TWM639583U - Digital health information verification system - Google Patents

Abstract

The present invention provides a digital health information verification system for facilitating a holder to obtain a verification from a verifier, comprising a sever side storing a digital health information or certificate of the holder, and a first software product for the verifier's use. The server side uses a private key to sign and encrypt the digital health information or certificate and provides it to the holder. The first software product reads the signed and encrypted digital health information or certificate presented by the holder and uses a public key to verify and decrypt said digital health information or certificate.

Description

Digital Health Information Verification System

This creation is about a digital health information verification system and related operation methods.

Digital innovation transformation is leading the subversive development of all walks of life with rapid impetus, and the speed of promotion in smart medical care is not far behind. From the footsteps of medical innovation in European and American countries, the promotion of digital medical data exchange platforms has always been the focus of attention from all walks of life.

On March 9, 2020, the Centers for Medicare and Medicaid Services (CMS), part of the Department of Health and Human Services (HHS), and the National The Office of Health Information Technology Coordination (ONC) has publicly released new regulations, requiring medical institutions contracted by health insurance plans across the United States to adopt the new generation of international medical data exchange standards Fast Healthcare Interoperability Resources, FHIR), to strengthen data sharing and enforce it no later than July 1, 2021, covering not only medical institutions, medical records, admission and discharge and referral records, but also data sharing from insurance institutions to insurance institutions, so as to Accelerate the drive for standards interoperability and data exchange across the healthcare ecosystem.

With the rapid development of foreign laws and regulations, the topic of using FHIR as a medical data exchange platform has gradually been valued by domestic authorities and major medical institutions, and they are actively promoting the implementation in cooperation with various industry, government and academic circles.

In particular, in response to the COVID-19 epidemic, Taiwan needs to establish an information exchange platform that can exchange information with the world and can be authenticated for medical treatment, immigration control, and epidemic prevention.

In the post-COVID-19 era, safe travel, eating, and commerce involve multiple stakeholders in various countries utilizing a range of technologies. The main challenges include: (1) Unproven authenticity of health certificates: There is no standardized way to receive and verify Credentials, especially whether the infected person has recovered to a "normal" level; (2) different technologies and adoption of international standards: a wide range of data formats based on different underlying technologies and standards; and (3) different epidemic prevention requirements: each country has Your own requirements will change from time to time according to changes in the epidemic situation.

In one aspect, the present invention provides a digital health information verification system for facilitating a certificate holder to obtain verification from a verification party. The digital health information verification system includes: a server storing a digital data of the certificate holder. a health certificate; and a first software product for the authenticating party to use; wherein: the server uses a private key to sign and encrypt the digital health information or certificate, and sends the signed and encrypted The digital health information or certificate is provided to the certificate holder; the first software product reads the signed and encrypted digital health information or certificate presented by the certificate holder, and uses a public key pair corresponding to the private key Decrypt the signed and encrypted digital health information or certificate to verify its authenticity and obtain the content of the digital health information or certificate.

According to some embodiments of the present invention, the server is connected to a medical information system, and the digital health information or certificate comes from the medical information system.

According to some specific embodiments of the invention, the digital health information verification system further includes: a second software product, installed on a mobile device held by the certificate holder, and used to display the signed and encrypted digital health information or a certificate.

According to some embodiments of the invention, the signed and encrypted digital health information or certificate includes a two-dimensional barcode.

According to some specific embodiments of the invention, the digital health information includes the certificate holder's vaccination records, screening records, medical records, medication records, medical records or any combination thereof.

On the other hand, this creation provides a method for facilitating a certificate holder to obtain a verification from a verification party, which includes: providing a server end storing a digital health information or certificate of the certificate holder; providing a first A software product for the authenticating party to use; the server uses a private key to sign and encrypt the digital health information or certificate, and provides the signed and encrypted digital health information or certificate to the the certificate holder; and the first software product reads the signed and encrypted digital health information or certificate presented by the certificate holder and pairs the signed and encrypted digital health information using a public key corresponding to the private key Decrypt the health information or certificate to verify its authenticity and obtain the content of the digital health information or certificate.

