Movatterモバイル変換


[0]ホーム

URL:


CN112434336A - Block chain-based electronic medical record sharing method, device and system and storage medium - Google Patents

Block chain-based electronic medical record sharing method, device and system and storage medium
Download PDF

Info

Publication number
CN112434336A
CN112434336ACN202011343451.7ACN202011343451ACN112434336ACN 112434336 ACN112434336 ACN 112434336ACN 202011343451 ACN202011343451 ACN 202011343451ACN 112434336 ACN112434336 ACN 112434336A
Authority
CN
China
Prior art keywords
medical record
ciphertext
client
new
patient
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202011343451.7A
Other languages
Chinese (zh)
Inventor
贺双洪
莫楠
石翔
王�章
郭锐
李辉忠
张开翔
范瑞彬
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
WeBank Co Ltd
Original Assignee
WeBank Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by WeBank Co LtdfiledCriticalWeBank Co Ltd
Priority to CN202011343451.7ApriorityCriticalpatent/CN112434336A/en
Publication of CN112434336ApublicationCriticalpatent/CN112434336A/en
Pendinglegal-statusCriticalCurrent

Links

Images

Classifications

Landscapes

Abstract

Translated fromChinese

本发明涉及区块链技术领域,并公开了一种基于区块链的电子病历共享方法、装置、系统及存储介质,该方法包括:接收患者客户端发送的病历密文的哈希值和授权密钥,根据哈希值在联盟链中获取病历签名和存储地址;若病历签名和患者公钥匹配,则根据存储地址获取病历密文,对病历密文和授权密钥进行重加密,以获取重加密密文;根据机构客户端的私钥对重加密密文进行解密,以获取电子病历明文,基于电子病历明文获取新增病历信息,对新增病历信息进行重加密,以获取新病历密文;确定新病历密文对应的新病历密文信息,将新病历密文信息发送至患者客户端。本发明实现了在保障电子病历的安全性的同时,提高电子病历的高可用性。

Figure 202011343451

The invention relates to the technical field of blockchain, and discloses a blockchain-based electronic medical record sharing method, device, system and storage medium. The method includes: receiving a hash value and authorization of a medical record ciphertext sent by a patient client The key, obtain the medical record signature and storage address in the alliance chain according to the hash value; if the medical record signature matches the patient's public key, obtain the medical record ciphertext according to the storage address, and re-encrypt the medical record ciphertext and authorization key to obtain Re-encrypt the ciphertext; decrypt the re-encrypted ciphertext according to the private key of the institution client to obtain the plaintext of the electronic medical record, obtain the new medical record information based on the plaintext of the electronic medical record, and re-encrypt the new medical record information to obtain the ciphertext of the new medical record ; Determine the new medical record ciphertext information corresponding to the new medical record ciphertext, and send the new medical record ciphertext information to the patient client. The invention realizes the improvement of the high availability of the electronic medical record while ensuring the security of the electronic medical record.

