电子签名在医院信息系统中的应用.pptVIP

电子签名在医院信息系统中的应用 The Application of Electronic Signature in the Hospital Information System 数字世界的信息安全要素Information Security Factors in Digital World PAIN… Privacy（保密性） -确认信息的保密，不被窃取 - Ensure information Privacy and not be stolen Authentication Authorization（鉴别与授权） -确认对方的身份并确保其不越权 -Authenticate users’ identity and ensure them don’t exceed their authority Integrity（完整性） -确保你收到信息没有被篡改 - Ensure the received information not to be tampered Non-Repudiation（抗抵赖） -有证据保证交易不被否认 - Evidence to confirm the transaction be undeniable 各种安全技术比较 Comparison of all Kinds of Security Technology PKI成为可信网络的安全基础PKI is a Security Infrastructure for Credible Network 证书颁发机构：CACertificate issue institution: CA 证书认证权威 Certification Authority:CA 提供网络身份认证服务 Provide the identity authentication service for network -证明数字证书的有效性Verify the validity of the digital certificate 负责签发和管理数字证书 Be responsible for issuing and manage the digital certificate -具体签发证书Issue certification -对数字证书进行签名Sign to digital certificate -并管理数字证书Manage digital certificate 证书颁发机构：CACertificate awarding institution:CA 具有权威性和公正性 Authority and Fairness -类似于颁发身份证的公安局 Be similar to the police station which can issue the ID card -在网络世界中人人都信任CA all people trust CA in the network world 证书注册机构：RACertificate registration institution: RA 证书注册权威 Certificate registration Authority -Registration Authority 受理用户的数字证书申请 Accept the user’s application of certification -对证书申请者身份进行审核并提交CA制证 Verify applicant’s identity and submit applicant related information to CA - 类似于申请身份证的派出所 Be similar to the local police station which apply for the ID card 证书注册机构：RACertificate registration institution: RA 提供证书生命期的维护工作 Offer the maintenance work for the certificate life time -受理用户证书申请 Accept the certificate application from users -协助颁发用户证书 Assist to issue the certificate to users -审核用户真实身份 Verify the real identity of users -受理证书更新请求 Update certificates -受理证书吊销 Revocation certificate 电子文档的安全需求The Security Requirement of E