【摘要】 目的通过比较和运用几种在医院信息系统(HIS)有潜在和代表性作用的保密安全技术,提出解决HIS的海量数据加密与电子签字的系统方案。方法采用X.509协议,报文特征摘提方法(ABS)、分布系统永久密码本(PPDS),设计和倡议使用基于X.509协议的XML格式表达的数字证书,并且研发出数字签名与信息保密构件控件系统软件包。结果PPDS联合ABS数字签名系统方案与实例解决了包括电子病历签名和信息加密在内的多种医院信息签名与保密问题。技术上可满足法律关于鉴别、完整性、抗抵赖性和保护隐私方面所提出的需求。结论医疗文档的电子签名、加密存储与传输,以及与医院信息管理相配的证书认证体系,是医院信息系统重要并可行的组成部分,并将成为一个新的研发领域。更多还原

【Abstract】 Objective Compared among several typical techniques which possesses potential and presentative benefits to hospital information system (HIS), to establish a systematic solution for the electronic signature (ES) and the encryption for sea-like amount of information on HIS. Methods the protocol of X.509, massage abstract (ABS), permanent pad for distributed system (PPDS) and extensible markup language (XML) was use; Digital certificate formed with XML was designed and recommended; A software packet with component and control for ES and message-encryption was researched and developed. Results The systematic solution for ES with PPDS and ABS, and its application-case solved various kinds of message security problem existing on HIS, including ES and the encryption for electronic medical record. It may be technically satisfy to the requirement being asked from law concerning to the authentication, integrity check, non-repudiation and guarantee of privacy. Conclusion Electronic signature, security storage and transmission for medical document as well as the system of certificate authority is important and practicable for hospital information administration and is going to become a new area of the research and development on HIS.更多还原