Integrated Hospital Information System (HIS) Special focus on BIRDEM Hospital (600 Beds)

Introduction: Integrated Hospital Information System (HIS) is vital to decision making and plays a crucial role in the success of the organization. Computerization of the medical records and documentation has resulted in efficient data management and information dissemination for the users. Hospital Information System addresses the entire major functional areas of modern multi-specialty hospitals. The package enables improved patient care, patient safety, efficiency and reduced costs. It provides easy access to critical information, thereby enabling management to make better decisions on time. Aims: The short-term objectives of the on-line computerized system are to reduce costs and improve the accuracy and timeliness of patient care, accounting and administration, record keeping, and management reporting. The long-term goal is to build and maintain patient database for analysis of data to facilitate decision-making process. Methods: To run the system it requires some Hardware & Database for IT Department. The technique involves Patient Registration System, Finance & Accounts, Human Resource Management System, Laboratory, Out Patient Management System, and Inpatient Management System. Results: In the mid seventies, a complex was established at Shahbag area in the name of Bangladesh Institute of Research and Rehabilitation in Diabetes, Endocrine and Metabolic Disorders (BIRDEM). From 1982 BIRDEM was designated as the WHO collaborating centre for research on prevention and control of diabetes. It is first of its kind outside Europe. Now from 2000 BIRDEM has successfull developed & implemented some crucial part of HIS System like Patient Admission & Billing System, Finanace & Account System, Human Resourse Management & Payroll System, Store Inventory & Procurement Management System, Labrotary Management System, Assets Management System, Radiology & Imaging Management System. Conclusions: It can thus be seen that deploying IT can help the medical profession in improving its quality of service and thus automatically increasing the preparedness and defensiveness. Of course, it is of vital importance that the software must have the right type of modularity and openness so that it is manageable, maintainable and upgradeable. They can perform the complex task of matching, tabulating, calculating, retrieving, printing and securing the data as required. Well designed, integrated computer system can be a great tool in the hands of the hospital management in improving services, controlling cost, and ensuring optimal utilization of facilities.

A Survey of Web Information System and Applications

The fourth international conference on Web information systems and applications （WISA 2007） has received 409 submissions and has accepted 37 papers for publication in this issue. The papers cover broad research areas, including Web mining and data warehouse, Deep Web and Web integration, P2P networks, text processing and information retrieval, as well as Web Services and Web infrastructure. After briefly introducing the WISA conference, the survey outlines the current activities and future trends concerning Web information systems and applications based on the papers accepted for publication.

Securing Fog Computing For E-Learning System Using Integration of Two Encryption Algorithms

Currently,the majority of institutions have made use of information technologies to improve and develop their diverse educational methods to attract more learners.Through information technologies,e-learning and learning-on-the go have been adopted by the institutions to provide affordability and flexibility of educational services.Most of the educational institutes are offering online teaching classes using the technologies like cloud computing,networking,etc.Educational institutes have developed their e-learning platforms for the online learning process,through this way they have paved the way for distance learning.But e-learning platform has to face a lot of security challenges in terms of cyberattacks and data hacking through unauthorized access.Fog computing is one of the new technologies that facilitate control over access to big data,as it acts as a mediator between the cloud and the user to bring services closer and reduce their latency.This report presents the use of fog computing for the development of an e-learning platform.and introduced different algorithms to secure the data and information sharing through e-learning platforms.Moreover,this report provides a comparison among RSA,AES,and ECC algorithms for fog-enabled cybersecurity systems.These Algorithms are compared by developing them using python-based language program,in terms of encryption/decryption time,key generations techniques,and other features offered.In addition,we proposed to use a hybrid cryptography system of two types of encryption algorithms such as RSA with AES to fulfill the security,file size,and latency required for the communication between the fog and the e-learning system.we tested our proposed system and highlight the pros and cons of the Integrated Encryption Schemes by performing a testbed for e-learning website scenario using ASP.net and C#.

