结构化电子病历的敏感数据保护方法探讨  

Sensitive Data Protection Method for Structured Electronic Medical Records

作　　者：王兴强 周振宇 孟娜 WANG Xingqiang;ZHOU Zhenyu;MENG Na(th Hospital of PLA,Jinan,Shandong,250031,China)

机构地区：[1]解放军第960医院,山东济南250031 [2]解放军第960医院医学信息数据室,山东济南250031

出　　处：《中国卫生质量管理》2022年第10期49-52,共4页Chinese Health Quality Management

基　　金：国家自然科学基金(81502896)--网状meta分析实效性评价方法及其广义线性混合效应模型的构建与应用研究。

摘　　要：目的构建电子病历安全访问控制模型,以保护电子病历敏感数据的安全。方法根据电子病历敏感数据的特点,基于角色的权限访问控制模型,建立了一种基于规则引擎的敏感数据访问控制模型。该模型构建了动态用户角色引擎和患者敏感度引擎。结果将该模型应用于结构化电子病历敏感数据的访问控制和解密处理中,提高了访问控制的灵活性和敏感度,且具有可操作性。结论基于规则引擎的敏感数据访问控制模型可应用于电子病历系统中,有助于实现患者敏感数据的安全访问。Objective To propose a secure access control model for Electronic Medical Records(EMR)to protect the security of sensitive data in EMR.Methods According to the characteristics of sensitive data in EMR,a rule engine-based access control model for sensitive data(called RESD-RBAC model)was established on the basis of Role-Based Access Control(RBAC)model.This model constructed dynamic user role engine and patient sensitivity engine.Results The scheme was applied to access control and decryption of structured EMR sensitive data,which improved the flexibility and sensitivity of access control and had good operability.Conclusion The RBAC based RESD-RBAC model can be applied in the EMR system to realize the safe access of patient sensitive data.

关 键 词：电子病历 结构化 敏感数据 基于角色的权限访问控制模型 规则引擎 

分 类 号：R197.324[医药卫生—卫生事业管理]