面向业务的医疗云流量安全防护系统设计与实现

Design and implementation of business-oriented security protection system for medical cloud traffic

医疗云平台集中了各个卫生医疗机构的信息系统,因数据量庞大、数据价值高以及涉及个人隐私,非常容易遭受攻击。针对医院业务安全防护需求,本文提出了面向业务的医疗云流量安全防护系统架构,设计了南北向流量防护模型和东西向流量防护模型。该系统的部署应用,可以有效应对医疗信息基础设施云化带来的安全挑战,降低运维复杂度,实现按业务需求交付,满足安全防护要求。

The medical cloud platform integrates the information systems of various health and medical institutions,which are very vulnerable to attacks due to the huge amount of data,high data value and personal privacy involved.In response to the security protection needs for hospital services,this paper proposes a business-oriented security protection architecture for medical cloud traffic,and designs a north-south traffic protection model and the east-west traffic protection model.The deployment and application of this system can effectively meet the security challenges brought by the cloudization of medical information infrastructures,reduce the complexity of operation and maintenance,achieve delivery according to business needs,and meet the security protection requirements.