@umacloud/knowledge 1.0.1

package/industries/healthcare/healthcare-complete.md

@@ -0,0 +1,452 @@
+---
+id: healthcare-complete
+title: 医疗健康系统完整指南
+domain: industries
+category: healthcare
+difficulty: intermediate
+tags: [complete, healthcare, hipaa合规, industries, 参考资料, 学习路径, 安全最佳实践, 核心领域]
+quality_score: 70
+last_updated: 2026-06-15
+---
+# 医疗健康系统完整指南
+
+## 概述
+医疗健康系统涉及患者管理、电子病历(EMR)、医疗影像、远程医疗、药物管理等。本指南覆盖医疗IT系统架构、合规要求(HIPAA)、数据安全。
+
+## 核心领域
+
+### 1. 电子病历(EMR)
+
+**数据模型**:
+```python
+from datetime import datetime
+from typing import Optional, List
+from pydantic import BaseModel
+from enum import Enum
+
+class Gender(str, Enum):
+    MALE = "male"
+    FEMALE = "female"
+    OTHER = "other"
+
+class BloodType(str, Enum):
+    A_POSITIVE = "A+"
+    A_NEGATIVE = "A-"
+    B_POSITIVE = "B+"
+    B_NEGATIVE = "B-"
+    O_POSITIVE = "O+"
+    O_NEGATIVE = "O-"
+    AB_POSITIVE = "AB+"
+    AB_NEGATIVE = "AB-"
+
+class Patient(BaseModel):
+    id: int
+    mrn: str  # Medical Record Number
+    first_name: str
+    last_name: str
+    date_of_birth: datetime
+    gender: Gender
+    blood_type: Optional[BloodType]
+    phone: str
+    email: Optional[str]
+    address: dict
+    emergency_contact: dict
+    insurance: Optional[dict]
+    created_at: datetime
+    updated_at: datetime
+
+class MedicalRecord(BaseModel):
+    id: int
+    patient_id: int
+    visit_date: datetime
+    doctor_id: int
+    chief_complaint: str
+    diagnosis: str
+    treatment: str
+    prescriptions: List[dict]
+    lab_results: List[dict]
+    notes: Optional[str]
+    attachments: List[str]  # 影像、报告等
+```
+
+### 2. 医疗影像系统(DICOM)
+
+**DICOM标准**:
+```python
+import pydicom
+from PIL import Image
+import numpy as np
+
+class DICOMHandler:
+    def __init__(self, file_path: str):
+        self.dicom = pydicom.dcmread(file_path)
+    
+    def get_patient_info(self) -> dict:
+        return {
+            "name": str(self.dicom.PatientName),
+            "id": str(self.dicom.PatientID),
+            "birth_date": str(self.dicom.PatientBirthDate)
+        }
+    
+    def get_image(self) -> np.ndarray:
+        """提取像素数据"""
+        pixel_array = self.dicom.pixel_array
+        return pixel_array
+    
+    def save_as_png(self, output_path: str):
+        """转换为PNG"""
+        pixel_array = self.dicom.pixel_array
+        # 归一化
+        pixel_array = (pixel_array - pixel_array.min()) / (pixel_array.max() - pixel_array.min()) * 255
+        img = Image.fromarray(pixel_array.astype(np.uint8))
+        img.save(output_path)
+    
+    def anonymize(self, output_path: str):
+        """匿名化处理"""
+        # 移除敏感信息
+        self.dicom.PatientName = "ANONYMOUS"
+        self.dicom.PatientID = "000000"
+        self.dicom.PatientBirthDate = "19000101"
+        
+        self.dicom.save_as(output_path)
+```
+
+### 3. 远程医疗系统
+
+**视频咨询API**:
+```python
+from fastapi import FastAPI, Depends
+from twilio.jwt.access_token import AccessToken
+from twilio.jwt.access_token.grants import VideoGrant
+
+app = FastAPI()
+
+@app.post("/telemedicine/rooms")
+async def create_room(
+    consultation_id: int,
+    current_user: User = Depends(get_current_user)
+):
+    # 1. 创建视频房间
+    room_name = f"consultation_{consultation_id}"
+    
+    # 2. 生成访问Token
+    token = AccessToken(
+        TWILIO_ACCOUNT_SID,
+        TWILIO_API_KEY,
+        TWILIO_API_SECRET,
+        identity=current_user.id
+    )
+    
+    video_grant = VideoGrant(room=room_name)
+    token.add_grant(video_grant)
+    
+    return {
+        "room_name": room_name,
