CN116743513A - Safe operation method and system for remotely retrieving electronic medical records - Google Patents

Abstract

The invention relates to the technical field of medical communication, in particular to a safe operation method and a system for remotely retrieving an electronic medical record, wherein the method comprises the following steps: combining the electronic medical record and the corresponding medical data to characterize the electronic medical record as an electronic medical record data packet, and dividing the electronic medical record data packet into a verification group and a data group; sequentially carrying out data recombination on the verification group and the data group, setting identification bits of the verification group and the data group as a specific communication protocol to characterize a communication verification mode between the verification group and the data group, and forming a recombined verification group and data group; performing iterative verification on the data set through the verification set, taking the data overlap ratio as a judgment standard, if the data overlap ratio is lower than a threshold value, performing integrity recognition on the verification set and the data set, performing corresponding processing, and performing iterative verification again until the data overlap ratio reaches the threshold value; if the data overlap ratio reaches a threshold value, completing verification and receiving communication transmission of the electronic medical record data packet.

Description

A safe operation method and system for remote access to electronic medical records

Technical field

The present invention relates to the technical field of medical communication, and specifically to a safe operation method and system for remote access of electronic medical records.

Background technique

With the continuous innovation of science and technology, telemedicine has become a commonly used consultation method. For now, in telemedicine, doctors mainly rely on the patient's electronic medical records and historical medical data for processing. But on the one hand, telemedicine involves many hospitals, and the communication protocols of each hospital are not unified. , it is easy to increase the security risk of patient-side medical privacy data transmission. On the other hand, due to the rapid development of the big data era, if telemedicine does not have corresponding confidentiality operations for patient-side medical privacy data, it can easily lead to patient-side medical privacy data Leakage causes great distress to patients. Based on this and in response to the above problems, we designed a safe operation method and system for remote access of electronic medical records.

Contents of the invention

The purpose of the present invention is to provide a safe operation method and system for remote access of electronic medical records, which verifies the correlation between the patient's electronic medical records and historical medical data, and implements electronic medical records and Communication encryption and data encryption of historical medical related data solve the problem of patient-side medical privacy data leakage, which causes great trouble to patients and reduces the security risks of patient-side medical privacy data transmission.

The embodiments of the present invention are implemented through the following technical solutions:

A safe operation method for remote access to electronic medical records. The steps of the method include:

Combine the electronic medical record and the corresponding medical data to represent the electronic medical record data package, and divide the electronic medical record data package into a verification group and a data group;

Reorganize the data of the verification group and the data group in turn, and set the identification bits of the verification group and the data group to a specific communication protocol to represent the communication verification method between the verification group and the data group, forming the reorganized verification group and data group. data group;

The data group is iteratively verified through the verification group, and the data coincidence degree is used as the judgment standard. If the data coincidence degree is lower than the threshold, the integrity of the verification group and the data group is identified. After corresponding processing based on the integrity identification results, the data group is passed again. The verification group iteratively verifies the data group until the data coincidence reaches the threshold; if the data coincidence reaches the threshold, the verification is completed and the communication transmission of the electronic medical record data packet is received;

Among them, the objective function for completeness identification of the verification group and the data group is as follows:

,

in, The objective function for completeness identification is used to measure the gap between the model prediction results and the actual results,/> is the number of data samples,/> is the characteristic value of the i-th sample,/> is the completeness of the i-th sample. If the data is complete, it is set to 1. If the data is incomplete, it is set to 0./> is the prediction result of the model for the i-th sample,/> are the parameters of the model,/> is a regularization parameter, used to control model complexity and prevent overfitting,/> is the jth parameter of the model;

The verification group is composed of named fields and measurement fields. The data reorganization of the verification group is specifically: randomly segmenting the measurement fields according to the pre-stored settings, and aggregating the data of the named fields and the measurement fields of each segment to form Aggregate data of each segment, and set a specific communication protocol at the identification bit of the aggregate data of each segment.

Optionally, the data group is composed of original data, wherein the data reorganization of the data group is specifically: dividing the original data into batches based on the randomly segmented measurement fields, so that each divided batch of original data Consistent with the measurement fields of each segment, data compression and communication encryption are performed on each batch of raw data in sequence, and a specific communication protocol is set at the identification position of each batch of raw data.

