WO2014201599A1

WO2014201599A1 - Method and system for information authentication authorization and secure use

Info

Publication number: WO2014201599A1
Application number: PCT/CN2013/077290
Authority: WO
Inventors: 郑磊
Original assignee: 上海华和得易信息技术发展有限公司
Priority date: 2013-06-17
Filing date: 2013-06-17
Publication date: 2014-12-24

Abstract

Provided are a method and system for remote cross-time-period authentication authorization and secure use of medical information in the present invention. A patient authorizes an attending doctor to check a medical record encrypted by a personal secret key of the patient, and gives him secondary authorization permission; after acquiring and reading the medical record authorized by the patient, the attending doctor secondarily authorizes a cooperation doctor to read the medical record of the patient, and then the cooperation doctor checks the medical record of the patient and diagnoses in an assisting manner. The system for remote cross-time-period authentication authorization and secure use of medical information comprises a terminal device, a user terminal sub-system, a server terminal sub-system and data storage.

Description

Method and system for authentication, authorization and safe use of information

The present invention relates to a method and system for authentication and authorization and secure use of information, and more particularly to a method and system for remote authentication and security use of medical information over a period of time. Background technique

The goal of China's new medical reform is to "enable people to enjoy basic medical and health services". However, most of China's primary medical institutions lack experienced doctors, resulting in relatively poor medical service capabilities. In response to this situation, the Ministry of Health has proposed Information system, building a channel for "quality medical resources sinking."

Telemedicine and regional collaborative medical care are guided by the experts of higher-level medical institutions to guide the diagnosis and treatment of grassroots doctors, so that grassroots patients can enjoy the diagnosis and treatment services of higher-level doctors while "seeing nearby doctors". The most effective way to sink the system.

In this cross-regional, cross-medical, and open service system, patient information is stored in different medical institutions and “cloud” data centers, requiring frequent data access and transmission over the network. On the one hand, doctors need to be able to easily access and use these medical data, on the other hand, to ensure the safety of these medical information, to ensure that patient information is not illegally accessed and used, this is a major issue, and existing information System and technical solutions have not been able to effectively solve this problem. This is also an important reason why telemedicine, regional medical care, and medical “cloud” cannot be implemented on a large scale.

At present, there are many technologies for the safe use and authorization of medical information, but only solve the problem of authorization and information security transmission in the face-to-face process of a hospital, patients and doctors, but for the current cross-regional and cross-medical The new needs of institutions, multiple doctors involved in new medical services, such as telemedicine, regional medical care, and collaborative medical care, cannot be met. These new needs include:

1) Remote authorization and temporary reauthorization: During the visit, the attending doctor will invite other doctors (different medical institutions, different regions) to participate, which requires more than one batch and multiple authorizations, and this may be followed by authorization. The patient is no longer in the hospital, which requires the patient to be able to remotely authorize or grant the patient a temporary reauthorization permit; 2) Authorization for a period of time: The doctor's analysis, communication and diagnosis of the patient may not be completed in a short period of time. It takes a period of time (for example, a few days), then the doctor is required to be authorized for a period of time. The patient information can be accessed;

3) Authorization of partial information: Patients usually see a doctor in different hospitals. Therefore, some of the patient's medical information may be stored in a system within each hospital, or in a data center server in a different region. In some cases, patients Just want to authorize the doctor to view part of the medical history, and these medical history data are only stored in one or a few systems;

4) Security issues in information transmission: In the cloud medical service mode and information environment, the patient's medical information must be transmitted to the designated doctor through the public network, which requires the security of data transmission, only the designated doctor In order to see the information, other people can't get the data, even if they get it, they can't see the actual information.

The purpose of the present invention is to solve the above-mentioned private medical information for patients, and to realize the authorization and safe transmission and use for different hospitals, multiple doctors, time spans, and the like in remote consultation, regional collaborative diagnosis and the like. A comprehensive set of diagnosis and treatment services for telemedicine, regional medical care, and collaborative medical care, and establish a system for the safe use and authorization of patients' medical information. Summary of the invention

This Summary is provided to introduce a selection of concepts in the <RTIgt; The summary is not intended to identify key features or essential features of the claimed subject matter.