According to some embodiments of the present invention, the server is connected to a medical information system, and the digital health information or certificate comes from the medical information system.

According to some embodiments of the invention, the method further includes: providing a second software product installed on a mobile device held by the certificate holder and used to display the signed and encrypted digital health information or certificate .

According to some embodiments of the invention, the signed and encrypted digital health information or certificate includes a two-dimensional barcode.

According to some specific embodiments of the invention, the digital health information or certificate includes the certificate holder's vaccination records, screening records, medical records, medication records, medical records or any combination thereof.

According to a specific embodiment of the present invention, the digital health information or certificate includes the vaccination record of severe specific pneumonia (Covid-19), the record of quick screening result and the record of polymerase chain reaction (PCR) nucleic acid test result.

According to a specific embodiment of the present invention, the digital health information includes children's vaccination records, that is, a digital children's health handbook is provided.

Some other purposes and advantages of this creation are described in the following description, or can be understood through the embodiments of this creation. It should be understood that the above novel content and the following implementation methods are only illustrative and explanatory descriptions, rather than limiting the scope of the invention as the scope of the patent application.

Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this creation belongs.

The term "a" used herein refers to the quantity of at least one (one or more) unless otherwise specified.

As used herein, "comprise" or "comprising" is generally used in the sense of include/including, which means that one or more features, components or components are allowed to exist. "comprise" or "comprising" covers the terms "consists" or "consisting of".

This creation provides a digital health information verification system to facilitate a certificate holder to obtain verification from a verifier. The digital health information verification system includes: a server storing a digital health information or certificate of the certificate holder; and a first software product for use by the verifier; in: The server uses a private key to sign and encrypt the digital health information, and provides the signed and encrypted digital health information or the certificate to the certificate holder through a communication method; and The first software product reads the signed and encrypted digital health information or certificate presented by the certificate holder, and uses a public key corresponding to the private key to decrypt the signed and encrypted digital health information or certificate , to verify its authenticity and obtain the content of the digital health information or certificate.

In addition, the invention also provides a method for facilitating a certificate holder to obtain a certificate from a verifier. Said method comprises the following steps: Provide a server that stores a digital health information or certificate of the certificate holder; provide a first software product for use by the verifier; The server uses a private key to sign and encrypt the digital health information or certificate, and provides the signed and encrypted digital health information or certificate to the certificate holder through a communication method; and The first software product reads the signed and encrypted digital health information presented by the certificate holder, and decrypts the signed and encrypted digital health information or the certificate using a public key corresponding to the private key, to Verify its authenticity and obtain the content of the digital health information or certificate.

According to some embodiments of the present invention, the server is communicatively connected with a medical information system (HIS). The relevant data in the digital health information or the certificate may come from the medical information system. Typically, the medical information system stores medical record data (structured electronic medical records), and, for example, vaccination records.

According to a specific embodiment of the present invention, the digital health information includes vaccination records of severe specific pneumonia (Covid-19) and polymerase chain reaction (PCR) nucleic acid detection results, wherein the vaccination records correspond to the existing paper Huang Card.

According to a specific embodiment of the present invention, the digital health information includes children's vaccination record, wherein the vaccination record corresponds to a children's health handbook, that is, a digital children's health handbook is provided.

The "communication connection" mentioned in this article includes but is not limited to connection through the Internet.

The server end may be provided with one or more servers, and generally speaking, the server end is owned by a certificate issuing party, which may be a medical institution or a health department. If the server side includes multiple servers, the servers can be electrically connected in pairs or with each other. According to this creation, various records and information on the medical information system can be uploaded to the server, and integrated into the data format of Fast Healthcare Interoperability Resources (FHIR), and stored in a file on the server. or multiple servers.

