WO2020168772A1 - 一种电子病历存储方法、系统、装置、设备及介质 - Google Patents

一种电子病历存储方法、系统、装置、设备及介质 Download PDF

Info

Publication number
WO2020168772A1
WO2020168772A1 PCT/CN2019/121815 CN2019121815W WO2020168772A1 WO 2020168772 A1 WO2020168772 A1 WO 2020168772A1 CN 2019121815 W CN2019121815 W CN 2019121815W WO 2020168772 A1 WO2020168772 A1 WO 2020168772A1
Authority
WO
WIPO (PCT)
Prior art keywords
medical record
certificate
queried
user
electronic medical
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2019/121815
Other languages
English (en)
French (fr)
Inventor
冯承勇
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
OneConnect Smart Technology Co Ltd
Original Assignee
OneConnect Smart Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by OneConnect Smart Technology Co Ltd filed Critical OneConnect Smart Technology Co Ltd
Publication of WO2020168772A1 publication Critical patent/WO2020168772A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/602—Providing cryptographic facilities or services
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6245—Protecting personal data, e.g. for financial or medical purposes
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
    • G—PHYSICS
    • G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
    • G16H—HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
    • G16H10/00—ICT specially adapted for the handling or processing of patient-related medical or healthcare data
    • G16H10/60—ICT specially adapted for the handling or processing of patient-related medical or healthcare data for patient-specific data, e.g. for electronic patient records

