CN105450650A - Safety mobile electronic health record access control system - Google Patents

Abstract

The invention relates to a safe mobile electronic health record access control system, which is characterized in that it includes a PKI server terminal, a database management terminal, a doctor's mobile terminal, a USBKey, a patient's mobile terminal and a patient's wearable device. The wearable device is used to obtain patient health data and connect to the patient's mobile terminal through Bluetooth, and the USBKey is connected to the doctor's mobile terminal; the PKI server terminal is used for doctor user registration, generating an exclusive private key based on the doctor's attributes, and through the exclusive private key. USB? Key binding, and store the doctor's registration information and private key information in the database management terminal; the patient's mobile terminal is used for patient user registration and setting encryption policies, and obtains patient health data from the patient's wearable device to encrypt it, and The patient's registration information and encrypted patient health data are stored in the database management terminal; the doctor's mobile terminal obtains the patient data from the database management terminal, and checks whether the doctor complies with the patient's encryption policy, and then decrypts the patient's health data.

Description

A secure mobile electronic health record access control system

technical field

The invention relates to the technical field of privacy security, in particular to a secure mobile electronic health record access control system.

Background technique

With the rapid development of current medical and health technology, more and more diseases are no longer untreatable problems. However, due to the geographical location, consumption level, the speed of advanced technology dissemination and the influence of patients' own factors, most people receive medical care. Services lag far behind where medical technology has advanced. Due to the lack of understanding of the severity of their own symptoms, many patients have missed the best period of diagnosis and treatment when their diseases come to the hospital for diagnosis and treatment, resulting in huge property losses and even paying the price of their lives. In addition, when an epidemic breaks out, it cannot be detected and controlled in time, which also causes a great waste of social resources. At the same time, in addition to the acute diseases and infectious diseases mentioned in the usual sense, chronic diseases have also become a major threat to human health. The onset of chronic diseases is hidden, the course of the disease is long and the disease is protracted, which brings great physical and mental harm to the patients. Injuries are often caused by inadequate follow-up treatment and untimely follow-up visits, resulting in serious consequences.

The integration of cloud computing, big data and modern medical system is expected to provide people with real-time, comprehensive and authoritative health information collection, transmission, storage, sharing and processing, and realize ubiquitous and all-weather medical care, as if there are dedicated medical staff at any time Provide health protection anywhere, and wearable smart devices are applied to all aspects of life. The main function of this type of product is to detect various health indicators of the patient and provide real-time feedback to the doctor to analyze the patient's condition and adjust the treatment plan in time. However, on the one hand, wearable medical devices bring a lot of convenience to people, on the other hand, they bring great security threats. At present, the electronic medical system mainly has the following security problems: 1) During the transmission of medical data, it is easy to be stolen and spread; 2) The scale of medical information is huge, and the storage of massive information has potential safety hazards; 3) Access to medical data Inadequate control and management systems allow sensitive patient data to be easily obtained by anyone with access to the healthcare system.

Contents of the invention

In view of the above problems, the object of the present invention is to provide a secure mobile electronic health record access control system capable of preventing leakage of patient health data.

To achieve the above object, the present invention adopts the following technical solutions: a safe mobile electronic health record access control system, characterized in that it includes a PKI server terminal, a database management terminal, a doctor mobile terminal, a USBKey, a patient mobile terminal and a patient wearable device, the patient wearable device is used to obtain patient health data and is connected to the patient mobile terminal via bluetooth, the USBKey is connected to the doctor mobile terminal; the PKI server terminal is used for the doctor The user registers, generates an exclusive private key based on the doctor's attribute, binds the doctor's USBKey through the exclusive private key, and stores the doctor's registration information and private key information into the database management terminal; the patient mobile terminal is used for patient users Register and set encryption policy, obtain patient health data from the patient's wearable device to encrypt it, and store the patient's registration information and encrypted patient health data in the database management terminal; the doctor's mobile terminal from The database management terminal obtains the patient data, and checks whether the doctor complies with the patient encryption policy, and if so, decrypts the patient health data.

