摘要
今天的医院信息系统(HIS)与先进的计算机、网络、通讯技术融合的速度越来越快,这虽然大大提升了医院各项业务信息化程度,但受传统信息安全策略固有缺陷的限制,同时也增大了越权行为、信息泄露信息安全事故的可能性。为解决这些问题,在信息系统安全目标和安全需求分析的基础上,提出了一种基于时间、空间环境制约因素的角色访问控制技术和一种在分布式环境下层次化的授权策略。本模型在角色访问控制模型的基础上,增加了时间和空间两个制约因素,能够使医院信息系统更加安全,降低访问控制事故的风险,为网络安全防护产生更大的技术效益。
Nowadays,advanced computer,network and communication technologies are greatly adopted in HIS,which enhanced information degree of hospital＇s business.But with inherent defects of traditional information safety strategy,it is easy for employees to overstep and give away information.To solve these safety problems,gives a role access control strategy based on time and location,based on research of safety targets and requirements of information system.Also,gives a hierarchical authorization strategy under distributed environment.Based on role access control strategy,this strategy adds time and space two constrains,so as to make HIS more safe,reduce role access control risks,and provide more technical benefit to network safety protection.
出处
《计算机技术与发展》
2010年第6期144-147,共4页
Computer Technology and Development
关键词
医院信息系统
角色访问控制策略
授权策略
信息资源
信息安全
hospital information system
role access control strategy
authorization strategy
information resource
information safety