Definitions

  • This application belongs to the field of Internet technology, and in particular relates to an electronic medical record storage method, system, device, equipment and medium.
  • the health information platform uses electronic medical records to store all patient data and update the data in real time.
  • the currently established health information platforms usually rely on centralized information systems to carry them, and based on this centralized information system, the storage and storage of electronic medical records are realized. Update.
  • a centralized information system protects users’ personal privacy through identity authentication and authorization, that is, users bind and store their own electronic medical records with the user’s ID card information, contact information and other personal information, so that In the follow-up user treatment, the user provides personal information to obtain the user's electronic medical record to achieve the user's treatment.
  • this application provides an electronic medical record storage method, system, device, equipment, and medium, the main purpose of which is to solve the current problem of repeated testing of personal medical items, which causes a waste of medical resources.
  • the first aspect of the embodiments of the present application provides an electronic medical record storage method, including:
  • Extract the certificate public key of the target digital certificate encrypt the electronic medical record to be stored based on the certificate public key, and generate a ciphertext of the medical record;
  • a medical record block is generated, and the medical record block is added to the medical record block chain for storage.
  • the second aspect of the embodiments of the present application provides an electronic medical record storage method, including:
  • the electronic medical record storage request is transmitted to the electronic medical record storage device.
  • a third aspect of the embodiments of the present application provides an electronic medical record storage system, including: user equipment and an electronic medical record storage device, wherein:
  • the user equipment obtains the user identification of the user, and generates an electronic medical record storage request based on the electronic medical record to be stored and the user identification;
  • the user equipment transmits the electronic medical record storage request to the electronic medical record storage device
  • the electronic medical record storage device When the electronic medical record storage device receives the electronic medical record storage request, it queries the medical record blockchain for the target digital certificate indicated by the user identifier carried in the electronic medical record storage request;
  • the electronic medical record storage device extracts the certificate public key of the target digital certificate, and based on the certificate public key, encrypts the electronic medical record to be stored to generate a ciphertext of the medical record;
  • the electronic medical record storage device generates a medical record block based on the medical record ciphertext, and adds the medical record block to the medical record blockchain for storage.
  • a fourth aspect of the embodiments of the present application provides an electronic medical record storage device, including:
  • the determining module is configured to, when receiving the electronic medical record storage request, query the target digital certificate indicated by the user identification carried in the electronic medical record storage request in the medical record blockchain;
  • An encryption module configured to extract the certificate public key of the target digital certificate, encrypt the electronic medical record to be stored based on the certificate public key, and generate a ciphertext of the medical record;
  • the first storage module is configured to generate a medical record block based on the medical record ciphertext, and add the medical record block to the medical record blockchain for storage.
  • a fifth aspect of the embodiments of the present application provides an electronic medical record storage device, including:
  • the first receiving module is configured to receive the electronic medical record to be stored of the user when it is detected that the user requests to store the electronic medical record;
  • the first generating module is configured to obtain the user identification of the user, and generate an electronic medical record storage request based on the electronic medical record to be stored and the user identification;
  • the first transmission module is configured to transmit the electronic medical record storage request to the electronic medical record storage device.
  • the sixth aspect of the embodiments of the present application provides a terminal device, including a memory and a processor.
  • the memory stores computer-readable instructions that can run on the processor, and the processor executes the computer When the instruction is read, the steps of any one of the above-mentioned electronic medical record storage methods are realized.
  • a fourth aspect of the embodiments of the present application provides a computer-readable storage medium that stores computer-readable instructions, wherein the computer-readable instructions are implemented when executed by at least one processor The steps of the electronic medical record storage method described in any one of the above.
  • the target digital certificate indicated by the user identification carried in the electronic medical record storage request is determined, and the certificate of the target digital certificate is extracted
  • the public key based on the certificate public key, encrypts the electronic medical record to be stored, generates a ciphertext of the medical record, and then generates a medical record block based on the ciphertext of the medical record, adds the medical record block to the medical record blockchain for storage, and uses the blockchain to decentralize
  • the characteristics of this technology not only ensure the safety of electronic medical records, but also realize the sharing of electronic medical records, avoid repeated testing of personal medical items, and save medical resources.
  • FIG. 1A shows a schematic flowchart of an electronic medical record storage method provided by an embodiment of the present application
  • FIG. 1B shows a schematic flowchart of an electronic medical record storage method provided by an embodiment of the present application
  • FIG. 2A shows a schematic flowchart of an electronic medical record storage method provided by an embodiment of the present application
  • FIG. 2B shows a schematic flowchart of an electronic medical record storage method provided by an embodiment of the present application
  • FIG. 2C shows a schematic flowchart of an electronic medical record storage method provided by an embodiment of the present application
  • FIG. 3A shows a schematic structural diagram of an electronic medical record storage device provided by an embodiment of the present application
  • FIG. 3B shows a schematic structural diagram of an electronic medical record storage device provided by an embodiment of the present application.
  • FIG. 3C shows a schematic structural diagram of an electronic medical record storage device provided by an embodiment of the present application.
  • FIG. 4A shows a schematic structural diagram of an electronic medical record storage device provided by an embodiment of the present application
  • FIG. 4B shows a schematic structural diagram of an electronic medical record storage device provided by an embodiment of the present application.
  • FIG. 4C shows a schematic structural diagram of an electronic medical record storage device provided by an embodiment of the present application.
  • FIG. 4D shows a schematic structural diagram of an electronic medical record storage device provided by an embodiment of the present application.
  • FIG. 5 shows a schematic structural diagram of a device provided by an embodiment of the present application.
  • the embodiment of the application provides an electronic medical record storage method, which can determine the target digital certificate indicated by the user identification carried in the electronic medical record storage request when the electronic medical record storage request is received, and extract the certificate public key of the target digital certificate based on The certificate public key encrypts the electronic medical records to be stored, generates the ciphertext of the medical record, and then generates the medical record block based on the ciphertext of the medical record, and adds the medical record block to the medical record blockchain for storage, using the decentralized characteristics of the blockchain, It not only ensures the security of electronic medical records, but also achieves the purpose of sharing electronic medical records, avoids repeated testing of personal medical items, and saves medical resources.
  • the method includes:
  • the electronic medical record storage device receives the electronic medical record storage request, it determines the target digital certificate indicated by the user identification carried in the electronic medical record storage request.
  • the user ID of the registered user and the corresponding digital certificate are stored in the electronic medical record storage system, when receiving the electronic medical record storage request transmitted by the user terminal, in order to ensure that the user wants to store For the security of the data in the electronic medical record to be stored, first, extract the user identification carried in the electronic medical record storage request; then, determine the target digital certificate indicated by the user identification, so that subsequent implementation of the electronic medical record to be stored based on the target digital certificate encryption.
  • the electronic medical record storage device extracts the certificate public key of the target digital certificate, and based on the certificate public key, encrypts the electronic medical record to be stored to generate a ciphertext of the medical record.
  • the certificate public key when the target digital certificate is obtained, since the digital certificates stored in the electronic medical record storage system all include the certificate public key, the certificate public key can be extracted from the target digital certificate, and based on this The certificate public key encrypts the electronic medical record to be stored, generates a ciphertext of the medical record including the electronic medical record to be stored, and realizes the encryption of the electronic medical record to be stored.
  • the electronic medical record storage device generates a medical record block based on the ciphertext of the medical record, and adds the medical record block to the medical record blockchain for storage.
  • the medical record block chain stores data in the form of a medical record block, based on the ciphertext of the medical record, a medical record block including the ciphertext of the medical record is generated, Add the medical record block to the medical record blockchain for storage, so as to realize the storage of the electronic medical record to be stored in the medical record blockchain.
  • the target digital certificate indicated by the user identification carried in the electronic medical record storage request is determined, and the certificate public key of the target digital certificate is extracted.
  • the electronic medical record is encrypted to generate the ciphertext of the medical record, and then based on the ciphertext of the medical record, the medical record block is generated, and the medical record block is added to the medical record block chain for storage.
  • the decentralized characteristics of the block chain not only ensure the electronic medical record Security also realizes the sharing of electronic medical records, avoids repeated testing of personal medical items, and saves medical resources.
  • the embodiment of the application provides an electronic medical record storage method, which can determine the target digital certificate indicated by the user identification carried in the electronic medical record storage request when the electronic medical record storage request is received, and extract the certificate public key of the target digital certificate based on The certificate public key encrypts the electronic medical records to be stored, generates the ciphertext of the medical record, and then generates the medical record block based on the ciphertext of the medical record, and adds the medical record block to the medical record blockchain for storage, using the decentralized characteristics of the blockchain, It not only ensures the security of electronic medical records, but also achieves the purpose of sharing electronic medical records, avoids repeated testing of personal medical items, and saves medical resources.
  • the method includes:
  • the electronic medical record to be stored uploaded by the user needs to be received, so as to subsequently store the electronic medical record to be stored in the electronic medical record storage system.
  • the user equipment obtains the user identification of the user, and generates an electronic medical record storage request based on the electronic medical record to be stored and the user identification.
  • the electronic medical record storage system in order for the electronic medical record storage system to determine which user’s electronic medical record is after receiving the electronic medical record to be stored, and then to distinguish all the stored electronic medical records, it is necessary to obtain the user ID of the user, and Based on the electronic medical record to be stored and the user identification, an electronic medical record storage request is generated so that the subsequent electronic medical record storage system can store the user identification and the electronic medical record to be stored correspondingly.
  • the user equipment transmits the electronic medical record storage request to the electronic medical record storage device.
  • the electronic medical record storage request can be transmitted to the electronic medical record storage system, so that the electronic medical record storage system can store the electronic medical record to be stored.
  • the electronic medical record to be stored is received, the user identification of the user is obtained, and the electronic medical record storage request is generated based on the electronic medical record to be stored and the user identification, and the electronic medical record
  • the storage request is transmitted to the electronic medical record storage system, and the decentralization of the blockchain not only ensures the security of the electronic medical record, but also realizes the sharing of the electronic medical record, avoids repeated testing of personal medical items, and saves medical resources.
  • the embodiment of the application provides an electronic medical record storage method, which can determine the target digital certificate indicated by the user identification carried in the electronic medical record storage request when the electronic medical record storage request is received, and extract the certificate public key of the target digital certificate based on The certificate public key encrypts the electronic medical records to be stored, generates the ciphertext of the medical record, and then generates the medical record block based on the ciphertext of the medical record, and adds the medical record block to the medical record blockchain for storage, using the decentralized characteristics of the blockchain, It not only guarantees the security of electronic medical records, but also achieves the purpose of sharing electronic medical records, avoids repeated testing of personal medical items, and saves medical resources. As shown in Figure 2A, this method is used in the user terminal and electronic resume storage system, including:
  • the user equipment When the user equipment detects that the user requests to store electronic medical records, it receives the user's electronic medical records to be stored, obtains the user's user identification, generates an electronic medical record storage request based on the electronic medical records to be stored and the user identification, and transmits the electronic medical record storage request To electronic medical record storage device.
  • the inventor realizes that when storing electronic medical records, such as MySQL (Structured Query Language, relational database management system) and other traditional databases, this traditional database usually exists independently, that is, different databases are not interoperable, so that if the user only sees a doctor in hospital A, If you haven’t seen a doctor in hospital B, user A’s electronic medical records can only be stored in hospital A’s electronic medical records, and hospital B cannot query the user’s historical electronic medical records in hospital A. If hospital B needs treatment, the user It is also necessary to re-do the examinations previously done in Hospital A in Hospital B, which wastes a lot of medical resources.
  • MySQL Structured Query Language, relational database management system
  • this application uses a blockchain system to store the user’s electronic medical records, that is, establishes an electronic medical record storage device based on blockchain technology, and stores the user’s electronic medical record based on the electronic medical record storage device, and subsequently provides the user with electronic Inquiry service of medical records, etc.
  • the electronic medical record storage device is connected to a large number of user equipment, so that users can upload their own electronic medical records to the electronic medical record storage device for storage through the user equipment.
  • the user equipment can be smart phones, tablet computers, etc. held by the hospital. terminal.
  • the user device can provide a storage entry for the user. When it is detected that the user triggers the storage entry, it is determined that the user request to store the electronic medical record is detected, the electronic medical record upload page is displayed, and when the user is detected to confirm the electronic medical record upload page, confirm Receive the user's electronic medical record to be stored.
  • the electronic medical record storage device stores a large number of electronic medical records, in order to enable the electronic medical record storage device to distinguish the electronic medical records of different users when receiving the electronic medical records, the user's user is obtained after receiving the electronic medical records of the user. And based on the electronic medical record to be stored and the user identification, an electronic medical record storage request is generated, and the electronic medical record storage request is transmitted to the electronic medical record storage device.
  • the user identification may be a unique identification that can be used to indicate the user's identity, such as the user's name, user ID number, and the like, and the specific content of the user identification is not limited in the embodiment of the present application.
  • the electronic medical record storage device receives the electronic medical record storage request, it determines the target digital certificate indicated by the user identifier carried in the electronic medical record storage request.
  • the electronic medical record storage device in order to ensure the security of the electronic medical record stored in the electronic medical record storage device, to prevent everyone from being able to read the electronic medical record, causing the leakage of medical information involved in the electronic medical record, the electronic medical record storage device
  • the digital certificate of each user registered in the electronic medical record storage device is stored, and when an electronic medical record storage request is received, the electronic medical record to be stored is encrypted and stored based on the digital certificate indicated by the electronic medical record storage request, thereby ensuring the waiting The authenticity of stored electronic medical records.
  • a digital certificate is a kind of identity credential that a user applies to a certificate issuing organization, and each user's digital certificate is unique and different.
  • the digital certificate includes the certificate public key and the certificate private key.
  • the certificate public key is stored in the electronic medical record storage device along with the digital certificate and is public; the certificate private key is kept by the user and only the user knows it.
  • the certificate public key and the certificate private key belong to Asymmetric keys, that is, files encrypted with the certificate public key can be decrypted with the certificate private key, and files encrypted with the certificate private key can also be decrypted with the certificate public key.
  • the electronic medical record storage request carries the user identification
  • the electronic medical record storage device stores the digital certificate of each registered user
  • the electronic medical record storage device can be based on the user
  • the identification is searched, the digital certificate corresponding to the user identification is found as the target digital certificate, and the received electronic medical record to be stored is subsequently encrypted based on the target digital certificate.
  • the process of determining the target electronic certificate indicated by the user ID is also the process of detecting the user identity.
  • the electronic medical record storage device does not store the target indicated by the user ID
  • the electronic certificate indicates that the user has not yet registered in the blockchain, and the user needs to register in the blockchain before the electronic medical records can be stored in the blockchain. In this way, the following operations cannot be continued.
  • the electronic medical record storage device extracts the certificate public key of the target digital certificate, and based on the certificate public key, encrypts the electronic medical record to be stored to generate a ciphertext of the medical record.
  • the target digital certificate After the target digital certificate is determined according to the user ID carried in the electronic medical record storage request, since the target digital certificate includes the certificate public key, in order to ensure the storage security of the electronic medical record to be stored, the target digital certificate Extract the certificate public key from the certificate, encrypt the electronic medical record to be stored based on the certificate public key, generate a ciphertext of the medical record including the electronic medical record to be stored, and store the ciphertext of the medical record later to ensure that the electronic medical record is stored safety.
  • the electronic medical record storage device generates a medical record block based on the ciphertext of the medical record, and adds the medical record block to the medical record blockchain for storage.
  • the electronic medical record storage device stores the generated medical record ciphertext based on the medical record blockchain. Therefore, after the medical record ciphertext is generated, in order to store the medical record ciphertext, based on the medical record ciphertext, the generated medical record ciphertext is generated Add the medical record block to the medical record block chain for storage, thereby completing the storage of the electronic medical record to be stored.
  • each user device connected to the electronic medical record storage device stores a block chain consistent with the medical record block chain of the electronic medical record storage device.
  • the medical record After the block is added to the medical record block chain for storage, the generated medical record block is broadcast to each user device connected to the electronic medical record storage device, so that each user device adds the medical record block to its own storage block In the chain, thereby ensuring data consistency.
  • the method includes:
  • the user equipment When the user equipment detects that the user requests registration, it receives the user information of the user and the digital certificate to be verified, extracts the private key of the certificate to be verified from the digital certificate to be verified, and uses the private key of the certificate to be verified to sign the digital certificate to be verified, and generate The signature of the certificate to be verified.
  • the user equipment may provide a registration entry for the user, and when it is detected that the user triggers the registration entry, it is determined that the user requests registration is detected, and the registration page is displayed.
  • the user's identity is embodied based on a digital certificate
  • the user is required to provide a digital certificate so that the user's identity can be verified based on the digital certificate.
  • the user device is the terminal used by the user.
  • the device may extract the private key of the certificate to be verified of the digital certificate to be verified, or the user may provide the private key of the certificate to be verified to the user device.
  • the private key of the certificate to be verified can be used to sign the digital certificate to be verified.
  • the signing process is essentially an encryption process, and the encrypted digital certificate to be verified is used as the verification Certificate signature, so that subsequent verification of the digital certificate to be verified can be achieved by verifying the signature of the certificate to be verified.
  • the user equipment generates a registration request based on the user information, the signature of the certificate to be verified, and the digital certificate to be verified, and transmits the registration request to the electronic medical record storage device.
  • a registration request can be generated based on the user information, the signature of the certificate to be verified, and the digital certificate to be verified, and the registration request can be transmitted to the electronic medical record storage device for the electronic medical record
  • the storage device verifies the registration request, and completes the user's registration in the electronic medical record storage device when the verification is successful.