Optionally, the communication encryption specifically uses setting a single key and/or a public key communication encryption algorithm, and performs communication encryption on each batch of original data after data compression by setting a single key and/or a public key communication encryption algorithm. .

Optionally, the verification group is also provided with a decryption module corresponding to the single key and/or public key communication encryption algorithm.

Optionally, the data group is iteratively verified through the verification group. The specific process is:

Perform specific communication protocol verification on the identification bits of each segmented aggregate data and the identification bits of each batch of raw data;

If the verification is for a specific communication protocol, verify again through the named field. If all the above verifications pass, perform data decryption and data decompression on each batch of original data in turn, and combine each batch of original data with the measurement of each segment. The fields are iteratively matched until the original data of each batch and the measurement data of each segment are matched, and the data coincidence degree is obtained based on the matching results;

If the verification is for a specific communication protocol, verify again through the named field. If the verification of the named field fails, it is determined that the verification failed and the process ends;

If it is verified that the identification bits of each segmented aggregate data and/or the identification bits of each batch of raw data are not for a specific communication protocol, it will be determined that the verification has failed, and a warning mark will be issued for the identification bits that are not for a specific communication protocol, and the process ends.

Optionally, before dividing the electronic medical record data package, it also includes a data preprocessing step. The data preprocessing steps are as follows:

The K-nearby algorithm is used to complete and correct data in electronic medical record data packages;

The median method was used to correct missing data in electronic medical record data packages.

A secure operating system for remote access to electronic medical records, applied to the above secure operation method for remote access to electronic medical records, including:

The sender packages electronic medical records and corresponding medical data, names the sender and receiver of the packaged data, and performs protocol identification and setting processing on the named packaged data in turn, and then transmits the processed packaged data to the receiver. end;

The receiving end verifies the protocol identification and signature of the sending end and receiving end of the packaged data in turn. After passing the above verification, the processed packaged data is restored and receives the restored packaged data.

The technical solutions of the embodiments of the present invention have at least the following advantages and beneficial effects:

The embodiment of the present invention solves the problem of patient-side medical treatment by verifying the correlation between the patient-side electronic medical records and historical medical-related data, and implementing communication encryption and data encryption of the electronic medical records and historical medical-related data. Private data leakage causes great technical problems to patients and reduces the security risk of patient-side medical privacy data transmission.

Description of drawings

Figure 1 is a schematic flow diagram of an overall safe operation method for remote retrieval of electronic medical records provided by an embodiment of the present invention;

Figure 2 is a logical schematic diagram of an embodiment of the present invention providing a verification group for iterative verification of a data group.

Detailed ways

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments These are some embodiments of the present invention, rather than all embodiments. The components of the embodiments of the invention generally described and illustrated in the figures herein may be arranged and designed in a variety of different configurations.

Referring to FIG. 1 , an embodiment of the present invention provides an overall flow diagram of a safe operation method for remote access to electronic medical records.

A safe operation method for remote access to electronic medical records. The steps of the method include:

Combine the electronic medical record and the corresponding medical data to represent the electronic medical record data package, and divide the electronic medical record data package into a verification group and a data group;

Reorganize the data of the verification group and the data group in turn, and set the identification bits of the verification group and the data group to a specific communication protocol to represent the communication verification method between the verification group and the data group, forming the reorganized verification group and data group. data group;

The data group is iteratively verified through the verification group, and the data coincidence degree is used as the judgment standard. If the data coincidence degree is lower than the threshold, the integrity of the verification group and the data group is identified. After corresponding processing based on the integrity identification results, the data group is passed again. The verification group iteratively verifies the data group until the data coincidence reaches the threshold; if the data coincidence reaches the threshold, the verification is completed and the communication transmission of the electronic medical record data packet is received.

The above objective function for completeness identification of the verification group and the data group is as follows:

,

in, The objective function for completeness identification is used to measure the gap between the model prediction results and the actual results,/> is the number of data samples,/> is the characteristic value of the i-th sample,/> is the completeness of the i-th sample. If the data is complete, it is set to 1. If the data is incomplete, it is set to 0./> is the prediction result of the model for the i-th sample,/> are the parameters of the model,/> is a regularization parameter, used to control model complexity and prevent overfitting,/> is the jth parameter of the model.

