KR101881045B1 - System and method for providing medical information based on block chain - Google Patents

Abstract

According to an embodiment of the present invention, a system for providing medical information based on a block chain comprises a medical information system and a block chain network which distributes and stores medical information. The medical information system includes: an information storing unit which stores medical information in a block chain network; an access authority setting unit which classifies grades of the stored medical information based on a preset sensitivity index, and sets access authority to the stored medical information by the classified grades; an access authority determining unit which compares input information of a medical information requester with the set access authority, based on the input information by the medical information requester requesting provision of the stored medical information; and a medical information providing unit which extracts the stored medical information based on the comparison results of the access authority and provides the medical information requester with the extracted medical information. Therefore, the system and a method for providing medical information based on a block chain can protect medical information from danger of hacking into a hospital network by encoding the medical information in order to store the same in a block chain, verifying access authority and legal validity and applying a sharing method through a smart contract.

Description

[0001] SYSTEM AND METHOD FOR PROVIDING MEDICAL INFORMATION BASED ON BLOCK CHAIN [0002]

The present invention relates to a system and a method for providing medical information based on a block chain, and more particularly, to a system and method for providing medical information based on a block chain, which stores medical information in a block chain and provides medical information of a patient according to access rights of the requestor And methods.

In recent years, efforts to improve the quality of medical services have been actively promoted in the field of medical informatization, and in the medical service or health care market, medical informatization at the level of computerization and computer integration of medical information is centered on large hospitals.

However, personal medical information is used not only in hospitals but also in various places such as health insurance and medical insurance companies. Therefore, it is vulnerable to information leakage such as hacking. Recently, abuse of personal medical information is increasing.

Although the digitization of medical information is accelerating to reduce the damage caused by leakage of medical information, the risk of hacking is still increasing because the medical information is stored in the hospital network.

Conventionally, a medical information integrated management system and method for generating an HL7 message from data transmitted from a medical institution terminal and sharing medical information among various medical institutions have been disclosed.

It is a medical information integrated management system in which data transmitted from a medical institution terminal can be easily and quickly generated and transmitted as an HL7 message so that medical terminal terminals can be efficiently linked while efficiently and stably sharing medical information. Therefore, it is not enough to solve medical information leakage such as hacking to hospital network.

KR 10-2007-0112327 A

The present invention relates to a system and method for protecting medical information from a risk of hacking a hospital network by applying a sharing method through a smart contract by encrypting and storing medical information in a block chain, examining access rights and legal validity, The present invention relates to a health information providing system and a medical information providing method.

According to an embodiment of the present invention, a medical information providing system based on a block chain includes an information storing unit for storing medical information in the block-chain network; An access right setting unit for classifying the stored medical information based on a predetermined sensitivity index and setting an access right for the stored medical information according to the classified class; An access right judging unit for comparing the input information of the medical information requester with the set access right based on the input information of the medical information requester requesting the provision of the stored medical information; And a medical information providing unit for extracting the stored medical information based on a comparison result of the access right and providing the extracted medical information to the medical information requester. And a block-chained network for distributing and storing the medical information.

The information storage unit may convert the medical information into a transaction, and store the converted transaction in the block-chain network.

The medical information system may reject the request for providing the stored medical information when it is determined that the access right has not been set to the medical information requester as a result of the access right comparison.

Wherein the access right judging unit substitutes input information of the medical information requester into pre-stored statutory data when the access right judging unit judges that the access right has the set access right as a result of the access right comparison, And the legal validity of

Wherein the access right judging unit judges whether the medical information requestor has a legal right to provide the stored medical information to the patient included in the stored medical information if it is determined that the stored medical information request is not legally valid as a result of judging the legal validity, You can ask if you accept.

The medical information system may reject a request for providing the stored medical information when receiving a rejection request from the patient for the consent request.

The medical information providing unit may extract the medical information stored in the block-chain network upon receiving a consent request from the patient for the consent request.

The medical information system may provide the extracted medical information to the medical information requester.

The access right determining unit may provide the extracted medical information to the medical information requester when it is determined that the stored medical information is legally valid to the medical information requester as a result of the legal validity determination.