  • the electronic medical record storage device receives the user's registration request, extracts the user information, the signature of the certificate to be verified, and the digital certificate to be verified in the registration request, and uses the digital certificate to be verified to verify the signature of the certificate to be verified. If the public key of the certificate to be verified is used for treatment If the verification of the signature of the verification certificate is successful, the following step 208 is executed; if the verification of the signature of the certificate to be verified fails, the following step 209 is executed.
  • the electronic medical record storage device receives the registration request transmitted by the user equipment, and extracts the user information, the signature of the certificate to be verified, and the digital certificate to be verified in the registration request. Since the public key of the certificate to be verified is carried with the certificate to be verified and is public, the public key of the certificate to be verified can be extracted from the digital certificate to be verified. In addition, the signature of the certificate to be verified is obtained by signing the certificate to be verified based on the private key of the certificate to be verified. Therefore, based on the property that the public and private key pair can mutually encrypt and decrypt, the public key of the certificate to be verified can be used to verify the certificate.
  • the signature is decrypted, and the authenticity of the signature of the certificate to be verified is determined according to whether the decryption is successful. Specifically, when using the public key of the certificate to be verified to verify the signature of the certificate to be verified, first, extract the public key of the certificate to be verified from the digital certificate to be verified; then, use the public key of the certificate to be verified to decrypt the signature of the certificate to be verified, and determine Verify whether the public key of the certificate successfully decrypts the signature of the certificate to be verified. If the electronic medical record storage device uses the public key of the certificate to be verified to successfully decrypt the signature of the certificate to be verified, it means that the registration request has not been tampered with during the transmission process, and the authenticity of the registration request can be guaranteed.
  • the user can log on the electronic medical record storage device If the electronic medical record storage device uses the public key of the certificate to be verified and the decryption of the signature of the certificate to be verified fails, it means that the registration request is likely to be tampered with during the transmission process, and the certificate to be verified The signature is no longer the original signature. Therefore, the user cannot register in the electronic medical record storage device. The user needs to resend the registration request, that is, perform the following step 209.
  • the electronic medical record storage device successfully decrypts the signature of the certificate to be verified using the public key of the certificate to be verified, extract the user ID of the user to be stored, and store the user ID to be stored, user information, and digital certificate to be verified in the medical record blockchain.
  • the electronic medical record storage device retrieves the to-be-stored
  • the user identification, and the to-be-stored user identification, user information, and the to-be-verified digital certificate are stored in the medical record blockchain to complete the registration of the user in the electronic medical record storage device.
  • the user ID to be stored can be extracted from the user information of the user, for example, the user name, ID number, etc.
  • the user can store the electronic medical record in the electronic medical record storage device and query the electronic medical record based on the registered account in the future.
  • the electronic medical record storage device fails to decrypt the signature of the certificate to be verified by using the public key of the certificate to be verified, it generates a failure response and returns the failure response to the user.
  • the electronic medical record storage device uses the public key of the certificate to be verified and the decryption of the signature of the certificate to be verified fails, it means that the registration request is likely to be tampered with during transmission and the authenticity cannot be verified.
  • the user needs to re-provide relevant information for registration. Therefore, a failure response is generated and the failure response is returned to the user so that the user can resend the registration request after receiving the failure response.
  • the electronic medical record storage device also provides the user with an electronic medical record query service. See Figure 2C, this method include:
  • the user equipment When the user equipment detects that the user requests a query, it receives the user ID of the user to be queried and the digital certificate to be queried, extracts the private key of the certificate to be queried from the digital certificate to be queried, and signs the digital certificate to be queried with the private key of the certificate to be queried To generate the signature of the certificate to be queried.
  • the user equipment provides a query entry for the user, and when it is detected that the user triggers the query entry, it is determined that it is detected that the user requests a query. Since the electronic medical record is stored in the electronic medical record storage device according to the user ID, the user is required to provide the user ID to be queried so that the designated electronic medical record can be queried according to the user ID to be queried; in addition, in order to ensure the security of the electronic medical record , To prevent electronic medical records from being obtained by criminals, resulting in the leakage of information in the electronic medical records. While the user is required to provide the identification of the user to be queried, the user is also required to provide the digital certificate to be queried, so as to verify the digital certificate to be queried.
  • the private key of the certificate to be queried can also be used to sign the digital certificate to be queried, thereby generating the certificate to be queried Sign, so as to verify whether the generated query request has been tampered with by subsequently verifying the signature of the certificate to be queried.
  • generating the signature of the certificate to be queried is the same as the method of generating the signature of the certificate to be verified in step 205, and will not be repeated here.
  • the user equipment generates a query request based on the user identification to be queried, the digital certificate to be queried, and the signature of the certificate to be queried, and transmits the query request to the electronic medical record storage device.
  • the user equipment after the user equipment receives the user identification to be queried, the digital certificate to be queried, and the signature of the certificate to be queried, it can generate a query based on the user identification to be queried, the digital certificate to be queried, and the signature of the certificate to be queried. Request and transmit the query request to the electronic medical record storage device to realize the query of the electronic medical record.
  • the electronic medical record storage device receives the query request, it extracts the user ID to be queried, the digital certificate to be queried, and the signature of the certificate to be queried in the query request, and verifies the user identity to be queried, the digital certificate to be queried, and the signature of the certificate to be queried. If the signature verification of the user ID to be queried, the digital certificate to be queried, and the certificate to be queried is successful, the following steps 213 to 214 are executed; if the signature verification of the user ID to be queried, the digital certificate to be queried, and the certificate to be queried fails, the following Step 215 to step 216.
  • the electronic medical record storage device when it receives a query request, it needs to extract the user ID to be queried, the digital certificate to be queried, and the signature of the certificate to be queried in the query request, so as to pass the identity of the user to be queried and the digital certificate to be queried.
  • the signature of the certificate and the certificate to be queried is verified to realize the verification of the user's identity. Specifically, when verifying the identity of the user to be queried, the digital certificate to be queried, and the signature of the certificate to be queried, first, extract the public key of the certificate to be queried from the digital certificate to be queried, and use the public key of the certificate to be queried to decrypt the signature of the certificate to be queried.
  • the public key of the certificate to be queried is used to successfully decrypt the signature of the certificate to be queried, and it is determined that the user information to be queried corresponding to the user ID to be queried is stored in the medical record blockchain, the user ID to be queried, the digital certificate to be queried, and the digital certificate to be queried are determined.
  • the electronic medical record requested for the query can be returned to the user, that is, the following steps 213 to 214 are performed; when the public key of the certificate to be queried is used, the decryption of the signature of the query certificate fails, or the medical record block is determined.
  • the user information to be queried corresponding to the user ID to be queried is not stored in the chain, it is determined that the user ID to be queried, the digital certificate to be queried, and the signature verification of the certificate to be queried have failed. At this time, it means that the user's identity cannot be determined, or the user is not present. Register in the electronic medical record storage device. At this time, the user needs to resend the query request, that is, perform the following steps 215 to 216.
  • the electronic medical record storage device If the electronic medical record storage device successfully verifies the identity of the user to be queried, the digital certificate to be queried, and the signature of the certificate to be queried, it determines the ciphertext of the medical record to be queried indicated by the digital certificate to be queried, and returns the ciphertext of the medical record to be queried.
  • the electronic medical record storage device successfully verifies the identity of the user to be queried, the digital certificate to be queried, and the signature of the certificate to be queried, it means that the user indicated by the user identity to be queried has been registered in the electronic medical record storage device and the identity has been After the verification is passed, at this time, the electronic medical record that the user wants to query can be returned to the user.
  • the electronic medical record storage device since the electronic medical record storage device generates and stores the medical record cipher text including the electronic medical record when storing the electronic medical record, the electronic medical record storage device also obtains the medical record cipher text according to the user ID to be queried. In this way, the electronic medical record storage device returns the acquired ciphertext of the medical record to be queried to the user equipment, so that the user equipment can view the electronic medical record by decrypting the ciphertext of the medical record.
  • the user equipment receives the ciphertext of the medical record returned by the electronic medical record storage device, decrypts the ciphertext of the medical record with the private key of the certificate to be queried, and obtains the electronic medical record to be queried.
  • the user equipment when the user equipment receives the ciphertext of the medical record returned by the electronic medical record storage device, since the ciphertext of the medical record is encrypted and generated using the certificate public key of the user’s digital certificate, only the user’s certificate private key can be The private key of the certificate is kept by the user. Therefore, the user can decrypt the ciphertext of the medical record by using the private key of the certificate of his own digital certificate. In this way, the user device can use the wait for obtaining the digital certificate to be queried.
  • the private key of the certificate to be queried is used to decrypt the ciphertext of the medical record by using the private key of the certificate to be queried, so that the electronic medical record to be queried is obtained from the ciphertext of the case.
  • the electronic medical record storage device fails to verify the signature of the user identification to be queried, the digital certificate to be queried, and the certificate to be queried, it generates a failure response and returns a failure response.
  • the electronic medical record storage device fails to verify the identity of the user to be queried, the digital certificate to be queried, and the signature of the certificate to be queried, it means that the user’s identity verification has failed, or the user is not registered in the electronic medical record storage device. Therefore, a failure response is generated, and a failure response is returned.
  • the user equipment re-executes the foregoing process of generating and transmitting the query request.
  • the user equipment when the user equipment receives the failure response transmitted by the electronic medical record storage device, it means that the user's request for the electronic medical record query failed this time. At this time, the user equipment needs to re-execute the above-mentioned generation and transmission of the query request the process of.
  • the target digital certificate indicated by the user identification carried in the electronic medical record storage request is determined, and the certificate public key of the target digital certificate is extracted.
  • the electronic medical record is encrypted to generate the ciphertext of the medical record, and then based on the ciphertext of the medical record, the medical record block is generated, and the medical record block is added to the medical record blockchain for storage.
  • an embodiment of the present application provides an electronic medical record storage device.
  • the device includes: a determination module 301, an encryption module 302, and a first storage module 303 .
  • the determining module 301 is configured to, when an electronic medical record storage request is received, query the medical record blockchain for the target digital certificate indicated by the user identification carried in the electronic medical record storage request;
  • the encryption module 302 is configured to extract the certificate public key of the target digital certificate, and based on the certificate public key, encrypt the electronic medical record to be stored to generate a ciphertext of the medical record;
  • the first storage module 303 is configured to generate a medical record block based on the medical record ciphertext, and add the medical record block to the medical record blockchain for storage.
  • the device further includes a first receiving module 304, a first verification module 305, a second storage module 306, and a first returning module 307.
  • the first receiving module 304 is configured to receive a registration request from a user, and extract user information, a certificate signature to be verified, and a digital certificate to be verified from the registration request;
  • the first verification module 305 is configured to verify the signature of the certificate to be verified by using the digital certificate to be verified;
  • the second storage module 306 is configured to extract the to-be-stored user identification from the user information if the to-be-verified certificate is successfully used to verify the signature of the to-be-verified certificate.
  • the information and the digital certificate to be verified are correspondingly stored in the medical record blockchain;
  • the first return module 307 is configured to generate a failure response if the signature verification of the certificate to be verified using the certificate to be verified fails, and return the failure response to the user.
  • the first verification module 305 is configured to extract the public key of the certificate to be verified from the digital certificate to be verified; use the public key of the certificate to be verified to decrypt the signature of the certificate to be verified and determine Whether the public key of the certificate to be verified successfully decrypts the signature of the certificate to be verified.
  • the device further includes a second receiving module 308, a second verification module 309, a second returning module 310, and a third returning module 311.
  • the second receiving module 308 is configured to extract the user identification to be queried, the digital certificate to be queried, and the signature of the certificate to be queried from the query request when the query request is received;
  • the second verification module 309 is configured to verify the user identification to be queried, the digital certificate to be queried, and the signature of the certificate to be queried;
  • the second return module 310 is configured to obtain the digital certificate to be queried in the case blockchain if the signature verification of the user identification to be queried, the digital certificate to be queried, and the certificate to be queried is successful The indicated ciphertext of the medical record to be queried, and return the ciphertext of the medical record to be queried;
  • the third return module 311 is configured to generate a failure response and return the failure response if the signature verification of the user identification to be queried, the digital certificate to be queried, and the certificate to be queried fails.
  • the second verification module 309 is configured to extract the public key of the certificate to be queried from the digital certificate to be queried, use the public key of the certificate to be queried to decrypt the signature of the certificate to be queried, and determine whether Whether the public key of the certificate to be queried successfully signs and decrypts the certificate to be queried; query whether the user information to be queried corresponding to the user ID to be queried is stored in the medical record blockchain;
  • the second return module 310 is configured to decrypt the signature of the certificate to be queried using the public key of the certificate to be queried successfully, and to determine that the medical record block chain stores the identity corresponding to the user to be queried.
  • the signature verification of the user identification to be queried, the digital certificate to be queried, and the certificate to be queried is successful;
  • the third return module 311 is used for when the public key of the certificate to be queried fails to decrypt the signature of the certificate to be queried, or it is determined that the medical record blockchain does not store the pending user ID corresponding to the user to be queried.
  • querying user information it is determined that the signature verification of the user identification to be queried, the digital certificate to be queried, and the certificate to be queried fails.
  • the device provided in this embodiment of the application can determine the target digital certificate indicated by the user ID carried in the electronic medical record storage request when receiving the electronic medical record storage request, and extract the certificate public key of the target digital certificate, and treat it based on the certificate public key.
  • the electronic medical records are stored and encrypted to generate the medical record ciphertext, and then based on the medical record ciphertext, the medical record block is generated, and the medical record block is added to the medical record blockchain for storage.
  • the use of the decentralized feature of the blockchain not only guarantees the electronic medical record It also realizes the sharing of electronic medical records, avoids repeated testing of personal medical items, and saves medical resources.
  • an embodiment of the present application provides an electronic medical record storage device.
  • the device includes: a first receiving module 401, a first generating module 402, and a first A transmission module 403.
  • the first receiving module 401 is configured to receive the electronic medical record to be stored of the user when it is detected that the user requests to store the electronic medical record;
  • the first generating module 402 is configured to obtain the user identification of the user, and generate an electronic medical record storage request based on the electronic medical record to be stored and the user identification;
  • the first transmission module 403 is configured to transmit the electronic medical record storage request to the electronic medical record storage device.
  • the device further includes: a second receiving module 404, a first signature module 405, a second generation module 406, and a second transmission module 407.
  • the second receiving module 404 is configured to receive the user information of the user and the digital certificate to be verified when it is detected that the user requests registration;
  • the first signature module 405 is configured to extract the private key of the certificate to be verified from the digital certificate to be verified, use the private key of the certificate to be verified to sign the digital certificate to be verified, and generate a signature of the certificate to be verified;
  • the second generating module 406 is configured to generate a registration request based on the user information, the signature of the certificate to be verified, and the digital certificate to be verified;
  • the second transmission module 407 is configured to transmit the registration request to the electronic medical record storage device.
  • the device further includes: a third receiving module 408, a second signature module 409, a third generation module 410, and a third transmission module 411.
  • the third receiving module 408 is configured to receive the to-be-queried user identification and the to-be-queried digital certificate of the user when it is detected that the user requests a query;
  • the second signature module 409 is configured to extract the private key of the certificate to be queried from the digital certificate to be queried, use the private key of the certificate to be queried to sign the digital certificate to be queried, and generate a signature of the certificate to be queried;
  • the third generation module 410 is configured to generate a query request based on the user identification to be queried, the digital certificate to be queried, and the signature of the certificate to be queried;
  • the third transmission module 411 is configured to transmit the query request to the electronic medical record storage device.
  • the device further includes a decryption module 412.
  • the decryption module 412 is configured to, if the ciphertext of the medical record is received, decrypt the ciphertext of the medical record by using the private key of the certificate to be queried to obtain the electronic medical record to be queried, and the ciphertext of the medical record is stored by the electronic medical record storage device Obtained and returned after receiving the query request;
  • the second signature module 409 is also used to re-execute the above process of generating and transmitting the query request if the failure response is received.
  • the device provided by the embodiment of the present application can receive the user’s electronic medical record to be stored, obtain the user’s user identification, generate an electronic medical record storage request based on the electronic medical record to be stored and the user identification, and transfer the electronic medical record to
  • the medical record storage request is transmitted to the electronic medical record storage system, and the decentralized feature of the blockchain not only ensures the security of the electronic medical record, but also realizes the sharing of the electronic medical record, avoids repeated testing of personal medical items, and saves medical resources.
  • the device 500 includes a communication bus, a processor, a memory, and a communication interface, and may also include an input and output interface, and a display device, wherein one of the functional units
  • the communication between each other can be completed through the bus.
  • the memory stores computer-readable instructions
  • the processor is used to execute the programs stored in the memory and execute the electronic medical record storage method in the above-mentioned embodiment.
  • the device can be a user device and an electronic medical record storage device.
  • a readable storage medium has computer readable instructions stored thereon, and when the computer readable instructions are executed by a processor, the steps of the electronic medical record storage method are realized.
  • the readable storage medium is respectively deployed in the user equipment and the electronic medical record storage device.
  • Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory.
  • Volatile memory may include random access memory (RAM) or external cache memory.
  • RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous chain Channel (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.
  • modules in the device in the implementation scenario can be distributed in the device in the implementation scenario according to the description of the implementation scenario, or can be changed to be located in one or more devices different from the implementation scenario.
  • the modules of the above implementation scenarios can be combined into one module or further divided into multiple sub-modules.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Computer Security & Cryptography (AREA)
  • Bioethics (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Medical Informatics (AREA)
  • Databases & Information Systems (AREA)
  • Epidemiology (AREA)
  • Primary Health Care (AREA)
  • Public Health (AREA)
  • Medical Treatment And Welfare Office Work (AREA)
  • Storage Device Security (AREA)