In this embodiment, the electronic medical record is defined as having all necessary fields filled in, and the field values are within a reasonable range as the data is complete. After that, this embodiment can extract some features, for example, whether each field is filled in, and whether the field value is within a reasonable range. range, the length of the field value, etc. Based on the above, this embodiment trains a data integrity recognition model and sets the objective function of this model to perform the functions in the above steps. In practical applications, the problem of data imbalance needs to be considered. That is, if most of the electronic medical record data are complete, the model is set to be biased towards predicting that the data is complete. It is understandable that if the above situation occurs, this embodiment In addition to the above applications, this problem can also be solved by oversampling, undersampling, or modifying the objective function.

Applying the algorithm provided in this embodiment can improve the accuracy and generalization ability of the model. It also has the advantages of strong interpretability and simple algorithm, which helps to improve the accuracy of identifying the integrity of electronic medical record data.

In the above implementation process, the patient can package electronic medical records and historical medical data (corresponding medical data), summarize them to form an electronic medical record data package, and select a specific hospital and/or a specific doctor in the telemedicine service. and signed, the electronic medical record data package is uploaded to the cloud. The cloud divides the patient's electronic medical record data package into a verification group and a data group. The verification group and the data group correspond one to one, and the cloud separates the verification group and the data group. The data packet header identifies the specific communication protocol, and after processing the verification group and the data group respectively, the verification group and the data group are sent to the specific hospital and/or specific doctor selected by the patient (i.e., the receiving end). Based on the obtained verification group, the hospital and/or specific doctor first determines whether the identifier between the verification group and the data group (i.e., the data packet header) is a specific communication protocol. If not, the specific hospital and/or specific doctor reselects the data. Group (In actual applications, a specific hospital and/or a specific doctor may receive multiple verification groups and data groups. Therefore, select a verification group to verify the data group. If the data group verification fails, reselect the next data group and proceed again. Verification) Verification of a specific communication protocol is performed. If the verification is passed, the first screening of the data group is completed. The data groups corresponding to the verification group at this time are all specific communication protocols. The specific communication method in this embodiment can use TLS communication. protocol or other communication protocol, the specific hospital and/or specific doctor will verify the name of the data set again through the verification group. If the names of the patient and the specific hospital and/or specific doctor are verified, the specific hospital and/or specific doctor will receive The patient-side electronic medical record data package, or remotely access the patient-side electronic medical record data package in the cloud under a specific communication protocol.

In the above implementation process, the electronic medical record data package also includes a data preprocessing step before dividing it. The data preprocessing steps are as follows: using the K neighbor algorithm to perform data complement on the electronic medical record data package. Complete and data correction; the median method is used to correct missing data in the electronic medical record data package.

In one implementation, the verification group is composed of named fields and measurement fields, wherein the data reorganization of the verification group is specifically: randomly segmenting the measurement fields according to the pre-stored settings, and combining the named fields with the data of each segment. The measurement field performs data aggregation to form aggregated data of each segment, and sets a specific communication protocol at the identification position of each segmented aggregated data.

In the above implementation process, the verification group is represented by the verification data of the patient's electronic medical record and historical medical related data, the named field is represented by the digital signature of the patient and a specific hospital and/or a specific doctor, and the measurement field is represented by the original data in the data group The total data length. After the cloud randomly segments the measurement fields according to the pre-stored settings, several measurement fields of different lengths are obtained. At this time, the named field and several measurement fields of different lengths are aggregated to obtain several different lengths. A measurement field with a named field, that is, each segmented aggregate data in this embodiment, and a specific communication protocol is integrated at the identifier of each segmented aggregated data.

In one implementation, the data group is composed of original data, wherein the data reorganization of the data group is specifically: dividing the original data into batches based on randomly segmented measurement fields, so that each divided batch The secondary raw data is consistent with the measurement fields of each segment. Each batch of raw data is compressed and communicated in sequence, and a specific communication protocol is set at the identification position of each batch of raw data.

In the above implementation process, the data group is represented by the patient's electronic medical record and historical medical related data. In the processing of the verification group and the data group, the data processing of the verification group is first completed, and then the data group is processed based on the verification group. Data processing, therefore, that is, based on the measurement fields after random segmentation, the original data is divided into batches of raw data of different lengths, so that the raw data of different lengths in each batch can be compared with several measurements of different lengths. The fields match each other, and then each batch of original data is compressed and communicated in sequence to form each encrypted data packet, and a specific communication protocol is set at the identifier of each encrypted data packet.