Further, the specific working process of the PKI server terminal is: initializing parameters to generate public parameters and a master key, inserting the USBKey to be distributed to the doctor, the administrator entering the doctor's user registration information, and adopting the attribute-based encryption of the ciphertext policy The private key extraction algorithm in the algorithm combines the doctor’s attribute set and the master key to generate a private key based on the doctor’s attribute, and stores the private key in its exclusive USBKey to complete the registration and key distribution of a doctor, and determine whether all doctors have registered Complete, if yes, then end, otherwise continue to register other doctors and distribute keys until all doctors are registered, and store the registration information and corresponding private key information of all registered doctors into the database management terminal.

Further, the specific working process of the patient mobile terminal is: judge whether the patient has registered, if not registered, register, after successful registration, enter the encryption policy set by the patient, the patient mobile terminal from the patient wearable device The patient's health data obtained from the patient's wearable device is graphically displayed, and the key is encapsulated by the encryption algorithm in the attribute-based encryption algorithm of the ciphertext strategy, and the patient's health data obtained from the patient's wearable device is encrypted using the Advanced Encryption Standard, and the Patient registration information, encryption strategy and encrypted data are stored in the database management terminal.

Further, the specific working process of the doctor's mobile terminal is: connect the USBKey to the doctor's mobile terminal and log in, select the patient to be viewed and obtain the patient data from the database management terminal, and judge whether the doctor meets the requirements. If the encryption strategy of the patient is not met, the decryption will fail and exit the decryption process. If the decryption part of the attribute-based encryption algorithm using the advanced encryption standard and ciphertext strategy is met, the decryption will be performed. After the decryption is successful, the patient's health data will be displayed in the The doctor's mobile terminal.

Further, the patient’s mobile terminal is also used to receive a follow-up reminder, that is, the patient sends a relationship establishment request to the doctor through the patient’s mobile terminal, and the doctor’s mobile terminal receives the patient’s relationship establishment request and confirms that the doctor customizes the Follow-up plan, select the return visit time, and send the follow-up information to the patient's mobile terminal, and display a reminder on the patient's mobile terminal.

The present invention has the following advantages due to the adoption of the above technical scheme: 1. The ciphertext strategy adopted by the present invention is based on the attribute encryption algorithm and the advanced encryption standard in combination to realize encryption and key encapsulation access control, and no longer use a simple public key encryption system , but the key is encapsulated to avoid the harm caused by the key being stolen. At the same time, the access structure is embedded in the ciphertext. Only users who meet the access control authority can decrypt it correctly, so it can prevent the leakage of patient privacy data and effectively protect Patient privacy data security. 2. The patient mobile terminal of the present invention acquires patient health data from the patient's wearable device through Bluetooth, provides round-the-clock health protection for the patient, and improves the sharing effect between the patient and the hospital. 3. The present invention uses the USBKey to store the doctor’s attribute set to realize identity authentication. The USBKey and the doctor’s mobile terminal are connected to read the doctor’s attribute set and the parameters transmitted by the database management terminal to generate a private key, which realizes access control and prevents information from being maliciously stolen. At the same time, it supports Doctors can securely access patients' electronic health records through mobile devices, so that patients can receive diagnosis and treatment without leaving home. 4. The database management terminal of the present invention is arranged in the cloud, and adopts the cloud storage mode to conduct unified management of electronic health records, which can reduce the cost of maintenance and management of massive electronic health records, reduce the burden on the medical system, and at the same time avoid the need for patients during observation. Inadequate data management and poor tracking.

Description of drawings

Fig. 1 is a structural representation of the present invention;

Fig. 2 is the schematic flow chart of PKI server terminal of the present invention;

Fig. 3 is a schematic flow chart of the patient's mobile terminal of the present invention;

Fig. 4 is a schematic flow diagram of the doctor's mobile terminal of the present invention

Fig. 5 is a schematic diagram of the patient's mobile terminal reminding the follow-up consultation process in the present invention;

Fig. 6 is a schematic diagram of a flow chart of reminders for follow-up visits performed by the doctor's mobile terminal according to the present invention.

detailed description

The present invention will be described in detail below in conjunction with the accompanying drawings. However, it should be understood that the accompanying drawings are provided only for better understanding of the present invention, and they should not be construed as limiting the present invention.

