a second sensitive data storage request; and The enterprise-side device uploads the second alert data storage request to the cloud health data management device. The cloud health data management method as described in claim item 8 further includes that the master database in the cloud health data management device provides multiple enterprise data to the enterprise data management module, so that the enterprise data management module Corporate data is compared with the first sensitive data storage requirements Yes, to confirm whether the plurality of enterprise information has the corresponding enterprise information in the first sensitive information storage request, so as to verify the legitimacy of the first sensitive information storage request. The cloud-based health data management method as described in Claim 8 further includes that the enterprise device sorts the measurement values or personnel data of each item of the physiological measurement data in the employee's health data according to the health data sorting method. The cloud health data management method as described in claim item 8, further includes making the enterprise data management module verify that the token of the first token is legal when the health data collection module receives the second sensitive data storage request When the first token is legal, the enterprise data management module obtains the encryption key of the enterprise, and then the health data collection module requests to store the second sensitive data according to the health data sorting method Restore the sorted employee health data in order to obtain the complete employee health data. The cloud-based health data management method as described in claim 11 further includes that the encryption and decryption module in the cloud-based health data management device uses the encryption key of the company to encrypt the personnel data, health check report data and Physiological measurement data is encrypted. The cloud health data management method as described in claim item 8 further includes that the enterprise’s health manager sends a smart data query request to the cloud health data management device to be used in the enterprise data management module. When verifying that the smart data query request is legal, the enterprise data management module generates a second token according to the smart data query request. The cloud health data management method as described in claim 13 further includes receiving the second token returned by the enterprise data management module by the smart data management module in the cloud health data management device, and then using the smart data The management module provides the second token to the cloud health information The encryption and decryption module in the management device, so that the encryption and decryption module can make the enterprise data management module to confirm the token validity of the second token. A computer-readable medium, used in a computing device or a computer, stores instructions to execute the cloud-based health data management method described in any one of claims 8 to 14.

Images