基于规则引擎的隐私数据访问控制系统  

Private Data Access Control System based—on Rule Engine

作　　者：陈雷[1] 杨吉江[1] 王青[1] 

机构地区：[1]清华大学信息技术研究院数字医疗健康研究中心,北京市海淀区清华园1号100084

出　　处：《中国数字医学》2012年第3期63-66,共4页China Digital Medicine

基　　金：国家科技支撑计划(编号:2011BAH15B02)~~

摘　　要：随着信息技术在医疗服务领域越来越广泛的应用,医疗机构和第三方医疗服务机构所使用的医疗系统也变得越来越复杂,如何灵活地控制不同系统中用户的数据访问权限,管理实施复杂多变的隐私保护规章制度来保护患者的隐私成为一个越来越重要的问题。介绍了一种基于规则引擎的隐私数据访问控制系统,通过引入规则引擎技术可以有效地增强系统隐私保护策略的灵活性,为系统管理人员设定和维护隐私策略提供更好的支持。As information technology are widely used in health care services, information system used by medical institutions and third-party medical services have become more and more complex. How to manage the access to different systems and implement different privacy policies in systems to protect patient privacy has become an increasingly important issue. This paper describes a rolebased access control system to manage and implement different privacy policies. The introduction of the rules engine technology＇ can effectively enhance the flexibility of privacy policies management for system, and administrators can manage and implement the privacy policy more easily.

关 键 词：规则引擎 隐私保护 访问控制 

分 类 号：R197.324[医药卫生—卫生事业管理]