脑卒中信息管理系统权限控制的设计与实现

Authority Management Design and Realization of Stroke Information System

摘要:

随着医疗信息技术和互联网的飞速发展,医疗信息资源的安全越来越备受关注,权限管理为解决信息系统安全性问题提供了重要保障,为防止非法获得或破坏信息起着重要的作用;脑卒中信息管理系统存放大量脑卒中患者的治疗信息,为医生发现其潜在的疾病提供依据;针对脑卒中信息管理系统复杂的权限控制需求,提出了一种权限控制方法,采用SpringMVC+Hibernate后台框架,Bootstrap前台框架技术,以及B/S结构软件设计中的精粒度权限管理思路,实现了脑卒中软件系统中的权限管理;同时将权限控制设计为一套与业务无关的权限管理组件,该组件不需要做代码级的更改可以轻松的移植到其它Web系统中;结果表明,系统能够满足权限控制需求,具有良好的可操作性、灵活性和移植性。

Abstract:

With the rapid development of medical information technology and Internet, more and more attention has been focused on the security of medical information. Privilege management provide an important guarantee to solve the security problem of information system, and it play an important role preventing illegal access to information. Stroke information management system stores large number of treatment information of stroke patients, which provide the basis for the doctors to discover the underlying diseases. Aiming at complex authority control requirements of stroke information management system. In this paper, it proposes a privilege control method, which adopts SpringMVC + Hibernate backstage framework and combined with technology of Bootstrap foreground framework, introducing the fine granularity of right management method in the B/S structure software design. At the same time, the privilege control is designed as a set of business independent management components, which can be easily transplanted to other Web systems without changing the code level. The results show that the system can meet the requirements of the authority control, and has good operability, flexibility and portability.