KR20160145995A - Medial data encryption system, method for searching the medical data and medical data management system using the encryption system and the method - Google Patents

Abstract

A medical data management system comprising: a medical data encryption system for encrypting a medical data file and for storing and managing an encrypted medical data file; And a medical data retrieval system for retrieving the encrypted medical data files stored by the encryption system and decrypting and providing the retrieved medical data files. The encryption server of the medical data encryption system generates unique identification information (ID) corresponding to the patient information when the patient information on the medical data file and the medical data file is provided, And stores the ID and the encryption key in the key storage server so as to be mapped to the generated ID, generates the encrypted medical data file by encrypting the medical data file, generates the encryption key for the medical data, Stores the encrypted medical data file in the file storage, allocates a physical file name (PFN) for the storage location, creates an ID directory corresponding to the ID in the virtual file system, creates a virtual file name under the ID directory Maps the PFN to the LFN and stores the LFN in the metadata server so that the LFN is mapped to the patient ID.

Description

Technical Field [0001] The present invention relates to a medical data encryption system, a medical data retrieval method, and a medical data management system using the same,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a medical data management system, and more particularly, to a medical data management system for encrypting, storing and managing medical data, and for searching and verifying encrypted medical data files.

Medical data includes medical information and medical image data of each individual. It corresponds to very private personal information about each individual and further security is required for protecting personal information.

Recently, information and communication technology (IT) has been developed as a digital convergence technology for advanced information communication such as wired / wireless integration, communication broadcasting convergence and the like. As these technologies are applied in the medical field, telemedicine technology is being developed, utilization methods of medical information big data are being discussed in various ways, and a smart health system based on object internet is being developed and commercialized. Recently, data sharing technologies such as cloud computing have been rapidly developed, and various systems sharing individual medical data have been developed. As a result, not only individual medical information and medical data files are scattered on the network, but also can be smoothly transmitted or provided through the network.

In addition, medical information about each individual is required not only by the hospital but also by various related organizations such as the Ministry of Health and Welfare, the Health Insurance Management Corporation, and the Disease Control Headquarters. Therefore, since the medical information of each individual is transmitted to the hospital or a related institution through the network, it can be easily leaked.

However, as the medical information about a specific person is illegally searched or the medical information is illegally sold or traded, there are cases where the medical information system is hacked. Therefore, the security and privacy of personal information are more demanded.

Accordingly, in order to prevent the unauthorized third party from searching or confirming the individual's medical data, and even if it is hacked, it is difficult to make the confirmation, thereby further enhancing the security. The present invention provides a platform for encrypting, storing and managing each medical data .

Korean Patent No. 10-1022213

In order to solve the above problems, it is an object of the present invention to provide a medical data management system that encrypts, stores and manages medical data, and enables authorized users to search and confirm encrypted medical data files.

It is another object of the present invention to provide a medical data encryption system that encrypts, stores, and manages medical data.

It is still another object of the present invention to provide a medical data retrieval system and method for retrieving, decrypting, and verifying stored medical data files encrypted by the above-described medical data encryption system.

According to an aspect of the present invention, there is provided a medical data management system including: a medical data encryption system for encrypting medical data and storing and managing encrypted medical data; And a medical data retrieval system for retrieving the encrypted medical data files stored by the encryption system and decrypting and providing the retrieved medical data files.

In a medical data management system according to the above-described characteristic, the medical data encryption system includes: a file storage for storing encrypted medical data files; A plurality of key storage servers for respectively storing and managing a plurality of cipher keys used for encrypting medical data files stored in the file storage; A patient metadata server that stores and manages patient identification information (ID), patient information corresponding to each unique identification information (ID), and virtual file name (LFN) for medical data for each patient; A virtual file system for managing encrypted medical data files stored in the file storage; And an encryption server for receiving, receiving, encrypting, storing, and managing patient data for the medical data from outside,

The encryption server generates unique identification information (ID) corresponding to the patient information, stores the ID and the patient information in the metadata server when the patient information on the medical data and the medical data is provided, To generate an encrypted medical data file, generate a plurality of cryptographic keys, and divide the ID and the plurality of cryptographic keys into the plurality of key storage servers so as to be mapped to the generated IDs Storing an encrypted medical data file in the file storage, allocating a PFN according to the stored location, creating an ID directory corresponding to the ID in the virtual file system, Generates and stores a file name (LFN), maps the PFN to the LFN and stores the file name On it is preferred to store the LFN on the position corresponding to the ID.

