面向医疗健康数据的隐私增强型多维度融合数据标识方法

漆俊峰; 夏琦; 马英; 李书睿; 管庆旭; 夏虎; 高建彬

doi:10.11959/j.issn.2096-0271.BDR26208

Chinese

您当前的位置：

首页 >

文章列表页 >

面向医疗健康数据的隐私增强型多维度融合数据标识方法

应用 | 更新时间：2026-09-24

- 面向医疗健康数据的隐私增强型多维度融合数据标识方法
- A Privacy-Enhanced Multi-Dimensional Fusion Data Identification Method for Healthcare Data
- 大数据 2026年
- 作者机构：
  
  1.电子科技大学计算机科学与工程学院，四川成都 610054
  2.国家信息中心，北京 100045
  3.四川省大数据中心，四川成都 610041
  4.Provincial Big Data Center, Chengdu 610041, China
- 作者简介：
  
  夏琦，女,博士,教授,博士生导师,CCF杰出会员,主要研究领域为网络数据安全,区块链理论及应用。
- 基金信息：
- DOI：10.11959/j.issn.2096-0271.BDR26208
  中图分类号： TP309
- 收稿：2026-05-26，
  
  修回：2026-06-19，
  
  录用：2026-09-24，
- 稿件说明：
移动端阅览
漆俊峰, 夏琦, 马英, 等. 面向医疗健康数据的隐私增强型多维度融合数据标识方法[J/OL]. 大数据, 2026.

QI Junfeng, XIA Qi, MA ying, et al. A Privacy-Enhanced Multi-Dimensional Fusion Data Identification Method for Healthcare Data[J/OL]. Big Data Research, 2026.
漆俊峰, 夏琦, 马英, 等. 面向医疗健康数据的隐私增强型多维度融合数据标识方法[J/OL]. 大数据, 2026. DOI： 10.11959/j.issn.2096-0271.BDR26208.

QI Junfeng, XIA Qi, MA ying, et al. A Privacy-Enhanced Multi-Dimensional Fusion Data Identification Method for Healthcare Data[J/OL]. Big Data Research, 2026. DOI： 10.11959/j.issn.2096-0271.BDR26208.

摘要

针对区域医疗联合体跨院数据共享场景中，现有医疗数据标识存在维度单一、隐私保护与数据可用性矛盾、全生命周期安全管控缺失、行业合规适配性不足的问题，提出了一种隐私增强型多维度融合医疗数据标识方法。该方法融合分级分类、隐私保护、溯源管控、权限管控四大核心能力，设计了一体化的定长标识结构；基于国密SM9标识密码算法构建双假名可关联机制，实现了患者身份匿名前提下的跨院诊疗数据的无损关联；结合差分隐私、SM3哈希链与密文策略属性基加密，实现了敏感属性脱敏、全生命周期防篡改溯源与细粒度权限管控。构建了包含诚实但好奇攻击者与恶意攻击者的多攻击者安全模型，完成了方案的安全性归约证明。实验结果表明，在Intel Core i7-9750H处理器环境下，标识生成平均耗时15.310ms，方案在满足安全性需求的同时具备工程可行性。经与现有方案对比分析，该方案在匿名性、抗合谋攻击、国密适配等方面具有显著优势，符合《数据安全法》《个人信息保护法》及医疗数据安全相关国家标准。

Abstract

In the context of cross-hospital data sharing within regional medical consortia

existing medical data identifier schemes exhibit several critical limitations: single-dimensional structures

the inherent trade-off between privacy and data utility

a lack of lifecycle security governance

and inadequate compliance with industry regulations. To address these challenges

a privacy-enhanced

multi-dimensional fused medical data identifier method is proposed. The scheme integrates four core capabilities—data classification

privacy protection

traceability

and access control—into a unified

fixed-length identifier structure. Leveraging the national cryptographic SM9 identity-based algorithm

we construct a linkable dual-pseudonym mechanism that enables lossless linkage of cross-institutional health records while preserving patient anonymity. By synergistically combining differential privacy

