某大型公立医院医疗设备数据安全管理实践与思考

Practice and reflection on medical device data security management in a large public hospital

随着民众医疗需求的快速增长,医疗数据呈指数级增长,数据安全的重要性愈发凸显。大型公立医院中医疗设备所产生的数据量庞大,但部分医疗设备存在开启远程控制和境外数据通道现象,具有一定安全隐患。郑州大学第一附属医院通过对院内387台医疗设备进行数据安全调查,根据调查结果采取了立制度、设标准、建平台等措施,并应用RBAC权限、部署ACL指令、加强安全审计等策略保障数据安全,取得了一定成效。本文介绍了该院医疗设备数据安全管理的实践,为建立医院内网安全基线、助力智慧管理提供经验和借鉴。

In the era of national health,medical data is growing exponentially,and its security is becoming more and more important.The amount of data generated by traditional Chinese medicine treatment equipment in large public hospitals is huge,but the data security lacks proper management.Some medical equipment has the phenomenon of opening remote control and overseas data channels,which has great potential security risks.The First Affiliated Hospital of Zhengzhou University conducted a data security survey on 387 medical devices in the hospital and adopted measures such as establishing systems,setting standards,and building platforms according to the survey results,as well as strategies such as applying RBAC authority,deploying ACL instructions and strengthening security audit,which has achieved certain results.This article provides practical experience and theoretical support for establishing the safety baseline of the hospital intranet,helping intelligent management,and building a smart hospital in an all-around way.