摘要
目的:综合利用安全管理体制、安全技术管控、安全运营手段,达到在国家健康医疗大数据中心(北方)(以下简称"北方中心")保障健康医疗数据汇聚、传输、存储、处理、交换、销毁全生命周期安全的目的。方法:以法律法规、行标国标、管理制度规范为指导;以覆盖健康医疗数据全生命周期各阶段的安全技术管控体系为依托,包括IPSec VPN安全隧道、透明加密、数据脱敏、数据库安全审计、数据库安全运维、数据库防火墙、数据水印等;以常态化、可闭环的安全运营体系为抓手,保障健康医疗数据的安全。结果:建立起基于用户隐私保护的健康医疗数据安全闭环管理体系。结论:通过技术、管理、运营的闭环管理流程,达到保护健康医疗数据全生命周期安全的目的。
Objective:Comprehensive use of safety management system,safety technology control,and safety operation means to ensure the whole life cycle security of the aggregation,transmission,storage,processing,exchange and destruction of health and medical data in the National Health and Medical Big Data Center(North)(hereinafter referred to as the North Center).Methods:Guided by laws and regulations,industry standards,national standards,and management system specifications;relying on the security technology management and control system covering all stages of the health and medical data life cycle,including IPSec VPN security tunnels,transparent encryption,data desensitization,database security audits,and databases security operation and maintenance,database firewall,data watermarking,etc.;with normalized,closed-loop security operation system as the starting point,to ensure the security of health and medical data.Results:Establish a closed-loop management system for health and medical data security based on user privacy protection.Conclusion:Through the closed-loop management process of technology,management,and operation to achieve the purpose of protecting the safety of health and medical data throughout their life cycle.
作者
吴文昊
李占强
席现国
胥婷
WUWen-hao;LI Zhan-qiang;XI Xian-guo(Lianren Health Big Data Technology Co.,Ltd.,Shanghai 201210,P.R.C.;不详)
出处
《中国数字医学》
2021年第7期13-17,共5页
China Digital Medicine
基金
国家自然科学基金重大研究计划(编号:91846302)
关键词
健康医疗大数据
数据安全
隐私保护
闭环管理
安全隐私计算
health and medical big data
data security
privacy protection
closed-loop management
security and privacy computing
