“零信任”医院数据库运维体系建设与实践  

Construction and Practice on Hospital Database Operation and Maintenance System Based on"Zero Trust"Security Architecture

作　　者：黄超[1] 许杰[1] 林江莉 HUANG Chao;XU Jie;LIN Jiangli(The Second Affiliated Hospital,Zhejiang University School of Medicine,Hangzhou 310009,Zhejiang,China)

机构地区：[1]浙江大学医学院附属第二医院,浙江省杭州市310009 [2]杭州美创科技有限公司,浙江省杭州市310011

出　　处：《中国卫生信息管理杂志》2021年第5期669-674,共6页Chinese Journal of Health Informatics and Management

摘　　要：目的构建基于“零信任”架构的医院数据库运维体系,评估其应用效果,为医疗机构数字化转型提供数据库运维保障参考。方法对医院数据库运维行为进行流程化管理,并且通过防火墙、运行安全管理平台、安全风险预警平台进行控制与监控。结果数据库运维体系运行后,显著降低了运维故障率。当数据库月度故障时间阈值设定在30分钟时,年度达标率(达标月份数/月份数)接近75%。结论基于“零信任”架构的医院数据库运维体系,显著降低了数据库运维风险,提高了数据库运行的安全性和稳定性。Objective To construct a hospital database operation and maintenance system based on"zero trust"architecture,evaluate its application effect,and provide reference for database operation and maintenance guarantee for digital transformation of medical institutions.Methods Hospital database operation and maintenance behavior is managed in a process,and controlled and monitored through the database(firewall,operation security management,security risk early warning)platform.Results After operation,the failure rate of database operation and maintenance system was significantly reduced.When the database monthly failure time threshold is set at 30 minutes,the annual compliance rate(number of compliant months/number of compliant months)approaches 75%.Conclusion Through the actual operation of the hospital,the failure rate of hospital database operation and maintenance is significantly reduced,the database operation and maintenance cost is controlled,and the security and stability of database operation is improved.

关 键 词：零信任 数据库运维 数据库治理 数据库认证授权 数据库监控 

分 类 号：R-37[医药卫生] R197.3