According to the method for remote authentication and secure use of medical information over a period of time, the patient first grants the attending doctor permission to view the medical record, which is encrypted by the patient's personal key and stored in the network server data storage. After the attending doctor obtains and reads the patient's authorized medical record, the second authorized collaborative doctor reads the patient's medical record, and then the collaborative doctor views the patient's medical record. According to the present invention, medical record information and related information are transmitted in an encrypted manner in the network.

A system for remote authentication and secure use of medical information over a period of time according to the present invention includes a terminal device, a user terminal system, a server terminal system, and data storage. The terminal device includes an authentication and authorization device and a display device, and the user terminal system includes an authorization module and a medical record reading module, and the server terminal system includes the identification The certificate module, the authorization module, the medical record access module, the encryption and transmission module, etc., the data storage includes the patient library, the medical record information, the hospital doctor's library, the temporary cache medical record, the authorization information, and the doctor key pool.

With the present invention, the attending physician and the remote collaborative doctor can conveniently access and use the medical data while ensuring the security of the data. Provide technical support for new medical services involving multiple regions, across medical institutions, and multiple physicians.

The features and advantages of the present invention will be apparent from the description of the appended claims. It is to be understood that the foregoing summary of the invention and the invention DRAWINGS

1 is a general flow diagram of a method for authentication authorization and secure use of medical information of the present invention.

Figure 2 is a sub-flow diagram of patient authorization in the flow of Figure 1.

Figure 3 is a sub-flowchart of the attending doctor reading the medical record in the flow of Figure 1.

Figure 4 is a sub-flow diagram of the secondary authorization of the attending physician in the flow of Figure 1.

Figure 5 is a sub-flow diagram of the collaborative doctor viewing the medical record in the flow of Figure 1.

6 is a block diagram of a system for authentication authorization and secure use of medical information of the present invention. detailed description

The detailed description provided below with reference to the drawings is intended to be illustrative of the embodiments of the invention.

According to the present invention, the patient's private medical record information is stored in the data storage of the network server after being encrypted by the personal key in various forms such as a database, a file, a graphic, etc., and may be stored in one server or in different servers. In the above, the medical record information can only be decrypted by using the patient's personal key, and the patient's personal key is stored at the patient, which may be a medical card, a USB key disk, a CD or the like.

During the hospital visit, the on-site doctor can directly authorize the attending doctor to access his/her medical record information. The authorized method can be through physical media, such as brushing medical cards; or through biological means, such as fingerprinting; or by entering a password; If you are a doctor in the network, you can authorize multiple doctors at the same time.

If the treatment process requires the participation of multiple doctors (called collaborative doctors) located in different regions and it takes a while to complete, then the patient's authorization to the attending physician can be specified for a period of time, for example, from then on. 10 days; and, the patient can grant the attending doctor the power of secondary authorization, so that the attending doctor can authorize the collaborative doctor to read the patient's medical record.

In the present invention, medical record information and related information are transmitted in an encrypted manner in the network. Referring to Figure 1, there is shown a general flow diagram of a method for authentication authorization and secure use of medical information of the present invention. After confirming the patient identity by the medical record card, photo, social security card number, etc. in step 101, the patient is granted the permission of the attending doctor to view the medical record and the secondary authorization in step 102. After the attending doctor acquires and reads the patient-authorized medical record in step 103, the step is performed. 104. The second authorized collaborative doctor reads the medical record of the patient, and at step 105, the medical record of the patient is viewed by the collaborative doctor. Figure 2 is a sub-flow diagram of patient authorization in the flow of Figure 1.

