医院信息系统外联的安全管理探索与实践  

Exploration and practice of security management of the external connection of hospital information system

作　　者：周彬[1] 沈黎[2] 吴檠[2] 吴文俊[2] 李为 刘炜[2] Bin Zhou;Li Shen;Qing Wu;Wenjun Wu;Wei Li;Wei Liu(General Affairs Department,Union Hospital Affiliated to Tongji Medical College of Huazhong University of Science and Technology,Wuhan 430022,China;Computer Management Center,Union Hospital Affiliated to Tongji Medical College of Huazhong University of Science and Technology,Wuhan 430022,China)

机构地区：[1]华中科技大学同济医学院附属协和医院总务处,武汉430022 [2]华中科技大学同济医学院附属协和医院计算机管理中心,武汉430022

出　　处：《中华医院管理杂志》2021年第9期730-733,共4页Chinese Journal of Hospital Administration

基　　金：国家卫生健康委员会资助课题(2019)。

摘　　要：在国家互联网医疗等政策引导下, 医院信息系统对外提供的医疗信息服务范围越来越广, 与外部的信息交互越来越频繁, 面临的网络安全风险也越来越高。作者分析了医院对外信息服务的业务种类、与外部网络连接的方式以及存在的网络安全问题, 遵循信息系统安全等级保护2.0的思想, 顶层设计, 建立了医院统一的外联网络安全通道, 用严格的管理措施和技术手段, 形成立体的网络安全防护屏障, 保障医院信息系统稳定运行与数据安全。Under the guidance of national policies on Internet medical services,the scope of medical information services provided by the hospital information system is growing all the way,the interaction with external information is more and more frequent,and the network security risk is higher and higher.The authors analyzed the business types of the hospital′s external information service,the way to connect with the external network and the existing network security problems.Following the principles of information system security level protection 2.0,the authors built a unified extranet secure channel for the hospital under the principles of top-level design,formed an all-round network security protective barrier with strict management measures and technical means,then ensured the stable operation of hospital information system and data security.

关 键 词：网络安全 外联网络安全通道 互联网医疗 医院信息系统 

分 类 号：R197.32[医药卫生—卫生事业管理]