an SM3-based hash chain

and Ciphertext-Policy Attribute-Based Encryption (CP-ABE)

the scheme achieves sensitive attribute obfuscation

tamper-evident lifecycle traceability

and fine-grained access control. A multi-attacker security model

including honest-but-curious and malicious adversaries is established

and a formal security proof for the scheme via security reduction is provided. Experimental results

conducted on an Intel Core i7-9750H processor

show an average identifier generation time of 15.310 ms

demonstrating the scheme's engineering feasibility while meeting stringent security requirements. A comparative analysis reveals that our approach offers significant advantages in anonymity

collusion resistance

and compatibility with national cryptographic standards. The scheme is designed to be compliant with China's Data Security Law

Personal Information Protection Law

and relevant national standards for medical data security.

关键词

Keywords

references

洪建 , 李锐 , 徐王权 . 医疗健康数据隐私保护技术综述 [J ] . 中国数字医学 , 2015 , 10 ( 11 ): 4 .

Hong J , Li R , Xu W . Overview of Healthcare Data Privacy Protection Technology [J ] . Chinese Journal of Digital Medicine , 2015 , 10 ( 11 ): 4 .

俞惠芳 , 李顺凯 . 基于国密SM9的去中心化跨链医疗数据共享方案 [J ] . 信息安全研究 , 2025 , 11 ( 9 ): 832 - 839 .

Yu H , Li S . SM9-based Decentration Cross-chain Medical Data Sharing Scheme [J ] . Information Security Research , 2025 , 11 ( 9 ): 832 - 839 .

国家卫生健康委员会 . 国卫规划发〔2018〕23号 . 国家健康医疗大数据标准、安全和服务管理办法（试行） [S ] . ( 2018 ).

National Health Commission . Guo Wei Gui Hua Fa [2018] No. 23. Measures for the Management of National Health and Medical Big Data Standards, Security and Services (Trial) [S ] . 2018 .

祝烈煌 , 高峰 , 沈蒙 , 等 . 区块链隐私保护研究综述 [J ] . 计算机研究与发展 , 2017 , 54 ( 10 ): 2170 - 2186 .

Zhu L , Gao F , Shen M , et al . Survey on Privacy Preserving Techniques for Blockchain Technology [J ] . Journal of Computer Research and Development , 2017 , 54 ( 10 ): 2170 - 2186 .

中国国家标准化管理委员会 . GB/T 35273-2020 . 信息安全技术-个人信息安全规范 . [S ] . 2020 .

Standardization Administration of China . GB/T 35273-2020 Information security technology—Personal information security specification [S ] . 2020 .

赖建昌 , 黄欣沂 , 何德彪 , 等 . 基于商用密码SM9的高效分层标识加密 [J ] . 中国科学: 信息科学 , 2023 , 53 ( 5 ): 921 - 934 .

Lai J , Huang X , He D , et al . An efficient hierarchical identity-based encryption based on SM9 [J ] . Science China Information Sciences , 2023 , 53 ( 5 ): 921 - 934 .

刘行，明洋，王晨豪，等 . 基于SM9的可验证公平标识广播代理重加密 [J ] . 计算机学报， 2025 ， 48 ( 3 ): 721 - 737 .

Liu X , Ming Y , Wang C , et al . Verifiable and Fair Identity-Based Broadcast Proxy Re-Encryption Based on SM9 [J ] . Chinese Journal of Computers , 2025 , 48 ( 3 ): 721 - 737 .

Shi Y , Ma Z , Qin R , et al . Implementation of an Attribute-Based Encryption Scheme Based on SM9 [J ] . Applied Sciences , 2019 , 9 : 3074 .

Hoang H D , Duy P T , Tien N T , et al . A Blockchain-based approach and Attribute-based Encryption for Healthcare Record Data Exchange [C ] // 2022 RIVF International Conference on Computing and Communication Technologies (RIVF) , Ho Chi Minh City : IEEE , 2022 : 65 - 70 .