It is contemplated in the present invention that a governing body may be responsible for authorizing the issuing party (medical institution or health department) and controlling the presentation of health information or certificate types provided through the system (for example, the structure of test certificates, vaccination records or certificates or other). The management agency may be a country's Ministry of Health and Welfare, a local or national government or other higher-level medical and health management agencies. In some application scenarios, verifiers (eg, merchants, immigration authorities, and their verifiers) need permission from said authorities to use the system.

The certificate issuer may be an entity authorized by a health information or certificate management organization to issue specific types of health information certificates. The types may include, for example, vaccination certificates, COVID-19 PCR test certificates, COVID-19 recovery certificates, records of treatment methods and sequelae, etc. Issuing parties may be medical representatives (eg, physicians) of hospitals, screening and vaccination centers, pharmacies, and similar health care providers.

In some preferred embodiments, the digital health information verification system of the present invention may further include a second software product. The second software product is suitable to be installed on a mobile device, and is used to display the signed and encrypted digital health information or certificate. The certificate holder can install the second software product on his mobile device, and present the digital health information or certificate displayed by the second software product on the screen of the mobile device when the verifier needs to conduct relevant inspection and verification for the verifier The device/software reads and verifies the digital health information or certificate.

Preferably, the above-mentioned signed and encrypted digital health information or certificate may contain a two-dimensional barcode, and the two-dimensional barcode includes but not limited to a QR code.

Non-limiting examples of such mobile devices include smart watches, smartphones, and tablets.

In one example, the certificate holder presents the QR code displayed on the second software product on the smartphone (the signed and encrypted digital health information or the certificate is signed and encrypted by the server side with a private key) to verify You can scan the QR code (to read the digital health information or certificate) with the smartphone installed with the first software product, and the first software product will use the corresponding public key to decrypt and verify its authenticity, and you can obtain the digital health certificate. information or certificates.

According to some specific embodiments of the invention, the second software product can provide a user interface through the mobile device for the certificate holder to perform related operations and present digital health information or certificates. The digital health information or certificate displayed on the user interface may include a QR code and an identification color. In one example, green indicates safe (eg, fully vaccinated or screened negative), while red indicates concern (eg, not fully vaccinated or screened positive).

The above-mentioned first software product and second software product are preferably mobile software (App), but not limited thereto. For example, the first software product and/or the second software product may also be software suitable for desktop computers or notebook computers.

Preferably, the private key and its corresponding public key are issued by a trusted registry. More specifically, the private key and its corresponding public key are issued by one or more servers of the trusted registrar. The trusted registration party may consist of one or more certificate management centers or institutions (certificate authority), whose role is to maintain and provide the public key metadata (metadata) of the certificate issuer (server side) upon request, and to Health information or certificate revocation information critical to the security verification of vaccination certificates. A trusted enrollee may maintain a trusted registry that maintains metadata about issuers and digital health information or certificate revocation. The trusted registrant implements the following functions after obtaining a properly authorized request: the certificate issuer (server side) joins, updates the public information of the authorized certificate issuer by creating a digital certificate for the authorized certificate issuer; Provide public information related to the issuer; set and update the authorized issuer's health information or certificate revocation list (CRL), provide the specific issuer's CRL, set and update the authorized health information certification type.

In a specific embodiment, the digital health information verification system of the present invention may further include one or more servers of the trusted registration party, which communicate with the server side and the first software product of the digital health information verification system respectively Connect, for example, via an Internet connection.

The server side of the issuer can use a private key to sign and encrypt the digital health information or certificate, and provide the signed and encrypted digital health information or certificate to the corresponding certificate holder through a communication method. As mentioned above, the private key can be issued by a trusted registrar. Communication methods for providing digital health information or certificates include, but are not limited to: email, mobile phone text messages, or through apps on mobile devices (for example, through second software products).

According to this creation, the digital health information or certificate can be the holder's vaccination records, screening records for specific diseases (for example, PCR test records for COVID-19), medical records, medication records, medical records, or two of the aforementioned materials or any combination of more.