The medical data management system according to any preceding claim, wherein the encryption server of the medical data encryption system encrypts the medical data file using a secret sharing scheme, and encrypts the encrypted medical data file It is preferable that the encryption keys are generated and stored in a plurality of key storage servers and managed respectively.

In the medical data management system according to the above-described characteristic, the retrieval program included in the medical data management system may be configured such that: (a) when a retrieval keyword is input from the outside, And obtaining a virtual file name (LFN) for the medical data; (b) accessing an ID directory of the virtual file system to obtain a physical file name (PFN) mapped to the virtual file name (LFN); (c) accessing a plurality of key storage servers to obtain all of the plurality of cryptographic keys corresponding to the ID; (d) accessing the file storage to obtain encrypted medical data stored at a location corresponding to the physical file name; (e) decrypting the obtained encrypted medical data using the obtained plurality of cipher keys.

The medical data management system according to the present invention is a platform that is indispensable in a situation where medical data files including medical image data such as a CT image, an MRI image, and an XRay image are mass produced, Encrypted and stored and managed, and only an authenticated user accesses and searches for and decodes the medical data to receive the medical data.

In addition, since the medical data management system according to the present invention stores and manages medical data in an encrypted state, even if it is hacked or illegally leaked, it can not be decrypted if any of the plurality of cipher keys is absent, do.

In addition, since the medical data management system according to the present invention encrypts using the Shamir secret sharing algorithm, encrypted medical data can not be decrypted unless a plurality of cipher keys are obtained.

1 is a block diagram of a medical data encryption system according to the present invention.
FIG. 2 is a flowchart sequentially illustrating the operation of a trigger process executed in an encryption server of the medical data encryption system according to the present invention.
3 is a conceptual diagram illustrating an operation of the medical data retrieval system according to the present invention.
FIG. 4 is a flowchart sequentially illustrating a method of retrieving and providing decoded medical data by the retrieval software of the medical data retrieval system according to the present invention.

A medical data management system according to the present invention comprises a medical data encryption system and a medical data retrieval system. The medical data encryption system according to the present invention encrypts, stores, and manages medical data, and the medical data retrieval system according to the present invention is a system in which the medical data files stored and managed by the encryption system are transmitted to an authorized user (e.g., And to receive the retrieved medical data files. More specifically, the medical data encryption system according to the present invention receives and encrypts medical data generated from various medical devices, stores the generated cipher keys in a key storage server, And a system such as a file storage, a virtual file system, and a metadata server, which are platforms such as cloud computing, for storage and management.

Meanwhile, the medical data retrieval system according to the present invention enables retrieval and verification of encrypted medical data through client software, and decrypts and provides the retrieved data.

The system according to the present invention encrypts the medical data using the encryption technique using the SSSS key partitioning library according to the Shamir's Secret Sharing Scheme (SSSS) algorithm and encrypts the encrypted medical data file Encryption keys are generated and stored in a plurality of key storage servers, respectively, thereby providing strong security, and even if hacked, it is impossible to decrypt the data, thereby strongly protecting information on personal medical data.

<Medical data management system>

A medical data management system according to a preferred embodiment of the present invention includes a medical data encryption system for encrypting and storing medical data and a medical data encryption system for retrieving medical data files encrypted by the medical data encryption system and decrypting the retrieved medical data files And a medical data retrieval system. Hereinafter, the medical data encryption system and the medical data retrieval system will be described, respectively.

<Medical data encryption system>

Hereinafter, a medical data encryption system of a medical data management system according to a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a block diagram of a medical data encryption system 1 according to a preferred embodiment of the present invention.

The medical data encryption system 1 according to the present invention includes an encryption server 20 for receiving and storing patient information on medical data files and medical data from an external server such as the DICOM server 10, A patient metadata server 22 for storing and managing metadata for retrieving a medical data file according to patient information, a file storage 28 for storing an encrypted medical data file, And a virtual file system 24 that manages the files stored in the file storage in cooperation with the metadata server to encrypt and store and manage the medical data files . Meanwhile, the system 1 according to the present invention may further include a management operation server 29 that can authenticate a user or manage a policy regarding authentication.