Novel method of enhancing the key amount for FH systems

Based on the principle of information theory, a novel scheme of unequal-interval frequency-hopping (FH) systems was proposed. For cases of spectrum overlapping systems and non-overlapping systems, the implementation methods were presented and the security performances were discussed theoretically. Firstly, the definitions of absolute and relative key amounts of FH systems, equal-interval and unequal-interval FH systems were given. Then, the absolute key amount and relative key amount were analyzed for equal-interval and unequal-interval FH systems. The results indicated that the absolute key amount had become the key point in improving the security and secrecy of FH systems, especially in today's epoch of highly developed computer science and IC design technology. Theoretical analysis and practical examples showed that the absolute key amount of unequal-interval FH systems was generally over two orders larger than that of equal-interval ones when spectrum overlapping was allowable. Therefore, there was great superiority in enhancing the security and secrecy for the scheme mentioned.

Information Availability: An Insight into the Most Important Attribute of Information Security

This paper presents an in-depth understanding of Availability, which is one of the important pillars of Information Security and yet is not taken too seriously while talking about the security of an information system. The paper highlights the importance of Availability w.r.t. Security of information and the other attributes of security and also gives a realistic shape to the existing CIA triad security model. An in-depth understanding of the various factors that can impact the Availability of an information system (Software, Hardware and Network) is given. The paper also gives a categorization of the type of Availability that a system can have. The paper also explains the relation between Availability and other security attributes and also explains through what issues an information system may go while providing Availability.

Blockchain Technology Based Information Classification Management Service

Hyper-connectivity in Industry 4.0 has resulted in not only a rapid increase in the amount of information,but also the expansion of areas and assets to be protected.In terms of information security,it has led to an enormous economic cost due to the various and numerous security solutions used in protecting the increased assets.Also,it has caused difficulties in managing those issues due to reasons such as mutual interference,countless security events and logs’data,etc.Within this security environment,an organization should identify and classify assets based on the value of data and their security perspective,and then apply appropriate protection measures according to the assets’security classification for effective security management.But there are still difficulties stemming from the need to manage numerous security solutions in order to protect the classified assets.In this paper,we propose an information classification management service based on blockchain,which presents and uses a model of the value of data and the security perspective.It records transactions of classifying assets and managing assets by each class in a distributed ledger of blockchain.The proposed service reduces assets to be protected and security solutions to be applied,and provides security measures at the platform level rather than individual security solutions,by using blockchain.In the rapidly changing security environment of Industry 4.0,this proposed service enables economic security,provides a new integrated security platform,and demonstrates service value.

云原生医院信息集成平台可观测性能力体系的构建与技术实现

目的:基于医院云原生信息集成平台实践,阐述其可观测性能力的设计、实现及成效。方法:基于微服务架构,采用可观测性标准化解决方案OpenTelemetry项目作为技术框架,设计实现可观测性度量指标、追踪和日志模块功能。结果:实现了多维监控感知分析,快速故障定位响应,闭环业务链路追踪和全面实时日志管理。结论:平台可观测性能力的建设,支撑了医院集成业务的数据共享和协同,提升了系统运维效率,提高了系统的稳定性和可维护性,有效保障了医院业务连续性。

医院档案信息化建设中的信息安全管理现状及对策

信息安全在现代社会得到普遍关注,医院工作中产生的信息多样,其中相当一部分信息具有较高价值,需要重视其安全管理、保护。本文以医院档案信息化建设中的信息安全管理现状为切入点,在此基础上分析其安全管理问题和应对策略,包括强调容灾管理、明确管理权责、强调管理技术更新、完善管理框架,旨在服务未来医院档案信息化建设工作,为其综合管理提供更多支持。

信息安全应用技术专业产教融合人才培养质量评价研究

信息安全应用技术专业是当前社会急需的一种高新技术人才。为了培养高素质、应用型的信息安全人才,需要应用产教融合的人才培养模式。该模式将产业界与教育界结合起来,能让学生更好地了解市场的需求和行业的发展趋势,更加贴近实际,培养出更具实用性的人才。产教融合的人才培养模式还能帮助学生更好地了解企业的文化和工作环境,增强他们的就业竞争力。同时,企业也能由此获得更好的人才,提高企业的核心竞争力。文中围绕教学与实践、企业参与、学生综合技术技能、产学研有机结合等多维度的人才培养质量评价,展开了详细论述。

Network Structure and Reliability Analysis of a New Integrated Circuit Card Payment System for Hospital

This paper proposes a redundant network communication structure for the patient integrated circuit(IC)card payment system in a hospital information system(HIS),compares it with the network structure of normal hospital IC card system,and calculates the reliabilities of the related communications like the RS485communication and the Ethernet communication.The new structure can efectively promote the reliability of the hospital operation and ensure the payment collection when the Ethernet network is broken.The system is applied to a local hospital and the cost-performance rate is satisfactory during the application.