As shown in Figure 1, the secure mobile electronic health record access control system provided by the present invention includes a PKI (public key infrastructure) server terminal 1, a database management terminal 2, a doctor mobile terminal 3, a USBKey4, a patient mobile terminal Terminal 5 and a patient's wearable device 6, wherein, the patient's wearable device 6 is used to obtain patient health data and is connected to the patient's mobile terminal 5 through Bluetooth, and the USBKey4 is connected to the doctor's mobile terminal 3 through OTG technology, wherein On-The- Go technology is used to connect various devices or mobile devices for data exchange, change connectors of different standards among devices such as digital cameras, video cameras, printers, etc., and solve data exchange between up to 7 types of memory cards The problem.

The PKI server terminal 1 is used for doctor user registration, generates an exclusive private key based on the doctor’s attribute, binds the doctor’s corresponding USBKey 4 through the exclusive private key, and stores the doctor’s registration information and corresponding private key information into the database management terminal 2; the patient Mobile terminal 5 is used for patient user registration and setting encryption policy, obtains patient health data from patient wearable device 6 to encrypt it, and uploads patient registration information, patient encryption policy and encrypted patient health data to database management The terminal 2 and the doctor's mobile terminal 3 obtain patient data from the database management terminal 2, and check whether the doctor complies with the patient's encryption policy, and if so, decrypt the patient's health data.

In a preferred embodiment, as shown in FIG. 2 , the specific working process of the PKI server terminal 1 is: initializing parameters to generate public parameters and a master key, inserting the USBKey4 to be distributed to the doctor, entering the doctor user registration information by the administrator, The private key extraction algorithm in the attribute-based encryption algorithm using the ciphertext strategy combines the doctor’s attribute set (the doctor’s attribute mainly refers to the doctor’s hospital, department, and job information) and the master key to generate a private key based on the doctor’s attribute, and Store the private key in its exclusive USBKey4, complete the registration and key distribution for a doctor, and judge whether all doctors have been registered, and if so, end, otherwise continue to register and distribute keys for other doctors until the registration of all doctors is completed, and all doctors will be registered. The registered doctor's registration information and corresponding private key information are stored in the database management terminal 2.

In a preferred embodiment, as shown in Figure 3, the specific work process of the patient's mobile terminal 5 is: determine whether the patient has registered, if not registered, then register, the registration can be registered using basic information such as name, mobile phone number; After successful entry, the patient sets the encryption policy, which will be used as the basis for judging whether the doctor user has the right to obtain patient data. The patient's mobile terminal 5 obtains the patient's health data from the patient's wearable device 6 through Bluetooth for graphical display, and encapsulates the key through the encryption algorithm in the attribute-based encryption algorithm of the ciphertext strategy, and uses the advanced encryption standard to encrypt the patient's health data from the patient's wearable device. Obtain patient health data in 6 to encrypt, and upload patient registration information, patient encryption strategy and encrypted data to database management terminal 2.

In a preferred embodiment, as shown in Figure 4, the specific working process of the doctor's mobile terminal 3 is: connect the USBKey4 to the doctor's mobile terminal 3 through OTG and log in, select the patient to be viewed and obtain the data from the database management terminal 2 Patient data, judge whether the doctor complies with the patient's encryption strategy, if not, the decryption will fail and exit the decryption process, if it conforms to the decryption part of the attribute-based encryption algorithm using the advanced encryption standard and ciphertext strategy, the decryption will be decrypted, and the patient's data will be decrypted successfully Health data will be displayed on the doctor's mobile terminal.

In a preferred embodiment, as shown in Figure 5, the patient's mobile terminal 5 can also make the patient send a request to establish a relationship with the doctor. Show reminder. The doctor's mobile terminal 3 can also make the doctor receive the patient's relationship establishment request and confirm that the doctor customizes the follow-up plan for the patient in charge, selects the time for the follow-up visit, and sends the follow-up information to the patient's mobile terminal through the doctor's mobile terminal 3 .

