电子病历管理系统及其加密技术的设计与实现

Design and implementation of electronic medical record management system and its encryption technology

随着国内"数字化医院"建设的蓬勃发展,各医疗部门对于电子病历系统的需求也在迅速增长,因此电子病历的安全性问题也越加突出。根据该问题对满足安全性的电子病历管理系统进行了设计与实现。文章采用C/S架构完成了电子病历信息管理系统的基本功能,包括数据读写、查找、分类等。为了保障其安全性,本项目组研究了XML的相关安全技术规范标准,将电子病历信息写入XML文件中进行存储传输。通过AES加密、多重数字签名以及权限管理等方法满足电子病历的机密性需求、认证、完整性与抗抵赖性需求。

With the booming construction of domestic“digital hospitals”,the demand for electronic medical record systems in various medical departments is also rapidly increasing.Therefore,the safety issues of electronic medical records have become more prominent.According to this problem,the electronic medical record management system that satisfies security is designed and implemented.This system uses the C/S framework to complete the basic functions of the electronic medical record information management system,including data reading and writing,searching and classification.In order to ensure its security,the project team studied the relevant security technical specification standards of XML and wrote the electronic medical record information into an XML file for storage and transmission.Through AES encryption,multiple digital signatures,and rights management methods to meet the confidentiality needs of electronic medical records,certification,integrity and non-repudiation needs.