The information storage unit may generate a transaction related to the extracted medical information when the extracted medical information is provided to the medical information requester and store the generated transaction in the block chain network.

The block-chain network may include a plurality of nodes, and may store the medical information in each of the nodes.

According to another aspect of the present invention, there is provided a method for providing medical information based on a block chain, the method comprising: storing input medical information in a block-chain network; Receiving a request for provision of the stored medical information and input information of a medical information requester requesting provision of the stored medical information; Determining access rights to the stored medical information of the medical information requester based on input information of the received medical information requester; Determining legal validity of the stored medical information provision request when it is determined that the medical information requester has the access right; And providing the stored medical information to the medical information requester based on the result of determining the access right and legal validity.

The step of determining the access right includes: classifying the stored medical information based on a predetermined sensitivity index; Setting an access right to the stored medical information according to the classified grade; And comparing the input information of the medical information requester with the set access authority to determine an access right to the stored medical information of the medical information requester.

The step of judging the legal validity may include judging the legal validity by substituting input information of the medical information requester into pre-stored statutory data.

Wherein the step of determining whether to provide the stored medical information comprises the steps of providing the stored medical information to the medical information requester when it is determined that the access right and the stored medical information are legally valid Step < / RTI >

Requesting the patient included in the stored medical information to accept the provision of the stored medical information if it is judged that there is no legal validity for the stored medical information provision request after judging the legal validity; And receiving the approval of the provision of the stored medical information from the patient.

The step of providing the stored medical information may include the step of providing the pre-stored medical information to the medical information requestor when receiving a consent request for provision of the pre-stored medical information from the patient.

The storing step may include: converting medical information input to the medical information system into a transaction; And storing the transformed transaction in a block-chain network.

Generating the stored medical information providing transaction after providing the stored medical information; And storing the generated transaction in a block-chain network.

The system and method for providing medical information based on a block chain according to an embodiment of the present invention can reduce the risk of hacking by storing medical information in a block chain.

In addition, after reviewing the access right and legal validity of the requestor of the medical information, the medical information is selectively provided to the requester of the medical information having appropriate access authority and legal relevance, so that unnecessary information leakage can be reduced.

In addition, since all the participants share medical information through the block chain, the medical information providing record is transparently disclosed.

Further, by applying the LEA encryption algorithm, security and processing speed are improved.

The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of the specification, illustrate embodiments of the invention and, together with the description, serve to explain the technical features of the invention.
1 is a block diagram of a block-based medical information providing system according to an embodiment of the present invention.
FIG. 2 is a block diagram schematically illustrating a medical information providing system based on a block chain according to an embodiment of the present invention. Referring to FIG.
3 is a flowchart briefly illustrating a method of providing medical information based on a block chain according to an embodiment of the present invention.
4 is a block diagram illustrating an example of storing and extracting medical information in a system and method for providing medical information based on a block chain according to an embodiment of the present invention.

The terms first and / or second in this specification are used only for the purpose of distinguishing one element from another. That is, the components are not intended to be limited by the terms.

The components, features, and steps referred to in the specification as " comprising " in this specification are intended to mean that there are corresponding components, features, and steps, and do not preclude the presence of one or more other components, features, steps, and the like Is not.

Includes plural forms as long as it is not specified and specified in the singular form herein. That is, the components and the like referred to in this specification may mean the presence or addition of one or more other components or the like.

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs to be.

That is, terms such as those defined in commonly used dictionaries should be construed as meaning consistent with meaning in the context of the related art, and unless otherwise expressly defined herein, interpreted in an ideal or overly formal sense It does not.

Hereinafter, a system and method for providing medical information based on a block chain according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of a block-based medical information providing system according to an embodiment of the present invention.

Referring to FIG. 1, a medical information providing system based on a block chain according to an embodiment of the present invention may include a medical information system 100 and a block-chain network 110.

The medical information system 100 may include an information storage unit 101, an access authority setting unit 103, an access authority determining unit 105, and a medical information providing unit 107.

The information storage unit 101 may generate patient medical information as a transaction in the form of a program code, and store the transaction information in the block-chain network 110.