Figure 202011343451

Description

Block chain-based electronic medical record sharing method, device and system and storage medium
Technical Field
The present invention relates to the field of blockchain technologies, and in particular, to a method, an apparatus, a system, and a storage medium for sharing an electronic medical record based on a blockchain.
Background
With the development of cloud computing and block chain technology, the requirement of traditional application informatization and digitization transformation is urgent, for example, medical records are electronized to obtain corresponding electronic medical records, and the electronic medical records are mainly maintained by the own information management systems of all medical institutions, but safe and effective data sharing cannot be performed among all medical institutions. Therefore, how to improve the high availability of the electronic medical record while ensuring the safety of the electronic medical record becomes a problem which needs to be solved urgently at present.
Disclosure of Invention
The invention mainly aims to provide a block chain-based electronic medical record sharing method, device, system and storage medium, and aims to solve the technical problem of improving the high availability of an electronic medical record while ensuring the safety of the electronic medical record.
In order to achieve the above object, the present invention provides an electronic medical record sharing method based on a block chain, which is applied to an organization client, and the electronic medical record sharing method based on the block chain comprises the following steps:
receiving a hash value and an authorization key of a medical record ciphertext sent by a patient client, and acquiring a medical record signature and a storage address in an alliance chain connected with the mechanism client according to the hash value;
if the medical record signature is matched with the patient public key corresponding to the authorization key, acquiring a medical record ciphertext according to the storage address, and re-encrypting the medical record ciphertext and the authorization key to acquire a re-encrypted ciphertext;
decrypting the re-encrypted ciphertext according to a private key of the mechanism client to obtain an electronic medical record plaintext, obtaining newly added medical record information based on the electronic medical record plaintext, and re-encrypting the newly added medical record information to obtain a new medical record ciphertext;
and determining new medical record ciphertext information corresponding to the new medical record ciphertext, and sending the new medical record ciphertext information to the patient client.
Optionally, the step of determining new medical record ciphertext information corresponding to the new medical record ciphertext includes:
and uploading the new medical record ciphertext to a cloud platform connected with the mechanism client to determine a new storage address of the new medical record ciphertext, performing hash signature on the new medical record ciphertext, and taking the new storage address and the hash signature as new medical record ciphertext information.
Optionally, the step of re-encrypting the medical record ciphertext and the authorization key to obtain a re-encrypted ciphertext includes:
and determining a preset encryption function, and calculating by taking the medical record ciphertext and the authorization key as the input of the encryption function to obtain a re-encrypted ciphertext.
Optionally, the step of decrypting the re-encrypted ciphertext according to a private key of the mechanism client to obtain a plaintext of the electronic medical record includes:
and determining a decryption function corresponding to the encryption function, and calculating by taking a private key of the mechanism client and the re-encrypted ciphertext as the input of the decryption function to obtain the plaintext of the electronic medical record.
In order to achieve the above object, the present invention provides an electronic medical record sharing method based on a blockchain, which is applied to a patient client, and the electronic medical record sharing method based on the blockchain comprises the following steps:
generating an authorization key based on the query request sent by the mechanism client, determining a medical record ciphertext corresponding to the query request, and sending the hash value of the medical record ciphertext and the authorization key to the mechanism client;
receiving new medical record ciphertext information fed back by the mechanism client based on the hash value and the authorization key, and detecting whether the new medical record ciphertext information is legal or not;
and if the new medical record ciphertext information is legal, signing the new medical record ciphertext information, and uploading the signed new medical record ciphertext information to an alliance chain connected with the patient client.
Optionally, the step of generating an authorization key based on the query request sent by the client of the institution includes:
acquiring an institution client public key of the institution client based on a query request sent by the institution client, and determining a patient client private key of the patient client;
and encrypting the public key of the institution client and the private key of the patient client, and taking the encrypted public key of the institution client and the encrypted private key of the patient client as authorization keys.
In addition, to achieve the above object, the present invention further provides an electronic medical record sharing device based on a block chain, including:
the acquisition module is used for receiving a hash value and an authorization key of a medical record ciphertext sent by a patient client, and acquiring a medical record signature and a storage address in an alliance chain connected with an organization client according to the hash value;
the re-encryption module is used for acquiring a medical record ciphertext according to the storage address and re-encrypting the medical record ciphertext and the authorization key to acquire a re-encrypted ciphertext if the medical record signature is matched with the patient public key corresponding to the authorization key;
the decryption module is used for decrypting the re-encrypted ciphertext according to a private key of the mechanism client to obtain an electronic medical record plaintext, obtaining newly added medical record information based on the electronic medical record plaintext, and re-encrypting the newly added medical record information to obtain a new medical record ciphertext;
and the sending module is used for determining new medical record ciphertext information corresponding to the new medical record ciphertext and sending the new medical record ciphertext information to the patient client.
In addition, to achieve the above object, the present invention further provides an electronic medical record sharing device based on a block chain, including:
the determining module is used for generating an authorization key based on the query request sent by the mechanism client, determining a medical record ciphertext corresponding to the query request, and sending the hash value of the medical record ciphertext and the authorization key to the mechanism client;
the detection module is used for receiving new medical record ciphertext information fed back by the mechanism client based on the hash value and the authorization key and detecting whether the new medical record ciphertext information is legal or not;
and the signature module is used for signing the new medical record ciphertext information if the new medical record ciphertext information is legal and uploading the signed new medical record ciphertext information to an alliance chain connected with the patient client.
In addition, in order to achieve the above object, the present invention further provides an electronic medical record sharing system based on a blockchain, where the electronic medical record sharing system based on a blockchain includes a patient client, an institution client, a federation chain and a cloud platform, and the electronic medical record sharing system based on a blockchain includes:
the mechanism client side sends a query request to the patient client side, the patient client side generates an authorization key based on the query request sent by the mechanism client side, determines a medical record ciphertext corresponding to the query request, and sends a hash value of the medical record ciphertext and the authorization key to the mechanism client side;
the mechanism client receives a hash value and an authorization key of a medical record ciphertext sent by the patient client, and acquires a medical record signature and a storage address in the alliance chain connected with the mechanism client according to the hash value;
when the medical record signature is matched with the patient public key corresponding to the authorization key, the mechanism client acquires a medical record ciphertext according to the storage address, re-encrypts the medical record ciphertext and the authorization key to acquire a re-encrypted ciphertext, decrypts the re-encrypted ciphertext according to a private key of the mechanism client to acquire an electronic medical record plaintext, acquires newly-added medical record information based on the electronic medical record plaintext, and re-encrypts the newly-added medical record information to acquire a new medical record ciphertext;
the mechanism client side sends the new medical record ciphertext to the cloud platform, the cloud platform stores the received new medical record ciphertext and sends the stored new storage address to the mechanism client side, and therefore the mechanism client side can determine new medical record ciphertext information according to the new storage address;
and the mechanism client sends the new medical record ciphertext information to the patient client, and the patient client receives the new medical record ciphertext information fed back by the mechanism client based on the hash value and the authorization key, signs the new medical record ciphertext information when the new medical record ciphertext information is legal, and uploads the signed new medical record ciphertext information to an alliance chain connected with the patient client.
In addition, in order to achieve the above object, the present invention further provides a storage medium, where the storage medium stores an electronic medical record sharing program based on a block chain, and the electronic medical record sharing program based on the block chain, when executed by a processor, implements the steps of the electronic medical record sharing method based on the block chain as described above.
The invention obtains the medical record signature and the storage address according to the hash value sent by the patient client through the mechanism client, obtains the medical record ciphertext according to the storage address when the medical record signature is matched with the patient public key, then re-encrypts the authorization key and the medical record ciphertext sent by the patient client, then decrypts according to the private key of the mechanism client to obtain the electronic medical record plaintext, determines the new medical record ciphertext of the newly added medical record information according to the electronic medical record plaintext, and sends the new medical record ciphertext information corresponding to the new medical record ciphertext to the patient client, thereby avoiding the phenomenon that the node load of the alliance chain is large in the prior art and the usability of the electronic medical record is limited, and by uploading the important information to the block chain without uploading the whole electronic medical record to the alliance chain, thereby ensuring the authenticity and traceability of the data in the electronic medical record, realizing the safety of the electronic medical record is ensured, the high availability of the electronic medical record is improved.
