醫療資訊系統之資訊安全危安因素探討以台北某醫學中心為例

Explore those factors that threaten the security of medical information syst

黃國華(Kuo-hua Huang)

指導教授 ： 范懿文

國立中央大學/管理學院/資訊管理學系碩士在職專班/碩士(2007年)

摘要

隨著資訊科技不斷創新與演進，醫療資訊系統發展也日益受到重視。醫療服務業亦不斷採用數位產品作為輔助，如：電子病歷系統、RFID（無線射頻辨識）、遠距監控、PHS簡訊系統等等，都不斷被廣泛應用於醫療服務流程之上。因此，近來各醫療院所不斷導入新資訊技術。但鑑於醫療與資訊原屬於不同知識領域，各有重點議題。然而醫療是非常勞心及勞力的產業，需長時間為病患服務。要不斷追求醫學新知下，在心有餘力於追求資訊科技發展與應用之際，絕大多數醫療人員常疏忽資訊安全這方面訊息！另一面在招聘熟悉醫療與資訊知識之資訊部門人員，而資訊人員常因醫院工作繁重等因素離職率高，所以醫療資訊系統資訊安全方面有很多疑慮空間，因此本研究針對醫療資訊系統之資訊安全危安因素探討。
本研究以個案醫院進行人員訪談、實地觀察、現有文件查閱及資訊系統測試等方式，對現況及潛在資安問題加以分析後，提出相關建議，後續可作為其它醫院精進資安作為參考。

關鍵字

危安因素探討 ； 醫療資訊 ； 資訊安全

並列摘要

With the constant innovation and progress of information technology, the development of medical information system has been paid more attention to day by day. The industry of medical service also follows the trend to adopt digital products as assistants, such as electronic anamnesis system, radio frequency identification (RFID), off-site monitoring, short message system (SMS) of PHS, etc. All these related techniques are now widely applied to the procedures of medical service.
Therefore, almost all medical institutions nowadays keep introducing new information techniques. However, medical industry and information science are two quite different knowledge domains with different focus issues. Medical service is an industry that requires both mental and physical efforts to take care of patients. In addition, in order to pursue up-to-date medical knowledge, most medical staffs cannot take too much time to look after the development and application of information technology, therefore, they may ignore the updated status about information security. On the other hand, as to the recruitment of workers of IT department in medical institutions, we must notice that the turnover rate is usually very high due to heavy loading in the department. This may result in the concern of information insecurity. Therefore, this research is aimed to explore those factors that threaten the security of medical information system.
The research is a case study based on the interviews of medical staffs, observation on field, documental analysis, and the testing of medical information system of a large public hospital in Taiwan. The author finally proposed some recommendations for further improvement of medical information security.

並列關鍵字

information technology ； information security ； medical information system ； RFID ； electronic anamnesis system

參考文獻

[中文部分]

1、 CNS17800資訊技術-資訊安全管理系統規範，經濟部標準檢驗局，91年12月5日公布。

2、朱炎智（民92年），企業危機管理 第二版，五南出版社。

3、吳昭新、李友專、邱文達、莊逸洲、郭旭崧、唐大細、劉建財、劉立、徐建業、邱泓文、顏志展、龍安靖、范碧玉、林秀真、萬序恬、王高倫、許明暉、賴燕賢、張慧朗合著（民90年），醫療資訊管理學，偉華書局有限公司。

4、黃彥達(民93年)，資訊安全最佳實務，藍鯨出版社，5-9頁。