With the rapid development of info校花rmation construction in China,雪睡 the development of medical and he公地alth information has also entered a p拿員eriod of accelerated development. Fr都那om the early stage of single mach機業ine and single user application to th煙讀e application of department leve微弟l and hospital level management i信海nformation system; From the cente線媽r of finance, medicine and manageme匠著nt to the application of clinic在員al business support and electronic me村討dical record centered on patie志讀nt information; From limited applicati地路on in hospital to regional medic算我al informatization application. Multi 答影business integration builds a comple樂作x application and digital process of 習吃medical information. With the applicat紅吧ion of his, RIS, LIS, CIS, PACS, CP銀麗R and other systems, it provides 信短an information foundation for 亮關the efficiency, quickness and con藍購venience of the medical and health ind河影ustry, eliminates the phenomenon of "th市身ree long and one short", and effe紙店ctively solves the problem of "diff拿她icult to see a doctor" for the mas錯章ses.

The high concentration of informa懂煙tion makes the security of data more an校司d more valued. As an important ind從通ustry related to people's livelihoo話畫d, once the data is leaked, it w好呢ill have a negative impact on the 算是society and become a hot issue concer懂到ned by public opinion and the media. 店林Driven by huge commercial interests家銀, the databases of the medical開為 industry have to face the double conta為關inment of internal and external threats舞錯, especially the illegal "unifie件裡d party" behavior for commercial pu她校rposes, which not only has a serious 都家impact on the public image and autho房影rity trust of the hospital, bu制爸t also divulges personal infor一現mation and damages the personal媽爸 interests of patients, Make the ori熱們ginally tense topic of doctor-p時體atient relationship further.

Industry demand

Through the investigation of the a車西ctual situation of many hospitals, 亮現the hospitals are mainly faced with 購問the following problems:
1. More and more people have access 長子to core data, including internal IT op但懂eration and maintenance person志樂nel, medical personnel, third-pa短銀rty outsourcing operation and maint讀黃enance companies and application develo靜我pers. How to supervise and aud數城it the operation of core assets so tha黃問t legitimate people can do legit間老imate things;
2. The means of illegal party unif放書ication are specialized and diver得匠sified. From the source, medical s內筆taff, pharmacies and operation and ma秒匠intenance personnel have the op睡畫portunity to complete the party unifi還睡cation. From the means, from the 上分early manual party unification to pr離森ofessional party unification software村可, the party unification can be comple師關ted very quickly by running the prog西微ram on one terminal. How to super裡關vise and audit the operation of core as嗎務sets, Preventing the leakage of inform商習ation is a pain point that the hospital錯河 has been pressing to solve.
The above two problems can not 科笑be solved through the existing network 那大level security products. From th相服e root analysis, these two problems ar舞唱e actually related to the data and 兵知management system of the application友相 system. The above problems ca聽山n not be solved simply by the underly好城ing network security products, which c現月an be summarized into the followin暗冷g reasons:
1. The management of various user na件司mes and passwords in the internal cor愛快e system of the enterprise is loos外和e;
2. After a security incident o藍海ccurs, it is impossible to quickly 報場and accurately locate the source讀和 of the incident, let alone sto好讀p it in time;
3. No operation records can be市電 audited afterwards. Therefore, 銀通I don't know how to patch the security高線 vulnerabilities of the system;
4. Due to the lack of one-to-on冷聽e identity authentication, even 校知if the source of the security 火船incident is found, it can not loc書術ate the natural person.