Drawings
FIG. 1 is a block chain-based electronic medical record sharing device in a hardware operating environment according to an embodiment of the present invention;
FIG. 2 is a flowchart illustrating a first embodiment of a method for sharing electronic medical records based on a blockchain according to the present invention;
FIG. 3 is a flowchart illustrating a third embodiment of a method for sharing electronic medical records based on a blockchain according to the present invention;
FIG. 4 is a block diagram of an apparatus module of the electronic medical record sharing apparatus according to the present invention;
FIG. 5 is a block diagram of another apparatus module of the electronic medical record sharing apparatus based on the blockchain according to the present invention;
fig. 6 is a schematic diagram of a system architecture of the electronic medical record sharing system based on the blockchain according to the present invention.
The implementation, functional features and advantages of the objects of the present invention will be further explained with reference to the accompanying drawings.
Detailed Description
It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.
As shown in fig. 1, fig. 1 is a schematic structural diagram of an electronic medical record sharing device based on a block chain in a hardware operating environment according to an embodiment of the present invention.
The electronic medical record sharing equipment based on the block chain can be a PC (personal computer) or server equipment, and a Java virtual machine runs on the electronic medical record sharing equipment.
As shown in fig. 1, the block chain-based electronic medical record sharing device may include: aprocessor 1001, such as a CPU, anetwork interface 1004, auser interface 1003, amemory 1005, acommunication bus 1002. Wherein acommunication bus 1002 is used to enable connective communication between these components. Theuser interface 1003 may include a Display screen (Display), an input unit such as a Keyboard (Keyboard), and theoptional user interface 1003 may also include a standard wired interface, a wireless interface. Thenetwork interface 1004 may optionally include a standard wired interface, a wireless interface (e.g., WI-FI interface). Thememory 1005 may be a high-speed RAM memory or a non-volatile memory (e.g., a magnetic disk memory). Thememory 1005 may alternatively be a storage device separate from theprocessor 1001.
Those skilled in the art will appreciate that the blockchain-based electronic medical record sharing device architecture shown in fig. 1 does not constitute a limitation of the device, and may include more or less components than those shown, or combine some components, or arrange different components.
As shown in fig. 1, thememory 1005, which is a type of computer storage medium, can include an operating system, a network communication module, a user interface module, and a blockchain-based electronic medical record sharing program.
In the block chain-based electronic medical record sharing device shown in fig. 1, thenetwork interface 1004 is mainly used for connecting to a background server and communicating data with the background server; theuser interface 1003 is mainly used for connecting a client (user side) and performing data communication with the client; and theprocessor 1001 may be configured to call the blockchain-based electronic medical record sharing program stored in thememory 1005 and perform the following operations in the blockchain-based electronic medical record sharing method.
Based on the hardware structure, the embodiment of the electronic medical record sharing method based on the block chain is provided.
Referring to fig. 2 and fig. 2 are schematic flow diagrams illustrating a first embodiment of a block chain-based electronic medical record sharing method according to the present invention, where the block chain-based electronic medical record sharing method is applied to an organization client, and includes:
step S10, receiving a hash value and an authorization key of a medical record ciphertext sent by a patient client, and acquiring a medical record signature and a storage address in a alliance chain connected with the mechanism client according to the hash value;
at present, because the existing electronic medical record sharing scheme is a medical data security sharing method based on a block chain, the availability of the electronic medical record is easily limited, and the electronic medical record information is directly stored in the block, and each transaction in the block chain contains complete electronic medical record information, when the block chain is identified, network congestion is easily caused, so that the system is unavailable, the application range of the electronic medical record is limited, and the medical record information is directly stored in the block chain, so that the storage cost of consuming block chain nodes is increased, and the availability of the electronic medical record is limited. Therefore, in order to avoid the above problem, in this embodiment, a plurality of medical institutions may first form a federation chain, and only the hash of the electronic medical record, the signatures of the patient and the medical institution (i.e., the institution client), and the cloud platform storage address of the encrypted electronic medical record are recorded in the federation chain, where the federation chain is used to ensure the authenticity and traceability of each record. The electronic medical record information of the patient is encrypted by each mechanism by using the public key of the patient and is stored on the cloud platform, and different mechanisms can adopt different cloud platforms. In addition, in the embodiment, the alliance link is combined with a cloud storage technology, and necessary information is linked up, so that the system has extremely high availability while authenticity and traceability of electronic medical record data are guaranteed. And the electronic medical record of the patient can be encrypted by using a public key of the patient client, and the mechanism client of the medical mechanism can check the medical record information only under the condition of patient authorization, so that fine-grained control of private data is realized. Wherein the institution client is a client used by a medical institution. The patient client is the client used by the patient. The blockchain comprises a federation chain.
Therefore, in this embodiment, when a medical institution treats a patient, an inquiry request may be sent to a patient client through an institution client, and the patient client may determine the hash value of the medical record ciphertext according to the inquiry request, construct an authorization key in a re-encryption manner, and then send the authorization key to the institution client. And after receiving the hash value and the authorization key of the medical record ciphertext sent by the patient client, the mechanism client can directly acquire the medical record signature and the storage address of the electronic medical record in the cloud platform in the alliance chain connected with the mechanism client. That is, when a patient goes to an institution to see a doctor, the institution needs to check some historical medical record information of the patient, and the patient generates an authorization key sk for the institution through a patient clientp→hThen, the hash of the ciphertext of the medical record to be shared and the newly generated authorization key sk are combinedauAnd sending the data to the client of the institution. The mechanism queries on the alliance chain as key (byte) according to the hash received by the mechanism client to obtain a character string Sig (sk) with the following formatp,hash)||Sig(skhHash) | | url, where | | | is a string concatenation match. Wherein, in the embodiment, the patient public and private key (sk)p,pkp) Public and private keys of medical institution (sk)h,pkh) Patient authorized institution Key skp→hThe signature s is Sig (sk, hash), the encryption c1 is Enc (pk, m), and the re-encryption c2 is Renc (sk)p→hC1), decryption m ═ Dec (sk, c 2).
Step S20, if the medical record signature is matched with the patient public key corresponding to the authorization key, acquiring a medical record ciphertext according to the storage address, and re-encrypting the medical record ciphertext and the authorization key to acquire a re-encrypted ciphertext;
after the medical record signature and the storage address are obtained in the institution client, the public key in the medical record signature can be obtained first, and then the public key in the medical record signature and the patient public key corresponding to the authorization key can be obtainedAnd (6) matching. Wherein, the public key of the patient is the public key of the node where the patient client is located. And if the public key in the medical record signature is not matched with the patient public key, stopping the operation of acquiring the medical record ciphertext and outputting prompt information of medical record signature error. If the public key in the medical record signature is matched with the patient public key, the medical record ciphertext can be obtained according to the storage address. I.e. the authority client, according to the signature Sig (sk)pHash) recovery public key pkpAnd comparing the data with the public key corresponding to the patient to judge that the data really belongs to the patient, and downloading encrypted medical record information c1, namely medical record ciphertext in the cloud platform according to the storage address if the data passes verification. Then, the encrypted medical record information c1 (i.e. medical record ciphertext) and the authorization key sk are processedp→hRe-encrypting to obtain re-encrypted ciphertext Renc (sk)p→hC1) to obtain re-encrypted ciphertext c 2.
The agent re-encryption is a re-encrypted ciphertext which can be decrypted by an appointed receiver after the authorization of a data owner under the condition that an original ciphertext is not decrypted. Proxy re-encryption mainly consists of three participating proxies, a sender (i.e., a patient client) and a receiver (i.e., an institution client). The process of proxy re-encryption can be that a user can select different control granularities according to different data types and randomly select a symmetric key for each sharable data unit; the user encrypts data by using the symmetric key, encrypts the symmetric key by using the public key of the user, and then organizes a data ciphertext and a key ciphertext together to send to the agent party; when a user initiatively initiates a sharing request or receives a sharing request of a third party, an authorization key is generated for data needing to be shared by using a private key of the user and a public key of a receiving party, and then the key is sent to an agent party; after receiving the key, the agent side generates a re-encrypted ciphertext for the specified data and sends the ciphertext to a specified receiver; the receiving party decrypts the received ciphertext using its own private key.