Hereinafter, each of the above-mentioned constituent elements will be described in detail.

Medical data files herein include image data generated from medical devices such as CT, MRI, XRAY, and the like. Meanwhile, these medical data files are generated according to the standard of Digital Imaging and Communications in Medicine (DICOM), and can be provided mainly to the encryption server according to the present invention through the DICOM server. DICOM is a generic term for a number of standards used in digital imaging and communication in medical devices and was presented at a joint committee formed by the American Radiological Society (ACR) and the American Electrical Manufacturers Association (NEMA).

The patient metadata server 22 is a server that stores patient identification information (ID), patient basic information corresponding to each ID, and information on the medical data file. Wherein the information on the medical data file includes a logical file name (LFN) for the medical data file encrypted by the encryption server, and the virtual file name (LFN) And / or information on the region of the medical data to be photographed.

A plurality of cryptographic keys generated when the medical data is encrypted by the cryptographic server are divided and stored in the plurality of key storage servers 26, respectively. In particular, it is preferred that the encryption server according to the present invention encrypts the medical data files using the SSSS encryption technique, thus encrypting the medical data file using the SSSS library, generating a plurality of encryption keys, To the plurality of key server servers 26, and stores and manages them. For example, when the key storage server is composed of three key storage, (1) https://example.net:9001/1/MedicalData-Key-service/services/Key (2) https: // example.net:9001/2/MedicalData-Key-service/services/Key (3) https://example.net:9001/3/MedicalData-Key-service/services/Key.

Shamir's Secret Sharing Scheme (SSSS) is a secret sharing algorithm created by Adi Shamir. It divides a security key created by creating a plurality of security keys, that is, a secret key, into a key storage server at the time of data encryption, it is possible to decrypt the data even if the cryptographic key is lost, because the data can be reconstructed again as a part of the key (key). Since the data can be decrypted through the key combination of the key, not one key, do.

The virtual file system 24 is provided with an ID directory for each patient and has a physical file name (PFN) mapped to the LFN and LFN for the patient's medical data corresponding to the ID in each ID directory, ) Is stored and managed. Here, the PFN includes address information (SURL) and globally unique identifier (GUID) of the location where the encrypted medical data file is actually stored in the file storage. For example, the GUID can be 'f81d4fae-7dec-11d0-a765-00a0c91e6bf6', and the PFN can be represented as 'ftp://example_storage.net/medical_data/f81d4fae-7dec-11d0-a765-00a0c91e6bf6' , LFN can be expressed as '/medical_data/patent_1/MRI_20150601.tar.gz'.

The virtual file system is a system that enables management such as storing, copying, modifying, and deleting files stored in file storage, and is composed of a DBMS (Database Management System) such as MySQL, And the PFN so that encrypted medical data files can be downloaded from file storage or downloaded and stored.

The file storage 28 stores the medical data files encrypted by the encryption server, and each encrypted medical data file is stored in a physical file name (PFN) generated by the encryption server And stored and managed in corresponding locations. The physical file name (PFN) includes address information (SURL) for the actual storage location of the file storage and a unique file identifier for the file.

The management and operation server 29 performs authentication according to a predetermined policy for a user connected to the encryption server or manages policies related to authentication.

The encryption server 22 has a trigger process that is automatically executed when a preset event occurs and the processor receives the medical data file and patient information from an external medical data management server It runs automatically when an event occurs. There may be a variety of external medical data management servers that provide medical data files and patient information, and in particular, a DICOM server may be one. When the DICOM server stores the medical data files and the conversion to the compressed file is completed, the agent program installed on the DICOM server transmits the compressed medical data file and the patient information to the encryption server.

FIG. 2 is a flowchart sequentially illustrating the operation of a trigger process executed in an encryption server of the medical data encryption system according to the present invention.

Referring to FIG. 2, when the trigger process of the encryption server 22 receives the medical data file and patient information therefrom (step 100), it generates unique identification information (ID) for the patient, Patient information is stored to correspond to the generated ID (step 110). Next, the medical data is encrypted using a predetermined encryption algorithm and a plurality of cryptographic keys are generated (step 120).

Next, the ID and the plurality of cipher keys are divided and stored so as to correspond to the IDs in the plurality of key storage servers (step 130).

Next, the encryption server 22 stores the encrypted medical data file in the file storage and allocates the PFN according to the stored location (step 140).