In addition, the information storage unit 101 may distribute log records on medical information provisioning to the block-chain network 110. [

The medical information system 100 according to an embodiment of the present invention can prevent the outflow of medical information due to hacking to the medical information system 100 by storing the medical information in the block chain network 110. [

In addition, since all participants share medical information through a block-chain network, the medical information providing record is transparently disclosed.

The access authority setting unit 103 may set the sensitivity index for the inputted medical information and set the access authority according to the set sensitivity index.

The access authority setting unit 103 may classify the sensitivity index of the medical information inputted through the predetermined hospital data and set the access authority according to the classified sensitivity index.

For example, the sensitivity index may be preset to one stage (highest), two stages (intermediate), and three stages (lowest). If the input medical information is classified as a first stage sensitivity index, Access rights corresponding to the highest security level corresponding to the index can be set.

When the request of the medical information requester is received, the access right judging unit 105 can determine whether the medical information requester has access right to the requested medical information.

For example, when the medical information requester requests to provide information on the medical information for which the first-level sensitivity index is set, the access right judging unit 105 judges whether the access right of the medical information requester corresponds to the highest security degree set in the first- can do.

If the medical information requester does not have access rights according to the sensitivity index set in the requested medical information, the medical information system 100 may reject the medical information request.

On the other hand, when the medical information requester has the access right according to the sensitivity index set in the medical information requested by the medical information requester, the access right judging unit 105 judges whether the medical information requested by the medical information requester is available (Hereinafter referred to as "legal validity").

The access right judging unit 105 may parse the statutes related to the provision of medical information, examine the legitimacy of the medical information requester, the purpose of requesting medical information, etc. in response to the laws and regulations.

For example, when the medical information requester has the access right and legal validity according to the sensitivity index set in the medical information requested by the requesting medical information, the medical information providing unit 107 may request the medical information providing unit 107 to provide the medical information.

On the other hand, when the medical information requester has the access authority, but does not have legal justification, the access authority deciding section 105 may request the permission of the medical information provision to the patient.

When the patient authorizes the provision of the medical information, the access authority determination unit 105 may request the medical information provider 107 to provide the medical information. If the patient refuses to provide the medical information, the medical information system 100 requests the medical information requester The request for providing medical information of the present invention may be rejected.

The medical information providing unit 107 may collect data on the medical information requested to be provided by the block-chain network 110 and provide medical information to the medical information requester.

The medical information providing unit 107 extracts the medical information data from the block-chain network 110 and provides the medical information data to the medical information requester when the medical information requester has the access right and legal validity based on the Smart Contract can do.

Here, the smart contract means that the process of contract execution and verification is automated through a network, so that the contract process can be executed safely without any interference from the person confirming the contract execution condition. Contract.

For example, when the medical information requester has the contract execution condition (access right and legal validity), the medical information providing unit 107 may be provided with the access right and the legal validity according to the sensitivity index set in the medical information Extracts the medical information data from the block-chain network 110, and provides the medical information data to the medical information requester.

In a case where the medical information requester has access authority but does not have legal justification, if the patient accepts medical information for the medical information requester, the medical information providing unit 107 receives from the block chain network 110 The medical information data can be extracted and provided to the medical information requester.

The medical information system (100) examines the access right and legal validity of the requestor of the medical information, and selectively provides the medical information to the requestor of the medical information having appropriate access authority and legal relevance, thereby reducing unnecessary medical information leakage have.

In addition, the medical information providing unit 107 can prevent the outflow of the medical information by providing the medical information in an encrypted form when providing the requested medical information.

For example, the medical information providing unit 107 may apply the LEA encryption algorithm to the medical information extracted from the block-chain network 110 to provide the encrypted medical information to the medical information requester, The medical information can be used by decrypting the information.

The medical information providing unit 107 generates a private key for the medical information requester and provides the generated private key to the medical information requester. The medical information requester locally stores the generated private key, so that even if a server hacking occurs, I can not.

For example, the generated private key can be stored in a personal wallet for a virtual currency such as MyEtherWallet, and the medical information requester can store the generated private key in the personal wallet.

