面向医疗数据安全存储的增强混合加密方法  

Hybrid Encryption Method for Secure Storage of Medical Data

作　　者：康海燕[1] 邓婕 KANG Haiyan;DENG Jie(School of Information Management,Beijing Information Science and Technology University,Beijing 100192,China;School of Computer Science,Beijing Information Science and Technology University,Beijing 100101,China)

机构地区：[1]北京信息科技大学信息管理学院,北京100192 [2]北京信息科技大学计算机学院,北京100101

出　　处：《北京理工大学学报》2021年第10期1058-1068,共11页Transactions of Beijing Institute of Technology

基　　金：国家教育部人文社科项目(20YJAZH046);国家自然科学基金资助项目(61370139);研究生课程建设项目(2020YKJ17)。

摘　　要：现实生活中病人的电子病历通常由就诊医院统一管理,其电子病历数据也都由医疗电子病历系统集中存储.这种集中式存储方式,在跨医院进行信息共享时会让病人的隐私信息存在泄露的风险.文中从信息安全中的关键技术—数字加密技术入手,分析了经典的对称加密算法(data encryption standard,DES)和非对称加密算法(Rivest-Shamir-Adleman,RSA),提出了面向医疗数据安全存储增强的混合加密方法.提出改进算法IBDES通过双重加密增强安全强度;提出改进算法EPNRSA在降低RSA加密时间复杂度的同时还保证了加密的安全质量;形成基于IBDES和EPNRSA的医疗数据增强混合加密方法.通过理论分析和仿真实验表明,该方法具有加解密效果好、执行速度快以及安全性高等优点,是面向医疗数据安全存储的一种理想方案.In real life,the patient's EMR(electronic medical record)is usually managed by the hospital,and the EMR data are also stored by the EMR management system.This kind of centralized storage method will make the patient's privacy information exist the risk of leakage when sharing information across hospitals.Starting with the key technology of information security-digital encryption technology,the classical symmetric encryption algorithm(data encryption standard,DES)and asymmetric encryption algorithm(Rivest-Shamir-Adleman,RSA)were analyzed,and a hybrid encryption scheme was proposed for medical data security storage,improving the security limitations in data encryption and proposes.Firstly,an improved algorithm IBDES was proposed to enhance the security strength by double encryption.Secondly,an improved algorithm EPNRSA was proposed to reduce the time complexity of RSA encryption and ensure the security quality of encryption.Thirdly,a hybrid encryption scheme based on IBDES and EPNRSA was formed.Finally,theoretical analysis and simulation experiments were carried out.The results show that the scheme can provide a better encryption and decryption effect,fast execution speed and high security,being an ideal method for medical data security storage.

关 键 词：医疗数据 数据加密 对称加密算法 非对称加密算法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]