基于等级保护的医疗信息安全存储系统设计  

Design of Medical Information Security Storage System Based on Level Protection

作　　者：庞震 姚远 Pang Zhen;Yao Yuan(Xiyuan Hospital,China Academy of Chinese Medical Sciences,Beijing 100091)

机构地区：[1]中国中医科学院西苑医院信息中心,北京100091

出　　处：《信息安全研究》2021年第9期879-884,共6页Journal of Information Security Research

摘　　要：目前设计的医疗信息安全存储系统数据识别率较低,导致存储数据量较少•为了解决上述问题,基于等级保护设计了一种新的医疗信息安全存储系统,系统架构由等级保护、信息安全故障生成模块、医疗信息安全事件收集器、信息安全事件数据库、控制中心、网络系统终端用户等模块构成.通过SUIR/IPTN采集器、网络终端数据采集器、SDHI采集器、数据库采集器实现信息采集,选用K8RBH03Y2N存储芯片,存储序列分为6组,采用分级操作控制各组对应列的共用数据流.基于等级保护原理实现医疗信息存储系统的正常运行以及实际操作,完成基于等级保护的医疗信息安全存储系统设计.实验结果表明,基于等级保护的医疗信息安全存储系统能够有效提高数据识别率,扩大存储数据量,实现医疗信息安全存储,具有一定的有效性.The data recognition rate of currently designed medical information security storage system is low,resulting in a small amount of stored data・In order to solve the above problem,a new medical information security storage system has been designed based on graded protection.The system architecture consists of graded protection,information security fault generation module»medical information security event collector,information security event database?control center,and network system terminal.User and other modules.Information collection is realized through SUIR/IPTN collector,network terminal data collector,SDHI collector,and database collector,K8RBH03Y2N storage chip is selected and storage sequence is divided into 6 groups,the common data flow of each group corresponding column is controled by graded operation.Based on the principle of graded protection>the normal operation and actual operation of the medical information storage system is realized,and the design of the medical information security storage system based on graded protection is completed.The experimental results show that the medical information security storage system based on graded protection can effectively improve the data recognition rate,expand the amount of stored data,and realize the safe storage of medical information,and it has certain validity.

关 键 词：等级保护 医疗信息 信息安全 存储系统 入侵攻击 安全保障制度 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]