掌上医院平台信息安全风险分析与控制

Risk analysis and control of information security in mobile platform for healthcare service

基于移动互联网掌上医院平台的建设概况,从移动客户端、无线通信及业务平台等层面分析其信息安全风险。结合国家信息安全等级保护要求,提出应用移动虚拟隔离技术及各安全加密协议保障智能终端和移动通信的安全;通过合理的业务逻辑设计以及单点登录平台来完成用户身份认证;根据掌上医院业务各组成模块的不同功能和网络位置,将其划分不同安全区域并进行个性化安全防护设计,结合安全管理措施,构建其安全防护体系。

Based on the construction overview of mobile platform for healthcare service, the information security risk is analyzed from the aspects including mobile client end, wireless communication, service platform, etc. Combined with the requirements of national information security protection, several opinions are claimed and proposed. Firstly, apply mobile virtual isolation technology and adopt various security encryption protocols to ensure the security of intelligent terminals and mobile communications. Secondly, identify user by reasonable business logic design and single sign\|on platform. Thirdly, in accordance with its different functions and network locations, divide mobile hospitals into different security areas, and personalize design for security protection, then build security protection system in combination with security management measures.