青岛大学附属妇女儿童医院多院区药事管理一体化模式的实践与成效探讨

目的:探讨多院区药事管理一体化管理方法,为提升医院药事管理质量提供参考。方法:以“多院区一体化”管理理念为指引,通过“总院垂直化、分院扁平化”管理策略,建立药师人力资源管理一体化、药学信息管理一体化、药事质量控制一体化的多院区一体化药事管理模式,包括制定《积分制管理办法》和《科研管理办法》,统一宣传平台和管理平台,建立标准化的药事质量管理体系。结果:通过实施药师人力资源一体化管理模式,优化了各院区人员结构,提升了药师队伍水平,有效配置了药师资源,并拓展了教研工作;通过实施药学信息一体化管理模式,提高了科室凝聚力和学科知名度以及管理效能;通过实施药事质量控制一体化管理模式,降低了抗菌药物使用率和次均药费,提升了药物不良反应监测水平。结论:从药师、药学信息、药事质控3个方面实施一体化管理,药师资源实现了最大化利用,各院区信息实现互通共享,各院区药事质量的均一性得到保障,有效促进了医院多院区同质化和一体化发展。

数据库一体机提升医院信息系统性能的探索与实践

目的医院信息系统的数据交互与信息量的快速增长,给系统的运维和服务性能带来了重大挑战。为了解决软件的性能瓶颈、提升医院信息系统的响应性能,某医院探索性引入了Exadata数据库一体机。方法通过硬件参数选型、高可用测试以及数据迁移等实现了数据库一体机的上线,通过对比上线前后数据库的I/O操作时间、SQL语句执行时间和业务系统模块加载时长评估效益。结果上线一体机后I/O操作的整体等待时长下降83.47%、相同语句的执行时间降幅超22%、业务系统加载时间平均下降43.74%。结论数据库一体机能够有效降低查询时间,加快业务模块的运行速度,能够帮助提升医院信息系统的性能。

大数据时代下的医院信息安全技术要点探讨

随着大数据时代的来临,以大数据为基础的云计算技术在社会各个领域得到了越来越多的应用,对社会各领域的发展起到了巨大的推进作用。信息安全技术极大地提高了医院的工作效率,也是医院信息安全工作的重要方法。近几年,随着医疗制度的不断深入,医院的发展也面临着越来越多的挑战和机会。在医院日常信息安全技术中,统计信息的信息安全技术工作是非常重要的一环。它牵扯到了大量的用户数据,将会对医院未来的发展产生重大影响。但是,随着信息技术的发展,人类生活的方方面面都面临着信息安全的各种问题。在大数据环境下,如何提升网络环境中的信息安全水平,保证信息的安全传输和存储,这已成为当前研究的热点问题。通过对医院信息系统(Hospital Information System,HIS)存在的安全隐患和目前HIS的信息安全技术状况进行分析,提出了HIS的安全保障措施,以确保HIS系统稳定、高效、安全地运行。

基于多院区HIS下互联网医院敏捷设计与应用

目的:针对多院区多医院管理信息系统(HIS)的建设难点,采用敏捷开发方式构建一体化模式以降低运行成本和提升管理效率。方法:结合各院区信息化建设水平现状和未来建设方向,采用敏捷开发的方式分步完成系统开发,通过一体化硬件部署和集中化管理,对互联网医疗资源进行整合。结果:成功构建多院区多个HIS下的互联网医院,提供了同质化互联网医院服务,满足了医院线上医疗的发展需要。结论:采用敏捷开发的方式,能够有效提升开发效率,并且有助于降低医院建设和管理成本,提升用户体验和医院管理效率。

