摘要
随着医疗信息化的快速发展,现行EMR系统在信息共享和安全性方面无法很好地满足医疗和患者的需要。文中基于云计算技术提出一种EMR存储云系统,为患者和医院提供统一的电子病历注册和使用服务,并重点对电子病历的访问控制策略进行了讨论,采用一般角色访问控制和用户个性化逐级授权相结合的策略,有效解决了动态授权和用户个性化需求问题,满足了患者对于信息安全性和隐私保护方面的需求。
With rapid development of medical informationization, the current EMR system couldn＇t well satisfy the needs of medical treatment and patient in information sharing and security. In this paper, an EMR system based on cloud storage is proposed, which could provide unified EMR registration and use services for patients and hospitals. Also this paper gives detailed discussion on EMR access control policies. By combining general RBAC and personalized authorization, the problem of dynamic authorization is effectively solved, thus the demand of patients in personal information security and privacy protection could be satisfied.
出处
《信息安全与通信保密》
2012年第4期86-89,共4页
Information Security and Communications Privacy
