面向卫生信息交换的电子病历安全体系设计  

Design and Development of a Security System of EMR in HIE-oriented

作　　者：周天舒[1] 朱兴骅[1] 李劲松[1] 

机构地区：[1]浙江大学生物医学工程与仪器科学学院,浙江省杭州市浙大路38号310027

出　　处：《中国数字医学》2015年第6期83-86,共4页China Digital Medicine

基　　金：国家自然科学基金项目(编号:61173127);国家"863计划"项目(编号:2013AA041201);浙江大学海外一流学科伙伴计划(编号:188170*193251101)~~

摘　　要：针对区域医疗系统内海量数据的共享和交互性,结合目前信息安全技术的发展现状,提出面向卫生信息交换的电子病历安全体系构架,包括身份认证、权限控制、操作日志、数据加密四大模块。防止非法用户访问系统,保障系统的可用性和可控性,保留数据的修改痕迹并保证不可抵赖性,防止数据被截获或非法窃取,保证信息的机密性,构建完整的电子病历系统安全体系。To meet the demand of big data sharing and communication in regional medical systems in a secure manner, we designed and developed a security system within HIE-oriented EMR, including identity authentication, privilege management, access log, and data encryption modules. The establish and deployment of the system could prevent access from the illegal users, keep EMR system accessibility while controllability, record the modification traces and make it undeniability, protect the medical data from intercepted by intruders, keep the data confidentiality from none stakeholders, and finally construct a complete security system in EMR.

关 键 词：数据安全 权限管理 身份认证 数据加密 

分 类 号：R319[医药卫生—基础医学]