Abstract

一种电子病历存储方法、系统、装置、设备及介质，涉及互联网技术领域，可以将病历区块添加至病历区块链中存储，利用区块链去中心化的特性，不仅保证了电子病历的安全性，还实现了对电子病历的共享，避免个人医疗项目重复检测，节省了医疗资源。该方法包括：当接收到电子病历存储请求时，确定电子病历存储请求中携带的用户标识指示的目标数字证书（101）；电子病历存储设备提取目标数字证书的证书公钥，基于证书公钥，对待存储电子病历进行加密，生成病历密文（102）；电子病历存储设备基于病历密文，生成病历区块，将病历区块添加至病历区块链中存储（103）。

Description

一种电子病历存储方法、系统、装置、设备及介质
本申请要求于2019年02月18日提交中国专利局、申请号为 201910119326.9 、发明名称为“电子病历存储方法、系统、装置、设备及可读存储介质”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请属于互联网技术领域，尤其涉及一种电子病历存储方法、系统、装置、设备及介质。
 背景技术
随着互联网技术的飞速发展，卫生与健康现代医疗卫生体系的建设规划也越来越成熟，预计到2020年，将建成全面的健康信息平台，实现所在地区各大医院之间信息的互联互通。健康信息平台中采用电子病历的形式存储患者的所有数据并实时更新数据，目前已经建立的健康信息平台通常依赖中心化的信息系统所搭载，并基于该中心化的信息系统实现电子病历的存储及更新。
相关技术中，中心化的信息系统是通过身份认证和授权来保护用户的个人隐私的，也即用户将自身的电子病历与用户的身份证信息、联系方式信息等个人信息绑定存储，以便在后续用户治疗时，采用用户提供个人信息的方式来获取用户的电子病历，实现对用户的治疗。
在实现本申请的过程中，发明人发现相关技术中至少存在以下技术问题：
个人具有流动性，通常会在多家医院进行就诊，医疗资源分布的不均恒性会进一步导致病人跨地域进行就医，而异地的医院可能并没有存储病人的电子病历，需要病人重新去做各种检查，使得个人医疗项目重复检测，造成医疗资源的浪费。
 技术问题
有鉴于此，本申请提供了一种电子病历存储方法、系统、装置、设备及介质，主要目的在于解决目前个人医疗项目重复检测，造成医疗资源的浪费的问题。
 技术解决方案
本申请实施例的第一方面提供了一种电子病历存储方法，包括：
当接收到电子病历存储请求时，在病历区块链中查询所述电子病历存储请求中携带的用户标识指示的目标数字证书；
提取所述目标数字证书的证书公钥，基于所述证书公钥，对待存储电子病历进行加密，生成病历密文；
基于所述病历密文，生成病历区块，将所述病历区块添加至所述病历区块链中存储。
本申请实施例的第二方面提供了一种电子病历存储方法，包括：
当检测到用户请求存储电子病历时，接收所述用户的待存储电子病历；
获取所述用户的用户标识，基于所述待存储电子病历以及所述用户标识，生成电子病历存储请求；
将所述电子病历存储请求传输至电子病历存储设备。
本申请实施例的第三方面提供了一种电子病历存储系统，包括：用户设备和电子病历存储设备，其中，
所述用户设备当检测到用户请求存储电子病历时，接收所述用户的待存储电子病历；
所述用户设备获取所述用户的用户标识，基于所述待存储电子病历以及所述用户标识，生成电子病历存储请求；
所述用户设备将所述电子病历存储请求传输至电子病历存储设备；
所述电子病历存储设备当接收到电子病历存储请求时，在病历区块链中查询所述电子病历存储请求中携带的用户标识指示的目标数字证书；
所述电子病历存储设备提取所述目标数字证书的证书公钥，基于所述证书公钥，对待存储电子病历进行加密，生成病历密文；
所述电子病历存储设备基于所述病历密文，生成病历区块，将所述病历区块添加至所述病历区块链中存储。
本申请实施例的第四方面提供了一种电子病历存储装置，包括：
确定模块，用于当接收到电子病历存储请求时，在病历区块链中查询所述电子病历存储请求中携带的用户标识指示的目标数字证书；
加密模块，用于提取所述目标数字证书的证书公钥，基于所述证书公钥，对待存储电子病历进行加密，生成病历密文；
第一存储模块，用于基于所述病历密文，生成病历区块，将所述病历区块添加至所述病历区块链中存储。
本申请实施例的第五方面提供了一种电子病历存储装置，包括：
第一接收模块，用于当检测到用户请求存储电子病历时，接收所述用户的待存储电子病历；
第一生成模块，用于获取所述用户的用户标识，基于所述待存储电子病历以及所述用户标识，生成电子病历存储请求；
第一传输模块，用于将所述电子病历存储请求传输至电子病历存储设备。
本申请实施例的第六方面提供了一种终端设备，包括存储器、处理器，所述存储器上存储有可在所述处理器上运行的计算机可读指令，所述处理器执行所述计算机可读指令时实现如上述任意一个所述电子病历存储方法的步骤。
本申请实施例的第四方面提供了一种计算机可读存储介质，所述计算机可读存储介质存储有计算机可读指令，其特征在于，所述计算机可读指令被至少一个处理器执行时实现如上述任意一个所述电子病历存储方法的步骤。
 有益效果
与目前采用中心化的信息系统存储电子病历的方式相比，本申请当接收到电子病历存储请求时，确定电子病历存储请求中携带的用户标识指示的目标数字证书，并提取目标数字证书的证书公钥，基于证书公钥，对待存储电子病历进行加密，生成病历密文，随后基于病历密文，生成病历区块，将病历区块添加至病历区块链中存储，利用区块链去中心化的特性，不仅保证了电子病历的安全性，还实现了对电子病历的共享，避免个人医疗项目重复检测，节省了医疗资源。
 附图说明
为了更清楚地说明本申请实施例中的技术方案，下面将对实施例或现有技术描述中所需要使用的附图作简单地介绍，显而易见地，下面描述中的附图仅仅是本申请的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动性的前提下，还可以根据这些附图获得其他的附图。
图1A示出了本申请实施例提供的一种电子病历存储方法流程示意图；
图1B示出了本申请实施例提供的一种电子病历存储方法流程示意图；
图2A示出了本申请实施例提供的一种电子病历存储方法流程示意图；
图2B示出了本申请实施例提供的一种电子病历存储方法流程示意图；
图2C示出了本申请实施例提供的一种电子病历存储方法流程示意图；
图3A示出了本申请实施例提供的一种电子病历存储装置的结构示意图；
图3B示出了本申请实施例提供的一种电子病历存储装置的结构示意图；
图3C示出了本申请实施例提供的一种电子病历存储装置的结构示意图；
图4A示出了本申请实施例提供的一种电子病历存储装置的结构示意图；
图4B示出了本申请实施例提供的一种电子病历存储装置的结构示意图；
图4C示出了本申请实施例提供的一种电子病历存储装置的结构示意图；
图4D示出了本申请实施例提供的一种电子病历存储装置的结构示意图；
图5示出了本申请实施例提供的一种设备的装置结构示意图。
 本发明的实施方式
以下描述中，为了说明而不是为了限定，提出了诸如特定系统结构、技术之类的具体细节，以便透彻理解本申请实施例。然而，本领域的技术人员应当清楚，在没有这些具体细节的其它实施例中也可以实现本申请。在其它情况中，省略对众所周知的系统、装置、电路以及方法的详细说明，以免不必要的细节妨碍本申请的描述。
为了说明本申请所述的技术方案，下面通过具体实施例来进行说明。
本申请实施例提供了一种电子病历存储方法，可以当接收到电子病历存储请求时，确定电子病历存储请求中携带的用户标识指示的目标数字证书，并提取目标数字证书的证书公钥，基于证书公钥，对待存储电子病历进行加密，生成病历密文，随后基于病历密文，生成病历区块，将病历区块添加至病历区块链中存储，利用区块链去中心化的特性，不仅保证了电子病历的安全性，还达到了电子病历共享的目的，避免个人医疗项目重复检测，节省了医疗资源，如图1A所示，该方法包括：
101、当电子病历存储设备接收到电子病历存储请求时，确定电子病历存储请求中携带的用户标识指示的目标数字证书。
在本申请实施例中，由于电子病历存储系统中存储有已经注册的用户的用户标识以及对应的数字证书，因此，当接收到用户端传输的电子病历存储请求时，为了对保证用户想要存储的待存储电子病历中数据的安全性，首先，在电子病历存储请求中提取携带的用户标识；随后，确定该用户标识指示的目标数字证书，以便后续基于该目标数字证书实现对待存储电子病历的加密。
102、电子病历存储设备提取目标数字证书的证书公钥，基于证书公钥，对待存储电子病历进行加密，生成病历密文。
在本申请实施例中，当获取到目标数字证书后，由于存储在电子病历存储系统中的数字证书中均包括证书公钥，因此，可以在目标数字证书中提取到证书公钥，并基于该证书公钥，对待存储电子病历进行加密，生成包括待存储电子病历的病历密文，实现对待存储电子病历的加密。
103、电子病历存储设备基于病历密文，生成病历区块，将病历区块添加至病历区块链中存储。
在本申请实施例中，在生成了病历密文后，由于病历区块链中是采用病历区块的形式存储数据的，因此，基于该病历密文，生成包括病历密文的病历区块，将该病历区块添加至病历区块链中存储，从而实现待存储电子病历在病历区块链中的存储。
本申请实施例提供的方法，当接收到电子病历存储请求时，确定电子病历存储请求中携带的用户标识指示的目标数字证书，并提取目标数字证书的证书公钥，基于证书公钥，对待存储电子病历进行加密，生成病历密文，随后基于病历密文，生成病历区块，将病历区块添加至病历区块链中存储，利用区块链去中心化的特性，不仅保证了电子病历的安全性，还实现了对电子病历的共享，避免个人医疗项目重复检测，节省了医疗资源。
本申请实施例提供了一种电子病历存储方法，可以当接收到电子病历存储请求时，确定电子病历存储请求中携带的用户标识指示的目标数字证书，并提取目标数字证书的证书公钥，基于证书公钥，对待存储电子病历进行加密，生成病历密文，随后基于病历密文，生成病历区块，将病历区块添加至病历区块链中存储，利用区块链去中心化的特性，不仅保证了电子病历的安全性，还达到了电子病历共享的目的，避免个人医疗项目重复检测，节省了医疗资源，如图1B所示，该方法包括：
104、当用户设备检测到用户请求存储电子病历时，接收用户的待存储电子病历。
在本申请实施例中，当检测到用户请求存储电子病历时，需要接收用户上传的待存储电子病历，以便后续将待存储电子病历存储到电子病历存储系统中。
105、用户设备获取用户的用户标识，基于待存储电子病历以及用户标识，生成电子病历存储请求。
在本申请实施例中，为了使电子病历存储系统在接收到待存储电子病历后，可以明确是哪一个用户的电子病历，进而将存储的全部电子病历进行区分，需要获取用户的用户标识，并基于待存储电子病历以及用户标识，生成电子病历存储请求，以便后续电子病历存储系统可以将用户标识与待存储电子病历对应存储。
106、用户设备将电子病历存储请求传输至电子病历存储设备。
在本申请实施例中，当生成了电子病历存储请求后，便可以将该电子病历存储请求传输至电子病历存储系统，以便电子病历存储系统对待存储电子病历进行存储。
本申请实施例提供的方法，当检测到用户请求存储电子病历时，接收用户的待存储电子病历，获取用户的用户标识，基于待存储电子病历以及用户标识，生成电子病历存储请求，将电子病历存储请求传输至电子病历存储系统，利用区块链去中心化的特性，不仅保证了电子病历的安全性，还实现了对电子病历的共享，避免个人医疗项目重复检测，节省了医疗资源。
本申请实施例提供了一种电子病历存储方法，可以当接收到电子病历存储请求时，确定电子病历存储请求中携带的用户标识指示的目标数字证书，并提取目标数字证书的证书公钥，基于证书公钥，对待存储电子病历进行加密，生成病历密文，随后基于病历密文，生成病历区块，将病历区块添加至病历区块链中存储，利用区块链去中心化的特性，不仅保证了电子病历的安全性，还达到了电子病历共享的目的，避免个人医疗项目重复检测，节省了医疗资源，如图2A所示，该方法用于用户端和电子简历存储系统，包括：
201、当用户设备检测到用户请求存储电子病历时，接收用户的待存储电子病历，获取用户的用户标识，基于待存储电子病历以及用户标识，生成电子病历存储请求，并将电子病历存储请求传输至电子病历存储设备。