In step 201, the authorized content is specified by the patient A2: The patient's medical record may include the contents of the patient's different diseases in different hospitals in various periods. For the attending doctor M3 of the current visit, the patient may specify a partial medical record range, for example:

According to the time period, such as the authorization of medical records for the past 3 years;

According to the disease type, such as only the medical record related to the disease of the current visit;

According to the hospital, only the medical records of patients in certain hospitals are authorized;

At step 202, the authorized attending physician is designated by the patient: in the on-site visit, the designated doctor is usually the doctor on the spot; and in the case of an off-site visit, such as booking a doctor via the Internet or by telephone, the patient may select one or more Attending a doctor and authorizing to view his medical history;

In step 203, the authorization period is specified by the patient: the authorized time range, such as 10 days from today; at step 204, the patient is allowed to perform a secondary authorization by the patient: that is, the patient may grant the doctor the power of secondary authorization, thereby making The attending doctor may authorize other collaborative doctors to read the patient's medical record;

In step 205, the authorization information is saved: the information set in the above steps 201-204 is saved in the data storage, and the submission manner can be submitted through the PC client; or can be submitted by using the mobile phone short message/mobile terminal program, which can be understood by those skilled in the art. The implementation of specific submissions can be varied.

The authorization information may also include a secondary key, which may be used to assist in decrypting the medical record data, that is, the key cannot be decrypted by the key alone, which is only half of the key; the authorization information is authorized by the authorized doctor's public key Encryption, all doctor's public keys are uniformly stored in the data store. 3 is a sub-flowchart of the attending doctor reading the medical record in the flow of FIG. 1.

In step 301, the patient medical record information is obtained from the data storage according to the patient identification (such as the medical record card number, the social security card number, and the identification number). As described above, the medical record information is encrypted, and only the patient's personal key can be used for decryption. .

In step 302, it is confirmed from the authorization information in the data store whether the doctor is authorized to access the medical record contents.

If it is accessible, then in step 303, the patient's personal key is used for decryption. When the patient is in front of the doctor, the patient decrypts the medical record using the personal key. As mentioned earlier, the personal key is stored at the patient (eg medical card, USB key disk, CD); when the patient is not in front of the doctor, the patient The personal key can be used to generate a temporary ciphertext, which is submitted to the system, and the system can use the temporary ciphertext and the aforementioned auxiliary key obtained from the authorization information to decrypt the patient's medical record.

In step 304, the decrypted patient medical record is encrypted by the doctor's public key, which is from the doctor's key store stored in the data store, and the temporary medical record encrypted by the public key is stored in a temporary cache in the data store. For doctors to check at any time, if the doctor only needs to read it once, this step is not needed.

In step 305, the patient medical record is obtained from the temporary cache, and the authorization information in the data storage is confirmed whether it is still within the authorized time range. If yes, the doctor can decrypt it with his own key and read it. Fig. 4 is a sub-flowchart of the second authorized medical doctor of the doctor in the process of Fig. 1 reading the medical record.

In step 401, the attending doctor selects a collaboration doctor from the hospital and the doctor's library in the data storage to help him diagnose the diagnosis;

In step 402, the authorization information in the data storage is used to verify whether the attending doctor has the right of secondary authorization, and whether it is within the authorized time range, and if so, the attending doctor authorizes the collaborative doctor to read the patient's medical record;

At step 403, the attending physician creates a temporary key for each authorized collaboration doctor, and encrypts it with the key of each collaboration doctor, and transmits it to each collaboration doctor through the doctor key pool. Figure 5 is a sub-flow diagram of a collaborative doctor viewing a medical record in the flow of Figure 1. In step 501, the collaboration doctor obtains a temporary key encrypted by the doctor's key from the doctor's key through the doctor's key pool;

In step 502, the collaboration doctor decrypts with his own key to obtain a temporary key;

At step 503, the cooperating physician obtains the patient's medical record from the temporary cache and decrypts with the temporary key to read the patient's medical record and assist in the diagnosis. 6 is a block diagram of a system for authentication authorization and secure use of medical information of the present invention.

The system includes terminal equipment, a user terminal system, a server terminal system, and data storage.

The terminal device includes:

a) Authentication/authorization of the terminal device: A device that can authenticate the patient and save the user's key, and can use this device for authorization. The device can be one or a whole set. It can be: health card/card reader; mobile device (such as mobile phone); biometric device such as fingerprint reader;

b) Medical record display terminal device: used to display the authorized patient medical record, which can be a PC, a mobile phone or a tablet computer, or other video equipment such as a television.

