Research On Patient Controllable Access Control And Privacy Protection For Electronic Medical Records

With the rapid development of modem information technology,the medical information system application becomes more and more common.And Electronic medical record(EMR)system is becoming more and more popular due to its efficient operation,convenient remote access and data integrity assurance which is beneficial to resource sharing and statistical analysis.The application of electronic medical records improves the communication among the medical institutions and provides many convenience and ways to access medical information.However the patient privacy and sensitive information are included in the electronic medical records.With the growing demand of protecting the privacy of personal information,it is a challenge to protect the electronic medical record data,so researchers need to control these information access.This paper based on electronic medical records in medical system,proposes anonymous security authentication mechanism which is based on smart card and bio-identification technology.At the same time,this paper analyses anonymous privacy protection method of record release process.The main research contents are as follows:From the view of electronic medical record system security,we propose an anonymous authentication model of electronic medical record system privacy protection.We proposed a multiple server anonymous authentication key agreement scheme based on smart cards and bio-identification technology and established a new privacy identity authentication model of multilevel grant access,allowing patients to set up a flexible support threshold judgment of access rights to the authorized doctor corresponding different tree,realizing patient demand for security and privacy of multistage protection.Our scheme not only supports multiple server environment but also achieves a variety of security requirements and can resist a variety of malicious attacks.Compared with previous research scheme,our scheme has a big advantage in performance.Based on the privacy protection in the electronic medical record data release,we design and implement an anonymous framework that sensitive attribute classification and generalization to implement patient controllable privacy protection method of electronic medical record.The paper finds the problem of previous electricity record protection which didn’t concern the patient autonomy sensitive information protection requirements.So we introduce the classification and generalization of sensitive attributes,while design and implement new privacy protection algorithms.The scheme we proposed meets the requirements of patient safety while satisfies date availability.The experiment results show that the new algorithm can assure the safety of sensitive information and can be used to meet the needs of the patient autonomy sensitive data privacy protection.The results on the information loss and implementation efficiency also reflect the superiority of our proposed scheme.