The medical information providing unit 107 may generate the private key for the medical information requester, encrypt the medical information based on the generated private key, and provide the encrypted medical information to the medical information requester so that the security can be improved.

After the medical information providing unit 107 provides the medical information to the medical information requester, the information storing unit 101 distributes the log information about the medical information providing to the block chain network 110 by distributing the medical information providing history Can be managed transparently.

FIG. 2 is a block diagram schematically illustrating a medical information providing system based on a block chain according to an embodiment of the present invention. Referring to FIG.

Referring to FIG. 2, when the medical information requester requests medical information to the medical information system 100, the medical information system 100 can confirm the access conditions and the access restriction.

Access conditions and access restrictions on the medical information can be classified by the access authority setting unit 103 according to a predetermined sensitivity index, and access rights can be set according to the classified sensitivity index.

The access authority judging unit 105 may first determine whether the medical information requester has access authority.

If the medical information requester does not have access rights, the medical information system 100 may reject the request of the medical information requester.

When the medical information requester has access authority, the access authority judging unit 105 can analyze legal validity.

When the medical information requester is legally valid, the medical information providing unit 107 may extract the medical information from the block-chain network 110. [

Thereafter, the medical information providing unit 107 generates a private key of the medical information requester, encrypts the extracted medical information by using the generated private key, and transmits the encrypted medical information to the medical information requester.

If the medical information requester has access authority but is not legally valid, the access authority judging section 105 may request permission to provide medical information to the patient.

When the patient accepts the provision of the medical information for the medical information requester by digital signature based on the block chain based on the medical information provision, the medical information providing unit 107 extracts the medical information from the block-chain network 110, And may be provided to the requestor of the medical information.

For example, the patient can receive a PUSH notification about permission to provide medical information, and click (tap) the approval button, thereby enabling digital signature based on the block chain.

When the medical information providing unit 107 provides the medical information extracted from the block-chain network 110 to the medical information requester, the information storing unit 101 logs a transaction for providing the medical information, (110).

The medical information providing system based on the block chain according to an embodiment of the present invention can improve the security and transparency by storing the transaction for providing medical information and medical information in the block chain network 110. [

3 is a flowchart briefly illustrating a method of providing medical information based on a block chain according to an embodiment of the present invention.

Referring to FIG. 3, a step S101 of receiving a medical information request, a step S103 of checking an access right, a step S105 of judging legal validity, a step of extracting medical information S107, Step S109 of providing information, step S111 of storing a log record, and step S113 of requesting permission.

The step S101 of receiving a medical information request is a step of receiving a request for medical information desired to be provided from the medical information requester, and the medical information requester can make a request for the medical information to the medical information system 100. [

Step S103 of checking the access authority is a step of checking the access authority of the medical information requester and comparing the access authority set in the requested medical information with the access authority of the medical information requester.

The medical information is classified according to a predetermined sensitivity index, and the access right to the medical information can be set according to the classified sensitivity index.

For example, the predetermined sensitivity index can be preset to one stage (highest), two stages (intermediate) and three stages (lowest), and the sensitivity index can be set according to the contents of the medical information. Therefore, the highest security level access authority can be set for the medical information in which the first stage sensitivity index is set.

The access authority determining unit 105 may determine whether the medical information requester has the access right set in the requested medical information.

If the medical information requester does not have the access authority set in the requested medical information, the medical information system 100 may refuse to provide medical information to the medical information requester.

The step of judging legal validity (S105) is a step of judging whether the medical information requester is legally valid to request medical information when the medical information requester has the access right set in the medical information requested.

Here, the contents of the laws and ordinances related to the provision of medical information may include the relationship between the medical information requester and the patient, and the purpose of requesting medical information.

The access right judging unit 105 can determine the legal validity of the requestor of the medical information by parsing the statutes related to the medical information provision and comparing the requirements described in the statute with the information inputted by the medical information requestor.

The step of extracting medical information (S107) is a step of extracting medical information from the block-chain network (110).

The information storage unit 101 may convert input medical information into a transaction in the form of a program code, and store the transaction in a block-chain network 110.

The medical information providing unit 107 may extract the medical information from the block-chain network 110 when the medical information requester has the access right to the medical information requested and the legal validity.

