脑卒中医联体云平台数据安全与隐私保护研究

发布时间：2018-07-07 15:30

本文选题：医联体 + 云平台　；参考：《北京交通大学》2016年硕士论文

【摘要】：随着云计算技术的高速发展和医疗体制的改革,医疗健康行业上的信息共享也随之不断发展。脑卒中云平台即针对脑卒中病,利用云计算技术搭建的信息共享平台,目的是实现医联体内的各级医院间的信息共享与交互。然而,脑卒中医联体云平台还存在着一些安全隐患,随着用户的越来越多,其暴露出来的隐私安全问题也越来越多。在平台内部用户账户管理、身份认证以及用户访问和数据传输共享方面,急需一套切实有效的方案来确保云平台中的数据安全和隐私保护。本文以脑卒中医联体云平台的数据安全与隐私保护问题为研究对象,提出了一套数据安全与隐私保护方案。首先,根据云计算和医疗信息的特点,分析云计算环境下医疗系统所面临的安全威胁,以及脑卒中医联体云平台在数据安全与隐私保护方面的需求。其次,根据需求在平台内部提出了身份认证、访问控制和用户行为跟踪与审计的三层防护体系；在平台外部运用物理隔离技术、VPN网络和PKI相关技术确保用户的安全访问以及数据的传输安全。最后,针对用户的隐私保护,提出一种面向医联体云平台用户的访问控制模型,该模型引入用户行为信任等级和个性化授权的概念,将RBAC中角色激活和用户行为的信任值相结合,并给出信任等级的计算方法,实现云计算环境下的动态授权；在RBAC模型的基础上添加个性化授权策略,实现了医疗资源的细粒度访问控制。本文在现有研究的基础上提出了一套云平台数据安全与隐私保护方案,从整体上保护脑卒中云平台中的数据安全。同时对方案中的访问控制模型进行了优化,并经过理论分析和实验表明该模型在安全、技术、经济上都具有较大的优势。从而为解决脑卒中医联体云平台中的数据安全与隐私保护问题提出宝贵的意见,也为医联体模式的推广以及其他疾病的医联体数据安全提供一定的借鉴。
[Abstract]:With the rapid development of cloud computing technology and the reform of medical system, the information sharing in health care industry is also developing. Stroke cloud platform is aimed at stroke disease, using cloud computing technology to build information sharing platform, the purpose of which is to achieve information sharing and interaction among all levels of hospitals in the United medical system. However, there are still some hidden security problems in stroke conjoined cloud platform. With the increasing number of users, there are more and more privacy security problems exposed. In the aspects of user account management, identity authentication, user access and data transmission sharing within the platform, an effective solution is urgently needed to ensure data security and privacy protection in cloud platform. In this paper, the data security and privacy protection of stroke conjoined cloud platform is studied, and a set of data security and privacy protection scheme is proposed. Firstly, according to the characteristics of cloud computing and medical information, this paper analyzes the security threats faced by medical systems in cloud computing environment, and the requirements of stroke conjoined cloud platform in data security and privacy protection. Secondly, according to the requirements of the platform, three layers of protection systems are put forward, such as identity authentication, access control, user behavior tracking and auditing. Physical isolation technology and PKI related technologies are used to ensure the secure access of users and the security of data transmission outside the platform. Finally, aiming at the privacy protection of users, an access control model for users in medical cloud platform is proposed, which introduces the concepts of user behavior trust level and personalized authorization. This paper combines role activation with trust value of user behavior in RBAC, and gives a method to calculate trust level to realize dynamic authorization in cloud computing environment, and add personalized authorization strategy based on RBAC model. The fine granularity access control of medical resources is realized. Based on the existing research, this paper proposes a data security and privacy protection scheme for the cloud platform, which can protect the data security in the stroke cloud platform as a whole. At the same time, the access control model in the scheme is optimized, and the theoretical analysis and experiment show that the model has great advantages in security, technology and economy. It can provide valuable suggestions for solving the problem of data security and privacy protection in stroke TCM conjoined cloud platform, and also provide some reference for the promotion of medical conjoined model and the safety of medical conjoined data for other diseases.
【学位授予单位】：北京交通大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：R743.3;TP309

【相似文献】