Medical big data use application management system
Technical Field
The invention belongs to the field of medical big data management, relates to a medical big data use application management system, and particularly relates to a fine-granularity medical big data use application management system under an accurate medical concept.
Background
Human society is stepping into the big data era, and big data technology plays an important role in each field, and medicine is a typical application field. In 2016, the precise medical research is listed as a national key research and development plan in China, and a large amount of multi-source heterogeneous precise medical big data is generated along with the implementation of the precise medical plan in China. The data are not only important achievements of various accurate medical research projects, but also valuable knowledge sources for developing medical research work in the future, and if the data cannot be reasonably shared in time, the maximum value of the data cannot be played.
However, the medical big data can relate to the privacy of the patient, and is very specific and sensitive, and once leakage occurs, the medical research of individuals and groups can be affected, and meanwhile, the problem that the personal information and the privacy of data providers are exposed can be caused, and serious social harm can be caused.
In the prior art, the management of fine granularity can not be carried out on a large amount of clinical medical big data. The information security and privacy protection are related to the vital interests of broad data resource providers and patients, so that detailed data management specifications must be formulated for medical big data sharing, and detailed and specific classification and grading are carried out on the data to form a set of standardized use application flow and system.
Disclosure of Invention
In view of the defects of the prior art, the invention aims to provide a medical big data use application management system.
The invention is realized by the following technical scheme:
the medical big data use application management system provided by the invention comprises a data docking system and an application management system;
the data docking system is connected with a hospital information system to acquire summary information of related medical data for filling and checking a user application form;
the application management system can manage the user identity and the application process, and the user can make an application, a primary reviewer, an audit expert and a secondary reviewer to audit the user application and export an application form.
Preferably, the hospital information system includes one or more of an information management system (HIS), a Laboratory Information System (LIS), a medical imaging system (PACS), and a health examination system (PEIS).
Preferably, the data docking system can be used for customizing a database table structure of the hospital information system by an administrator, is connected with the hospital information system through a Virtual Private Network (VPN), and simultaneously ensures the compatibility of the information systems adopting different data recording formats.
Preferably, the data docking system stores information of each data item in the hospital information system, including name, description, server where the data item is located, database where the data item is located, data table where the data item is located, field name, item identifier, internal identifier, data element identifier, data type, representation format, data element allowable value, privacy level, usage scenario and structural relationship, so as to generate SQL statement for querying relevant data from each information system of the hospital.
Preferably, the application management system comprises a user registration module, a user application module, a primary review module, an expert review module, a secondary review module and a system management module;
the user registration module is used for registering a new user, recording and storing personal information submitted during user registration, sending the personal information to the initial review module for review, and sending a review passing notice to the user after the review is passed;
the user application module is used for a user to provide a data use application, records and stores a data use purpose, a required data source, a data age range, related information of a scientific research project using the data and a required data item submitted in the user application process, and sends the related information to the pre-auditor module for auditing by the pre-auditor;
the primary review module is used for displaying the basic information of the data applicant and the related information submitted in the application process to a primary reviewer, and simultaneously recording and storing the information of the auditing result, the auditing suggestion, the auditing time and the like of the primary reviewer; if the initial examiner agrees to apply, assigning an auditing expert and sending the application to an expert auditing module, and if the application is not agreed, terminating the application flow and informing the result to a user application module;
the expert auditing module is used for displaying the basic information of the data applicant and the related information submitted in the application process to the expert assigned by the initial auditor, and simultaneously recording and storing the auditing result, the auditing suggestion, the auditing time and other information of the expert; if the experts agree to the application, sending the application to a review module after all the distribution experts agree, if the application is not agreed, terminating the application flow and informing a user application module of the result, and if the experts refuse to review the application, informing a primary reviewer to assign a new expert to review the application;
the review module is used for displaying the basic information of the data applicant and the related information submitted in the application process to the review personnel and simultaneously recording and storing the review result, review suggestion, review time and other information of the review personnel; if the reviewers agree to the application, the application is passed and the system generates a medical big data use application table, if the reviewers do not agree to the application, the application process is terminated and the result is notified to the user application module;
the system management module comprises units of user management, data category management, data item management, data dictionary management and the like, and can manage information such as user states, roles, passwords, medical data entries and the like of all users in the system.
The application management system has the function of applying for the privacy security check of the data items, can evaluate the privacy security of the applied data items according to the privacy protection level and the privacy security policy set by an administrator, and presents the evaluation result to an applicant and an auditor in real time.
Further, the application data item privacy security check function can divide the data item into three categories, namely a direct identifier, a quasi-identifier and a non-identifier, and the privacy security sensitivity degrees of the data item are respectively extremely sensitive, sensitive and general. The security check function is able to check the number of extremely sensitive and sensitive data items requested by the user, and automatically compare them with a threshold value preset by the administrator, and when the threshold value is exceeded, a warning is issued.