Next, the encryption server 22 generates an ID directory using the ID in the virtual file system, generates a file name corresponding to the LFN, stores the LFN under the ID directory of the virtual file system, adds the PFN (Step 150). Here, the LFN includes a virtual file name and a location, and the PFN indicates a storage location of an actual file including an address (SURL) and a unique file identifier for the storage location of the file storage.

Next, the LFN is stored in a position corresponding to the ID in the patient metadata server (step 160).

Through this process, the encryption server encrypts and stores the medical data file in the file storage, manages the location information of the encrypted medical data file stored in the virtual file system, and stores the medical data file in a plurality of key storage servers Stores and manages a plurality of cipher keys that can be decrypted, and stores and manages metadata of patient information and medical data information for providing a search service to the patient metadata server.

<Medical data retrieval system>

Hereinafter, the medical data retrieval system of the medical data management system of the present invention will be described in detail. The medical data retrieval system according to the present invention is implemented by retrieval software installed and operated in a user PC, a portable terminal, etc., and the retrieval software retrieves a medical data file encrypted by the medical data encryption system, decrypts the retrieved file To the user.

FIG. 3 conceptually illustrates the operation of the medical data retrieval system according to the present invention. FIG. 4 illustrates a method of retrieving and providing decoded medical data by the retrieval software of the medical data retrieval system according to the present invention. And Fig.

Referring to FIG. 4, authentication is performed for a connected user through a predetermined method. When the authentication is completed (step 200), retrieval of medical data is enabled. If the authentication is not authenticated, the procedure is terminated. It is apparent to those skilled in the art that the technologies related to the authentication method for the connected user are already well known and can be implemented by selecting one of various well-known technologies. On the other hand, in the present specification, a user accessing the medical data retrieval system may be the physician of the hospital where the present system is installed or the responsible person of the related institution, and may be the patient himself depending on the situation.

When a search keyword related to a patient or the like to be searched is input from a user whose authentication has been completed (step 210), the terminal accesses the patient metadata server using the input search keyword, Obtain an LFN for the file (step 220).

Next, a PFN mapped to the retrieved LFN is obtained in the virtual file system using the retrieved LFN (step 230).

Next, a plurality of cryptographic keys corresponding to the ID are obtained from the key storage server using the searched ID (step 240).

Next, an encrypted medical data file stored in the file storage is obtained using the PFN (step 250), and the encrypted medical data file is decrypted using the obtained encryption keys (step 260).

Next, the decrypted medical data file is displayed on the screen, and the decrypted medical data file is provided in an output form according to the request of the user. If the user requests output to the printer, the medical data file decrypted by the printer connected to the retrieval system is output. If the user requests the download of the file, the decrypted medical data file can be downloaded to the predetermined data storage location will be.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, It will be understood that various changes and modifications may be made without departing from the spirit and scope of the invention. It is to be understood that the present invention may be embodied in many other specific forms without departing from the spirit or essential characteristics thereof.

The medical data management system according to the present invention can be widely used in the medical field.

1: Medical data encryption system
10: DICOM Server
20: Encryption Server
22: patient metadata server
28: File storage
26: Keystore server
24: Virtual File System

Claims (12)