In a preferred embodiment, the database terminal 3 is arranged in the cloud, and the electronic health records are managed uniformly in a cloud storage mode, and the database terminal 3 can be a computer.

In a preferred embodiment, the wearable device 6 can be any wearable device capable of obtaining patient health data.

In a preferred embodiment, USBKey4 can adopt any USBKey that can write data.

In a preferred embodiment, the attribute-based encryption algorithm of the ciphertext policy is an existing algorithm, and the specific steps are:

(1) Startup algorithm (PK,MK)←Setup(1 ^λ ): Initialize the input security parameter λ, and output the public parameter PK and master key MK.

(2) Encryption algorithm, CT←Encrypt(PK,M): The encryption algorithm inputs the public parameter PK, the message M and the access structure Α based on the attribute set, the algorithm will encrypt M and output the ciphertext CT, only the attribute set satisfies the access structure to decrypt the original message.

(3) Key generation, SK←KeyGen(MK,S): The private key generation algorithm inputs the master key MK and attribute set S, and outputs the private key SK.

(4) Decryption algorithm, M←Decrypt(PK,CT,SK): The decryption algorithm inputs public parameters PK, ciphertext CT (including access structure Α), and private key SK generated by set S, if S satisfies access structure Α , the algorithm will decrypt the ciphertext and return the original message M.

Among them, the startup algorithm and the private key generation algorithm are carried out in the PKI server 1, and the public parameters and the master key are initialized to be generated, and the private key is distributed to the registered doctor; the encryption algorithm is carried out in the patient's mobile terminal 5, and the key is encapsulated using this algorithm, and The patient's health data is encrypted using the advanced encryption standard; the decryption algorithm is performed on the doctor's mobile terminal 3, and after judging that the doctor's identity conforms to the corresponding patient's encryption strategy, the doctor is allowed to decrypt and restore the data.

To sum up, the method for controlling access to secure mobile electronic health records of the present invention will be described in detail below through specific embodiments, including the following steps:

1) As shown in Figure 3, the patient user enters the account number and password to log in after registration and changes to the patient's mobile terminal 5 and then enters step 2). If the patient is logging in for the first time, use basic information such as mobile phone number and name to register. The successful patient's mobile terminal 5 will prompt the user to set an encryption policy, and enter after the setting is successful;

2) The patient's mobile terminal 5 obtains the movement data in the patient's wearable device 6 through Bluetooth, and uploads it to the database management terminal 2 after being encrypted by attribute-based encryption and advanced encryption standard encryption of the ciphertext strategy, and at the same time, the relevant data is graphically displayed on the patient's mobile terminal. terminal 5;

3) The doctor user logs in through the account password on the doctor's mobile terminal and enters step 4), as shown in Figure 2, if it is the first time to log in, it needs to use the mobile phone number, name, and information such as the hospital and department to register. After the registration is successful, the PKI The server terminal 1 distributes the private key to the doctor user, and stores the private key in the doctor user's USBKey4 to realize the binding with the doctor user;

4) The doctor user inserts his exclusive USBKey4 into the USB interface of the doctor's mobile terminal 3, clicks on the USB authentication, and obtains the basic information of the user in the USB, which will be sent to the doctor's login interface.

5) As shown in Figure 4, in the doctor login stage, the doctor needs to input the correct password. After the login is successful, the encrypted patient data transmitted from the database management terminal 2 is decrypted and retrieved by the patient key obtained from the USBKey4. show;

6) As shown in Figure 5 and Figure 6, the patient can also send a relationship establishment request to the doctor. After the doctor confirms, the relationship is established. The doctor customizes the follow-up plan for the patient in charge, chooses the follow-up time, and sends the follow-up information to the patient terminal , the patient terminal receives a follow-up reminder and displays the reminder on the patient's mobile terminal.

The above-mentioned embodiments are only used to illustrate the present invention, wherein the structure, connection mode and manufacturing process of each component can be changed to some extent, and any equivalent transformation and improvement carried out on the basis of the technical solution of the present invention should not excluded from the protection scope of the present invention.