The step of providing the extracted medical information (S109) is a step of encrypting the extracted medical information and providing the extracted medical information to the medical information requester.

For example, the extracted medical information may be encrypted through the private key of the medical information requester, and then provided to the medical information requester.

The step S111 of storing the log record is performed for the transparency of medical information provision, after providing the encrypted medical information to the medical information requester and then logging the medical information providing record to the block chain network 110. [

The information storage unit 101 can enhance security and transparency by generating and storing a transaction for providing medical information after the medical information providing unit 107 provides the medical information.

In a step S113 of requesting permission, the access right judging unit 105 has permission to provide medical information to the patient, although the access right to the medical information requested by the request of the medical information is provided, This is the requesting step.

If the patient agrees with the provision of medical information, the medical information providing unit 107 may extract the medical information from the block-chain network 110.

If the patient refuses to provide medical information, the medical information system 100 may refuse to provide medical information to the requesting medical information requester.

As described above, according to the block chain-based medical information providing method according to the embodiment of the present invention, when the medical information requester does not have the access right according to the smart contract, when the access right is provided but not legal validity, The convenience of the user can be improved and the security and transparency can be enhanced by changing the process of providing medical information according to the case of providing the medical information.

4 is a block diagram illustrating an example of storing and extracting medical information in a system and method for providing medical information based on a block chain according to an embodiment of the present invention.

Referring to FIG. 4, the medical information system 100 may store medical information in the block-chain network 110 and extract stored medical information.

The information storage unit 101 may convert the inputted medical information into a transaction and distribute it to the block-chain network 110 and store the transaction.

The block-chain network 110 is comprised of a plurality of nodes 201, and transactions for stored health information may be stored at each node 201.

In addition, when the medical information providing unit 101 provides the medical information to the medical information requester in the medical information providing unit 107, the information storing unit 101 generates a transaction for providing medical information and stores the transaction in the block-chain network 110, Can be improved.

The medical information providing unit 107 has access right to the sensitivity index of the medical information requested by the requestor of the medical information request and has the legal right or access right to the sensitivity index of the medical information requested by the requestor of the medical information, And request the block-chain network 110 to extract the medical information when the patient agrees to provide the medical information.

When the block chain network 110 receives a request for extracting stored medical information from the medical information providing unit 107, the block chain network 110 transmits the medical information 100 to the medical information system 100 when a plurality of block- If less than 51% is approved, the medical information system 100 is not provided with medical information.

Since the same medical information is stored in the plurality of nodes 201 of the block chain network 110, even if the health information stored in any one of the nodes 201 is forged, the remaining nodes 201 included in the block- The security information can be enhanced because the medical information stored in the database is original.

If a hacker attempts to falsify medical information contained in the block chain network 110, more than 51% of the plurality of nodes 201 stored in the block-chain network 110 must be hacked and falsified, Security is enhanced, and security is further enhanced as the number of nodes 201 included in the block-chain network 110 increases.

The medical information providing unit 107 may encrypt the extracted medical information and provide it to the medical information requester.

Although the description herein has been made in some illustrative aspects, various modifications and variations can be made from the categories defined by the following claims, and the technical scope of the invention is defined in the following claims It should be decided by.

100: Medical Information System
101: Information storage unit
103: Access authority setting section
105:
107: Medical Information Offering
110: Block Chain Network
201: node

Claims (19)