发明人认识到，在存储电子病历时，通常采用诸如MySQL（Structured Query Language，关系型数据库管理系统）等的传统数据库，这种传统数据库通常是独立存在的，也即不同的数据库之间是不互通的，这样，就导致如果用户仅在医院A看过病，没有在医院B看过病，则用户A的电子病历仅能存储在医院A的电子病历，而医院B是无法查询到用户在医院A的历史电子病例的，如果医院B存在治疗需要的话，用户还需要在医院B中重新做以前在医院A做过的检查，浪费了大量的医疗资源。因此，本申请采用区块链系统存储用户的电子病历，也即建立了基于区块链技术实现的电子病历存储设备，并基于该电子病历存储设备存储用户的电子病历，以及后续为用户提供电子病历的查询服务等。
其中，电子病历存储设备中接入了大量的用户设备，使得用户可以通过用户设备将自己的电子病历上传到电子病历存储设备中存储，用户设备具体可为医院所持的智能手机、平板电脑等智能终端。用户设备中可以为用户提供存储入口，当检测到用户触发该存储入口时，确定检测到用户请求存储电子病历，显示电子病历上传页面，并在检测到用户对该电子病历上传页面确认时，确定接收到用户的待存储电子病历。由于电子病历存储设备中存储有大量的电子病历，为了使电子病历存储设备在接收到电子病历时，将不同用户的电子病历进行区分，因此，在接收到用户的电子病历后，获取用户的用户标识，并基于该待存储电子病历以及用户标识，生成电子病历存储请求，将该电子病历存储请求传输至电子病历存储设备中。需要说明的是，用户标识可为用户姓名、用户身份证号码等可以用于指示用户身份的唯一标识，本申请实施例对用户标识的具体内容不进行限定。
202、当电子病历存储设备接收到电子病历存储请求时，确定电子病历存储请求中携带的用户标识指示的目标数字证书。
在本申请实施例中，为了保证电子病历存储设备中存储的电子病历的安全性，避免所有人都可以对电子病历进行读取，造成电子病历中涉及的医疗信息的泄露，电子病历存储设备中存储有每一个在电子病历存储设备中注册过的用户的数字证书，并在接收到电子病历存储请求时，基于该电子病历存储请求指示的数字证书来对待存储电子病历进行加密存储，从而保证待存储电子病历的真实性。
数字证书为用户自行向证书下发机构申请的一种身份凭证，每个用户的数字证书均是唯一且不同的。数字证书包括证书公钥以及证书私钥，证书公钥随数字证书保存在电子病历存储设备中，是公开的；证书私钥由用户个人保管，只有用户个人知晓，证书公钥和证书私钥属于非对称密钥，也即，采用证书公钥加密的文件可以采用证书私钥进行解密，采用证书私钥加密的文件也可以采用证书公钥进行解密。
其中，由于电子病历存储请求中携带有用户标识，且电子病历存储设备中存储有每一个注册过的用户的数字证书，因此，当接收到电子病历存储请求时，电子病历存储设备可基于该用户标识进行查找，查找与该用户标识对应的数字证书作为目标数字证书，并在后续基于该目标数字证书对接收到的待存储电子病历进行加密。需要说明的是，确定用户标识指示的目标电子证书的过程也是对用户身份进行检测的过程，如果未能确定用户标识指示的目标电子证书，也即电子病历存储设备中没有存储用户标识指示的目标电子证书，则表明用户尚未在区块链中进行注册，需要用户在区块链中进行注册后才可以将电子病历存储在区块链中，这样，便不能继续执行下述操作。
203、电子病历存储设备提取目标数字证书的证书公钥，基于证书公钥，对待存储电子病历进行加密，生成病历密文。
在本申请实施例中，当根据电子病历存储请求中携带的用户标识确定了目标数字证书后，由于目标数字证书中包括证书公钥，为了保证待存储电子病历的存储安全，可以在目标数字证书中提取证书公钥，基于该证书公钥，对该待存储电子病历进行加密，生成包括待存储电子病历的病历密文，并在后续将该病历密文进行存储，以便保证待存储电子病历的安全性。
204、电子病历存储设备基于病历密文，生成病历区块，将病历区块添加至病历区块链中存储。
在本申请实施例中，由于电子病历存储设备基于病历区块链存储生成的病历密文，因此，在生成病历密文后，为了将病历密文存储，基于病历密文，生成包括病历密文的病历区块，将该病历区块添加至病历区块链中存储，从而完成待存储电子病历的存储。
需要说明的是，接入到电子病历存储设备中的每一个用户设备中都存储有与电子病历存储设备的病历区块链一致的区块链。为了保证每个接入电子病历存储设备中的每一个用户设备中的病历区块链的数据是一致的，从而使得在哪一个用户设备中均可以实现对电子病历的查询，因此，在将病历区块添加至病历区块链中存储后，将生成的病历区块广播给接入电子病历存储设备的每一个用户设备，以便每一个用户设备均将该病历区块添加至自身存储的区块链中，从而保证数据的一致性。
在实际应用的过程中，为了防止有不法分子随意向电子病历存储设备上传病历，造成电子病历存储设备由于数据过载而瘫痪，因此，需要将电子病历上传至电子病历存储设备中保存的用户要事先在电子病历存储设备中进行注册，参见图2B，该方法包括：
205、当用户设备检测到用户请求注册时，接收用户的用户信息以及待验证数字证书，在待验证数字证书中提取待验证证书私钥，采用待验证证书私钥对待验证数字证书进行签名，生成待验证证书签名。
在本申请实施例中，用户设备可以为用户提供注册入口，当检测到用户触发该注册入口时，确定检测到用户请求注册，显示注册页面。其中，由于用户的身份是基于数字证书体现的，为了验证用户身份的真实性以及安全性，在用户进行注册时，需要用户提供数字证书，以便基于该数字证书对用户的身份进行验证。在检测到用户对该注册页面确认后，确定接收到用户的用户信息以及待验证数字证书，由于数字证书的证书私钥是由用户自己保管的，用户设备为用户所使用的终端，因此，用户设备可以提取到该待验证数字证书的待验证证书私钥，或者用户可以向该用户设备提供待验证证书私钥。为了进一步保证待验证数字证书在传输过程中的安全性，可以采用待验证证书私钥，对待验证数字证书进行签名，签名的过程实质为加密的过程，将加密后的待验证数字证书作为待验证证书签名，以便在后续可以通过验证该待验证证书签名实现对待验证数字证书的验证。
206、用户设备基于用户信息、待验证证书签名以及待验证数字证书，生成注册请求，将注册请求传输至电子病历存储设备。
在本申请实施例中，当生成了待验证证书签名后，便可以基于用户信息、待验证证书签名以及待验证数字证书，生成注册请求，并将注册请求传输至电子病历存储设备，以便电子病历存储设备对注册请求进行验证，并在验证成功时完成用户在电子病历存储设备中的注册。
207、电子病历存储设备接收用户的注册请求，在注册请求中提取用户信息、待验证证书签名以及待验证数字证书，采用待验证数字证书对待验证证书签名进行验证，如果采用待验证证书公钥对待验证证书签名验证成功，则执行下述步骤208；如果采用待验证证书公钥对待验证证书签名验证失败，则执行下述步骤209。
在本申请实施例中，电子病历存储设备接收用户设备传输的注册请求，并在注册请求中提取用户信息、待验证证书签名以及待验证数字证书。由于该待验证数字证书的待验证证书公钥是随待验证证书携带的，且是公开的，因此，可以在该待验证数字证书中提取到待验证证书公钥。另外，待验证证书签名是基于待验证数字证书的待验证证书私钥对待验证证书进行签名得到的，因此，基于公私钥对可以相互加密和解密的属性，可以采用待验证证书公钥对待验证证书签名解密，并根据是否解密成功来确定待验证证书签名的真实性。具体地，在采用待验证证书公钥对待验证证书签名进行验证时，首先，在待验证数字证书中提取待验证证书公钥；随后，采用待验证证书公钥对待验证证书签名解密，并判断待验证证书公钥是否成功对待验证证书签名解密。如果电子病历存储设备采用待验证证书公钥对待验证证书签名解密成功，则表示注册请求在传输的过程中并没有被篡改，可以保证注册请求的真实性，因此，该用户可以在电子病历存储设备中进行注册，也即执行下述步骤208；如果电子病历存储设备采用待验证证书公钥对待验证证书签名解密失败，则表示注册请求在传输的过程中很有可能被篡改了，该待验证证书签名已经不是最初的签名了，因此，该用户不可以在电子病历存储设备中注册，需要用户重新发送注册请求，也即执行下述步骤209。
208、如果电子病历存储设备采用待验证证书公钥对待验证证书签名解密成功，则提取用户的待存储用户标识，将待存储用户标识、用户信息和待验证数字证书存储至病历区块链中。
在本申请实施例中，如果电子病历存储设备采用待验证证书公钥对待验证证书签名解密成功，则表示当前用户可以在电子病历存储设备中注册，因此，电子病历存储设备为该用户提取待存储用户标识，并将该待存储用户标识、用户信息以及待验证数字证书存储在病历区块链中，完成该用户在电子病历存储设备中的注册。其中，待存储用户标识可以在用户的用户信息中提取出来，例如，将用户的用户姓名、身份证号等提取出来作为待存储用户标识；或者还可以为用户分配一个注册账号，将该注册账号作为该用户的待存储用户标识，并将该注册账号返回给用户，使用户以后基于该注册账号便可以实现在电子病历存储设备中存储电子病历以及查询电子病历。
209、如果电子病历存储设备采用待验证证书公钥对待验证证书签名解密失败，则生成失败响应，将失败响应返回至用户。
在本申请实施例中，如果电子病历存储设备采用待验证证书公钥对待验证证书签名解密失败，则表示该注册请求很可能在传输的过程中被篡改，真实性无法验证，此时，便不能实现用户在电子病历系统中的注册，需要用户重新提供相关信息进行注册，因此，生成失败响应，并将该失败响应返回给用户，以便用户接收到失败响应可以重新发送注册请求。
在实际应用的过程中，用户在医院中看病时，需要医院在电子病历存储设备中获取用户之前的电子病历，因此，电子病历存储设备还为用户提供电子病历查询服务，参见图2C，该方法包括：
210、当用户设备检测到用户请求查询时，接收用户的待查询用户标识以及待查询数字证书，在待查询数字证书中提取待查询证书私钥，采用待查询证书私钥对待查询数字证书进行签名，生成待查询证书签名。
在本申请实施例中，用户设备为用户提供查询入口，当检测到用户触发该查询入口时，确定检测到用户请求查询。由于电子病历存储设备中存储电子病历时是按照用户标识进行存储的，因此，需要用户提供待查询用户标识，以便按照该待查询用户标识查询指定的电子病历；另外，为了保证电子病历的安全性，避免电子病历被不法分子获取，造成电子病历中信息的泄露，在需要用户提供待查询用户标识的同时，还需要用户提供待查询数字证书，以便通过对该待查询数字证书进行验证来实现对请求进行电子病历查询的用户的身份的验证。而且，为了进一步保证后续向电子病历存储设备传输的查询请求的安全性，避免查询请求在传输的过程中被篡改，还可以采用待查询证书私钥对待查询数字证书进行签名，从而生成待查询证书签名，以便后续通过对该待查询证书签名进行验证来确定生成的查询请求是否被篡改。其中，生成待查询证书签名与上述步骤205中所述的生成待验证证书签名的方法一致，此处不再进行赘述。
211、用户设备基于待查询用户标识、待查询数字证书以及待查询证书签名，生成查询请求，将查询请求传输至电子病历存储设备。
在本申请实施例中，当用户设备接收到该待查询用户标识、待查询数字证书以及待查询证书签名后，便可以基于该待查询用户标识、待查询数字证书以及待查询证书签名，生成查询请求，并将该查询请求传输至电子病历存储设备，实现电子病历的查询。
212、当电子病历存储设备接收到查询请求时，在查询请求中提取待查询用户标识、待查询数字证书以及待查询证书签名，对待查询用户标识、待查询数字证书和待查询证书签名进行验证，如果对待查询用户标识、待查询数字证书和待查询证书签名验证成功，则执行下述步骤213至步骤214；如果对待查询用户标识、待查询数字证书和待查询证书签名验证失败，则执行下述步骤215至步骤216。