Chen Y , Meng L , Zhou H , et al . A Blockchain-Based Medical Data Sharing Mechanism with Attribute-Based Access Control and Privacy Protection [J ] . Wireless Communications and Mobile Computing , 2021 , 6685762 .

Liu J , Wu M , Sun R , et al . BMDS: A Blockchain-based Medical Data Sharing Scheme with Attribute-Based Searchable Encryption [C ] // ICC 2021 - IEEE International Conference on Communications , Montreal : IEEE , 2021 : 1 - 6 .

Yan J , Xiong S , Chen J , et al . MediCrypt-DDT: Cross-Domain Distributed Dynamic Threshold Attribute-Based Encryption for Medical Healthcare System [J ] . IEEE Internet of Things Journal , 2026 , 13 ( 3 ): 4644 - 4652 .

李聪，梁俊凯，丁煜甲，等 . 基于SM9的分层标识广播内积函数加密 [J ] . 中国科学：信息科学， 2024 ， 54 ( 6 ): 1400 - 1418 .

Li C , Liang J , Ding Y , et al . Hierarchical identity-based broadcast inner product functional encryption based on SM9 [J ] . Science China Information Sciences , 2024 , 54 ( 6 ): 1400 - 1418 .

王昀 , 郭毅峰 , 苏晓亮 , 等 . 政务数据标识技术研究进展及下一代政务数据标识体系 [J ] . 大数据 , 2024 , 10 ( 3 ): 3 - 15 .

Yun WANG , Yifeng GUO , Xiaoliang SU , et al . Research progress of government data identification technology and the next generation government data identification system [J ] . Big data research , 2024 , 10 ( 3 ): 3 - 15 .

袁峰 , 程朝辉 . SM9标识密码算法综述 [J ] . 信息安全研究 , 2016 , 2 ( 11 ): 1008 - 1027 .

Yuan F , Cheng Z . Overview on SM9 Identity-Based Cryptographic Algorithm [J ] . Information Security Research , 2016 , 2 ( 11 ): 1008 - 1027 .

白伍彤 , 陈兰香 . 基于差分隐私的健康医疗数据保护方案 [J ] . 计算机应用与软件 , 2022 ( 008 ): 039 .

Bai W , Chen L . HEALTHCARE DATA PROTECTION SCHEME BASED ON DIFFERENTIAL PRIVACY [J ] . Computer Applications and Software , 2022 ( 8 ): 039 .

周权 , 陈民辉 , 卫凯俊 , 等 . 基于SM9的属性加密的区块链访问控制方案 [J ] . 信息网络安全 , 2023 , 23 ( 9 ): 37 - 46 .

Zhou Q , Chen M , Wei K , et al . Blockchain Access Control Scheme with SM9-Based Attribute Encryption [J ] . Information Network Security , 2023 , 23 ( 9 ): 37 - 46 .

国家密码管理局 . GM/T 0004-2012 SM3密码杂凑算法 [S ] . 2012 .

State Cryptography Administration . GM/T 0004-2012 SM3 cryptographic hash algorithm [S ] . 2012 .

国家密码管理局 . GM/T 0044-2016 SM9标识密码算法 [S ] . 2016 .

State Cryptography Administration . GM/T 0044-2016 SM9 identity-based cryptographic algorithm [S ] . 2016 .

Peng G , Zhang A , Lin X . Patient-Centric Fine-Grained Access Control for Electronic Medical Record Sharing With Security via Dual-Blockchain [J ] . IEEE Transactions on Network Science and Engineering , 2023 , 10 ( 6 ): 3908 - 3921 .

Ayaz M , Pasha M , Alzahrani M , et al . The Fast Health Interoperability Resources (FHIR) standard: Systematic literature review of implementations, applications, challenges and opportunities [J ] . JMIR Medical Informatics , 2021 , 9 ( 7 ): e21929 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

政务数据标识技术研究进展及下一代政务数据标识体系

基于区块链的感知数据交易隐私保护方案

联邦元学习综述

基于区块链与函数加密的隐私数据安全共享模型研究

联邦学习攻击与防御综述