According to a specific embodiment of this creation, the digital health information includes the vaccination record of severe specific pneumonia (Covid-19) issued by a credible medical unit, the record of the rapid screening result and the polymerase chain reaction (PCR) nucleic acid test Result record.

According to a specific embodiment of the present invention, the digital health information or certificate is an infant or child vaccination record. The vaccination may include hepatitis B vaccine, five-in-one vaccine, BCG, influenza vaccine, chickenpox vaccine, etc. For example, you can refer to the current child vaccination schedule webpage of the Centers for Disease Control and Prevention of the Ministry of Health and Welfare (https://www .cdc.gov.tw/Category/List/IpWZqtnmkJfQPfgnaP4lnw).

On the other hand, this creation provides a digital health information verification system, especially for the current severe specific pneumonia epidemic prevention needs, which includes the preservation and exchange of digital data such as vaccination records, screening records, medical records, etc., and can be expanded to various The exchange platform for vaccines and user health data is even in line with international standards. Specifically, this creation provides a digital health information verification system, including user data, medical records, vaccination records, screening records, query module, data exchange module, database and big data analysis center system.

In another aspect, this creation provides a digital health information verification system, which includes a server, a mobile device, a terminal and a database; wherein the terminal stores user information, medical records, vaccination records, screening records, etc. Upload the server, store it in the database after integration, make a query request through the mobile device interface, use the query module to query, and return the query result to the mobile device, and the uploaded data is passed through the data exchange module Data exchange with an international vaccine passport system, and the data can be analyzed by the big data analysis center.

According to some specific embodiments of the invention, the digital data of the digital health information verification system can be preserved and exchanged. According to some specific embodiments of this creation, the user (certificate holder) uses this line to download the App interface to the device for operation. According to some specific embodiments of the invention, whether the query result of the vaccination record can be distinguished by color to indicate whether it conforms to the specification. According to some specific embodiments of the invention, the digital health information verification system may further include screening records of infection, including quick screening records and polymerase chain reaction (PCR) nucleic acid test result records. According to some embodiments of the present invention, the system may optionally include the user's vaccination records, screening records, medical records, medication records and medical records, treatment records, medication records or medical records. According to some embodiments of the invention, the system may further include user's footprint records. According to some embodiments of the present invention, the system may further include a real-time record of the user.

According to this creation, in order to meet the needs of Chinese people going abroad to show the vaccination record card for severe specific pneumonia (Covid-19) in the future, under the existing technical framework, combined with the new crown pneumonia vaccination record platform in HIS, the international Innovative technologies such as the medical data exchange standard FHIR technology, and even the use of secure blockchain technology records, have established the first health information verification system in China, which can be provided as a vaccine passport app. Its application scenarios include hospital end, user end, inspection The app can also be integrated into the appointment registration app of the hospital to provide the public with proof of COVID-19 vaccination records. It may also be combined with various health bureaus, medical institutions and health insurance information to provide digital children's health handbooks.

Referring now to FIG. 1, a specific embodiment of the digital health information verification system of the invention is described as follows.

As shown in FIG. 1 , the digital health information verification system used to facilitate the certificate holder to obtain the verification from the verification party includes: a server end 100 , a first software product 200 and a second software product 300 . The server end 100 belonging to the certificate issuer is composed of a plurality of servers electrically connected to each other (directly or indirectly), and stores the digital health information or certificate of the certificate holder, and its data comes from the certificate issuer (such as , medical institutions or health departments). The first software product 200 is used by the verifier, and communicates with the server 400 of the trusted registrar. The second software product 300 is installed on the mobile device held by the certificate holder (not shown in the figure). The server end 100 is respectively in communication connection with the second software product 300 and the server 400 of the trusted registration party.

The server 100 obtains a private key from the server 400 of the trusted registrar, and uses the private key to sign and encrypt the digital health information or certificate of the certificate holder. Then, the server 100 provides the signed and encrypted digital health information or certificate to the certificate holder through the second software product 300 .

