建構居家看護系統資料傳輸之安全機制

Establishing a Secure Data Transfer Mechanism for the Home-care System

林佳豪(Chia-Hao Lin)

指導教授 ： 徐良育

中原大學/工學院/醫學工程研究所/碩士(2003年)

https://doi.org/10.6840/cycu200300425

摘要

摘要

近年來，隨著網際網路與無線傳輸技術的蓬勃發展，更使得居家看護系統的實現成為可能。而本研究目的為，在居家看護系統中，探討訊號在網路傳輸的過程，對於可能面臨到的安全問題，事先加以防範；同時結合多方面的安全機制，使整個居家看護系統能在一個安全的環境下運作。
本研究系統完成包括病患資料的傳輸、傳輸的安全性、資料庫的建立與電腦網路連結等機制。在網路連結部分，採用主從式架構(server/client architecture)作為居家住所與醫療院所之通訊協定。利用WinSock建立網路連線，當連線建立後，使用FTP檔案傳輸的模式來傳送資料。在資料傳輸方面，傳輸方法有三：1.正常狀況之定時傳輸、2.病患自行判斷的傳輸及3.訊號異常時的自動傳輸。在傳輸安全方面，藉由密碼學系統的概念，對傳輸資料加密以及對使用者身份做認證，來達成傳輸資料安全性的目的。
本研究針對安全機制設計四個實驗進行測試，在本機安全上，使用加密註冊認證檔，搭配使用者密碼可以有效的防止沒有註冊認證檔或是未經註冊之使用者，啟動本系統。在身分認證上，使用者需要通過伺服端（醫院）認證通過，才可將資料傳遞出去。在傳輸資料安全上，實驗證明，由於所有傳遞之資訊均經加密保護，即使以sniffer 劫取傳輸封包，分析封包內容，亦無法藉由劫取到封包，還原至原始資料。Ddos實驗結果顯示，除非網路上壅塞情形嚴重，否則並不影響本系統運作。
本研究為一個專門為居家看護系統所打造的一個安全性之網路傳輸系統，目前在功能性上僅提供三通道訊號傳輸，在未來可視需求性增加通道數；除此之外，更可增加文字傳輸、影像傳輸等功能，使醫生能對病患提供更完整的診斷與醫療諮詢，建立一個良好的評估與溝通管道，讓病人可以及時得到正確的診斷救護，進而提升醫療品質。

關鍵字

網路傳輸 ； 資訊安全 ； 加密 ； 居家看護

並列摘要

Recently, as internet and radio frequency (RF) transmission technologies develop rapidly, it has been more feasible to implement a home-care system. The purpose of this study is to prevent security threatening when data is transferred over the network over the home-care system by combining multiple security mechanisms. Thus, a secure environment for home-care system can be established.
The functions of the system include transmission of biomedical signals, security on transmission, creation of databases, and establishing internet connection. The client/server architecture is used as the communication protocol between home and hospitals. After a Winsocket connection is established, data is transferred using files transfer protocol (FTP). Regarding the transmission, there are three kinds of transmission for different situations: normal and periodical transmission, transmission initiated by patients and automatic transmission when abnormal signals are detected. Regarding the security, based on concepts of encryption theory and encryption system theory, the transmitted data is encrypted and the user is identified to achieve the goal of securing data during transmission.
This study designed four experiments to test the security mechanism. On the safety of client, the use of registered authentic files and user’s password can prevent users having no registered authentic files or unregistered users to start up the home-care system. On the user’s authentication, the user can transfer the biomedical signal only when he pass the registration process of the server ( hospital ). On the safety of transmission, due to all the transferred date are encrypted, even if the “sniffer”, a network monitoring software, catches the transferred packet, it can’t return all packets to the original condition and obtain the correct message. In the event of Ddos attack, unless the network is congested very seriously, it will not effect the operation of the home-care system.
In conclusion, this study establishes a secure network system specifically for home-care systems. Functionally, up to present, the system provides only three data transmission channels, it is capable to increase the number of the channels based on the system requirement in the future. Also the functionality of transmission of text and image can be enhanced, so that doctors are able to provide their patients with more comprehensive diagnoses and consultations, better evaluations and interaction, and timely and correct treatments. Thus, the quality of medical care can be improved.

並列關鍵字

information security ； home-care ； encryption ； internet transmission

參考文獻

[11] 錢逸, “高度安全性轉診系統分析與建置”,中原大學醫學工程研究所碩士論文,民國九十一年八月.

[24] 涂清源, ”建構無線傳輸與網際網路之居家看護系統” , 中原大學醫學工程研究所碩士論文,民國九十一年七月.

[1] J. Bai, Y. Zhang, D. Shen, L. Wen, C. Ding, Z. Cui, F. Tian, B. Yu, B. Dai and J. Zhang, “A Portable ECG and Blood Pressure Telemonitoring System”, IEEE Engineering in Medicine and Biology, July/August 1999.

[2] A. Kleijhorst, E. T. Van der Velde, M. H. Baljon, M.J. Gerritsen, G. M. Oon, “Secure and Cost-Effiective Exchange of Gardiac Images over the Electronic Highway in the Netherlands”, Computers in Cardiolody , IEEE , (1997) pp. 191 - 194.

[3] C. Safran, H. Goldberg ,”Electronic patient records and the impact of the Internet” ,Internation Journal of Medical Informatics 60(2000)pp.77-83