Evaluation and Construction of Commercial Cryptographic Security in Medical and Health Field
LIU Yang1, KANG Yaxi2, FENG Biaobin1
1. Department of Information Management, Haikou Affiliated Hospital of Central South University Xiangya School of Medicine
(Haikou People’s Hospital), Haikou Hainan 570208, China; 2. Department of Information Engineering, Hainan General Hospital
(Hainan Affiliated Hospital of Hainan Medical University), Haikou Hainan 570311, China
Abstract：Objective To standardize the evaluation and construction of commercial cryptographic security in medical and health
field, and to solve the problems that commercial cryptographic construction can not be widely covered in the medical environment
and the whole process of life cycle, to achieve the goal of iterative refinement of commercial ciphers. Methods Following the
principles of promoting construction by evaluation, promoting application by evaluation, promoting reform by evaluation, three-step,
and one-evaluation, the method of combining cryptography and management, foundation and deployment was used. The measures
was implemented for the deep integration of overall planning, distributed construction, operation and cryptographic evaluation. The
method of basic support, technical support, and overall management of cryptographic security construction was established. And
then the deployment of cryptographic products was completed. Results Through the continuous improvement of cryptographic
security, the hospital network security had the ability of situation awareness, and the data security had the ability of certificate
authority electronic signature tamper-proof. The ability of cryptographic security protection has been improved, the medical business
interconnection, security interworking have been achieved, and the stable operation of the system and data security without leakage
were ensured. Conclusion Commercial cryptographic plays an important role in network security protection, which can build up the
last defense line of cryptographic security in intelligent hospital and ensure the security of patients’ medical data.
刘阳1，康亚西2，冯标斌1. 医疗卫生领域商用密码安全的评估与建设[J]. 中国医疗设备, 2024, 39(4): 78-82.
LIU Yang1, KANG Yaxi2, FENG Biaobin1. Evaluation and Construction of Commercial Cryptographic Security in Medical and Health Field. China Medical Devices, 2024, 39(4): 78-82.