When necessary, the certificate holder can use his mobile device to operate on the user interface of the second software product 300 to present the digital health information or certificate, which includes a QR code, to the inspector of the verification party. The inspector of the verifier can use a scanning device or a mobile device with a camera function to scan the QR code, so that the first software product 200 can read the signed and encrypted digital health information or certificate. In addition, the first software product 200 obtains the public key corresponding to the above-mentioned private key from the server 400 of the trusted registrar, and uses the public key to decrypt the signed and encrypted digital health or certificate health information or certificate to Verify its authenticity and obtain the digital health information or certificate.

Referring now to FIG. 2 , a specific embodiment of the method for facilitating the certificate holder to obtain verification from the verifier is described as follows.

Firstly, the server and the first software product are provided, the server stores the digital health information or the certificate of the certificate holder, and the first software product is used by the verifier for verification (step S110 ).

The server side belonging to the issuing party may be composed of a plurality of servers electrically connected to each other (directly or indirectly), and the digital health information or certificates stored therein are from the issuing party (for example, a medical institution or a health department ). The first software product communicates with the server of the trusted registrar. In addition, a second software product can be provided to be installed on the mobile device held by the licensee. The server side communicates with the server of the second software product and the trusted registration party respectively.

After the server obtains the private key from the server of the trusted registrant, it can use the private key to sign and encrypt the digital health information or certificate, and use a communication method (through the second software product) to send the signed and encrypted Provide the digital health information or certificate to the certificate holder (step S120).

Then, the verifying party may require the certificate holder to provide digital health information or certificate, and use the first software product to read the digital health information or certificate presented by the certificate holder, and use the public key corresponding to the private key (from available obtained by a trusted registrant) to verify its authenticity and obtain the digital health information or the content of the certificate (step S130).

Example 1: COVID-19 Digital Vaccination Record Certificate

The roles involved in the digital health information verification system may include the holder (Holder), a trusted registrar (for example, a certificate center (CA)) and a verifier (Verifier). In this example, the sequence of related operations or actions is as follows : 1. CA: process the Issuer's private key and public key and store the whitelist; 2. The verifier (Verifier) requests and updates the public key list from the CA every 24 hours to verify the certificate of the digital vaccination record offline; 3. The holder (Holder) presents the certificate of the digital vaccination record for the Verifier to scan and check the content; 4. The Verifier identifies the data packet (Payload) based on the signature logic of the issuer (Issuer) who issued the digital vaccination record certificate, and successfully identifies the basic personal information of the holder (Holder) who will be able to verify the digital vaccination record, Injection records, screening records; and 5. For the sake of prudence, you can ask the holder to show his personal ID card and double-check the personal information identified by the certificate of the digital vaccination record.

The holder (Holder) can download and install the vaccine passport application (App) (the second software product), and the holder's vaccination records will also enter the FHIR server from the HIS system through the data standardization API. At this time, the holder The passport app of the digital health information verification system for human mobile phones will present relevant data on the mobile phone interface through the FHIR API. At this time, the digitized COVID-19 vaccination record card data will be presented on the mobile app interface with QR code. Scanning and authenticating the QR code can display the vaccinated vaccine record information and approve entry and exit control places.

The Vaccine Passport App (the second software product) can display the information of the holder (Holder) and the records of vaccinations, and further click on the records of each vaccination to display detailed information. In addition, the Vaccine Passport App (second software product) can also include screening records.

The certificate of the digital vaccination record issued by the Issuer (Medical Institute, Health Department) is stored in the database (server side) in the FHIR data format, and will be exchanged across medical institutions, international medical information, and Integrated use of medical information application platform. First, the FHIR file is packaged in a concise binary representation (CBOR), and then the CA (PKI) certificate center provides the X509 certificate private key to sign and encrypt (COSE) the CBOR object to generate a COSE file. Use Zlib to compress the COSE file, and then convert the compressed data into Base45 format to generate a QR code for the digital vaccination certificate. The QR code of this digital vaccination certificate cannot be recognized by ordinary QR scanners. It is necessary to use the Verifier App on this platform to identify the authenticity and verify the content. The Verifier App updates the public key list to the CA (PKI) certificate center every day, which is the digital vaccine certificate held by the holder (Holder) that can be verified offline.