A medical information providing system based on a block chain including a medical information system and a block chain network,
An information storage unit for storing medical information in the block-chain network;
The method of claim 1, further comprising: classifying a security level of each of the information included in the stored medical information based on a predetermined sensitivity index and setting an access right to set an access right of each of the information included in the stored medical information according to the classified security level part;
Comparing the input information of the medical information requester with the access rights set in the information included in the medical information requested to be provided, based on the input information of the medical information requester requesting the provision of the stored medical information,
When it is determined that the access right has access right to at least one of the information included in the medical information requested to be provided to the medical information requester, The medical information requesting entity determines the legal validity of the medical information requesting entity by substituting the information on the medical information requesting entity, An access right judging unit for requesting the patient to approve the provision of the medical information requested to be provided; And
When the medical information requestor is judged to be legally valid for the medical information provision request or when the approval of the provision of the medical information requested by the patient is received from the patient in response to the approval request, And a medical information providing unit for extracting the medical information requested to be provided from the medical information requesting unit and providing the medical information requestor with information having access right to the medical information requester from the information included in the extracted medical information, ; And
And a block-chain network for distributing and storing the medical information,
The medical information providing unit,
Generating a private key for the medical information requester and encrypting the information having the access right to the medical information requester from the information included in the extracted medical information using the generated private key, To the requester of the medical information,
The medical information is information on the identity of the patient,
The predetermined sensitivity index,
An index configured to classify the security level of each of the information included in the medical information according to a degree of sensitivity to identify the patient's identity from the medical information,
Wherein the generated private key comprises:
And a virtual wallet for the virtual money of the medical information requester, the wallet being provided to the medical information requester,
Medical information provision system based on block chain. The method according to claim 1,
The information storage unit stores,
Converting the medical information into a transaction, and storing the transformed transaction in the block-
Medical information provision system based on block chain. The method according to claim 1,
The medical information system includes:
If it is determined that the access right is not set to the medical information requested to be provided to the medical information requester,
Rejecting the request for providing the stored medical information,
Medical information provision system based on block chain. delete delete The method according to claim 1,
The medical information system includes:
Wherein the request for acceptance of the medical information is rejected when the rejection of the provision of the medical information requested to be provided is received from the patient,
Medical information provision system based on block chain. delete delete delete The method according to claim 1,
The information storage unit stores,
Generating a transaction related to the extracted medical information when the information included in the extracted medical information is provided to the medical information requester,
Storing the generated transaction in the block-chain network,
Medical information provision system based on block chain. The method according to claim 1,
Wherein the block-
Comprising a plurality of nodes,
Storing the medical information in each of the nodes,
Medical information provision system based on block chain. Storing medical information in a block chain network;
Classifying the security level of each of the information included in the stored medical information based on the predetermined sensitivity index and setting an access right of each of the information included in the stored medical information according to the classified security level;
Receiving input information of the medical information requestor requesting the medical information provision request and providing the stored medical information;
Comparing the input information of the received medical information requestor with the access right set in each of the information included in the medical information requested to be provided and determining whether the access right to the medical information requested to be provided is right ;
When the medical information requester is determined to have access right to at least one of the information included in the medical information requested to be provided, the input information of the medical information requester is substituted into the stored statutory data, Judging the legal validity of the request for providing medical information;
Requesting the patient included in the medical information requested to be provided, whether or not to accept the provision of the medical information requested to be provided, when it is determined that the medical information requestor has no legal validity for the medical information providing request;
When the medical information requestor is judged to be legally valid for the medical information provision request or when the approval of the provision of the medical information requested by the patient is received, Extracting medical information; And
And providing the medical information requester with information that is accessible to the medical information requester from the information included in the extracted medical information,
Wherein the providing of the medical information requestor comprises:
A step of generating a private key for the medical information requester;
Encrypting the information having the access right to the medical information requester among the information included in the extracted medical information using the generated private key; And
And providing the encrypted information to the medical information requester,
The medical information is information on the identity of the patient,
The predetermined sensitivity index,
An index configured to classify the security level of each of the information included in the medical information according to a degree of sensitivity to identify the patient's identity from the medical information,
Wherein the generated private key comprises:
And a virtual wallet for the virtual money of the medical information requester, the wallet being provided to the medical information requester,
A method of providing medical information based on block chains. delete 13. The method of claim 12,
Wherein the step of judging the legal validity comprises:
And inputting the input information of the medical information requester to pre-stored statutory data to determine the legal validity.
A method of providing medical information based on block chains. delete delete delete 13. The method of claim 12,
Wherein the storing step comprises:
Converting medical information input to the medical information system into a transaction; And
And storing the transformed transaction in a block-chain network.
A method of providing medical information based on block chains. 13. The method of claim 12,
After providing the medical information requested to be provided,
Generating a transaction for the provided medical information; And
And storing the generated transaction in a block-chain network.
A method of providing medical information based on block chains.

Images