医院信息系统等级保护安全体系设计

针对医院的核心HIS系统,根据国家等级保护的要求而设计的安全体系方案.分别依据物理层、网络层、主机层、应用层的不同特点,结合国家等级保护标准,针对性的提出安全解决方案,并给出了各个安全节点需要实现的功能要求.通过实践检验的,将等级保护建设的要求真正落实到医院HIS系统安全建设中.充分结合实际安全需求的、全面符合等级保护建设要求的、战略策略高度统一的解决方案.

A System Design of Classified Protection System for Hospital Information System

This paper provides a design of security system for hospital information system （HIS）, the core of a hospital, based on the standards of national information system security classified protection. Combining the national standards and the various characteris- tics of different layers, that are physical layer, network level, host layer and application layer, we present different security solutions accordingly and the requirements of function of each security node. The solution has been proved by practical testing and imple- mented the standards of national intbrmation system security classified protection, which integrates with the actual security needs, contbrms to the national standards and unites strategy and tactic highly.