The user terminal system is a software system for the user, and the user here includes the patient, the attending doctor, and the cooperative doctor. The system can be deployed in different locations, such as hospitals, patients' homes, telemedicine centers, etc., accessing the server over a local area network, a wide area network (such as the Internet), or a mobile network. The user terminal system includes:

a) Authorization module: Provides a user interface to realize the function of “patient authorization to the attending physician and attending doctor to other doctors”;

b) Medical record reading module: The medical record is displayed on the corresponding display device in the form of graphics, text, voice, video, etc., and is read by the user.

Server terminal system: It can be deployed centrally in hospitals, data centers, or distributed, and deployed in a "cloud" manner. The server terminal system includes:

a) Authentication module: Authenticate the patient and doctor; and implement unified management of patient data through MPI (main index) service;

b) Authorization module: Realize the patient's authorization to the doctor of the attending doctor and the attending doctor, and record all authorization procedures;

c) Medical record access module: Unified management of the medical records of all patients, to achieve the function of reading, modifying and querying the medical records, the patient's medical records can be stored in different servers; d) Encryption and transmission module: According to the authorization and the visitor, the corresponding key and encryption algorithm are used for encryption and transmission.

Data Storage: Implement physical storage of primary data, either centralized or distributed, including:

a) Patient bank: Save all patient information, including basic information of the patient (such as ID number, residential address, household registration, social security card number); patient card information in each hospital; and system authentication information for patients;

b) Patient medical record information: including the index of the medical records of the patients in each hospital and the original information, including prescription, examination, medication, surgery, nursing, etc.; these data are encrypted and stored by the patient's key, where the medical record is permanent Saved, will not be deleted;

c) hospital, doctor's library: save hospital information, and information about doctors who can use the system;

d) Temporary cache medical records: Medical records that need to be temporarily saved during the diagnosis and treatment process. These medical record data are partially copied from the “patient medical record information”, and the time limit can be defined. After completing the medical treatment or exceeding the time limit, The cached medical record will be deleted;

e) Authorization information: Record the patient's authorization information to the doctor, the authorized doctor, the authorized person, the authorized content, the authorization level, the authorization period, the auxiliary key, etc.;

0 Doctor Key Library: The key of the doctor is recorded, which is used to encrypt the authorized patient information and transmit it to the corresponding collaboration doctor. The present invention "a method and system for authentication and authorization and secure use of information" has been described in detail above. The above description is provided by way of example and is not intended to limit the scope of the claimed invention. Variations of the described embodiments of the present technology and embodiments of different combinations in accordance with the teachings of the present invention will be apparent to those skilled in the art.

Claims

1. A method for authentication, authorization and safe use of medical information, including:

The attending physician is authorized to access medical record information and is authorized to perform secondary authorization (102);

After confirming that the attending doctor is authorized, the attending doctor accesses the medical record information (103) and authorizes the collaborating doctor for the second time (104).

2. The method of claim 1, further comprising:

The medical record information is accessed by the collaborating physician (105).

3. The method of claim 1, wherein the medical record information is encrypted with the patient's personal key, and the authorization information generated by the attending physician's authorization includes an auxiliary key, combined with the patient's personal key. The temporary ciphertext generated by the key is used by the attending physician to decrypt the medical record information.

4. The method of claim 1, wherein after the attending doctor accesses the medical record information, the decrypted medical record information is encrypted with the doctor's public key and stored as a temporary cached medical record, and is stored as a temporary cached medical record. The collaborating doctors create a temporary key.

5. The method of claim 4, wherein the collaborating doctor obtains the temporary key and uses the temporary key to decrypt the temporary cached medical record.

6. The method of claim 1, wherein the authorized content of the medical record information can be specified based on at least one of time period, disease type, and hospital.

7. A system for authentication, authorization and safe use of medical information, including:

Terminal equipment used to authenticate patient identity and display medical records;

Each user terminal subsystem connected to the terminal equipment; A server terminal subsystem connected to each of the user terminal subsystems for authorization, access, encryption and transmission, and

Data storage connected to the server terminal subsystem for physical storage of data.

8. The system of claim 7, wherein the server terminal subsystem further includes: an authentication module, an authorization module, a medical record access module, and an encryption and transmission module.

9. The system of claim 7, wherein the user terminal subsystem further includes an authorization module and a medical record reading module.

10. The system of claim 7, wherein the data storage is centralized or distributed.