In addition, in the proxy re-encryption scenario, although the data owner delegates the physical control right of the data to the proxy, since the proxy stores the ciphertext and does not need to decrypt the data during sharing, the confidentiality of the user data can still be ensured even if the proxy wants to steal the user data or intentionally and unintentionally leak the stored data.
Step S30, decrypting the re-encrypted ciphertext according to a private key of the mechanism client to obtain an electronic medical record plaintext, obtaining newly added medical record information based on the electronic medical record plaintext, and re-encrypting the newly added medical record information to obtain a new medical record ciphertext;
after the mechanism client side obtains the re-encrypted ciphertext c2, the re-encrypted ciphertext can be decrypted according to a private key of the mechanism client side to obtain an electronic medical record plaintext. Namely computing Dec (sk)hAnd c2) obtaining the plaintext m of the electronic medical record. And the medical institution corresponding to the institution client acquires the electronic medical record plaintext m, treats the patient client according to the electronic medical record plaintext m, and uses the public key pk of the patient to the new increment medical record information m' of the patient by the institution client after the patient finishes the treatmentpComputing Enc (pk) by proxy re-encryption algorithmpM ') to obtain a new medical record ciphertext c1', namely, re-encrypting the information of the newly added medical record to obtain the re-encrypted new medical record ciphertext. In the re-encryption system, each user has a pair of public and private keys, the public key is used for encryption, and the private key is used for decryption, for example, if the patient client has a ciphertext C1 encrypted by its own public key, and wants to share the data of the ciphertext C1 to the institution client, the patient client may calculate an authorization key sk by using its own private key and the public key of the institution client based on a re-encryption key generation algorithm of proxy re-encryption first, the authorization key sk does not reveal its own private key of the patient client, then the patient client sends the authorization key sk and the ciphertext C1 to the institution client, the institution client generates a re-encryption ciphertext C2 based on the re-encryption algorithm of proxy encryption, and decrypts C2 by using the private key of the institution client, so as to obtain the data shared by the patient client.
And step S40, determining new medical record ciphertext information corresponding to the new medical record ciphertext, and sending the new medical record ciphertext information to the patient client.
Obtaining new data at an organization clientAfter the medical record ciphertext, the new medical record ciphertext can be uploaded to the cloud platform to be stored, and a new storage address (namely, a storage position of the new medical record ciphertext in the cloud platform) for storing the new medical record ciphertext, which is fed back by the cloud platform, is received. Then, the mechanism client signs the new medical record ciphertext piece in a Hash mode to obtain the hash' of the new medical record ciphertext and the signature Sig (sk) of the hashhHash') and sends it to the patient client as the new medical record ciphertext information. The patient client can verify the legality of the signature (namely, the Hash signature) in the ciphertext of the new medical record, and if the received information is illegal, the illegal operation of the organization can be fed back to the supervision organization; if the patient client selects to uplink the new medical record ciphertext information, the signature Sig (sk) is carried out on the received hashpHash ') and take hash' as key, Sig (sk)p,hash')||Sig(skhHash ') is stored in the federation chain as value, and hash' is stored in the hash list of the client. And when medical disputes occur, the arbitrator can determine the responsibility main body according to the records on the alliance chain.
In the embodiment, the re-encryption part of the ciphertext is not completed by the agent side, namely the cloud platform, but is directly executed by the client of the organization. Therefore, a safe and high-availability electronic medical record system can be directly and quickly built on the basis of the existing cloud storage system and the existing alliance chain platform without any adaptation of the cloud storage platform.
In the embodiment, by receiving a hash value and an authorization key of a medical record ciphertext sent by a patient client, a medical record signature and a storage address are acquired in a alliance chain connected with the mechanism client according to the hash value; if the medical record signature is matched with the patient public key corresponding to the authorization key, acquiring a medical record ciphertext according to the storage address, and re-encrypting the medical record ciphertext and the authorization key to acquire a re-encrypted ciphertext; decrypting the re-encrypted ciphertext according to a private key of the mechanism client to obtain an electronic medical record plaintext, obtaining newly added medical record information based on the electronic medical record plaintext, and re-encrypting the newly added medical record information to obtain a new medical record ciphertext; and determining new medical record ciphertext information corresponding to the new medical record ciphertext, and sending the new medical record ciphertext information to the patient client. The medical record signature and the storage address are obtained through the mechanism client according to the hash value sent by the patient client, when the medical record signature is matched with the public key of the patient, the medical record ciphertext is obtained according to the storage address, the authorization key and the medical record ciphertext sent by the patient client are re-encrypted, the decryption is carried out according to the private key of the mechanism client, the electronic medical record plaintext is obtained, the new medical record ciphertext of the newly added medical record information is determined according to the electronic medical record plaintext, and the new medical record ciphertext information corresponding to the new medical record ciphertext is sent to the patient client, so that the phenomenon that the node load of a federation chain in the prior art is large, the usability of the electronic medical record is limited is avoided, the important information is uploaded to the block chain, the whole electronic medical record is not required to be uploaded to the federation chain, the authenticity and traceability of data in the electronic medical record are guaranteed, the safety of the electronic medical record is guaranteed, the high availability of the electronic medical record is improved.
Further, based on the first embodiment of the block chain-based electronic medical record sharing method of the present invention, a second embodiment of the block chain-based electronic medical record sharing method of the present invention is provided. This embodiment is a refinement of the step of determining the new medical record ciphertext information corresponding to the new medical record ciphertext in step S40 in the first embodiment of the present invention, and includes:
and a, uploading the new medical record ciphertext to a cloud platform connected with the mechanism client to determine a new storage address of the new medical record ciphertext, performing hash signature on the new medical record ciphertext, and taking the new storage address and the hash signature as new medical record ciphertext information.
In this embodiment, after the mechanism client acquires the new medical record ciphertext, the new medical record ciphertext may be sent to a cloud platform connected to the mechanism client for storage, and a new storage address for storing the new medical record ciphertext fed back by the cloud platform is received, and then the mechanism client performs hash signature on the new medical record ciphertext to obtain hash 'of the new medical record ciphertext and a signature Sig (sk) of the hash'hHash') and sends it to the patient client as the new medical record ciphertext information.
In this embodiment, the new medical record ciphertext is sent to the cloud platform, the new storage address is determined, the hash signature is performed on the new medical record ciphertext, and the new storage address and the hash signature are used as new medical record ciphertext information, so that the accuracy of the obtained new medical record ciphertext information is guaranteed.
Further, the step of re-encrypting the medical record ciphertext and the authorization key to obtain a re-encrypted ciphertext includes:
and b, determining a preset encryption function, and calculating by taking the medical record ciphertext and the authorization key as the input of the encryption function to obtain a re-encrypted ciphertext.
In this embodiment, when re-encrypting according to the medical record ciphertext and the authorization key, an Encryption function set in advance by the user, such as an AES Encryption function (Advanced Encryption Standard, symmetric Encryption algorithm), may be determined, and the medical record ciphertext and the authorization key may be input to the Encryption function for calculation, so as to obtain a re-encrypted ciphertext. For example, if the AES encryption function is E, C ═ E (K, P), where P is plaintext, K is a key, and C is ciphertext. That is, the encryption function E outputs the ciphertext C by inputting the plaintext P and the key K as parameters of the encryption function.
In this embodiment, the medical record ciphertext and the authorization key are input to the encryption function to be calculated, so that the re-encrypted ciphertext is obtained, and the accuracy of the obtained re-encrypted ciphertext is guaranteed.
Further, the step of decrypting the re-encrypted ciphertext according to a private key of the mechanism client to obtain an electronic medical record plaintext includes:
and c, determining a decryption function corresponding to the encryption function, and calculating by taking a private key of the mechanism client and the re-encrypted ciphertext as the input of the decryption function to obtain the plaintext of the electronic medical record.
In this embodiment, after the mechanism client acquires the re-encrypted ciphertext, it is further required to determine a decryption function corresponding to the encryption function, such as an AES decryption function, and input the private key of the mechanism client and the re-encrypted ciphertext into the decryption function for calculation, so as to obtain the plaintext of the electronic medical record. For example, if the AES decryption function is D, P ═ D (K, C), where C is the ciphertext, K is the key, and P is the plaintext. That is, the ciphertext C and the key K are input as parameters of the decryption function, and the decryption function outputs the plaintext P.
In the embodiment, the private key and the re-encrypted ciphertext of the mechanism client are input into the decryption function for calculation to obtain the electronic medical record plaintext, so that the accuracy of the obtained electronic medical record plaintext is guaranteed.