In one embodiment, the communication encryption specifically adopts a set single key and/or public key communication encryption algorithm, and each batch of original data after data compression is processed by setting a single key and/or public key communication encryption algorithm. Encrypt communications.

During the above implementation process, the cloud can use a set single-key communication encryption algorithm or a public-key communication encryption algorithm to communicate and encrypt each batch of original data after data compression to ensure the security of the patient's medical privacy data.

More specifically, the data encryption standard algorithm, digital signature algorithm, etc. can be used to set the single key and/or public key communication encryption algorithm.

In one implementation, the verification group is also provided with a decryption module corresponding to the single key and/or public key communication encryption algorithm.

In the above implementation process, since the verification group and the data group are in a one-to-one correspondence, a specific data group can be verified through a specific verification group. Therefore, this implementation method sets the decryption module in the verification group. When the verification group succeeds After verifying the data group, the data group can be decrypted through the corresponding decryption module.

Referring to FIG. 2 , an embodiment of the present invention provides a logical schematic diagram for the verification group to iteratively verify the data group.

In one implementation, the data group is iteratively verified through the verification group, and the specific process is:

Perform specific communication protocol verification on the identification bits of each segmented aggregate data and the identification bits of each batch of raw data;

If the verification is for a specific communication protocol, verify again through the named field. If all the above verifications pass, perform data decryption and data decompression on each batch of original data in turn, and combine each batch of original data with the measurement of each segment. The fields are iteratively matched until the original data of each batch and the measurement data of each segment are matched, and the data coincidence degree is obtained based on the matching results;

If the verification is for a specific communication protocol, verify again through the named field. If the verification of the named field fails, it is determined that the verification failed and the process ends;

If it is verified that the identification bits of each segmented aggregate data and/or the identification bits of each batch of raw data are not for a specific communication protocol, it will be determined that the verification has failed, and a warning mark will be issued for the identification bits that are not for a specific communication protocol, and the process ends.

In the above implementation process, a specific hospital and/or a specific doctor first determines whether the specific communication protocol set in the identification bits of each segmented aggregate data of the verification group is consistent with the specific communication protocol set in the identification bits of each batch of original data. , that is, in the first screening described in the above embodiment, if it is determined that the identification bit of each segmented aggregate data and/or the identification bit of each batch of original data is not a specific communication protocol, it is determined that the verification fails, and the specific hospital and/or The specific doctor puts a warning mark on the identification bit that is not a specific communication protocol and uploads it to the cloud. If it is verified that both are specific communication protocols, it will be verified again through the named field of the verification group. The named field verification here is specifically verification. Whether it is a specific hospital and/or a specific doctor. If the verification of the named field fails, it is determined that the verification has failed. The specific hospital and/or specific doctor will submit the data set to the cloud to re-verify the specific hospital and/or specific doctor selected by the named field. , if the named field verification is successful, the specific hospital and/or specific doctor will decrypt and decompress each batch of original data in the data group through the decryption module in the verification group, and combine each batch of original data with each segment. The measurement fields are iteratively matched until the original data of each batch and the measurement data of each segment are matched, and the data coincidence degree is obtained based on the matching results.

More specifically, the data coincidence degree is set with a threshold, because during the processing process, the patient's electronic medical record and historical medical related data are prone to processing errors leading to loss. Therefore, the coincidence degree is used to verify whether the original data of the data group is complete. The key factor that matches the measurement field, so in this implementation, the threshold is set to 0.998-1.

In the above implementation process, this embodiment is applied to a safe operation method for remote access of electronic medical records, and provides a safe operating system for remote access of electronic medical records, including:

The sender packages electronic medical records and corresponding medical data, names the sender and receiver of the packaged data, and performs protocol identification and setting processing on the named packaged data in turn, and then transmits the processed packaged data to the receiver. end;

The receiving end verifies the protocol identification and signature of the sending end and receiving end of the packaged data in turn. After passing the above verification, the processed packaged data is restored and receives the restored packaged data.

The above are only preferred embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and changes. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention shall be included in the protection scope of the present invention.