File storage for storing encrypted medical data files;
A key storage server for storing and managing an encryption key for the medical data file stored in the file storage;
A patient metadata server that stores and manages patient identification information (ID), patient information corresponding to each unique identification information (ID), and virtual file name (LFN) for medical data for each patient;
A virtual file system storing a virtual file name (LFN) and a physical file name (PFN) mapped thereto to manage an encrypted medical data file stored in the file storage;
And an encryption server for receiving, encrypting, storing, and managing patient information on the medical data file and the medical data file from the outside,
The encryption server includes:
Once patient information is provided for the medical data file and the medical data file,
Generates unique identification information (ID) corresponding to the patient information,
The patient ID and patient information are stored in the patient metadata server,
Encrypting the medical data using a predetermined encryption algorithm to generate encrypted medical data,
Generating an encryption key for the medical data file using the encryption algorithm, storing the ID and the encryption key in the key storage server to be mapped to the ID,
Storing the encrypted medical data file in the file storage, allocating a physical file name (PFN) according to the stored location,
Creating an ID directory corresponding to the ID in the virtual file system, generating a virtual file name (LFN) under the ID directory, mapping and storing PFN in the LFN,
Wherein the virtual file name (LFN) is stored in the metadata server so as to be mapped to the ID. The system of claim 1, wherein the physical file name (PFN) comprises address information (SURL) and a unique file identifier (GUID) for the actual location of the file storage where the encrypted medical data file is stored. . The encryption server according to claim 1, wherein the encryption server encrypts the medical data file using a secret sharing scheme, generates a plurality of encryption keys for the medical data, and divides the encryption key into a plurality of key storage servers And managing the medical data. The medical data encryption system according to claim 1, wherein the medical data file is a medical image data file. A medical data retrieval method for retrieving and providing an encrypted medical data file for an arbitrary patient,
(a) acquiring a virtual file name (LFN) for an ID and medical data corresponding to a search keyword by accessing a patient metadata server when a search keyword is inputted from the outside;
(b) accessing an ID directory of the virtual file system to obtain a physical file name (PFN) mapped to the virtual file name (LFN);
(c) connecting to the key storage server and obtaining an encryption key corresponding to the ID;
(d) accessing the file storage to obtain an encrypted medical data file stored at a location corresponding to the physical file name (PFN);
(e) decrypting the obtained encrypted medical data file using the obtained encryption key;
And a medical data retrieval method. The method of claim 5, wherein the step (c) further comprises: obtaining a plurality of cryptographic keys corresponding to the IDs by accessing a plurality of key storage servers,
Wherein the step (e) is performed using the plurality of cipher keys in accordance with a secret sharing algorithm. 6. The method of claim 5, wherein the virtual file name includes information on medical data. 6. The method according to claim 5, wherein the physical file name includes address information on an actual location of a file storage where an encrypted medical data file is stored and a unique file identifier. A medical data management system comprising:
A medical data encryption system for encrypting the medical data file and for storing and managing the encrypted medical data file; And
And a medical data retrieval system for retrieving the encrypted medical data files stored by the encryption system and for decrypting and providing the retrieved medical data files,
The medical data encryption system includes:
File storage for storing encrypted medical data files;
A key storage server for storing and managing an encryption key for the medical data file stored in the file storage;
A metadata server for storing and managing patient information corresponding to the patient's unique identification information (ID), each unique identification information (ID), and a virtual file name (LFN) for the medical data file for each patient;
A virtual file system for managing encrypted medical data files stored in the file storage; And
And an encryption server for receiving, encrypting, storing, and managing patient information on the medical data file and the medical data file from the outside,
The encryption server includes:
Once patient information is provided for the medical data file and the medical data file,
Generates unique identification information (ID) corresponding to the patient information,
The patient ID and patient information are stored in the patient metadata server,
Encrypting the medical data file using a predetermined encryption algorithm to generate an encrypted medical data file,
Generating an encryption key for the medical data using the encryption algorithm, storing the ID and the encryption key in the key storage server to be mapped to the ID,
Storing the encrypted medical data file in the file storage, assigning a physical file name (PFN) for the stored location,
Generating an ID directory corresponding to the ID in the virtual file system, generating a virtual file name (LFN) under the ID directory of the virtual file system, mapping and storing the PFN in the LFN,
Wherein the virtual file name is stored in the patient metadata server so as to be mapped to the ID. The medical data management system according to claim 9, wherein the physical file name (PFN) includes address information (SURL) and a unique file identifier (GUID) for an actual location of file storage for storing encrypted medical data . The method of claim 9, wherein the encryption server encrypts the medical data using a secret sharing scheme, generates a plurality of cipher keys, divides the cipher keys into a plurality of key storage servers, The medical data management system comprising: 10. The medical data search system according to claim 9, wherein the medical data search system provides a search program installed and driven in a client terminal,
(a) acquiring a virtual file name (LFN) for an ID and medical data corresponding to a search keyword by accessing a patient metadata server when a search keyword is inputted from the outside;
(b) accessing an ID directory of the virtual file system to obtain a physical file name (PFN) mapped to the virtual file name (LFN);
(c) connecting to the key storage server and obtaining an encryption key corresponding to the ID;
(d) accessing the file storage to obtain an encrypted medical data file stored at a location corresponding to the physical file name;
(e) decrypting the obtained encrypted medical data file using the obtained encryption key;
The medical data management system comprising:

Images