医院信息安全体系规划与设计

通过对医院信息安全内涵的深入研究，结合医院实际建设情况，分析医院信息安全存在的主要问题。将医院安全体系划分为物理层安全、网络层安全、系统层安全、应用层安全和安全管理等五个不同的层次，对各个不同层次进行安全需求分析。并在此基础上，从安全防护、安全临测、安全恢复三个层面对医院信息安全体系进行整体规划与设计。重点介绍几种安全技术在医院中的具体应用，包括：安全网闸技术在医院内网和外网上隔离的处理方式，数字签名技术在电子病历中的应用，时间戳技术在保障医疗信息时效性，安全性方面的应用等。

The Plan and Design of Hospital Information Security System

In this paper, through the in-depth study of the hospital information system, and combined with the actual construction of the hospital, we are going to analyze the main problems existing in hospital information system. We will divide the hospital security system into five different layers, induding securiW of the physical layer, security of network layer, security of system layer, security of application layer and security of management, and we will analyze the security requirements of these layers. On this basis, we will plan and design the hospital information system from the three aspects of security protection, security monitoring, and security restoration. This article focuses on the specific application of several security technology in hospital, including method of isolating the hospital intranet and extranet by security gateway technology, application of digital signature in electronic medical records, and application of timestamp technology in the protection of medical information timeliness and security, etc.