Design Of The Security In The Electronic Medical Record Sharing System

According to the practical needs of common people, it is badly needed to establish the electronic medical record sharing system between hospitals, which is also a necessary direction in the process of medical informationization. However, such systems have progressed slowly. An important reason is the absence of a safe and security system.In this thesis, the study aims to discuss how to set up a security mechanism in the electronic storage and transmission of medical records to ensure that their visit is not illegal and modify electronic medical records and the contents of the integrity of the non-repudiation to provide a viable solution.The thesis has carefully analyzed the operation of electronic medical record sharing system, using Elliptic Curves Cryptography as the foundation of PKI system and the AES encryption standard. It also has tackled every security problem involved in the sharing flow and proposed a set of complete electronic medical record sharing system safety solution, including:1. Registered users login and security: the use of ECC have a public key and private key to generate a digital certificate, the realization of user identification.2. Secure transmission of electronic medical records: the envelope of digital transmission method, which uses AES encryption algorithm to encrypt, the key receiver with a public key encryption, to safeguard the security of its transmission.3. Non-repudiation mechanisms: the integrated use of digital signature technology and digital time-stamp affixed to achieve anti-repudiation mechanisms.4. Authorized reasonable control: the role of digital certificates as an extension of the CA to rely on digital signatures to ensure its authenticity.The design of solution accomplished, I Invite the doctors of hospital and information management staff to assess it, the assessment results show that this plan might guarantee the electronic medical record sharing system's security well.