In addition, referring to fig. 3, fig. 3 is a schematic flowchart of a third embodiment of the method for sharing electronic medical records based on a blockchain according to the present invention, where the method for sharing electronic medical records based on a blockchain is applied to a patient client, and includes:
step S100, generating an authorization key based on the query request sent by the mechanism client, determining a medical record ciphertext corresponding to the query request, and sending the hash value of the medical record ciphertext and the authorization key to the mechanism client;
because the availability of the electronic medical records is low at present, in this embodiment, a plurality of medical institutions form a federation chain, and only the hash of the electronic medical records, the signatures of the patient and the medical institutions (i.e., institution clients), and the cloud platform storage addresses for encrypting the electronic medical records are recorded in the federation chain, and the federation chain is used for ensuring the authenticity and traceability of each record. The electronic medical record information of the patient is encrypted by each mechanism by using the public key of the patient and is stored on the cloud platform, and different mechanisms can adopt different cloud platforms. In addition, in the embodiment, the alliance link is combined with a cloud storage technology, and necessary information is linked up, so that the system has extremely high availability while authenticity and traceability of electronic medical record data are guaranteed. And the electronic medical record of the patient can be encrypted by using a public key of the patient client, and the mechanism client of the medical mechanism can check the medical record information only under the condition of patient authorization, so that fine-grained control of private data is realized. Wherein the institution client is a client used by a medical institution. The patient client is the client used by the patient.
In this embodiment, the patientPublic and private keys (sk)p,pkp) Public and private keys of medical institution (sk)h,pkh) Patient authorized institution Key skp→hThe signature s is Sig (sk, hash), the encryption c1 is Enc (pk, m), and the re-encryption c2 is Renc (sk)p→hC1), decryption m ═ Dec (sk, c 2).
In this embodiment, when a patient visits an institution, the institution needs to check some historical medical record information of the patient, and sends a corresponding query request to a patient client through an institution client, and when the patient client receives the query request sent by the institution client, the patient client determines a medical record ciphertext corresponding to the query request first, and generates a corresponding authorization key sk in an agent re-encryption manner according to the query requestp→hThen, the hash value of the medical record ciphertext is obtained, and the hash value of the medical record ciphertext and the authorization key sk are obtainedp→hAnd sending the information to the mechanism client. The proxy re-encryption is a re-encrypted ciphertext which can be decrypted by a designated receiver after the authorization of a data owner and the proxy party can re-encrypt the ciphertext under the condition that an original ciphertext is not decrypted. For example, if the patient client has a ciphertext C1 encrypted by its own public key, and wants to share the data of the ciphertext C1 with the organization client, the patient client may first use its own private key and the public key of the organization client to calculate an authorization key sk based on a re-encryption key generation algorithm of proxy re-encryption, where the authorization key sk does not reveal its own private key of the patient client, then the patient client sends the authorization key sk and the ciphertext C1 to the organization client, the organization client generates a re-encrypted ciphertext C2 based on the re-encryption algorithm of proxy encryption, and decrypts C2 with the private key of the organization client to obtain the data shared by the patient client.
In addition, in the proxy re-encryption scenario, although the data owner delegates the physical control right of the data to the proxy, since the proxy stores the ciphertext and does not need to decrypt the data during sharing, the confidentiality of the user data can still be ensured even if the proxy wants to steal the user data or intentionally and unintentionally leak the stored data.
Step S200, receiving new medical record ciphertext information fed back by the mechanism client based on the hash value and the authorization key, and detecting whether the new medical record ciphertext information is legal or not;
when the patient client receives new medical record ciphertext information fed back by the mechanism client based on the hash value and the authorization key, whether the new medical record ciphertext information is legal or not can be detected, and different operations can be executed according to different detection results. Wherein, the new case history ciphertext information comprises a new storage address of the new case history ciphertext, the hash' of the new case history ciphertext and a signature Sig (sk) of the hashhHash'). The mode for detecting whether the new medical record ciphertext information is legal is to detect the signature in the new medical record ciphertext information.
And step S300, if the new medical record ciphertext information is legal, signing the new medical record ciphertext information, and uploading the signed new medical record ciphertext information to an alliance chain connected with the patient client.
When the new medical record ciphertext information is found to be illegal through judgment, the signature in the new medical record ciphertext information can be determined to be illegal, the received information can be discarded, and illegal operation of the organization can also be fed back to the supervision organization. If the new case history ciphertext information is legal, the new case history ciphertext information can be signed, namely the signature Sig (sk) is carried out on the received hashpHash ') and take hash' as key, Sig (sk)p,hash')||Sig(skhHash ') is stored in the federation chain as value, and hash' is stored in the hash list of the client. And when medical disputes occur, the arbitrator can determine the responsibility main body according to the records on the alliance chain.
In the embodiment, the re-encryption part of the ciphertext is not completed by the agent side, namely the cloud platform, but is directly executed by the client of the organization. Therefore, a safe and high-availability electronic medical record system can be directly and quickly built on the basis of the existing cloud storage system and the existing alliance chain platform without any adaptation of the cloud storage platform.
In this embodiment, an authorization key is generated based on a query request sent by the mechanism client, a medical record ciphertext corresponding to the query request is determined, and a hash value of the medical record ciphertext and the authorization key are sent to the mechanism client; receiving new medical record ciphertext information fed back by the mechanism client based on the hash value and the authorization key, and detecting whether the new medical record ciphertext information is legal or not; and if the new medical record ciphertext information is legal, signing the new medical record ciphertext information, and uploading the signed new medical record ciphertext information to an alliance chain connected with the patient client. The hash value and the authorization key of the medical record ciphertext are sent to the mechanism client side through the patient client side, the new medical record ciphertext information fed back by the mechanism client side is received, the signature is carried out when the new medical record ciphertext information is legal, and the new medical record ciphertext information is uploaded to the alliance chain, so that the phenomenon that the usability of the electronic medical record is limited due to the fact that the node load of the alliance chain in the prior art is large is avoided, the important information is uploaded to the block chain, the electronic medical record is not required to be uploaded to the alliance chain integrally, authenticity and traceability of data in the electronic medical record are guaranteed, the safety of the electronic medical record is guaranteed, and meanwhile the high usability of the electronic medical record is improved.
Further, the step of generating an authorization key based on the query request sent by the client of the organization includes:
step x, acquiring an institution client public key of the institution client based on a query request sent by the institution client, and determining a patient client private key of the patient client;
in this embodiment, after the patient client receives the query request sent by the institution client, it is necessary to extract the institution client public key of the institution client in the query request, and extract the patient client private key in the patient client.
And step y, encrypting the public key of the institution client and the private key of the patient client, and taking the encrypted public key of the institution client and the encrypted private key of the patient client as authorization keys.
Then, the public key of the institution client and the private key of the patient client are encrypted by adopting an encryption algorithm such as an AES encryption function, and the encrypted public key of the institution client and the encrypted private key of the patient client are used as authorization keys. For example, if the patient client has a ciphertext C1 encrypted by its own public key, and wants to share the data of the ciphertext C1 with the organization client, the patient client may first use its own private key and the public key of the organization client to calculate an authorization key sk based on a re-encryption key generation algorithm of proxy re-encryption, where the authorization key sk does not reveal its own private key of the patient client, then the patient client sends the authorization key sk and the ciphertext C1 to the organization client, the organization client generates a re-encrypted ciphertext C2 based on the re-encryption algorithm of proxy encryption, and decrypts C2 with the private key of the organization client to obtain the data shared by the patient client.
In the embodiment, the authorization key is obtained by encrypting the public key of the client side of the organization and the private key of the client side of the patient, so that the accuracy of the obtained authorization key is guaranteed.
The invention also provides an electronic medical record sharing device based on the block chain, and referring to fig. 4, the electronic medical record sharing device based on the block chain comprises:
the acquisition module A10 is used for receiving a hash value and an authorization key of a medical record ciphertext sent by a patient client, and acquiring a medical record signature and a storage address in a alliance chain connected with an organization client according to the hash value;
a re-encryption module A20, configured to, if the medical record signature matches the patient public key corresponding to the authorization key, obtain a medical record ciphertext according to the storage address, and re-encrypt the medical record ciphertext and the authorization key to obtain a re-encrypted ciphertext;