The front end of the Verifier App (the first software product) provides the function of scanning and verifying digital vaccine certificates. It scans the base45-encoded QR code, extracts the COSE signature, and decodes the CBOR back to JSON format. Then use the public key provided by the CA (PKI) certificate center to verify the COSE signature and verify the CBOR content. All scanned or processed digital vaccine certificates are not stored on the verifier device. In the standard verification workflow, only minimal information will be displayed to the user of the verification party App (the first software product). In the case of successful verification, the information should be limited to information indicating that the authenticity and validity have been successfully verified (indicated in green), and showing the minimum personal information of the certificate holder, as well as information showing proof of vaccination and testing. If the verification fails (indicated in red), the verifier App (first software product) only displays the reason for the failure.

The digital health information in this creation system can reimagine how to exchange health information data between people through the decentralized identity architecture based on w3c open standards. Unlike traditional data exchanges (in which individuals provide information that they agree to share, but essentially exclude their personal data from the data exchange), a decentralized identity architecture allows individuals to be active participants, giving them control over their data, and The agency chooses how the data exchange will take place. Decentralized identity can allow an organization to issue verifiable data to an individual, who can share that data, or a subset, and the validity can be verified by the receiving organization. Trust in exchanged data can be achieved through a decentralized ledger through strict governance practices and signature verification.

With the full-scale vaccination of severe specific pneumonia in China, after the phased unblocking of countries in the foreseeable future, many people may need to prove their health status or vaccine injection records, or when going abroad for business or tourism Before returning to school, workplace, boarding a plane, entering the country or reducing the quarantine time, you can use this creative health passport system to present your digital vaccination records or screening results. This creative health passport system can be used to provide Convenient verification method.

100: server side

200: The first software product

300: Second software product

400: Trusted Registrant's Server

S110~S130: steps

FIG. 1 is a system architecture diagram according to a specific embodiment of the digital health passport system of the invention.

FIG. 2 is a flow chart of a specific embodiment of a method for facilitating a certificate holder to obtain verification of a verifier according to the present invention.

100: server side

200: The first software product

300: Second software product

400: Trusted Registrant's Server

S110~S130: steps

Claims (6)

A digital health information verification system is used to facilitate a certificate holder to obtain verification from a verification party. The digital health information verification system includes: a server side that stores a digital health information or certificate of the certificate holder; The trusted registrant's server is communicated with the server; and a first software product is used by the verifier and communicated with the trusted registrant's server; wherein: the server uses a The private key signs and encrypts the digital health information or certificate, and provides the signed and encrypted digital health information or certificate to the certificate holder through a communication method; the first software product reads the certificate holder Present the signed and encrypted digital health information or certificate, and use a public key corresponding to the private key to decrypt the signed and encrypted digital health information or certificate to verify its authenticity and obtain the digital health information The content of the information or certificate; wherein, the private key and the public key are issued by the server of the trusted registrar. The digital health information verification system as described in Claim 1, wherein the server is connected to a medical information system, and the data of the digital health information and the certificate come from the medical information system. The digital health information verification system as described in Claim 1 further includes: a second software product installed on a mobile device held by the certificate holder and used to display the signed and encrypted digital health information or certificate. The digital health information verification system as described in Claim 1, wherein the signed and encrypted digital health information or certificate includes a two-dimensional barcode. The digital health information verification system as described in Claim 1, wherein the digital health information or certificate includes the certificate holder's vaccination records, screening records, medical records, medication records, medical records, or any combination of the foregoing. The digital health information verification system as described in Claim 1, wherein the server side includes one or more servers.

Images