医院信息化中的数字认证设计与实施

Design and Implementation of Digital Authentication in Hospital Informatization

目的通过数字认证技术在医院各信息系统中的应用,提高医疗数据安全性和法律权威性,保障医院网络安全。方法引入CA认证服务,在医院信息系统(HIS)、实验室信息系统(LIS)、影像存储与通信系统(PACS)、病理系统、超声系统中实现数字签名服务。结果对系统加载医护人员证书权限,对医疗数据进行加密、认证和电子签章确认,保证了存储数据的法律效力。数字认证在医院的广泛开展,规范了医护人员的操作行为,为加强医疗信息安全和处理医疗纠纷提供了有力保障。结论数字认证技术有利于保证医院数字信息的机密性、有效性、完整性和不可否认性。

Objective To improve the security and legal authority of medical data through application of the digital authentication technique in various hospital information systems so as to ensure the network security in the hospital. Methods CA （Certificate Authority） services were introduced in HIS （Hospital Information System）, LIS （Laboratory Information System）, PACS （Picture Archiving and Communication System）, pathology system and the ultrasound system so as to realize the digital signature services. Results The certiifcate authority was uploaded in the system to medical and nursing staff to encrypt and authenticate medical data and conifrm electronic signatures, which ensured the legal validity of stored data. Wide application of digital authentication had standardized the operation behavior of medical and nursing staff and provided strong support for strengthened security of medical information and dealing with medical disputes. Conclusion Application of digital authentication contributed to ensuring the confidentiality, availability, integrity and non-repudiation of digital information in the hospital.