医疗信息交换共享中的调阅权限控制  

Access Control in Medical Information Exchange and Sharing

作　　者：王霏[1] 王晔[1] 朱丹丹[1] 

机构地区：[1]万达信息股份有限公司

出　　处：《信息技术与标准化》2014年第9期36-38,共3页Information Technology & Standardization

基　　金：国家科技支撑计划"面向长三角地区的跨区域医疗协同服务应用示范";项目编号:2011BAH15B06

摘　　要：以上海市长宁区区域卫生信息平台建设为背景,提出在信息交换共享过程中权限控制解决方案的设计思路,采用"事前授权,事中控制,事后审计"的权限控制设计方法,设计了区域医疗信息交换共享平台,包括:数据层、条件层、实施层、结果层,以实现共享调阅。该平台在实际应用中取得了良好的效果,在一定程度上提高了系统的整体性能和安全性。Based on the construction of Shanghai Changning regional health information platform, the solutions to access control in information exchange and sharing are proposed. The design method of ＂authorization in advance, control in process, and audit afterwards＂ of access control is given, and regional medical information exchange platform is designed, which includes data layer, condition layer, implementation layer and result layer. It proved that this approach has a favorable effect in practical applications. After testing, it shows that access control, improves the overall performance and security of the system.

关 键 词：区域医疗 数据交换共享 隐私保护 权限控制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] R-05[自动化与计算机技术—计算机科学与技术]