医院数据库安全保护机制探讨  

Secure protection mechanism of database in hospitals

作　　者：张博[1] 王兆文[1] 戴捷[2] 范宏兰[1] 

机构地区：[1]解放军第三医院信息科,陕西宝鸡721004 [2]解放军第三医院医学影像科,陕西宝鸡721004

出　　处：《中国医学装备》2014年第10期104-106,共3页China Medical Equipment

摘　　要：目的:从数据库安全保护经验出发,提出具体的数据库系统安全保护措施。方法:实施严格的账号和密码管理机制实现数据库系统安全,消除数据库系统中已经安装但现在需要被删除的数据库应用,解决安全风险。结果:依据《信息系统安全等级保护基本要求》,从数据库的身份验证、访问控制、数据加密、审计跟踪以及数据备份与恢复等方面提出具体的安全保护措施。结论:在实际运用中根据具体应用环境的安全需要,结合网络安全、操作系统安全,制定统一数据库安全管理策略,解决数据库安全保护问题。Objective： Starting from the database security experience, to propose specific database system security measures. Methods： The implementation of strict account and password management mechanisms to achieve secure database systems, eliminating the database system has been installed, but now needs to be deleted database applications, addressing security risks. Results： According to the ＂information system security protection of basic requirements＂ from the database authentication, access control, data encryption, audit trails, and data backup and recovery and other aspects of specific security measures. Conclusion： In the practical application, in accordance with the security needs of the specific application environment, combined with network security, operating system security, database security management to develop a unitied strategy to tackle the problem of database security protection.

关 键 词：数据库 安全 保护 

分 类 号：R197.324[医药卫生—卫生事业管理]