Claims (7)

1. The safe operation method for remotely retrieving the electronic medical record is characterized by comprising the following steps of:

combining the electronic medical record and the corresponding medical data to characterize the electronic medical record as an electronic medical record data packet, and dividing the electronic medical record data packet into a verification group and a data group;

sequentially carrying out data recombination on the verification group and the data group, setting identification bits of the verification group and the data group as a specific communication protocol to characterize a communication verification mode between the verification group and the data group, and forming a recombined verification group and data group;

performing iterative verification on the data set through the verification set, taking the data overlap ratio as a judgment standard, if the data overlap ratio is lower than a threshold value, performing integrity recognition on the verification set and the data set, and performing iterative verification on the data set through the verification set again after performing corresponding processing on the integrity recognition result until the data overlap ratio reaches the threshold value; if the data overlap ratio reaches a threshold value, completing verification and receiving communication transmission of the electronic medical record data packet;

wherein, the objective function for integrity recognition of the verification group and the data group is as follows:

，

wherein ,for the purpose of integrity recognition, an objective function is used to measure the difference between the model predicted outcome and the actual outcome,/>Number of data samples +.>For the eigenvalue of the ith sample, +.>For the integrity of the ith sample, if the data is complete, set to 1, if the data is incomplete, set to 0, < >>For the model prediction result of the ith sample, < +.>For parameters of the model, +.>For regularization parameters for controlling model complexity, prevent overfitting, +.>Is the j-th parameter of the model;

the verification group consists of a named field and a measurement field, wherein the data reorganization of the verification group is specifically as follows: randomly segmenting the measurement field according to a pre-stored setting, carrying out data aggregation on the named field and the measurement field of each segment to form aggregation data of each segment, and setting a specific communication protocol at the identification bit of the aggregation data of each segment.

2. The method for remotely retrieving electronic medical records according to claim 1, wherein the data set is composed of original data, and wherein the data reorganization of the data set is specifically as follows: dividing the original data according to batches based on the measurement fields after random segmentation, enabling the divided batches of original data to be consistent with the measurement fields of the segments, sequentially carrying out data compression and communication encryption on the batches of original data, and setting a specific communication protocol at the identification position of the batches of original data.

3. The method for remotely retrieving and safely operating an electronic medical record according to claim 2, wherein the communication encryption specifically adopts a set single key and/or public key communication encryption algorithm, and the communication encryption is carried out on each batch of raw data after data compression through the set single key and/or public key communication encryption algorithm.

4. The method according to claim 3, wherein a decryption module for setting a single key and/or a public key communication encryption algorithm is further provided in the verification group.

5. The method for remotely retrieving and safely operating an electronic medical record according to claim 2, wherein the iterative verification of the data set by the verification group comprises the following specific procedures:

carrying out specific communication protocol verification on the identification bits of each piece of sectional aggregate data and the identification bits of each batch of original data;

if the verification is a specific communication protocol, the verification is performed again through a named field, if the verification is passed, data decryption and data decompression are sequentially performed on each batch of original data, iterative matching is performed on each batch of original data and each segmented measurement field until the matching of each batch of original data and each segmented measurement field is completed, and then the data overlap ratio is obtained based on the matching result;

if the verification is the specific communication protocol, the verification is performed again through the named field, if the verification of the named field fails, the verification is judged to fail, and the flow is ended;

if the identification bit of each piece of segment aggregate data and/or the identification bit of each batch of original data is verified to be not in a specific communication protocol, judging that verification fails, and carrying out warning marking on the identification bit which is not in the specific communication protocol, and ending the flow.

6. The method for remotely retrieving and safely operating an electronic medical record according to claim 1, wherein the electronic medical record data package further comprises a data preprocessing step for the electronic medical record data package before division, and the data preprocessing step sequentially comprises:

adopting a K adjacent algorithm to carry out data complement and data correction on the electronic medical record data packet;

and adopting a median method to correct the data missing of the electronic medical record data packet.

7. A secure operating system for remote review of electronic medical records, applied to the method of any one of claims 1-6, comprising:

the sending end packs the electronic medical record and the corresponding medical data, performs named verification on the packed data at the sending end and the receiving end, sequentially performs protocol identification and setting processing on the named verified packed data, and then transmits the processed packed data to the receiving end;

the receiving end sequentially verifies the protocol identification and the name of the sending end and the receiving end of the packed data, and after the verification is passed, the processed packed data is restored and the restored packed data is received.