the decryption module A30 is used for decrypting the re-encrypted ciphertext according to a private key of the mechanism client to obtain an electronic medical record plaintext, obtaining new medical record information based on the electronic medical record plaintext, and re-encrypting the new medical record information to obtain a new medical record ciphertext;
and the sending module A40 is configured to determine new medical record ciphertext information corresponding to the new medical record ciphertext, and send the new medical record ciphertext information to the patient client.
Optionally, the sending module a40 is configured to:
and uploading the new medical record ciphertext to a cloud platform connected with the mechanism client to determine a new storage address of the new medical record ciphertext, performing hash signature on the new medical record ciphertext, and taking the new storage address and the hash signature as new medical record ciphertext information.
Optionally, a re-encryption module a20, configured to:
and determining a preset encryption function, and calculating by taking the medical record ciphertext and the authorization key as the input of the encryption function to obtain a re-encrypted ciphertext.
Optionally, a re-encryption module a20, configured to:
and determining a decryption function corresponding to the encryption function, and calculating by taking a private key of the mechanism client and the re-encrypted ciphertext as the input of the decryption function to obtain the plaintext of the electronic medical record.
In addition, the present invention further provides an electronic medical record sharing apparatus based on a block chain, and referring to fig. 5, the electronic medical record sharing apparatus based on the block chain includes:
a determining module a100, configured to generate an authorization key based on the query request sent by the mechanism client, determine a medical record ciphertext corresponding to the query request, and send a hash value of the medical record ciphertext and the authorization key to the mechanism client;
the detection module A200 is used for receiving new medical record ciphertext information fed back by the mechanism client based on the hash value and the authorization key and detecting whether the new medical record ciphertext information is legal or not;
the signature module a300 is configured to sign the new medical record ciphertext information if the new medical record ciphertext information is legal, and upload the signed new medical record ciphertext information to an alliance chain connected to the patient client.
Optionally, the determining module a100 is configured to:
acquiring an institution client public key of the institution client based on a query request sent by the institution client, and determining a patient client private key of the patient client;
and encrypting the public key of the institution client and the private key of the patient client, and taking the encrypted public key of the institution client and the encrypted private key of the patient client as authorization keys.
The method executed by each program unit can refer to each embodiment of the block chain-based electronic medical record sharing method of the present invention, and is not described herein again.
In addition, the invention also provides an electronic medical record sharing system based on the block chain, which is used for executing the electronic medical record sharing method based on the block chain, the electronic medical record sharing system based on the block chain comprises a patient client, an institution client, a alliance chain and a cloud platform, and the electronic medical record sharing system based on the block chain comprises:
the mechanism client side sends a query request to the patient client side, the patient client side generates an authorization key based on the query request sent by the mechanism client side, determines a medical record ciphertext corresponding to the query request, and sends a hash value of the medical record ciphertext and the authorization key to the mechanism client side;
the mechanism client receives a hash value and an authorization key of a medical record ciphertext sent by the patient client, and acquires a medical record signature and a storage address in the alliance chain connected with the mechanism client according to the hash value;
when the medical record signature is matched with the patient public key corresponding to the authorization key, the mechanism client acquires a medical record ciphertext according to the storage address, re-encrypts the medical record ciphertext and the authorization key to acquire a re-encrypted ciphertext, decrypts the re-encrypted ciphertext according to a private key of the mechanism client to acquire an electronic medical record plaintext, acquires newly-added medical record information based on the electronic medical record plaintext, and re-encrypts the newly-added medical record information to acquire a new medical record ciphertext;
the mechanism client side sends the new medical record ciphertext to the cloud platform, the cloud platform stores the received new medical record ciphertext and sends the stored new storage address to the mechanism client side, and therefore the mechanism client side can determine new medical record ciphertext information according to the new storage address;
and the mechanism client sends the new medical record ciphertext information to the patient client, and the patient client receives the new medical record ciphertext information fed back by the mechanism client based on the hash value and the authorization key, signs the new medical record ciphertext information when the new medical record ciphertext information is legal, and uploads the signed new medical record ciphertext information to an alliance chain connected with the patient client.
And in the block chain-based electronic medical record sharing system, the system mainly comprises clients (an organization client and a patient client), a alliance chain, a cloud platform and an arbitrator.
A client: the patient client is responsible for signing the hash of the electronic medical record ciphertext; saving a hash list of the patient; an authorization key is generated for an organization, and access control of medical record information is realized; and saving the medical record hash, the signature of the patient, the signature of the organization and the file storage address url in a key-value mode into a federation chain. The mechanism client side is responsible for encrypting and uploading case information of the patient to a cloud storage system; after the patient authorization is obtained, the patient medical records stored in the cloud storage systems can be pulled and decrypted locally.
Federation chain: a plurality of organizations are selected by a health department of government as block outlet nodes, and other organizations only participate in the synchronization of blocks; the information of each transaction record of the chain union chain comprises: the address stored by the electronic medical record in an encryption way, and the patient and the medical institution sign the ciphertext hash.
Cloud platform: the system is in charge of storing encrypted medical record information of each mechanism, different mechanisms can select different cloud storage systems, and the cloud storage systems operate independently and do not interfere with each other.
An arbitrating party: the method is used by health departments of governments, and mainly aims to determine responsibility subjects according to records on a chain when medical disputes occur.
And the system architecture of the electronic medical record sharing system based on the blockchain can be as shown in fig. 6, and includes clients (institution clients and patient clients), a federation chain (composed of nodes where each medical institution is located), a cloud platform and an arbitrator. The implementation step is 1, the patient client sends the hash and the authorization key to the mechanism client; 2. the mechanism client side obtains a medical record signature and a storage address according to the hash inquiry alliance chain; 3. the institution client verifies whether the signature and the patient public key are matched; 4. when the signature is matched with the public key, the mechanism client downloads the ciphertext into the cloud platform according to the storage address; 5, the mechanism client re-encrypts the ciphertext by using the authorization key and then decrypts the ciphertext by using a private key to obtain the medical record; 6. the organization client encrypts the newly added case by using the public key of the patient and uploads the ciphertext to the cloud platform; 7. the mechanism client returns the ciphertext address, the hash of the ciphertext and the signature to the patient client; 8. the patient client verifies the validity of the signature and reports the validity to the arbitrator if the signature is not valid; 9. if the patient agrees to the uplink, the patient client signs and sends the transaction to the alliance chain; 10. nodes in the alliance chain collect transactions to verify the validity, and an arbitrator can position a responsible body according to data on the chain to solve medical disputes. The federation chain may include, among other things, a plurality of bicks (nodes), including a prevhash and data.
In addition, the invention also provides a storage medium, namely a computer storage medium.
The computer storage medium of the present invention stores an electronic medical record sharing program based on a block chain, and the electronic medical record sharing program based on the block chain realizes the steps of the electronic medical record sharing method based on the block chain when being executed by a processor.
The method implemented when the block chain-based electronic medical record sharing program running on the processor is executed can refer to various embodiments of the block chain-based electronic medical record sharing method of the present invention, and details are not described here.
It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or system that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or system. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or system that comprises the element.
The above-mentioned serial numbers of the embodiments of the present invention are merely for description and do not represent the merits of the embodiments.
Through the above description of the embodiments, those skilled in the art will clearly understand that the method of the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but in many cases, the former is a better implementation manner. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium (e.g., ROM/RAM, magnetic disk, optical disk) as described above and includes instructions for enabling a terminal device (e.g., a mobile phone, a computer, a server, an air conditioner, or a network device) to execute the method according to the embodiments of the present invention.
The above description is only a preferred embodiment of the present invention, and not intended to limit the scope of the present invention, and all modifications of equivalent structures and equivalent processes, which are made by using the contents of the present specification and the accompanying drawings, or directly or indirectly applied to other related technical fields, are included in the scope of the present invention.