+        "token": token.to_jwt()
+    }
+```
+
+### 4. 药物管理
+
+**处方系统**:
+```python
+from datetime import datetime, timedelta
+
+class Prescription(BaseModel):
+    id: int
+    patient_id: int
+    doctor_id: int
+    medications: List[Medication]
+    issued_at: datetime
+    valid_until: datetime
+    status: str  # active, expired, fulfilled
+
+class Medication(BaseModel):
+    name: str
+    dosage: str  # e.g., "500mg"
+    frequency: str  # e.g., "3 times daily"
+    duration: int  # days
+    instructions: Optional[str]
+
+class PrescriptionService:
+    def __init__(self, db: AsyncSession):
+        self.db = db
+    
+    async def create_prescription(
+        self,
+        patient_id: int,
+        doctor_id: int,
+        medications: List[dict]
+    ) -> Prescription:
+        # 1. 检查药物相互作用
+        await self._check_interactions(medications)
+        
+        # 2. 检查过敏史
+        await self._check_allergies(patient_id, medications)
+        
+        # 3. 创建处方
+        prescription = Prescription(
+            patient_id=patient_id,
+            doctor_id=doctor_id,
+            medications=[Medication(**m) for m in medications],
+            issued_at=datetime.utcnow(),
+            valid_until=datetime.utcnow() + timedelta(days=30),
+            status="active"
+        )
+        
+        self.db.add(prescription)
+        await self.db.commit()
+        
+        return prescription
+    
+    async def _check_interactions(self, medications: List[dict]):
+        """检查药物相互作用"""
+        # 调用药物数据库API
+        interactions = await drug_api.check_interactions(medications)
+        
+        if interactions["has_severe_interactions"]:
+            raise ValueError(f"Severe drug interactions detected: {interactions['details']}")
+```
+
+## HIPAA合规
+
+### 1. 数据保护
+
+**加密要求**:
+```python
+from cryptography.fernet import Fernet
+from cryptography.hazmat.primitives import hashes
+from cryptography.hazmat.primitives.kdf.pbkdf2 import PBKDF2HMAC
+
+class PHIEncryption:
+    """Protected Health Information加密"""
+    
+    def __init__(self, password: str):
+        self.key = self._derive_key(password)
+        self.cipher = Fernet(self.key)
+    
+    def _derive_key(self, password: str) -> bytes:
+        """从密码派生密钥"""
+        kdf = PBKDF2HMAC(
+            algorithm=hashes.SHA256(),
+            length=32,
+            salt=b'salt',  # 生产环境应使用随机salt
+            iterations=100000,
+        )
+        return base64.urlsafe_b64encode(kdf.derive(password.encode()))
+    
+    def encrypt_phi(self, data: dict) -> str:
+        """加密PHI数据"""
+        json_data = json.dumps(data)
+        encrypted = self.cipher.encrypt(json_data.encode())
+        return base64.urlsafe_b64encode(encrypted).decode()
+    
+    def decrypt_phi(self, encrypted_data: str) -> dict:
+        """解密PHI数据"""
+        encrypted = base64.urlsafe_b64decode(encrypted_data.encode())
+        decrypted = self.cipher.decrypt(encrypted)
+        return json.loads(decrypted.decode())
+```
+
+### 2. 访问控制
+
+**RBAC实现**:
+```python
+from enum import Enum
+
+class Role(str, Enum):
+    ADMIN = "admin"
+    DOCTOR = "doctor"
+    NURSE = "nurse"
+    PATIENT = "patient"
+    RESEARCHER = "researcher"
+
+class Permission(str, Enum):
+    VIEW_OWN_RECORDS = "view_own_records"
+    VIEW_ALL_RECORDS = "view_all_records"
+    EDIT_RECORDS = "edit_records"
+    DELETE_RECORDS = "delete_records"
+    EXPORT_DATA = "export_data"
+
+ROLE_PERMISSIONS = {
+    Role.ADMIN: [
+        Permission.VIEW_ALL_RECORDS,
+        Permission.EDIT_RECORDS,