PDCA在医院网络信息安全管理中的实践应用

调查分析了2020年全年及2021年3月浙江省肿瘤医院网络信息设备的网络安全数据;运用PDCA(Plan、Do、Check、Action)循环法,针对问题提出对策,在2021年3月至11月期间,通过头脑风暴、修订制度、配置网络安全设备等办法,对院内网络信息安全问题进行了全面的管控。实践效果表明,PDCA循环法是医院网络信息安全管理的有效方法。

SSPN-RA:基于SS-petri网的工业控制系统安全一体化风险评估方法

随着信息化与工业化的融合不断加深,工业控制系统中信息域与物理域交叉部分越来越多,传统信息系统的网络攻击会威胁工业控制系统网络。传统的工业控制系统安全评估方法只考虑功能安全的风险,而忽略了信息安全风险对功能安全的影响。文中提出一种基于改进petri网的工业控制系统功能安全和信息安全一体化风险建模方法(Safety and Security Petri Net Risk Assessment,SSPN-RA),其中包括一体化风险识别、一体化风险分析、一体化风险评估3个步骤。所提方法首先识别并抽象化工业控制系统中的功能安全与信息安全数据,然后在风险分析过程中通过构造结合Kill Chain的petri网模型,分析出功能安全与信息安全中所存在的协同攻击路径,对petri网中功能安全与信息安全节点进行量化。同时,通过安全事件可能性以及其造成的各类损失计算出风险值,实现对工业控制系统的一体化风险评估。在开源的仿真化工工业控制系统下验证该方法的可行性,并与功能安全故障树分析和信息安全攻击树分析进行对比。实验结果表明,所提方法能够定量地得到工业控制系统的风险值,同时也解决了功能安全与信息安全单一领域分析无法识别的信息物理协同攻击和安全风险问题。

智慧医院数据安全管理的基础建设与应对策略探讨

随着信息技术的迅猛发展,医疗信息系统储存着大量敏感的个人健康信息,这些信息的安全直接关系到患者隐私和医疗机构的信誉,因此,医院数据安全已经成为全球卫生体系中的一个重要议题。在分析智慧医院数据安全管理重要性的基础上,介绍了智慧医院数据安全管理的基础建设情况,提出了智慧医院数据安全管理的策略,为应对智慧医院数据安全的主要挑战提供参考。

基于动态密钥的车载以太网安全通信方法

针对车载以太网通信数据安全和密钥安全问题,创新设计了基于动态密钥的车载以太网安全通信方法.建立车载以太网安全威胁攻击树模型,分析其面临的安全威胁.构建应对安全威胁的车载以太网安全通信方法总体架构.设计动态密钥算法模型,生成隐式动态密钥.设计基于动态密钥的安全通信方法,将原始数据通过动态密钥加密传输,生成摘要并在接收端进行摘要对比处理.通过Linux上位机、I.MX6ULL单片机和Windows设备模拟域间通信及网络攻击过程,将密钥、密文、明文进行差异度对比,同时对通信过程进行攻击,借助Wireshark软件分析通信过程中的数据交互.结果表明:该方法能有效保证密钥安全及车载以太网数据的机密性、新鲜性、真实性和完整性,且能有效应对篡改攻击与重放攻击.

面向多院合并场景的信息系统重构实践

目的通过信息系统一体化融合建设,助推3家公立医院进行合并后的业务、管理融合。方法统筹设计信息系统及网络架构,建设一体化核心业务系统,并通过集成平台实现核心业务系统和其他异构系统的数据交互,建设集成融合的临床、运营和科研数据中心,加强数据应用。结果实现了业务层面应用模块基本统一、数据互联互通,为集团统一决策、统一管理提供有效的数据支撑。结论以信息化融合为目的,统筹设计信息系统,推动跨院区业务协同,实现医疗、信息资源共享,为集团临床业务整合、资产管理统一、科研持续发展打下了坚实的基础。

基于医院互联网平台在病案复印服务中存在的问题及改进建议

病案复印服务工作作为医疗服务的重要环节也面临着线上服务的推进。本文旨在分析医院互联网平台在病案复印服务的实际运用中存在的问题,如信息安全隐患、服务流程不顺畅、患者体验不佳等,并尝试提出改善方案,使线上病案复印工作可以为患者提供更高质量、更高效率、更加安全、更加体贴的服务。