基于XML的电子病历系统访问控制模型  

Electronic medical record system access control model based on XML

作　　者：焦玮 杨雪寒 孟洁 张倩 JIAO Wei;YANG Xue-han;MENG Jie;ZHANG Qian(The Third Hospital of Hebei Medical University,Shijiazhuang 050051,China)

机构地区：[1]河北医科大学第三医院

出　　处：《信息技术》2019年第11期46-51,共6页Information Technology

基　　金：河北省卫生和计划生育委员会2018年河北省医学科学研究重点课题(20180447)

摘　　要：由于基于云的电子病历系统需要为不同的医疗机构提供病历的数据共享,因此面临患者医疗数据被泄露的巨大风险,为此文中提出了一个面向访问控制和数据加密签名的两阶段的电子病历系统访问控制模型。该模型通过执行基于属性的访问控制来实现兼具灵活性和细粒度的访问控制,通过执行病历文档加密和电子签名提高病历文档数据的隐私性和不可否认性。系统原型的实现和安全评估表明,相对于当前多数电子病历系统,该系统模型具有更好的数据安全性。The cloud-based electronic medical record system needs to provide medical records of different medical institutions,it faces a huge risk of leakage of medical data of patients.For this reason,A two-stage electronic medical record system--access control model is proposed for access control and data encryption signature.The model implements flexible and fine-grained access control by performing attribute-based access control,and improves the privacy and non-repudiation of medical record data by performing medical record document encryption and electronic signature.The implementation and security assessment of the system prototype shows that the system model has better data security than most current electronic medical record systems.

关 键 词：访问控制 数据隐私 加密 数字签名 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]