医院网络公众服务安全问题分析与防护设计  

Analysis and Protection Design of Public Service Security in Hospital Network

作　　者：陈明[1] 林康[1] 林志刚[1] CHEN Ming;LIN Kang;LIN Zhigang(The First Affiliated Hospital of Fujian Medical University,Fuzhou 35005,Fujian,China)

机构地区：[1]福建医科大学附属第一医院,福建省福州市350005

出　　处：《中国卫生信息管理杂志》2021年第1期106-110,116,共6页Chinese Journal of Health Informatics and Management

摘　　要：面向医院外联业务的Web应用安全防护设计,克服了医院外联业务的审计机制不健全、接入标准不统一、网络安全防护不足的问题。本研究针对Web应用中常见的安全问题进行了分析,根据国家医院智慧服务分级评估标准体系和国家网络安全等级保护安全设计技术要求,从业务架构与流程设计两方面,描述了医院外联业务的Web安全防护方案,确保医院对外服务与医疗信息的安全。提出了安全目标与要求,论述了以安全组件和功能模块的形式集成在医院外联平台系统,实现了身份授权标准管理、传输数据加密隐藏及统一的日志审计等功能,为医院安全管理中心的建设提供参考。The design of Web security protection for hospital outreach services overcomes the problems of unsound audit mechanism,inconsistent access standards,and insufficient network security protection.The article analyzes the common security problems in Web applications.According to the national hospital smart service classification evaluation standard system and the national network security level protection security design technical requirements,the web security protection plan of the hospital outreach business is described in terms of business structure and process to ensure the security of the hospital’s external services and medical information.The solution is Integrated in the hospital outreach platform system in the form of security components and functional modules,which implements functions such as identity authorization standard management,transmission data encryption and concealment,and unified log auditing,which provides a reference for the construction of the hospital security management center.

关 键 词：网络安全 医院外联业务 安全管理 

分 类 号：R-058[医药卫生] TP393.08[自动化与计算机技术—计算机应用技术]