Claims (6)

1. a safe mobile e health records access control system, it is characterized in that, it comprises a PKI server terminal, a data base administration terminal, doctor's mobile terminal, a USBKey, patient's mobile terminal and patient's wearable device, described patient's wearable device is for obtaining patient health data and being connected with described patient's mobile terminal by bluetooth, and described USBKey is connected with described doctor's mobile terminal;

Described PKI server terminal is used for clinician user registration, generates exclusive private key based on doctor's attribute, is bound by the USBKey of exclusive private key and doctor, and by the log-on message of doctor and private key information stored in described data base administration terminal; Described patient's mobile terminal is used for patient user and register and arrange encryption policy, obtain patient health data be encrypted it from described patient's wearable device, and by the log-on message of patient and the patient health data after encrypting stored in described data base administration terminal; Described doctor's mobile terminal obtains patient data from described data base administration terminal, and checks doctor whether to meet this patient's encryption policy, meets then to patient health decrypt data.

2. a kind of safe mobile e health records access control system as claimed in claim 1, it is characterized in that, the specific works process of described PKI server terminal is: initiation parameter generates common parameter and master key, insertion will distribute to the described USBKey of doctor, keeper's typing clinician user log-on message, what adopt Ciphertext policy generates private key based on doctor's attribute based on the extraction private key algorithm in encryption attribute algorithm in conjunction with doctor's community set and master key, and by private key stored in its exclusive USBKey, complete the registration for a doctor and key distribution, judge whether that whole doctor has registered complete, terminate, otherwise proceed the registration of other doctors and key distribution until all doctor registers end, the log-on message completing the doctor of registration by all and respective private keys information are stored in described data base administration terminal.

3. a kind of safe mobile e health records access control system as claimed in claim 1, it is characterized in that, the specific works process of described patient's mobile terminal is: judge whether patient registers, as unregistered, register, enter after succeeding in registration and set encryption policy by patient, described patient's mobile terminal obtains patient health data and carries out graphic software platform from described patient's wearable device, and by Ciphertext policy based in encryption attribute algorithm cryptographic algorithm encapsulation key, Advanced Encryption Standard is used to be encrypted obtaining patient health data from described patient's wearable device, and by patient registration's information, encryption policy and the data after encrypting are stored in described data base administration terminal.

4. a kind of safe mobile e health records access control system as claimed in claim 2, it is characterized in that, the specific works process of described patient's mobile terminal is: judge whether patient registers, as unregistered, register, enter after succeeding in registration and set encryption policy by patient, described patient's mobile terminal obtains patient health data and carries out graphic software platform from described patient's wearable device, and by Ciphertext policy based in encryption attribute algorithm cryptographic algorithm encapsulation key, Advanced Encryption Standard is used to be encrypted obtaining patient health data from described patient's wearable device, and by patient registration's information, encryption policy and the data after encrypting are stored in described data base administration terminal.

5. a kind of safe mobile e health records access control system as claimed in claim 1 or 2 or 3 or 4, it is characterized in that, the specific works process of described doctor's mobile terminal is: described USBKey is connected with described doctor's mobile terminal and is logged in, the patient that selection will be checked also obtains this patient data from described data base administration terminal, judge whether doctor meets the encryption policy of this patient, if do not meet, decipher and unsuccessfully exit decrypting process, the decryption portion based on encryption attribute algorithm of Advanced Encryption Standard and Ciphertext policy is adopted to be decrypted if meet, after successful decryption, the health data of this patient will be illustrated in described doctor's mobile terminal.

6. a kind of safe mobile e health records access control system as claimed in claim 1 or 2 or 3 or 4, it is characterized in that, described patient's mobile terminal is also reminded for receiving further consultation, namely patient sends opening relationships request by described patient's mobile terminal Xiang doctor, described doctor's mobile terminal receives patient's opening relationships and asks and confirm, the patient that doctor is responsible for for oneself customizes further consultation plan, select reexamination time, and send further consultation information to described patient's mobile terminal, and at described patient's mobile terminal display alarm.