Claims (10)

Translated fromChinese
1.一种基于区块链的电子病历共享方法,其特征在于,所述基于区块链的电子病历共享方法应用于机构客户端,所述基于区块链的电子病历共享方法包括如下步骤:1. A blockchain-based electronic medical record sharing method, wherein the blockchain-based electronic medical record sharing method is applied to institutional clients, and the blockchain-based electronic medical record sharing method comprises the steps:接收患者客户端发送的病历密文的哈希值和授权密钥,根据所述哈希值在与所述机构客户端连接的联盟链中获取病历签名和存储地址;Receive the hash value and authorization key of the medical record ciphertext sent by the patient client, and obtain the medical record signature and storage address in the consortium chain connected with the institution client according to the hash value;若所述病历签名和所述授权密钥对应的患者公钥匹配,则根据所述存储地址获取病历密文,并对所述病历密文和所述授权密钥进行重加密,以获取重加密密文;If the medical record signature matches the patient public key corresponding to the authorization key, obtain the medical record ciphertext according to the storage address, and re-encrypt the medical record ciphertext and the authorization key to obtain the re-encryption ciphertext;根据所述机构客户端的私钥对所述重加密密文进行解密,以获取电子病历明文,基于所述电子病历明文获取新增病历信息,对所述新增病历信息进行重加密,以获取新病历密文;Decrypt the re-encrypted ciphertext according to the private key of the institutional client to obtain the plaintext of the electronic medical record, obtain the newly added medical record information based on the plaintext of the electronic medical record, and re-encrypt the newly added medical record information to obtain the new medical record information. ciphertext of medical records;确定所述新病历密文对应的新病历密文信息,将所述新病历密文信息发送至所述患者客户端。Determine the new medical record ciphertext information corresponding to the new medical record ciphertext, and send the new medical record ciphertext information to the patient client.2.如权利要求1所述的基于区块链的电子病历共享方法,其特征在于,所述确定所述新病历密文对应的新病历密文信息的步骤,包括:2. The blockchain-based electronic medical record sharing method according to claim 1, wherein the step of determining the new medical record ciphertext information corresponding to the new medical record ciphertext comprises:将所述新病历密文上传至与所述机构客户端连接的云平台,以确定所述新病历密文的新存储地址,并对所述新病历密文进行哈希签名,并将所述新存储地址和所述哈希签名作为新病历密文信息。Upload the ciphertext of the new medical record to the cloud platform connected to the client of the institution to determine the new storage address of the ciphertext of the new medical record, perform a hash signature on the ciphertext of the new medical record, and send the ciphertext to the The new storage address and the hash signature are used as the new medical record ciphertext information.3.如权利要求1所述的基于区块链的电子病历共享方法,其特征在于,所述对所述病历密文和所述授权密钥进行重加密,以获取重加密密文的步骤,包括:3. The method for sharing electronic medical records based on block chain as claimed in claim 1, wherein the described medical record ciphertext and the authorization key are re-encrypted to obtain the step of re-encrypting the ciphertext, include:确定预设的加密函数,将所述病历密文和所述授权密钥作为所述加密函数的输入进行计算,以得到重加密密文。A preset encryption function is determined, and the medical record ciphertext and the authorization key are used as the input of the encryption function for calculation to obtain the re-encrypted ciphertext.4.如权利要求3所述的基于区块链的电子病历共享方法,其特征在于,所述根据所述机构客户端的私钥对所述重加密密文进行解密,以获取电子病历明文的步骤,包括:4. The blockchain-based electronic medical record sharing method according to claim 3, wherein the step of decrypting the re-encrypted ciphertext according to the private key of the institutional client to obtain the electronic medical record plaintext ,include:确定所述加密函数对应的解密函数,将所述机构客户端的私钥和所述重加密密文作为所述解密函数的输入进行计算,以获取电子病历明文。The decryption function corresponding to the encryption function is determined, and the private key of the institution client and the re-encrypted ciphertext are used as the input of the decryption function for calculation to obtain the plaintext of the electronic medical record.5.一种基于区块链的电子病历共享方法,其特征在于,所述基于区块链的电子病历共享方法应用于患者客户端,所述基于区块链的电子病历共享方法包括如下步骤:5. A blockchain-based electronic medical record sharing method, wherein the blockchain-based electronic medical record sharing method is applied to a patient client, and the blockchain-based electronic medical record sharing method comprises the following steps:基于所述机构客户端发送的查询请求生成授权密钥,确定所述查询请求对应的病历密文,将所述病历密文的哈希值和所述授权密钥发送至所述机构客户端;Generate an authorization key based on the query request sent by the institutional client, determine the medical record ciphertext corresponding to the query request, and send the hash value of the medical record ciphertext and the authorization key to the institutional client;接收所述机构客户端基于所述哈希值和所述授权密钥反馈的新病历密文信息,检测所述新病历密文信息是否合法;receiving the new medical record ciphertext information fed back by the institutional client based on the hash value and the authorization key, and detecting whether the new medical record ciphertext information is legal;若所述新病历密文信息合法,则对所述新病历密文信息进行签名,并将经过签名的所述新病历密文信息上传至与所述患者客户端连接的联盟链。If the ciphertext information of the new medical record is legal, the ciphertext information of the new medical record is signed, and the signed ciphertext information of the new medical record is uploaded to the consortium chain connected with the patient client.6.如权利要求5所述的基于区块链的电子病历共享方法,其特征在于,所述基于所述机构客户端发送的查询请求生成授权密钥的步骤,包括:6. The blockchain-based electronic medical record sharing method according to claim 5, wherein the step of generating an authorization key based on a query request sent by the institutional client comprises:基于所述机构客户端发送的查询请求获取所述机构客户端的机构客户端公钥,并确定所述患者客户端的患者客户端私钥;Obtain the institution client public key of the institution client based on the query request sent by the institution client, and determine the patient client private key of the patient client;对所述机构客户端公钥和所述患者客户端私钥进行加密,将加密后的所述机构客户端公钥和所述患者客户端私钥作为授权密钥。The institution client public key and the patient client private key are encrypted, and the encrypted institution client public key and the patient client private key are used as authorization keys.7.一种基于区块链的电子病历共享装置,其特征在于,所述基于区块链的电子病历共享装置包括:7. A blockchain-based electronic medical record sharing device, wherein the blockchain-based electronic medical record sharing device comprises:获取模块,用于接收患者客户端发送的病历密文的哈希值和授权密钥,根据所述哈希值在与机构客户端连接的联盟链中获取病历签名和存储地址;The acquisition module is used to receive the hash value and authorization key of the medical record ciphertext sent by the patient client, and obtain the medical record signature and storage address in the alliance chain connected with the institutional client according to the hash value;重加密模块,用于若所述病历签名和所述授权密钥对应的患者公钥匹配,则根据所述存储地址获取病历密文,并对所述病历密文和所述授权密钥进行重加密,以获取重加密密文;The re-encryption module is used to obtain the ciphertext of the medical record according to the storage address if the signature of the medical record matches the public key of the patient corresponding to the authorization key, and re-encrypt the ciphertext of the medical record and the authorization key. encryption to obtain re-encrypted ciphertext;解密模块,用于根据所述机构客户端的私钥对所述重加密密文进行解密,以获取电子病历明文,基于所述电子病历明文获取新增病历信息,对所述新增病历信息进行重加密,以获取新病历密文;The decryption module is configured to decrypt the re-encrypted ciphertext according to the private key of the institutional client to obtain the plaintext of the electronic medical record, obtain the newly added medical record information based on the plaintext of the electronic medical record, and re-encrypt the newly added medical record information. Encryption to obtain ciphertext of new medical records;发送模块,用于确定所述新病历密文对应的新病历密文信息,将所述新病历密文信息发送至所述患者客户端。A sending module, configured to determine new medical record ciphertext information corresponding to the new medical record ciphertext, and send the new medical record ciphertext information to the patient client.8.一种基于区块链的电子病历共享装置,其特征在于,所述基于区块链的电子病历共享装置还包括:8. A blockchain-based electronic medical record sharing device, wherein the blockchain-based electronic medical record sharing device further comprises:确定模块,用于基于所述机构客户端发送的查询请求生成授权密钥,确定所述查询请求对应的病历密文,将所述病历密文的哈希值和所述授权密钥发送至所述机构客户端;The determining module is used to generate an authorization key based on the query request sent by the institutional client, determine the medical record ciphertext corresponding to the query request, and send the hash value of the medical record ciphertext and the authorization key to the the institutional client;检测模块,用于接收所述机构客户端基于所述哈希值和所述授权密钥反馈的新病历密文信息,检测所述新病历密文信息是否合法;a detection module, configured to receive the new medical record ciphertext information fed back by the institutional client based on the hash value and the authorization key, and detect whether the new medical record ciphertext information is legal;签名模块,用于若所述新病历密文信息合法,则对所述新病历密文信息进行签名,并将经过签名的所述新病历密文信息上传至与所述患者客户端连接的联盟链。A signature module, used to sign the ciphertext information of the new medical record if the ciphertext information of the new medical record is legal, and upload the signed ciphertext information of the new medical record to the alliance connected with the patient client chain.9.一种基于区块链的电子病历共享系统,其特征在于,所述基于区块链的电子病历共享系统包括患者客户端,机构客户端,联盟链和云平台,所述基于区块链的电子病历共享系统包括:9. A blockchain-based electronic medical record sharing system, wherein the blockchain-based electronic medical record sharing system includes a patient client, an institutional client, a consortium chain and a cloud platform. The electronic medical record sharing system includes:所述机构客户端向所述患者客户端发送查询请求,所述患者客户端基于所述机构客户端发送的查询请求生成授权密钥,确定所述查询请求对应的病历密文,将所述病历密文的哈希值和所述授权密钥发送至所述机构客户端;The institutional client sends a query request to the patient client, and the patient client generates an authorization key based on the query request sent by the institutional client, determines the ciphertext of the medical record corresponding to the query request, and converts the medical record The hash value of the ciphertext and the authorization key are sent to the institutional client;所述机构客户端接收患者客户端发送的病历密文的哈希值和授权密钥,根据所述哈希值在与所述机构客户端连接的所述联盟链中获取病历签名和存储地址;The institutional client receives the hash value and authorization key of the ciphertext of the medical record sent by the patient client, and obtains the medical record signature and storage address in the alliance chain connected with the institutional client according to the hash value;所述机构客户端在所述病历签名和所述授权密钥对应的患者公钥匹配时,根据所述存储地址获取病历密文,并对所述病历密文和所述授权密钥进行重加密,以获取重加密密文,根据所述机构客户端的私钥对所述重加密密文进行解密,以获取电子病历明文,基于所述电子病历明文获取新增病历信息,对所述新增病历信息进行重加密,以获取新病历密文;When the medical record signature matches the patient public key corresponding to the authorization key, the institutional client obtains the ciphertext of the medical record according to the storage address, and re-encrypts the ciphertext of the medical record and the authorization key. , to obtain the re-encrypted ciphertext, decrypt the re-encrypted ciphertext according to the private key of the institutional client to obtain the plaintext of the electronic medical record, obtain the newly added medical record information based on the plaintext of the electronic medical record, Information is re-encrypted to obtain new medical record ciphertext;所述机构客户端将所述新病历密文发送至所述云平台,所述云平台根据接收的新病历密文进行存储,并将所述存储的新存储地址发送至所述机构客户端,以便所述机构客户端根据所述新存储地址确定新病历密文信息;The institutional client sends the new medical record ciphertext to the cloud platform, and the cloud platform stores the received new medical record ciphertext, and sends the stored new storage address to the institutional client, so that the institutional client can determine the new medical record ciphertext information according to the new storage address;所述机构客户端将所述新病历密文信息发送至所述患者客户端,所述患者客户端接收所述机构客户端基于所述哈希值和所述授权密钥反馈的新病历密文信息,并在所述新病历密文信息合法时,对所述新病历密文信息进行签名,并将经过签名的所述新病历密文信息上传至与所述患者客户端连接的联盟链。The institution client sends the new medical record ciphertext information to the patient client, and the patient client receives the new medical record ciphertext fed back by the institution client based on the hash value and the authorization key and when the ciphertext information of the new medical record is legal, the ciphertext information of the new medical record is signed, and the signed ciphertext information of the new medical record is uploaded to the alliance chain connected with the patient client.10.一种存储介质,其特征在于,所述存储介质上存储有基于区块链的电子病历共享程序,所述基于区块链的电子病历共享程序被处理器执行时实现如权利要求1至6中任一项所述的基于区块链的电子病历共享方法的步骤。10. A storage medium, characterized in that, a blockchain-based electronic medical record sharing program is stored on the storage medium, and when the blockchain-based electronic medical record sharing program is executed by a processor, the implementation of claims 1 to 1. Steps of the blockchain-based electronic medical record sharing method described in any one of 6.
CN202011343451.7A2020-11-252020-11-25Block chain-based electronic medical record sharing method, device and system and storage mediumPendingCN112434336A (en)

