基于等级保护的跨区域医疗信息安全保障体系研究-中国数字医学.PDFVIP

信息安全与管理 Information Security and Management 基于等级保护的跨区域 医疗信息安全保障体系研究 ① ＊ ① ② 彭坤 冷金昌 孙晓玮 赵军平 摘 要 跨区域医疗信息系统是关系国计民生和社会发展的关键基础设施，根据国家信息安全等级保护制度和相关文件的要 求，结合跨区域医疗信息系统的分类和特点，提出了跨区域医疗信息系统的定级建议。落实信息安全等级保护制度，建立完 善的信息安全保障体系将有效地控制跨区域医疗信息系统存在的信息安全风险。 关键词 跨区域医疗 等级保护 信息安全保障 Doi:10.3969/j.issn.1673-7571.2013.06.026 Research on Information Security Protection System for the Cross-regional Healthcare Based on Classified Protection / PENG Kun, LENG Jin-chang, SUN Xiao-wei, et al//China Digital Medicine.-2013 8(6): 88 to 91 Abstract Cross-regional healthcare information system is the critical basic infrastructure concerned with the national economy and the peoples livelihood. According to national classified information security protection system and the requirement of related documents and in combination with the classification and characteristics of cross-regional healthcare information system, we put forward the suggestions for grading the cross-regional healthcare information system. To execute the information security classified protection mechanism and establish perfect information security protection system，could effectively control and reduce the information security risks in cross-regional healthcare information system. Keywords cross-regional healthcare, classified protection, information security protection Fund project National Science and Technology Support Plan Funded by Science and Technology Ministry (No.2011BAH15B08) Corresponding author Information Department of the First Affiliated Hospital of General Hospital of PLA, Beijing 100048, P.R.C. 1 引言 随着跨区域医疗协同服务系统信息化的不断深入，对信息安全提出了更高的要求，作为一项涉及众多医疗机构的医疗 协同服务工程，涉及到各相关医疗机构的业务利益和患者隐私，一些重要信息系统如果受损几小时就会对相关业务产生重