在健康数据助推健康产业发展环境下医疗数据安全开放应用框架研究

发布时间：2018-02-28 02:59

本文关键词： 医疗数据安全开放 PIA　出处：《北京协和医学院》2017年硕士论文　论文类型：学位论文

【摘要】：背景:健康产业的发展,可以扩大资源供给,不断满足人民群众多层次、多样化的健康需求,提高人民群众获得感、幸福感,增强经济发展新动力。数据已成为国家基础性战略资源,也是重要生产力,健康产业的发展离不开健康数据的支持,而数据安全问题严重影响健康数据的应用发展。为了更好地推动健康产业的发展,我们需要着手解决健康数据的安全问题。方法:本文以医院中的医疗数据为研究对象。首先,我们基于RBAC(Role-Based Access Control,基于角色的权限访问控制)来设计数据应用对照表;然后,借鉴国外PIA(Pirvacy Impact Assessment,隐私影响评估),并同我国实际结合,制定医疗数据安全管理办法;最后,把数据应用对照表同医疗数据安全管理办法相结合,制定医疗数据应用框架。结果:本文研究制定的医疗数据应用框架不仅操作简单、实用性强,而且能根据风险严重性程度分成不同保护级别的模式,便于对医疗数据进行等级管理,确保数据的安全。意义:该医疗数据应用框架实现医疗数据价值同时又能很好地保护数据的安全,满足了我国现阶段应用发展健康数据中所面临的数安全问题。该框架极大缓解了我国目前面临的多重疾病并存、多种健康影响因素交织的复杂局面,促进了我国医疗卫生事业的发展和满足了人民群众的健康需求。
[Abstract]:Background: the development of the health industry can expand the supply of resources, continuously meet the multi-level and diversified health needs of the people, and improve the people's sense of obtaining and happiness. Data has become a national basic strategic resource and an important productive force. The development of the health industry cannot be separated from the support of health data. In order to promote the development of health industry, we need to solve the problem of health data safety. Methods: this paper takes the medical data in hospital as the research object. We design the reference table of data application based on RBAC(Role-Based Access control). Then, we draw lessons from overseas PIA(Pirvacy Impact assessment, privacy impact assessment, and combine with our country to formulate medical data security management method. Combining the data application reference table with the medical data safety management method, the medical data application framework is established. Results: the medical data application framework studied in this paper is not only simple to operate, but also practical. Moreover, it can be divided into different protection levels according to the severity of the risk, so as to facilitate the hierarchical management of medical data. Ensure the security of data. Meaning: the medical data application framework to achieve the value of medical data while at the same time to protect the security of data, This framework greatly alleviates the complex situation of the coexistence of multiple diseases and the intertwining of many health factors in our country. Promote the development of medical and health services and meet the health needs of the people.
【学位授予单位】：北京协和医学院
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP309.2;R-05

【参考文献】