The application management system has a data use scene safety check function, can check the data items applied by the user according to the data use scene control strategy set by the administrator, and presents the check result to the applicant and the auditor in real time.
Further, the application data item uses the scene safety inspection function, divides the medical big data application scene into four types of accurate diagnosis, accurate treatment, accurate prevention, accurate medicine research and development, and every data item all has one or a plurality of use scenes. The security check function can check the usage scenario of the data item applied by the user, compare the usage scenario with the project scenario applied by the user, and issue a warning when the user applies for a large number of data items that do not conform to the project usage scenario.
Preferably, the user application module has an application process management function, and an applicant can see the current state of the application through the application process management module, simultaneously revoke the application before the application does not enter the initial review process, and submit the application again after the application is not agreed and modified by taking the original application as a template.
Preferably, the processing flow of the expert auditing module is as follows:
s1: recording and storing the auditing result and the auditing opinion of the expert;
s2: if the expert does not agree with the audit application, the application is set to be in an expert unapproved state and returned, and then S8 is executed; if the expert refuses to audit the application, the expert sets the application to be in an audit-waiting state and notifies a primary auditor to allocate an audit expert, and then S8 is executed;
s3: checking the current state of the application, and executing S8 if the application is in the state of the to-be-distributed auditing specialist;
s4: extracting all expert auditing opinions of the application from a database, and checking one by one; if the expert audit state is one of to-be-audited, in-audit, not passed audit and not audited, executing S8, otherwise executing the flow S5;
s5: adding one to the expert counter after the audit is passed;
s6: if the value of the expert counter which passes the audit is equal to the number of the auditors which are allocated by the initial auditor, executing S7, otherwise, executing S8;
s7: setting the examination and check form as a to-be-reviewed state;
s8: and ending the flow.
Therefore, the expert auditing module can automatically process the application state after the expert gives the auditing opinions, and the auditing efficiency is improved.
The medical big data use application management system has an automatic application form export function, and can automatically generate an electronic application form containing basic information, project information, applied data item information, audit results and opinions of auditors for printing and signing after the application is approved.
According to the medical big data use application management system, the characteristics of the accurate medical big data are fully reflected, advanced domestic and foreign accurate medical big data classification management experience is used for reference, different data items are classified and classified in detail according to different scenes, key data are protected in a key mode, and the use efficiency of the big data is improved to the greatest extent on the premise that the privacy of users is not revealed.
Compared with the prior art, the invention has the advantages that:
1) the invention provides a system for dividing data of different application scenes and sensitivity degrees under the background of accurate medical research, which can carry out high-efficiency subdivision management on massive medical big data, is favorable for further promoting the use efficiency of the medical big data and provides data support for more researches.
2) The invention carries out one-stop full-flow management on the data use application, and researchers can conveniently carry out the operations of application, audit, management and the like in the system, thereby greatly improving the working efficiency.
Drawings
Fig. 1 is a functional block diagram of a medical big data use application system.
Fig. 2 is a work flow chart of the medical big data use application system.
Detailed Description
The embodiments of the present invention will be described in further detail with reference to the following examples and drawings, which are only for the purpose of illustrating the present invention and are not intended to limit the scope of the present invention.
The invention provides a medical big data use application management system, the functional structure of which is shown in figure 1, the system comprises:
(1) data docking system
The data docking system is docked with hospital information management systems (HIS), examination information systems (LIS) and health examination information systems (PEIS) of different hospitals, and summary information of data in the information systems of the hospitals is collected for users to apply;
the data docking system stores information such as names, descriptions, servers, databases, data tables, field names, project identifiers, internal identifiers, data element identifiers, data types, representation formats, data element allowable values, privacy levels, use scenes, structural relations and the like of data items in various information systems of the hospital, and is convenient for generating SQL statements for inquiring related data from the various information systems of the hospital;
in order to ensure information security and avoid data leakage and hacker attack, the system is connected with each information system of each hospital through a Virtual Private Network (VPN), and meanwhile, network connection recording equipment is also arranged, so that the interactive content of the system and each information system of the hospital is recorded in the whole process, and tracing is facilitated when problems occur;
the related information of each data item in each information system of the hospital in the data docking system can be imported in batch by an administrator through an Excel table, and the data items which have errors and are required to be modified can be manually set one by one.