在本申请实施例中，当电子病历存储设备接收到查询请求时，便需要在查询请求中提取待查询用户标识、待查询数字证书以及待查询证书签名，以便通过对待查询用户标识、待查询数字证书和待查询证书签名进行验证，实现对用户的身份进行验证。具体地，在对待查询用户标识、待查询数字证书和待查询证书签名进行验证时，首先，在待查询数字证书中提取待查询证书公钥，采用待查询证书公钥对待查询证书签名解密，判断待查询证书公钥是否成功对待查询证书签名解密。采用待查询证书公钥对待查询证书签名解密验证的方式与上述步骤207中所示的采用待验证数字证书对待验证证书签名进行验证的方式一致，此处不再进行赘述。随后，为了验证该用户是否在电子病历存储设备中注册过，避免未能在电子病历存储设备中注册的不法分子将恶意信息混入电子病历存储设备中，因此，需要根据待查询用户标识验证用户是否在电子病历存储设备中注册过，具体地，在病历区块链中查询是否存储有与待查询用户标识对应的待查询用户信息。这样，当采用待查询证书公钥对待查询证书签名解密成功，且确定病历区块链中存储有与待查询用户标识对应的待查询用户信息时，确定对待查询用户标识、待查询数字证书和待查询证书签名验证成功，这时，便可以为用户返回请求查询的电子病历，也即执行下述步骤213至步骤214；当采用待查询证书公钥对待查询证书签名解密失败，或确定病历区块链中未存储有与待查询用户标识对应的待查询用户信息时，确定对待查询用户标识、待查询数字证书和待查询证书签名验证失败，这时，表示用户的身份无法确定，或者用户未在电子病历存储设备中注册，此时，便需要用户重新发送查询请求，也即执行下述步骤215至步骤216。
213、如果电子病历存储设备对待查询用户标识、待查询数字证书和待查询证书签名验证成功，则确定待查询数字证书指示的待查询病历密文，将待查询病历密文返回。
在本申请实施例中，如果电子病历存储设备对待查询用户标识、待查询数字证书和待查询证书签名验证成功，则表示待查询用户标识指示的用户在电子病历存储设备中注册过，且身份已经通过了验证，此时，便可以向用户返回其想要查询的电子病历。
需要说明的是，由于电子病历存储设备中在存储电子病历时，是生成了包括电子病历的病历密文进行存储的，因此，电子病历存储设备根据待查询用户标识获取到的也是病历密文，这样，电子病历存储设备便将获取到的待查询病历密文返回至用户设备，以便用户设备通过对该病历密文进行解密实现对电子病历的查看。
214、用户设备接收电子病历存储设备返回的病历密文，采用待查询证书私钥对病历密文进行解密，获取待查询电子病历。
在本申请实施例中，当用户设备接收到电子病历存储设备返回的病历密文时，由于该病历密文是采用该用户的数字证书的证书公钥加密生成的，只有用户的证书私钥可以解密，且证书私钥是由用户自行保管的，因此，该用户采用自身的数字证书的证书私钥即可对该病历密文进行解密，这样，用户设备便可以采用获取待查询数字证书的待查询证书私钥，采用该待查询证书私钥对该病历密文进行解密，从而在该病例密文中获取到该待查询电子病历。
215、如果电子病历存储设备对待查询用户标识、待查询数字证书和待查询证书签名验证失败，则生成失败响应，并返回失败响应。
在本申请实施例中，如果电子病历存储设备对待查询用户标识、待查询数字证书和待查询证书签名验证失败，则表示对用户的身份验证失败了，或者用户没有在电子病历存储设备中注册，因此，生成失败响应，并返回失败响应。
216、用户设备重新执行上述生成并传输查询请求的过程。
在本申请实施例中，当用户设备接收到电子病历存储设备传输的失败响应时，便表示本次用户请求进行电子病历查询失败了，此时，用户设备便需要重新执行上述生成并传输查询请求的过程。
本申请实施例提供的方法，当接收到电子病历存储请求时，确定电子病历存储请求中携带的用户标识指示的目标数字证书，并提取目标数字证书的证书公钥，基于证书公钥，对待存储电子病历进行加密，生成病历密文，随后基于病历密文，生成病历区块，将病历区块添加至病历区块链中存储，利用区块链去中心化的特性，不仅保证了电子病历的安全性，还实现了对电子病历的共享，避免个人医疗项目重复检测，节省了医疗资源。
进一步地，作为图1A所述方法的具体实现，本申请实施例提供了一种电子病历存储装置，如图3A所示，所述装置包括：确定模块301，加密模块302和第一存储模块303。
该确定模块301，用于当接收到电子病历存储请求时，在病历区块链中查询所述电子病历存储请求中携带的用户标识指示的目标数字证书；
该加密模块302，用于提取所述目标数字证书的证书公钥，基于所述证书公钥，对待存储电子病历进行加密，生成病历密文；
该第一存储模块303，用于基于所述病历密文，生成病历区块，将所述病历区块添加至所述病历区块链中存储。
在具体的应用场景中，如图3B所示，该装置还包括第一接收模块304，第一验证模块305，第二存储模块306和第一返回模块307。
该第一接收模块304，用于接收用户的注册请求，在所述注册请求中提取用户信息、待验证证书签名以及待验证数字证书；
该第一验证模块305，用于采用所述待验证数字证书对所述待验证证书签名进行验证；
该第二存储模块306，用于如果采用所述待验证证书对所述待验证证书签名验证成功，则在所述用户信息中提取待存储用户标识，将所述待存储用户标识、所述用户信息和所述待验证数字证书对应存储至所述病历区块链中；
该第一返回模块307，用于如果采用所述待验证证书对所述待验证证书签名验证失败，则生成失败响应，将所述失败响应返回至所述用户。
在具体的应用场景中，该第一验证模块305，用于在所述待验证数字证书中提取待验证证书公钥；采用所述待验证证书公钥对所述待验证证书签名解密，判断所述待验证证书公钥是否成功对所述待验证证书签名解密。
在具体的应用场景中，如图3C所示，该装置还包括第二接收模块308，第二验证模块309，第二返回模块310和第三返回模块311。
该第二接收模块308，用于当接收到查询请求时，在所述查询请求中提取待查询用户标识、待查询数字证书以及待查询证书签名；
该第二验证模块309，用于对所述待查询用户标识、待查询数字证书和所述待查询证书签名进行验证；
该第二返回模块310，用于如果对所述待查询用户标识、所述待查询数字证书和所述待查询证书签名验证成功，则在所述病例区块链中获取所述待查询数字证书指示的待查询病历密文，将所述待查询病历密文返回；
该第三返回模块311，用于如果对所述待查询用户标识、所述待查询数字证书和所述待查询证书签名验证失败，则生成失败响应，并返回所述失败响应。
在具体的应用场景中，该第二验证模块309，用于在所述待查询数字证书中提取待查询证书公钥，采用所述待查询证书公钥对所述待查询证书签名解密，判断所述待查询证书公钥是否成功对所述待查询证书签名解密；在所述病历区块链中查询是否存储有与所述待查询用户标识对应的待查询用户信息；
相应地，该第二返回模块310，用于当采用所述待查询证书公钥对所述待查询证书签名解密成功，且确定所述病历区块链中存储有与所述待查询用户标识对应的待查询用户信息时，确定对所述待查询用户标识、所述待查询数字证书和所述待查询证书签名验证成功；
该第三返回模块311，用于当采用所述待查询证书公钥对所述待查询证书签名解密失败，或确定所述病历区块链中未存储有与所述待查询用户标识对应的待查询用户信息时，确定对所述待查询用户标识、所述待查询数字证书和所述待查询证书签名验证失败。
本申请实施例提供的装置，可以当接收到电子病历存储请求时，确定电子病历存储请求中携带的用户标识指示的目标数字证书，并提取目标数字证书的证书公钥，基于证书公钥，对待存储电子病历进行加密，生成病历密文，随后基于病历密文，生成病历区块，将病历区块添加至病历区块链中存储，利用区块链去中心化的特性，不仅保证了电子病历的安全性，还实现了对电子病历的共享，避免个人医疗项目重复检测，节省了医疗资源。
进一步地，作为图1B所述方法的具体实现，本申请实施例提供了一种电子病历存储装置，如图4A所示，所述装置包括：第一接收模块401，第一生成模块402和第一传输模块403。
该第一接收模块401，用于当检测到用户请求存储电子病历时，接收所述用户的待存储电子病历；
该第一生成模块402，用于获取所述用户的用户标识，基于所述待存储电子病历以及所述用户标识，生成电子病历存储请求；
该第一传输模块403，用于将所述电子病历存储请求传输至电子病历存储设备。
在具体的应用场景中，如图4B所示，该装置还包括：第二接收模块404，第一签名模块405，第二生成模块406和第二传输模块407。
该第二接收模块404，用于当检测到用户请求注册时，接收所述用户的用户信息以及待验证数字证书；
该第一签名模块405，用于在所述待验证数字证书中提取待验证证书私钥，采用所述待验证证书私钥对所述待验证数字证书进行签名，生成待验证证书签名；
该第二生成模块406，用于基于所述用户信息、所述待验证证书签名以及所述待验证数字证书，生成注册请求；
该第二传输模块407，用于将所述注册请求传输至所述电子病历存储设备。
在具体的应用场景中，如图4C所示，该装置还包括：第三接收模块408，第二签名模块409，第三生成模块410和第三传输模块411。
该第三接收模块408，用于当检测到用户请求查询时，接收所述用户的待查询用户标识以及待查询数字证书；
该第二签名模块409，用于在所述待查询数字证书中提取待查询证书私钥，采用所述待查询证书私钥对所述待查询数字证书进行签名，生成待查询证书签名；
该第三生成模块410，用于基于所述待查询用户标识、所述待查询数字证书以及所述待查询证书签名，生成查询请求；
该第三传输模块411，用于将所述查询请求传输至所述电子病历存储设备。
在具体的应用场景中，如图4D所示，该装置还包括：解密模块412。
该解密模块412，用于如果接收到病历密文，则采用所述待查询证书私钥对所述病历密文进行解密，获取待查询电子病历，所述病历密文由所述电子病历存储设备接收到所述查询请求后获取并返回的；
该第二签名模块409，还用于如果接收到失败响应，则重新执行上述生成并传输查询请求的过程。
本申请实施例提供的装置，可以当检测到用户请求存储电子病历时，接收用户的待存储电子病历，获取用户的用户标识，基于待存储电子病历以及用户标识，生成电子病历存储请求，将电子病历存储请求传输至电子病历存储系统，利用区块链去中心化的特性，不仅保证了电子病历的安全性，还实现了对电子病历的共享，避免个人医疗项目重复检测，节省了医疗资源。
需要说明的是，本申请实施例提供的一种电子病历存储装置所涉及各功能单元的其他相应描述，可以参考图1A和图1B中的对应描述，在此不再赘述。
在示例性实施例中，参见图5，还提供了一种设备，该设备500包括通信总线、处理器、存储器和通信接口，还可以包括、输入输出接口和显示设备，其中，各个功能单元之间可以通过总线完成相互间的通信。该存储器存储有计算机可读指令，处理器，用于执行存储器上所存放的程序，执行上述实施例中的电子病历存储方法。其中，该设备可为用户设备以及电子病历存储设备。
一种可读存储介质，其上存储有计算机可读指令，所述计算机可读指令被处理器执行时实现所述的电子病历存储方法的步骤。其中，该可读存储介质分别在用户设备以及电子病历存储设备中部署。
本领域普通技术人员可以理解实现上述实施例方法中的全部或部分流程，是可以通过计算机可读指令来指令相关的硬件来完成，所述的计算机可读指令可存储于一非易失性计算机可读取存储介质中，该计算机可读指令在执行时，可包括如上述各方法的实施例的流程。其中，本申请所提供的各实施例中所使用的对存储器、存储、数据库或其它介质的任何引用，均可包括非易失性和/或易失性存储器。非易失性存储器可包括只读存储器（ROM）、可编程ROM（PROM）、电可编程ROM（EPROM）、电可擦除可编程ROM（EEPROM）或闪存。易失性存储器可包括随机存取存储器（RAM）或者外部高速缓冲存储器。作为说明而非局限，RAM以多种形式可得，诸如静态RAM（SRAM）、动态RAM（DRAM）、同步DRAM（SDRAM）、双数据率SDRAM（DDRSDRAM）、增强型SDRAM（ESDRAM）、同步链路（Synchlink） DRAM（SLDRAM）、存储器总线（Rambus）直接RAM（RDRAM）、直接存储器总线动态RAM（DRDRAM）、以及存储器总线动态RAM（RDRAM）等。
本领域技术人员可以理解附图只是一个优选实施场景的示意图，附图中的模块或流程并不一定是实施本申请所必须的。
本领域技术人员可以理解实施场景中的装置中的模块可以按照实施场景描述进行分布于实施场景的装置中，也可以进行相应变化位于不同于本实施场景的一个或多个装置中。上述实施场景的模块可以合并为一个模块，也可以进一步拆分成多个子模块。
上述本申请序号仅仅为了描述，不代表实施场景的优劣。
以上公开的仅为本申请的几个具体实施场景，但是，本申请并非局限于此，任何本领域的技术人员能思之的变化都应落入本申请的保护范围。

