- 學位論文
以PKI機制建構醫療影像傳輸安全系統
Establishment of the picture archiving signature system using PKI mechanism of HCA
摘要
為促進醫療資訊電子化的普及應用，並加強醫療資訊安全的防範措施，衛生署建立以公開金鑰(Public Key Infrastructure, PKI)為基礎的醫療電子認證機制，以確保醫療資訊電子化的作業安全，衛生署已陸續完成建置「醫療憑證管理中心」，並開始陸續研究並使用『醫事機構』及『醫事人員』憑證IC卡，其主要目的在確保民眾就醫所產生的私密性或敏感性資料外洩，並配合相關法令之完備，更積極規劃電子病歷等相關醫療資訊化應用。 本論文研究為如何利用目前DICOM標準以及PKI的架構，並配合衛生署醫療憑證管理中心的建置以及醫事人員卡的使用，並建立醫學影像傳遞的安全結構，是為改善醫療現狀及提昇醫療品質之重要工作。 因此本文利用HCA PKI機制/HPC IC卡、數位簽章以及數位信封的概念融入放射線診斷科之作業，建構PACS/RIS相關作業主要成員及相關憑證作業以確立院內 PACS/RIS 系統登錄作業之身份認證及醫療機構間影像資料傳遞機制，並達到以醫事機構憑證進行影像資料之簽章作業，最後探討本研究之規劃實用性是可行的，為如何提昇使用效率與執行率則有待進一步之探討。
並列摘要
In order to promote the use and application of the electronic medical information, and to improve the preventive measures for the medical information security, the Department of Health (DOH) has set up a PKI (Public Key Infrastructure) based medical electronic certification mechanism to ensure the operational security of medical information. The DOH established the Health Certification Authority (HCA) successively and in turn conducted studies to initiate the IC card system for medical institutions and medical personnel. These measures protect highly sensitive and confidential medical information from unauthorized individuals. Furthermore, the DOH has also taken the initiative on medical information application such as Electronic Medical Record (EMR). This study in coordination with the foundation of the Health Certification Authority investigates the improvement in current medical situation and enhancement of the medical quality, and focuses on establishing a firm structure for Picture Archiving and Communication System (PACS) by combining DICOM standards with PKI infrastructure. This study integrates the HCA (PKI mechanism), HPC (IC Card), Electronic Signature and Digital Envelope to certify staffs in the Department of Diagnostic Radiology who were associated with PACS/RIS, to confirm the ID certification in the PACS/RIS log-in system, and to ensure a PACS mechanism between hospitals.