基于虚拟化的移动医疗安全技术研究

Study of Secure Technology of Mobile Health Based on Virtualization

目的:对医院信息系统数据经由移动互联网访问的安全保护机制展开研究,让医护人员在保证医院数据安全的前提下,可以随时随地的访问医院信息系统,及时获取病患信息,处置紧急事件,帮助远程诊断。方法:基于虚拟化技术的医院数据安全保护机制和方案,能够禁止未经允许的移动终端连接和访问医院信息系统,保证数据不会在移动终端上被处理和存储,阻止各种已知和未知的病毒木马在系统中传播和破坏,并通过可视化审计机制的帮助对事件进行快速追踪,对违规和非法操作进行管控。结果:通过系统架构后进行的多次测试,所研究的安全机制方案可以在保护医疗数据安全的同时,实时访问医院信息系统的各项数据。结论:提出的基于虚拟化技术的医院数据安全保护机制与大多数医院的内外网隔离要求没有冲突,作为一种实现远程移动医疗的数据保护方案具有良好的实用性和推广价值。

Objective: A study of hospital information system data protection mechanisms via a secure mobile Internet access, let themedical staff on the premise of ensure the safety of hospital data, anytime, anywhere access to hospital information systems, timelyaccess to patient information, emergency disposal, help remote diagnostics. Methods: Based on the hospital data security protectionmechanism and the scheme of virtualization technology, can prohibit unauthorized access to the mobile terminal connection andhospital information systems, to ensure that data will not be processed and stored on the mobile terminal, preventing known andunknown Trojan virus spread in the system and destruction, and by helping to visualize audit mechanisms for fast-tracking eventson irregularities and illegal operations control. Results: After several tests of the system architecture, the security mechanism in thispaper can protect the safety of medical data, and real-time access to the data of hospital information system. Conclusion: In this paper,based on virtualization technology hospital data security protection mechanism and the majority of the hospital's internal and externalnetwork isolation requirements without conflict, as a kind of realization of mobile telemedicine data protection scheme has goodpracticability and popularization value.