Claims (20)

  1. 一种电子病历存储方法，其特征在于，包括：
    当接收到电子病历存储请求时，在病历区块链中查询所述电子病历存储请求中携带的用户标识指示的目标数字证书；
    提取所述目标数字证书的证书公钥，基于所述证书公钥，对待存储电子病历进行加密，生成病历密文；
    基于所述病历密文，生成病历区块，将所述病历区块添加至所述病历区块链中存储。
  2. 如权利要求1所述的方法，其特征在于，所述当接收到电子病历存储请求时，在病历区块链中查询所述电子病历存储请求中携带的用户标识指示的目标数字证书之前，包括：
    接收用户的注册请求，在所述注册请求中提取用户信息、待验证证书签名以及待验证数字证书；
    采用所述待验证数字证书对所述待验证证书签名进行验证；
    如果采用所述待验证证书对所述待验证证书签名验证成功，则在所述用户信息中提取待存储用户标识，将所述待存储用户标识、所述用户信息和所述待验证数字证书对应存储至所述病历区块链中；
    如果采用所述待验证证书对所述待验证证书签名验证失败，则生成失败响应，将所述失败响应返回至所述用户。
  3. 如权利要求2所述的方法，其特征在于，所述采用所述待验证数字证书对所述待验证证书签名进行验证，包括：
    在所述待验证数字证书中提取待验证证书公钥；
    采用所述待验证证书公钥对所述待验证证书签名解密，判断所述待验证证书公钥是否成功对所述待验证证书签名解密。
  4. 如权利要求1所述的方法，其特征在于，所述方法还包括：
    当接收到查询请求时，在所述查询请求中提取待查询用户标识、待查询数字证书以及待查询证书签名；
    对所述待查询用户标识、待查询数字证书和所述待查询证书签名进行验证；
    如果对所述待查询用户标识、所述待查询数字证书和所述待查询证书签名验证成功，则在所述病例区块链中获取所述待查询数字证书指示的待查询病历密文，将所述待查询病历密文返回；
    如果对所述待查询用户标识、所述待查询数字证书和所述待查询证书签名验证失败，则生成失败响应，并返回所述失败响应。
  5. 如权利要求4所述的方法，其特征在于，所述对所述待查询用户标识、待查询数字证书和所述待查询证书签名进行验证，包括：
    在所述待查询数字证书中提取待查询证书公钥，采用所述待查询证书公钥对所述待查询证书签名解密，判断所述待查询证书公钥是否成功对所述待查询证书签名解密；
    在所述病历区块链中查询是否存储有与所述待查询用户标识对应的待查询用户信息；
    相应地，当采用所述待查询证书公钥对所述待查询证书签名解密成功，且确定所述病历区块链中存储有与所述待查询用户标识对应的待查询用户信息时，确定对所述待查询用户标识、所述待查询数字证书和所述待查询证书签名验证成功；
    当采用所述待查询证书公钥对所述待查询证书签名解密失败，或确定所述病历区块链中未存储有与所述待查询用户标识对应的待查询用户信息时，确定对所述待查询用户标识、所述待查询数字证书和所述待查询证书签名验证失败。
  6. 一种电子病历存储方法，其特征在于，包括：
    当检测到用户请求存储电子病历时，接收所述用户的待存储电子病历；
    获取所述用户的用户标识，基于所述待存储电子病历以及所述用户标识，生成电子病历存储请求；
    将所述电子病历存储请求传输至电子病历存储设备。
  7. 如权利要求6所述的方法，其特征在于，所述当检测到用户请求存储电子病历时，接收所述用户的待存储电子病历之前，包括：
    当检测到用户请求注册时，接收所述用户的用户信息以及待验证数字证书；
    在所述待验证数字证书中提取待验证证书私钥，采用所述待验证证书私钥对所述待验证数字证书进行签名，生成待验证证书签名；
    基于所述用户信息、所述待验证证书签名以及所述待验证数字证书，生成注册请求；
    将所述注册请求传输至所述电子病历存储设备。
  8. 如权利要求6所述的方法，其特征在于，所述方法还包括：
    当检测到用户请求查询时，接收所述用户的待查询用户标识以及待查询数字证书；
    在所述待查询数字证书中提取待查询证书私钥，采用所述待查询证书私钥对所述待查询数字证书进行签名，生成待查询证书签名；
    基于所述待查询用户标识、所述待查询数字证书以及所述待查询证书签名，生成查询请求；
    将所述查询请求传输至所述电子病历存储设备。
  9. 如权利要求8所述的方法，其特征在于，所述将所述查询请求传输至所述电子病历存储设备之后，所述方法还包括：
    如果接收到病历密文，则采用所述待查询证书私钥对所述病历密文进行解密，获取待查询电子病历，所述病历密文由所述电子病历存储设备接收到所述查询请求后获取并返回的；
    如果接收到失败响应，则重新执行上述生成并传输查询请求的过程。
  10. 一种电子病历存储系统，其特征在于，包括用户设备和电子病历存储设备，其中，
    所述用户设备当检测到用户请求存储电子病历时，接收所述用户的待存储电子病历；
    所述用户设备获取所述用户的用户标识，基于所述待存储电子病历以及所述用户标识，生成电子病历存储请求；
    所述用户设备将所述电子病历存储请求传输至电子病历存储设备；
    所述电子病历存储设备当接收到电子病历存储请求时，在病历区块链中查询所述电子病历存储请求中携带的用户标识指示的目标数字证书；
    所述电子病历存储设备提取所述目标数字证书的证书公钥，基于所述证书公钥，对待存储电子病历进行加密，生成病历密文；
    所述电子病历存储设备基于所述病历密文，生成病历区块，将所述病历区块添加至所述病历区块链中存储。
  11. 一种电子病历存储装置，其特征在于，包括：
    确定模块，用于当接收到电子病历存储请求时，在病历区块链中查询所述电子病历存储请求中携带的用户标识指示的目标数字证书；
    加密模块，用于提取所述目标数字证书的证书公钥，基于所述证书公钥，对待存储电子病历进行加密，生成病历密文；
    第一存储模块，用于基于所述病历密文，生成病历区块，将所述病历区块添加至所述病历区块链中存储。
  12. 如权利要求11所述的装置，其特征在于，还包括：
    第一接收模块，用于接收用户的注册请求，在所述注册请求中提取用户信息、待验证证书签名以及待验证数字证书；
    第一验证模块，用于采用所述待验证数字证书对所述待验证证书签名进行验证；
    第二存储模块，用于如果采用所述待验证证书对所述待验证证书签名验证成功，则在所述用户信息中提取待存储用户标识，将所述待存储用户标识、所述用户信息和所述待验证数字证书对应存储至所述病历区块链中；
    第一返回模块，用于如果采用所述待验证证书对所述待验证证书签名验证失败，则生成失败响应，将所述失败响应返回至所述用户。
  13. 如权利要求12所述的装置，其特征在于，第一验证模块，用于：
    在所述待验证数字证书中提取待验证证书公钥；
    采用所述待验证证书公钥对所述待验证证书签名解密，判断所述待验证证书公钥是否成功对所述待验证证书签名解密。
  14. 如权利要求13所述的装置，其特征在于，还包括：
    第二接收模块，用于当接收到查询请求时，在所述查询请求中提取待查询用户标识、待查询数字证书以及待查询证书签名；
    第二验证模块，用于对所述待查询用户标识、待查询数字证书和所述待查询证书签名进行验证；
    第二返回模块，用于如果对所述待查询用户标识、所述待查询数字证书和所述待查询证书签名验证成功，则在所述病例区块链中获取所述待查询数字证书指示的待查询病历密文，将所述待查询病历密文返回；
    第三返回模块，用于如果对所述待查询用户标识、所述待查询数字证书和所述待查询证书签名验证失败，则生成失败响应，并返回所述失败响应。
  15. 如权利要求14所述的装置，其特征在于，第二验证模块，用于：
    在所述待查询数字证书中提取待查询证书公钥，采用所述待查询证书公钥对所述待查询证书签名解密，判断所述待查询证书公钥是否成功对所述待查询证书签名解密；
    在所述病历区块链中查询是否存储有与所述待查询用户标识对应的待查询用户信息；
    相应地，第二返回模块，用于：
    当采用所述待查询证书公钥对所述待查询证书签名解密成功，且确定所述病历区块链中存储有与所述待查询用户标识对应的待查询用户信息时，确定对所述待查询用户标识、所述待查询数字证书和所述待查询证书签名验证成功；
    第三返回模块，用于：
    当采用所述待查询证书公钥对所述待查询证书签名解密失败，或确定所述病历区块链中未存储有与所述待查询用户标识对应的待查询用户信息时，确定对所述待查询用户标识、所述待查询数字证书和所述待查询证书签名验证失败。
  16. 一种电子病历存储装置，其特征在于，包括：
    第一接收模块，用于当检测到用户请求存储电子病历时，接收所述用户的待存储电子病历；
    第一生成模块，用于获取所述用户的用户标识，基于所述待存储电子病历以及所述用户标识，生成电子病历存储请求；
    第一传输模块，用于将所述电子病历存储请求传输至电子病历存储设备。
  17. 如权利要求16所述的装置，其特征在于，还包括：
    第二接收模块，用于当检测到用户请求注册时，接收所述用户的用户信息以及待验证数字证书；
    第一签名模块，用于在所述待验证数字证书中提取待验证证书私钥，采用所述待验证证书私钥对所述待验证数字证书进行签名，生成待验证证书签名；
    第二生成模块，用于基于所述用户信息、所述待验证证书签名以及所述待验证数字证书，生成注册请求；
    第二传输模块，用于将所述注册请求传输至所述电子病历存储设备。
  18. 如权利要求16所述的装置，其特征在于，还包括：
    第三接收模块，用于当检测到用户请求查询时，接收所述用户的待查询用户标识以及待查询数字证书；
    第二签名模块，用于在所述待查询数字证书中提取待查询证书私钥，采用所述待查询证书私钥对所述待查询数字证书进行签名，生成待查询证书签名；
    第三生成模块，用于基于所述待查询用户标识、所述待查询数字证书以及所述待查询证书签名，生成查询请求；
    第三传输模块，用于将所述查询请求传输至所述电子病历存储设备。
  19. 一种终端设备，其特征在于，所述终端设备包括存储器、处理器，所述存储器上存储有可在所述处理器上运行的计算机可读指令，所述处理器执行所述计算机可读指令时实现如权利要求1至5任一项所述方法的步骤，或者实现如权利要求6至9任一项所述方法的步骤。
  20. 一种计算机可读存储介质，所述计算机可读存储介质存储有计算机可读指令，其特征在于，所述计算机可读指令被至少一个处理器执行时实现如权利要求1至7任一项所述方法的步骤，或者实现如权利要求6至9任一项所述方法的步骤。
PCT/CN2019/121815 2019-02-18 2019-11-29 一种电子病历存储方法、系统、装置、设备及介质 Ceased WO2020168772A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201910119326.9 2019-02-18
CN201910119326.9A CN110010213A (zh) 2019-02-18 2019-02-18 电子病历存储方法、系统、装置、设备及可读存储介质

