基于RBAC权限模型实现医院计算机信息管理的研究

Research on Hospital Computer Information Management Based on RBAC Authorization Model

摘要:

针对当前医院计算机信息管理系统遇到的安全性问题,本文将RBAC(基于角色访问控制)基本思想融入了医院信息系统管理,有效地减少授权管理的复杂性。在本系统设计中,通过创建角色集合,能够有效地减少系统开销,进一步简化角色权限管理。本系统还对设计的数据库进行优化,能够使管理者根据设计目标和需求,在用户和角色之间、角色和权限之间构造一定的关联性,进而实现医院计算机信息管理系统的功能,减少其繁琐的应用步骤,进而满足健全医院计算机信息系统的需要。将角色权限访问模型应用到管理系统中,能够对医院用户进行角色分配,当用户被分配到适合的角色时,直接获得该角色本身拥有配套的权限,完成用户角色激活后,对各功能模型进行相应的操作,提高了安全性。实验表明,本方法比传统方法具有较高的数据管理能力。

Abstract:

Aiming at the security problems encountered by the current hospital computer information management system, this article incorporates the basic idea of ??RBAC (role-based access control) into the management of hospital information systems, effectively reducing the complexity of authorization management. In this system design, by creating a role set, the system overhead can be effectively reduced and the role authority management can be further simplified. This system also optimizes the designed database, which enables managers to construct a certain relationship between users and roles, roles and permissions according to the design goals and requirements, thereby realizing the functions of the hospital computer information management system and reducing its Cumbersome application steps to meet the needs of a sound hospital computer information system. Applying the role permission access model to the management system can assign roles to hospital users. When a user is assigned to a suitable role, the role directly has the corresponding permissions. After the user role activation is completed, each function model is performed. Corresponding operation improves safety. Experiments show that this method has higher data management ability than traditional methods.