1、 电子签名在医院信息系统中的应用The Application of Electronic Signature in the Hospital Information System广西壮族自治区人民医院 The Peoples Hospital Of Guangxi Zhuang Autonomous Region王桂榕May, 20072007年 5月数字世界的信息安全要素Information Security Factors in Digital WorldPAINl Privacy（保密性）-确认信息的保密，不被窃取- Ensure information Privacy and no
2、t be stolenl Authentication & Authorization（鉴别与授权）-确认对方的身份并确保其不越权-Authenticate users identity and ensure them dont exceed their authorityl Integrity（完整性）-确保你收到信息没有被篡改- Ensure the received information not to be tamperedl Non-Repudiation（抗抵赖）-有证据保证交易不被否认- Evidence to confirm the transaction be undenia
3、ble各种安全技术比较Comparison of all Kinds of Security Technology身份鉴别Authentication机密性Privacy完整性Integrity抗抵赖Non-Repudiation口令Password动态口令Dynamic Password 密码技术Encrypt Technology PKI/CAPKI/CA PKI成为可信网络的安全基础PKI is a Security Infrastructure for Credible Network公钥基础设施 (Public Key Infrastructure ,PKI)浏览器Browser E
4、-mail服务器Server防火墙Firewall目录Directory路由器Router远程访问控制Remote acc-ess Control安全电子邮件security EMAIL网络服务器安全security of network server文件签名document signatureVPNVirtual Priv-ate NetworkIP 骨干网络 IP backbone net医院信息管理系统（ Hospital Information System， HIS ）证书颁发机构： CACertificate issue institution: CAl 证书认证权威 (Certi
5、fication Authority:CA) l 提供网络身份认证服务Provide the identity authentication service for network-证明数字证书的有效性 Verify the validity of the digital certificatel 负责签发和管理数字证书Be responsible for issuing and manage the digital certificate -具体签发证书 Issue certification-对数字证书进行签名 Sign to digital certificate-并管理数字证书 Man
6、age digital certificate 证书颁发机构： CACertificate awarding institution:CAl具有权威性和公正性 Authority and Fairness -类似于颁发身份证的公安局Be similar to the police station which can issue the ID card -在网络世界中人人都信任 CAall people trust CA in the network world公安局证书注册机构： RACertificate registration institution: RAl 证书注册权威 (Certi
7、ficate registration Authority)-Registration Authorityl 受理用户的数字证书申请Accept the users application of certification-对证书申请者身份进行审核并提交 CA制证Verify applicants identity and submit applicant related information to CA- 类似于申请身份证的派出所Be similar to the local police station which apply for the ID card派出所证书注册机构： RACe
8、rtificate registration institution: RAl 提供证书生命期的维护工作Offer the maintenance work for the certificate life time-受理用户证书申请 (Accept the certificate application from users)-协助颁发用户证书 ( Assist to issue the certificate to users)-审核用户真实身份 (Verify the real identity of users)-受理证书更新请求 (Update certificates)-受理证书吊
9、销 (Revocation certificate )电子文档的安全需求The Security Requirement of Electronic Documentl 电子文档包括 (The electronic documents include) :各单位的申报审批报告、内部通知、公告等every institutions reports for application, internal notice, announcement and so on采用 Word、 Excel或网页等形式Use Word, Excel, homepage, and so onl 安全需求 (securi
10、ty requirement):需要多人对电子文档进行审批并签字Need more one person to exam and sign the electronic document需要实现 (Needs to realize) ：l 身份认证 Identity authenticationl 完整性 Integrityl 抗抵赖 Non-Repudiation文档签章 Documents signature针对电子文档的安全需求，广西 CA提供文档签章产品，解决电子文档的安全需求。l 开发了针对 Word、 Excel或网页等文档系统的插件 电子签章插件。l 使用电子签章插件和数字证书，
11、可以对 Word 、Excel或网页等文档进行签名，并添加电子化图章。l 点击文档上的电子化图章，可以验证签名者是谁，签名的信息包含哪些，以及电子文档是否被改动等。In view of the security requirement of electronic documents , GuangXi CA provides the product for document signature.l The plug-in unit for Word, Excel ,homepage and other document system - electronic signature plug-in
12、 unitl By electronic signature plug-in unit and certificate, we can sign to word, Excel, homepage or other documents, and add electronic stamp on documents.l Click the electronic stamp in this document, and confirm who signed, what information about the signature,as well as whether the document had been modified and so on.