Publications (1)

Publication Number Publication Date
WO2020168772A1 true WO2020168772A1 (zh) 2020-08-27

Family

ID=67165853

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/121815 Ceased WO2020168772A1 (zh) 2019-02-18 2019-11-29 一种电子病历存储方法、系统、装置、设备及介质

Country Status (2)

Country Link
CN (1) CN110010213A (zh)
WO (1) WO2020168772A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN116403671A (zh) * 2023-06-08 2023-07-07 武汉大学人民医院（湖北省人民医院） 一种应用于医疗场景下的数据风险识别方法

Families Citing this family (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110010213A (zh) * 2019-02-18 2019-07-12 深圳壹账通智能科技有限公司 电子病历存储方法、系统、装置、设备及可读存储介质
CN110414253A (zh) * 2019-08-05 2019-11-05 深圳市网心科技有限公司 一种基于区块链的电子病历管理方法、装置、系统及设备
CN110472430B (zh) * 2019-08-22 2021-05-14 重庆华医康道科技有限公司 一种基于区块链的医患数据打包共享方法及系统
CN110910978B (zh) * 2019-11-21 2024-04-09 腾讯科技（深圳）有限公司 一种应用于区块链网络的信息处理方法及相关装置
CN111145850A (zh) * 2019-12-23 2020-05-12 支付宝(杭州)信息技术有限公司 基于区块链的医疗数据查询方法以及装置
CN113542194B (zh) * 2020-04-16 2023-04-07 中国联合网络通信集团有限公司 用户行为追溯方法、装置、设备及存储介质
CN111755092B (zh) * 2020-07-06 2021-08-13 重庆中联信息产业有限责任公司 一种医疗数据互联互通方法及医疗系统
CN112102908A (zh) * 2020-09-22 2020-12-18 合肥易康达医疗卫生信息科技有限公司 一种电子病历可信云签名方法
CN112215609B (zh) * 2020-11-05 2021-09-21 深圳市瀚兰区块链地产有限公司 基于超级账本的房产用户身份认证方法、装置和电子设备
CN112328686A (zh) * 2020-11-05 2021-02-05 深圳壹账通智能科技有限公司 一种基于数字证书的区块链节点共享方法及其相关产品
CN112382357A (zh) * 2020-11-11 2021-02-19 武汉蓝星软件技术有限公司 一种保密性高的医疗电子病历存储系统
CN113468265A (zh) * 2021-06-07 2021-10-01 上海玳鸽信息技术有限公司 基于区块链的医疗数据处理方法和装置
CN115700887A (zh) * 2021-07-29 2023-02-07 京东方科技集团股份有限公司 电子病历的处理方法及装置、存储介质、电子设备

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6952771B1 (en) * 1999-11-01 2005-10-04 Entrust Limited Shared data initialization query system and method
US8788836B1 (en) * 2006-12-22 2014-07-22 Symantec Corporation Method and apparatus for providing identity claim validation
CN107563112A (zh) * 2017-07-26 2018-01-09 上海若灵软件技术有限公司 一种医疗信息共享系统
CN107579979A (zh) * 2017-09-07 2018-01-12 成都理工大学 基于区块链技术的电子病历的共享查询方法
CN110010213A (zh) * 2019-02-18 2019-07-12 深圳壹账通智能科技有限公司 电子病历存储方法、系统、装置、设备及可读存储介质

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106534115A (zh) * 2016-11-10 2017-03-22 济南浪潮高新科技投资发展有限公司 一种基于国产密码算法的电子病历系统设计和方法
CN107480451A (zh) * 2017-08-15 2017-12-15 济南浪潮高新科技投资发展有限公司 基于区块链技术的快速验证电子病历完整性的解决方法
CN108648784A (zh) * 2018-03-15 2018-10-12 西安电子科技大学 基于区块链技术的医疗数据存储方法、信息数据处理终端
CN108538345A (zh) * 2018-04-17 2018-09-14 济南浪潮高新科技投资发展有限公司 一种基于数字证书的电子病历系统
CN109119136A (zh) * 2018-08-24 2019-01-01 广东博云公共平台网络科技有限公司 一种高端电子病历系统
CN109326337B (zh) * 2018-09-06 2021-09-03 西安电子科技大学 基于区块链的电子医疗记录存储和共享的模型及方法
CN109346139A (zh) * 2018-09-17 2019-02-15 深圳市天达国际商业咨询有限公司 一种基于区块链的医疗分析系统

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6952771B1 (en) * 1999-11-01 2005-10-04 Entrust Limited Shared data initialization query system and method
US8788836B1 (en) * 2006-12-22 2014-07-22 Symantec Corporation Method and apparatus for providing identity claim validation
CN107563112A (zh) * 2017-07-26 2018-01-09 上海若灵软件技术有限公司 一种医疗信息共享系统
CN107579979A (zh) * 2017-09-07 2018-01-12 成都理工大学 基于区块链技术的电子病历的共享查询方法
CN110010213A (zh) * 2019-02-18 2019-07-12 深圳壹账通智能科技有限公司 电子病历存储方法、系统、装置、设备及可读存储介质

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN116403671A (zh) * 2023-06-08 2023-07-07 武汉大学人民医院（湖北省人民医院） 一种应用于医疗场景下的数据风险识别方法
CN116403671B (zh) * 2023-06-08 2023-09-22 武汉大学人民医院（湖北省人民医院） 一种应用于医疗场景下的数据风险识别方法

Also Published As

Publication number Publication date
CN110010213A (zh) 2019-07-12

Similar Documents

Publication Publication Date Title
WO2020168772A1 (zh) 一种电子病历存储方法、系统、装置、设备及介质
WO2020186827A1 (zh) 用户认证方法、装置、计算机设备及计算机可读存储介质
CN108563788B (zh) 基于区块链的数据查询方法、装置、服务器及存储介质
US10771459B2 (en) Terminal apparatus, server apparatus, blockchain and method for FIDO universal authentication using the same
US20200374134A1 (en) Method and apparatus for processing account information in block chain, storage medium, and electronic apparatus
CN111651794B (zh) 基于联盟链的电子数据管理方法、装置和存储介质
CN111986764B (zh) 基于区块链的医疗数据分享方法、装置、终端及存储介质
CN109274652B (zh) 身份信息验证系统、方法及装置及计算机存储介质
CN110931093B (zh) 医疗信息共享系统及方法
US20230071022A1 (en) Zero-knowledge proof-based certificate service method using blockchain network, certification support server using same, and user terminal using same
CN112951356B (zh) 一种基于联盟链的跨模态医疗数据联合共享方法
CN110634544A (zh) 基于区块链的病历数据处理方法、装置、存储介质和设备
US20150280921A1 (en) Electronic biometric (dynamic) signature references enrollment method
WO2020186823A1 (zh) 区块链的数据查询方法、装置、系统、设备及存储介质
WO2017024934A1 (zh) 实现电子签章的方法、装置及签章服务器
US12166885B2 (en) Using non-fungible tokens (NFTs) to securely store and share encrypted data
US20140282834A1 (en) Managing exchanges of sensitive data
CN111968714B (zh) 用于区块链的电子病历的处理方法、装置、系统和介质
US20200202468A1 (en) Protocol-based system and method for establishing a multi-party contract
CN114938382B (zh) 一种基于联盟区块链的电子病历安全可控共享方法
CN115022039B (zh) 信息处理方法、装置、设备和存储介质
CN114268447A (zh) 一种文件传输方法、装置、电子设备和计算机可读介质
CN117176353A (zh) 处理数据的方法及装置
CN117201124A (zh) 一种数据加密方法、装置、计算机设备及存储介质
CN112735566A (zh) 医学影像的管理方法、装置、计算机设备和存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19916180

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 26/11/2021)

122 Ep: pct application non-entry in european phase

Ref document number: 19916180

Country of ref document: EP

Kind code of ref document: A1