(2) Application management system
The application management system is connected with the data docking system and is mainly used for a user to provide data use applications and data use applications for a primary auditor, an audit expert and a secondary auditor; the application management system mainly comprises a user registration module, a user application module, a primary review module, an expert review module, a secondary review module and a system management module, and a specific work flow chart is shown in figure 2;
the user registration module is used for registering before a user uses the system, and when registering, the user needs to input names, sexes, addresses, jobs, work units, contact phones, mailboxes and identification numbers, set login passwords, upload authentication materials and the like. And then waiting for the initial reviewer to review the user registration application. After the user registration application is approved, the system sends a registration application approval notice to the user, and the user can log in the system to submit an application;
the user application module is used for registering the successful user to provide a data use application. When applying for, the user should input information such as the purpose of use of data, the source of required data, the data age, the use scenario, the project name, the project number, the project responsible person, the project source, the project background, the research purpose and content, the technical scheme, the expected result, etc., and upload the authentication material to select the data item to be applied. After the data items are selected, the system automatically checks the privacy security risk of the selected data items and whether the selected data items are matched with the use purpose of the project or not, and prompts the user. The module can also be used for the user to continue editing after saving the application as the draft. After the application is submitted, the user can see the current auditing state of the application and withdraw the application before entering the initial auditing stage;
and the primary auditing module is used for auditing the use application and the user registration application by a primary auditor. After the user submits the registration application, the primary reviewer can see the relevant information submitted by the user in the module and decide whether to pass the primary review application. After the user submits the data use application, the initial reviewer can check the related information submitted by the user, and meanwhile, the system can display the application data item privacy safety check result and the use scene safety check result of the data item applied by the user to the initial reviewer. The first reviewer can decide whether to pass the application of the user and give an audit opinion. If the initial examiner agrees to apply, assigning an auditing expert and sending the application to an expert auditing module, and if the application is not agreed, terminating the application flow and informing the result to a user application module;
the expert auditing module is used for auditing the application submitted by the user by the auditing experts assigned by the initial auditor. The auditing expert can check the related information submitted by the user, the application data item privacy safety check result and the use scene safety check result of the data item applied by the user and the auditing opinions of the initial auditor, and can decide whether to pass the application of the user and give the auditing opinions according to the auditing expert. After the audit expert submits the audit result, the system will process the application according to the following steps:
s1: recording and storing the auditing result and the auditing opinion of the expert;
s2: if the expert does not agree with the audit application, the application is set to be in an expert unapproved state and returned, and then S8 is executed; if the expert refuses to audit the application, the expert sets the application to be in an audit-waiting state and notifies a primary auditor to allocate an audit expert, and then S8 is executed;
s3: checking the current state of the application, and executing S8 if the application is in the state of the to-be-distributed auditing specialist;
s4: and extracting all expert review opinions of the application from the database, and checking one by one. If the expert audit state is one of to-be-audited, in-audit, not passed audit and not audited, executing S8, otherwise executing the flow S5;
s5: adding one to the expert counter after the audit is passed;
s6: if the value of the expert counter which passes the audit is equal to the number of the auditors which are allocated by the initial auditor, executing S7, otherwise, executing S8;
s7: setting the examination and check form as a to-be-reviewed state;
s8: and ending the flow.
And the review module is used for the reviewers to carry out final review on the applications submitted by the users. The reviewer can check the related information submitted by the user, the application data item privacy safety check result and the use scene safety check result of the data item applied by the user, and the auditing opinions of the primary reviewer and the auditing experts, and accordingly, the reviewer can decide whether to pass the application of the user and give the auditing opinions. If the reviewers agree to the application, the application is passed and the system generates a medical big data use application table, if the reviewers do not agree to the application, the application process is terminated and the result is notified to the user application module;
the system management module comprises units of user management, data category management, data item management, data dictionary management and the like. The user management unit can check the information of user ID, name, sex, work unit, electronic mail box, contact telephone registration time, user role, user state and the like of all current users in the system. The reset password function can be used to reset the password of any user, and the user role and the user state of the user can be directly adjusted in the system. The data category management unit can manage the medical data structure information in the data docking system, the unit can check the medical data items in the system in a tree structure, and the tree structure can be added, deleted, changed, checked and the like. The data item management unit can manage the data items in the system, the medical data items in the system can be viewed in a tree structure in the unit, and for each item of data, the name, the affiliated node, the description, the privacy level, the affiliated server, the affiliated database, the affiliated table, the affiliated field, the item identification, the internal identifier, the data element identifier, the data type, the representation format, the data element permission value, the use scene and other information can be viewed or edited. The data dictionary management unit may manage data fields in the system, for example, a data dictionary used in a user application process, such as a data use purpose, a data source, an expert field, a project source, and the like. The unit may add, delete, modify, view items in the data dictionary.
The above description is only a preferred embodiment of the present invention, and the protection scope of the present invention is not limited to the above-described embodiments. Modifications and variations that may occur to those skilled in the art without departing from the spirit and scope of the invention are to be considered as within the scope of the invention.