Research Of Secure Sharing And Privacy Protection Of Electronic Medical Records Based On Embedded Trusted System

Regional sharing and privacy protection in electronic medical records (EMR) system are the main problems that the system must face in the development. The current solution to these two questions in regional EMR system still exists the following deficiencies: (1) System and application execution environment is not reliable, and very vulnerable to leak the information of EMR in the security sharing process; (2) The two sides shared have no effective means of authentication, and can not establish a secure communication environment; (3) The method of grading privacy protection that EMR system commonly uses is difficulties in defining level of privacy and the excessive scope of the privacy.This paper studies these issues in depth and proposes a solution, achieves the following results:(1) Comprehensive analyzes the existing secure sharing program of EMR, summarizes the security risks in the secure sharing process of existing programs and proposes the program that uses the Trusted Computing technology to ensure the secure sharing of EMR.(2) For ordinary computer can not build trusted computing platform, the embedded trusted system based on the USB interface is used to build trusted computing platform of the electronic medical record security sharing system. Then the paper describes the detail of the platform structure and the establishment of a trusted environment and the method of authentication based on trusted computing and key management.(3) Based on the analysis of the deficiency of the existing grading privacy protection, this paper proposes a badge-based access control model and solution for the protection of privacy of electronic medical records based on the access control model. By the solution patient can control their own privacy of the electronic medical record and decide who can access their own records.(4) Based on the above research, the prototype of electronic medical record security sharing and privacy protection system based on the embedded trusted system is proposed, in this system electronic medical records could be quickly and securely shared and be used under control, and the protection of privacy could be achieved in this system. Then the paper offers details of the system structure and sharing process and function of each module.