+        Permission.DELETE_RECORDS,
+        Permission.EXPORT_DATA,
+    ],
+    Role.DOCTOR: [
+        Permission.VIEW_ALL_RECORDS,
+        Permission.EDIT_RECORDS,
+    ],
+    Role.NURSE: [
+        Permission.VIEW_ALL_RECORDS,
+    ],
+    Role.PATIENT: [
+        Permission.VIEW_OWN_RECORDS,
+    ],
+    Role.RESEARCHER: [
+        Permission.VIEW_ALL_RECORDS,  # 脱敏数据
+    ]
+}
+
+def require_permission(permission: Permission):
+    """权限检查装饰器"""
+    async def checker(current_user: User = Depends(get_current_user)):
+        user_permissions = ROLE_PERMISSIONS.get(current_user.role, [])
+        
+        if permission not in user_permissions:
+            raise HTTPException(403, "Permission denied")
+        
+        return current_user
+    
+    return Depends(checker)
+```
+
+### 3. 审计日志
+
+**访问记录**:
+```python
+class AccessLog(BaseModel):
+    id: int
+    user_id: int
+    patient_id: int
+    action: str  # view, edit, export
+    resource_type: str
+    resource_id: int
+    ip_address: str
+    user_agent: str
+    accessed_at: datetime
+
+@app.get("/patients/{patient_id}")
+@audit_log("view_patient")
+async def get_patient(
+    patient_id: int,
+    current_user: User = Depends(require_permission(Permission.VIEW_ALL_RECORDS))
+):
+    # 记录访问
+    log = AccessLog(
+        user_id=current_user.id,
+        patient_id=patient_id,
+        action="view",
+        resource_type="patient",
+        resource_id=patient_id,
+        ip_address=get_client_ip(),
+        user_agent=get_user_agent()
+    )
+    
+    db.add(log)
+    await db.commit()
+    
+    patient = await get_patient_by_id(patient_id)
+    return patient
+```
+
+## 安全最佳实践
+
+### ✅ DO
+
+1. **数据最小化**
+```python
+# ✅ 只返回必要字段
+@app.get("/patients/{patient_id}")
+async def get_patient_summary(patient_id: int):
+    return {
+        "name": patient.name,
+        "age": patient.age,  # 而非完整birth_date
+        # 不返回SSN、地址等敏感信息
+    }
+```
+
+2. **脱敏处理**
+```python
+def anonymize_patient_data(patients: List[Patient]) -> List[dict]:
+    """脱敏用于研究"""
+    return [
+        {
+            "age": calculate_age(p.date_of_birth),
+            "gender": p.gender,
+            "diagnosis": p.diagnosis,
+            # 移除姓名、ID、地址等
+        }
+        for p in patients
+    ]
+```
+
+3. **紧急访问**
+```python
+class EmergencyAccess:
+    """紧急访问机制"""
+    
+    async def break_glass(self, patient_id: int, reason: str):
+        # 1. 记录紧急访问
+        await self.log_emergency_access(patient_id, reason)
+        
+        # 2. 通知管理员
+        await self.notify_admins(patient_id)
+        
+        # 3. 授予临时访问
+        return await self.grant_temporary_access(patient_id)
+```
+
+### ❌ DON'T
+
+1. **不要通过URL传递PHI**
+```python
+# ❌ 错误
+@app.get("/patients/{ssn}")
+
+# ✅ 正确
+@app.get("/patients/{patient_id}")
+```
+
+2. **不要在日志中记录PHI**
+```python
+# ❌ 错误
+logger.info(f"Patient {patient.name} accessed")
+
+# ✅ 正确
+logger.info(f"Patient {patient_id} accessed")
+```
+
+## 学习路径
+
+### 初级 (1-2周)
+1. 医疗IT系统概述
+2. HIPAA合规要求
+3. 基础患者管理
+
+### 中级 (2-3周)
+1. DICOM影像处理
+2. 电子病历系统
+3. 数据加密
+
+### 高级 (2-4周)
+1. 远程医疗系统
+2. 药物管理系统
+3. 机器学习辅助诊断
+
+### 专家级 (持续)
+1. 医疗AI模型
+2. 基因组学
+3. 医疗物联网(IoMT)
+
+## 参考资料
+
+### 标准
+- [HIPAA合规](https://www.hhs.gov/hipaa/)
+- [DICOM标准](https://www.dicomstandard.org/)
+
+### 框架
+- [HL7 FHIR](https://www.hl7.org/fhir/)
+- [OpenEMR](https://www.open-emr.org/)
+
+---
+
+**知识ID**: `healthcare-complete`  
+**领域**: industries/healthcare  
+**类型**: standards  
+**难度**: advanced  
+**质量分**: 91  
+**维护者**: healthcare-team@umadev.com  
+**最后更新**: 2026-03-28