大型医疗设备安全防护及监测预警平台的设计与实践  

Design and Practice of Security Protection and Monitoring and Early Warning Platform for Large-Scale Medical Equipment

作　　者：彭远 刘云[1] 徐赛 寇建秋 PENG Yuan;LIU Yun;XU Sai;KOU Jianqiu(Information Data Center,Jiangsu Province Hospital of Chinese Medicine,Nanjing Jiangsu 210029,China;Department of Equipment,Jiangsu Province Hospital of Chinese Medicine,Nanjing Jiangsu 210029,China)

机构地区：[1]江苏省中医院信息数据中心,江苏南京210029 [2]江苏省中医院设备处,江苏南京210029

出　　处：《中国医疗设备》2025年第3期77-82,共6页China Medical Devices

基　　金：江苏省卫健委医学科研面上项目(Z2022112)。

摘　　要：目的针对大型联网医疗设备存在的网络安全风险,采取有效的安全防护和监测措施。方法结合网络安全等保合规要求,建设大型医疗设备专网,构建合规网络体系;利用软件定义网络、AI、物联网、日志分析等信息化技术,部署网络安全防护平台和设备监测预警平台,对设备网络安全和运行状态实现可视、可管、可控。结果通过对23台大型医疗设备及相关终端设备的部署和应用,网络安全事件数量与设备故障时间均较上线前大幅降低,降幅分别达90%及80%以上,且差异均有统计学意义(P<0.05)。结论大型医疗设备安全防护平台及监测预警平台的建设,实现了大型医疗设备的集中管理和实时监测,保障了其安全、稳定、高效运行,提升了防护管理水平,为医疗设备全生命周期安全管理提供了有效支撑。Objective To take effective security protection and monitoring measures against the network security risks of large-scale networked medical equipment.Methods Combined with the requirements of cybersecurity classified protection compliance,the largescale medical equipment private network and compliance network system were built.The information technologies such as software defined network,AI,Internet of Things and log analysis were used to deploy network security protection platforms and equipment monitoring and early warning platforms.And the network security and operation state of equipment were visible,manageable and controllable.Results Through the deployment and application of 23 pieces of large-scale medical equipment and related terminal equipment,the number of network security incidents and equipment failure time were significantly lower than those before the launch,with a decrease of more than 90%and 80%,respectively,and the differences were statistically significant(P<0.05).Conclusion The construction of large-scale medical equipment security protection platform and monitoring and early warning platform achieves centralized management and real-time monitoring of large-scale medical equipment,guarantees the safe,stable and efficient operation of large-scale medical equipment,improves the level of protection management,which can provide effective support for the whole life cycle security management of medical equipment.

关 键 词：医疗设备 网络安全 实时监测 预警机制 运维管理 设备专网 网络安全等保合规 

分 类 号：R197.32[医药卫生—卫生事业管理]