無線射頻識別技術之安全認證機制實作-以台中榮總實習醫學生電子護照為例

Security Authentication Implementation Using RFID technique-an example of TCVGH UGY intern's e-learning passport

趙興蓉(Sing-Rong Chao)

指導教授 ： 張志忠

嶺東科技大學/資訊學院/資訊科技應用研究所/碩士(2011年)

摘要

無線射頻識別技術( Radio Frequency Identification, RFID )近年來已成為熱門的資訊技術議題，於我們日常生活提供網狀資訊分享與交流，達到一種資訊無所不在的生活。
隨著科技的發展，全國醫療機構的資訊電子化的程度普遍提高，醫策會為畢業後一般醫學訓練之受訓學員訂定學習護照，主要目的為提昇住院醫師訓練品質，並落實內科專科醫師訓練，避免住院醫師訓練時有疏漏項目。每位學員之學習護照因內容包含病人資料，而病人資料牽涉私隱，資料一旦外洩，對病人影響甚大，故需要以嚴謹的認證方式，以避免非法人士將病人資料外洩。
本研究使用無線射頻識別技術，配置於使用者電腦之應用系統，並透過伺服器的資料庫進行識別，並開發一套畢業前一般醫學訓練電子學習護照系統。認證之訊息傳送運用高等加密標準( Advanced Encryption Standard, AES )之演算法，藉由 RFID 非接觸式晶片的技術及加密演算法的實現，開發出一套具安全認證機制之訓練護照系統，於實作系統時，將提供兩層認證機制，除個人之帳號密碼防護外，並提供每位學員電子標籤存取認證機制，達到安全防護目標。

關鍵字

RFID ； 電子學習護照 ； AES

並列摘要

Radio Frequency Identification (RFID) has attracted wide attention in information technology in recent years, and it provides network-like information sharing and exchange for ubiquitous use of information.
With the development of technology, the information digitization of medical institutions in Taiwan has continuously improved. Taiwan Joint Commission on Hospital Accreditation has established learning passports for trainees receiving general medical training after graduation, for the fundamental purpose of improving the training quality of resident physicians, and ensuring the physician training quality avoid incomplete training. The learning passports of trainees contain patient data which involve privacy; in case of unauthorized disclosure, it would have serious effect on the patients. Therefore, a strict authentication is required to avoid illegal persons revealing the patients’ data.
This study applied RFID to the application system of user computer, used the database of server for identification, and developed an electronic learning passport system for general medical training before graduation. The authenticated information is transferred using the Advanced Encryption Standard (AES) algorithm, a training passport system with security authentication mechanism is developed by realizing the RFID non-contact chip technology and encryption algorithm. There are two authentication mechanisms in the implementation of system, besides the users and password, there is a tag access authentication mechanism for each trainee to ensure security protection.

並列關鍵字

RFID ； e-learning passport ； AES

參考文獻

[1]Joy Tsai(民96) ，台灣信用卡受肯定屈臣氏Visa Wave入圍，Enjoy RFID technology，網址：http://enjoyrfid.blogspot.com/2007/05/visa-wave.html。

[2]Roy Want(民93)，未來生活的隱形僕人，科學人雜誌，24，網址：http://sa.ylib.com/read/readshow.asp?FDocNo=380&CL=4。

[3]台灣悠遊卡公司網站，網址：http://www.tscc.com.tw/。

[4]宋美美(民96)，醫院危機傳播之個案研究，南華大學非營利事業管理研究所論文。

[5]李書璇(民100)，護士將病患剖腹照po網 被罰1萬2 停業1個月，中廣新聞網。