Priority Applications (1)

Application NumberPriority DateFiling DateTitle
CN202011343451.7ACN112434336A (en)2020-11-252020-11-25Block chain-based electronic medical record sharing method, device and system and storage medium

Applications Claiming Priority (1)

Application NumberPriority DateFiling DateTitle
CN202011343451.7ACN112434336A (en)2020-11-252020-11-25Block chain-based electronic medical record sharing method, device and system and storage medium

Publications (1)

Publication NumberPublication Date
CN112434336Atrue CN112434336A (en)2021-03-02

Family

ID=74698244

Family Applications (1)

Application NumberTitlePriority DateFiling Date
CN202011343451.7APendingCN112434336A (en)2020-11-252020-11-25Block chain-based electronic medical record sharing method, device and system and storage medium

Country Status (1)

CountryLink
CN (1)CN112434336A (en)

Cited By (13)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN113067857A (en)*2021-03-152021-07-02新疆大学 A cross-hospital sharing method of electronic medical records based on double-chain structure
CN113990429A (en)*2021-12-292022-01-28医典云(南京)数据科技有限公司Electronic medical record data protection method and device
CN114282252A (en)*2021-12-292022-04-05深圳市名竹科技有限公司Information interaction method and system based on block chain and computer equipment
CN114499894A (en)*2022-04-012022-05-13南京金宁汇科技有限公司File storage and reading method and system in block chain network
CN114584325A (en)*2022-05-062022-06-03四川野马科技有限公司Bid quoted price data hybrid storage system and method based on block chain and cloud storage
CN114866288A (en)*2022-04-122022-08-05平安国际智慧城市科技股份有限公司Private information protection method and device based on block chain and storage medium
CN115879153A (en)*2022-12-162023-03-31高雅娟Medical record access method based on block chain
CN116344013A (en)*2023-05-302023-06-27浙江云针信息科技有限公司Medical data management method and system
CN116631578A (en)*2023-07-252023-08-22山东硕杰医疗科技有限公司Lung cancer network comprehensive management information platform
CN117373599A (en)*2023-11-302024-01-09武汉天喻信息产业股份有限公司Medical information sharing system and method based on block chain
CN118133327A (en)*2024-05-082024-06-04三未信安科技股份有限公司Searchable encryption method and system supporting privacy of search mode
CN118802100A (en)*2024-05-152024-10-18郑州大学 Interaction method and system of hierarchical diagnosis and treatment data on-chain and off-chain based on alliance chain
CN118827186A (en)*2024-07-022024-10-22中电科新型智慧城市研究院有限公司 Data processing method, device, server and medium

Citations (2)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN108063752A (en)*2017-11-022018-05-22暨南大学A kind of credible genetic test and data sharing method based on block chain and proxy re-encryption technology
CN110851878A (en)*2019-11-202020-02-28南京邮电大学Accountability medical data storage method based on block chain

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN108063752A (en)*2017-11-022018-05-22暨南大学A kind of credible genetic test and data sharing method based on block chain and proxy re-encryption technology
CN110851878A (en)*2019-11-202020-02-28南京邮电大学Accountability medical data storage method based on block chain

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
卫荣等: ""基于区块链技术的区域医疗数据安全共享问题研究"", "基于区块链技术的区域医疗数据安全共享问题研究", 30 April 2020 (2020-04-30)*
成丽娟 等: ""基于区块链的EHR数据安全存储共享方案"", 《南京邮电大学学报(自然科学版)》, 30 April 2020 (2020-04-30)*

Cited By (20)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN113067857B (en)*2021-03-152023-04-18新疆大学Electronic medical record cross-hospital sharing method based on double-chain structure
CN113067857A (en)*2021-03-152021-07-02新疆大学 A cross-hospital sharing method of electronic medical records based on double-chain structure
CN113990429A (en)*2021-12-292022-01-28医典云(南京)数据科技有限公司Electronic medical record data protection method and device
CN113990429B (en)*2021-12-292022-03-15医典云(南京)数据科技有限公司Electronic medical record data protection method and device
CN114282252A (en)*2021-12-292022-04-05深圳市名竹科技有限公司Information interaction method and system based on block chain and computer equipment
CN114499894A (en)*2022-04-012022-05-13南京金宁汇科技有限公司File storage and reading method and system in block chain network
CN114866288A (en)*2022-04-122022-08-05平安国际智慧城市科技股份有限公司Private information protection method and device based on block chain and storage medium
CN114866288B (en)*2022-04-122024-10-18平安国际智慧城市科技股份有限公司Private information protection method and device based on blockchain and storage medium
CN114584325A (en)*2022-05-062022-06-03四川野马科技有限公司Bid quoted price data hybrid storage system and method based on block chain and cloud storage
CN115879153B (en)*2022-12-162023-11-03湖南提奥医疗科技有限公司Case history access method based on block chain
CN115879153A (en)*2022-12-162023-03-31高雅娟Medical record access method based on block chain
CN116344013A (en)*2023-05-302023-06-27浙江云针信息科技有限公司Medical data management method and system
CN116631578A (en)*2023-07-252023-08-22山东硕杰医疗科技有限公司Lung cancer network comprehensive management information platform
CN116631578B (en)*2023-07-252023-10-13山东硕杰医疗科技有限公司Lung cancer network comprehensive management information platform
CN117373599A (en)*2023-11-302024-01-09武汉天喻信息产业股份有限公司Medical information sharing system and method based on block chain
CN117373599B (en)*2023-11-302024-04-09武汉天喻信息产业股份有限公司Medical information sharing system and method based on block chain
CN118133327A (en)*2024-05-082024-06-04三未信安科技股份有限公司Searchable encryption method and system supporting privacy of search mode
CN118133327B (en)*2024-05-082024-07-16三未信安科技股份有限公司Searchable encryption method and system supporting privacy of search mode
CN118802100A (en)*2024-05-152024-10-18郑州大学 Interaction method and system of hierarchical diagnosis and treatment data on-chain and off-chain based on alliance chain
CN118827186A (en)*2024-07-022024-10-22中电科新型智慧城市研究院有限公司 Data processing method, device, server and medium

Similar Documents

PublicationPublication DateTitle
CN112434336A (en)Block chain-based electronic medical record sharing method, device and system and storage medium
CN109144961B (en)Authorization file sharing method and device
US12316615B1 (en)Systems and methods for third party data protection
US8509449B2 (en)Key protector for a storage volume using multiple keys
CN101627390B (en)Method for the secure storing of program state data in an electronic device
US9805350B2 (en)System and method for providing access of digital contents to offline DRM users
US20170310479A1 (en)Key Replacement Direction Control System and Key Replacement Direction Control Method
TWI420339B (en) Software authorization system and method
US8806206B2 (en)Cooperation method and system of hardware secure units, and application device
US11606202B2 (en)Methods and systems for secure data transmission
CN109347832A (en)A kind of dynamic data sharing method, terminal device and proxy server
JP2014119486A (en)Secret retrieval processing system, secret retrieval processing method, and secret retrieval processing program
JP2004304304A (en) Electronic signature generation method, electronic signature verification method, electronic signature generation request program, and electronic signature verification request program
GB2514428A (en)Enabling access to data
US20210167955A1 (en)Data transmission
JP2018197997A5 (en)
EP2942899B1 (en)Information processing method, trust server and cloud server
KR20070057968A (en) Secret sharing with random functions
CN115941328A (en)Sharable user data encryption processing method, device and system
US20240380615A1 (en)REAL-TIME IoT DATA SHARING SYSTEM SUPPORTING ATTRIBUTE-BASED ACCESS CONTROL AND METHOD THEREOF
US12170720B2 (en)Location-key encryption system
Satheesh et al.AB-DAM: attribute-based data access model in blockchain for healthcare applications
CN113779629A (en) Key file sharing method, device, processor chip and server
KR20230080676A (en)Method and system for managing DID using a high speed block-chain network
JP2004320174A (en) Authentication system, authentication device, authentication method

Legal Events

DateCodeTitleDescription
PB01Publication
PB01Publication
SE01Entry into force of request for substantive examination
SE01Entry into force of request for substantive examination

[8]ページ先頭

©2009-2025 Movatter.jp