切换至 "中华医学电子期刊资源库"

中华妇幼临床医学杂志(电子版) ›› 2013, Vol. 09 ›› Issue (03) : 305 -309. doi: 10.3877/cma.j.issn.1673-5250.2013.03.003

所属专题: 文献

论著

国家级妇幼卫生监测数据网络直报系统信息安全现状分析
刘铮1, 代礼1,*,*(), 朱军1, 李琪1, 马霞1, 牟祎1   
  1. 1. 610041 成都,四川大学华西第二医院中国出生缺陷监测中心全国妇幼卫生监测办公室
  • 收稿日期:2013-04-05 修回日期:2013-05-10 出版日期:2013-06-01
  • 通信作者: 代礼
  • 基金资助:
    基金资助项目:"十一五"国家科技支撑计划(2006BAI05A01)

Analysis on Information Security of Web-Based Data Reporting System of National Maternal and Child Health Surveillance

Zheng LIU1, Li DAI1(), Jun ZHU1, Qi LI1, Xia MA1, Yi MOU1   

  1. 1. National Center for Birth Defects Monitoring of China, West China Second University Hospital, Sichuan University, Chengdu 610041, Sichuan Province, China
  • Received:2013-04-05 Revised:2013-05-10 Published:2013-06-01
  • Corresponding author: Li DAI
  • About author:
    (Corresponding author: DAI Li, Email: )
引用本文:

刘铮, 代礼, 朱军, 李琪, 马霞, 牟祎. 国家级妇幼卫生监测数据网络直报系统信息安全现状分析[J]. 中华妇幼临床医学杂志(电子版), 2013, 09(03): 305-309.

Zheng LIU, Li DAI, Jun ZHU, Qi LI, Xia MA, Yi MOU. Analysis on Information Security of Web-Based Data Reporting System of National Maternal and Child Health Surveillance[J]. Chinese Journal of Obstetrics & Gynecology and Pediatrics(Electronic Edition), 2013, 09(03): 305-309.

通过调查妇幼卫生监测数据网络直报系统的相关资金投入、设备建设和信息安全措施,探讨中国妇幼卫生监测数据网络直报系统的信息安全现状。

方法

 选择2009年1月至2011年12月参与全国妇幼卫生监测数据网络直报工作的546家各级妇幼保健监测机构作为研究对象。采用自填式问卷调查参与直报工作的保健机构信息系统的资金投入、设备建设和采用的信息安全措施情况,分析不同行政级别(省、地市和区县)和地区(东部、中部、西部)间的差异。

结果

 本研究回收有效问卷为503份。2009-2011年间,监测机构信息化资金总额为1.97亿元,直接用于监测的经费仅占16.17%。机构平均投入和单位平均监测专用资金方面,东部地区均高于中部和西部地区,省级机构高于地市级和区县级机构。资金来源为本单位自筹的机构分别占41.16%,来源为上级拨款的机构占7.83%,来源为监测项目的机构分别占29.29%。资金的主要用途为购买计算机硬件和网络设备。无监测专用计算机、服务器、硬件防火墙和不间断电源系统(UPS)设备的监测机构分别占14.51%,26.84%,77.14%和42.94%;无局域网、单机病毒防护措施的机构占9.85%和9.09%。

结论

 现有妇幼卫生监测机构信息安全发展不平衡,中部和西部地区滞后于东部地区,县级机构滞后于地市级和省级机构。妇幼卫生监测机构应增加计算机硬件投入和加强网络设备建设,以满足卫生行业信息化发展的需求。

Objective

To investigate the fund input, equipments and information security measures for the web-based data reporting system of National Maternal and Child Health Surveillance in health institutions.

Methods

From January 2009 to December 2011, a total of 546 maternal and child health monitoring agencies which involved in web-based data reporting system of National Maternal and Child Health Surveillance in health institutions were included in the study. Self-filling questionnaire was used to collect data of 503 maternal and child health service institutions involved in national maternal and child health surveillance, particularly on total amount, resources and use of funds, equipments and information security measures taken for web-based data reporting system. Institutions were grouped by administrative level (province, prefecture/city and district/county) and by geographic areas (east, middle and west). The disparities in above mentioned aspects among groups were then evaluated.

Results

During the period of 2009-2011, a total of 197 million Yuan was invested into the information systems of these institutions, only 16.17% was used for maternal and child health surveillance. Of these institutions, funds raised by themselves, appropriated by supervising authorities and derived from special funds for surveillance accounted for 41.16%, 7.83% and 29.29% respectively. There were 14.51%, 26.84%, 77.14% and 42.94% of institutions without dedicated computer, server, fire wall and UPS equipments. Of them, 9.85% and 9.09% had no antivirus measures for local network and desktop computer.

Conclusions

Current fund input is insufficient for surveillance units to construct hardware and take protective measures to meet requirements of information security. It is necessary to raise investment through various sources of finance to perfect surveillance system and its information security management system.

表1 妇幼卫生监测机构信息化资金投入(万元)
Table 1 Capital Investment of Information Technology in maternal and child health monitoring agencies (×104 yuan)
表2 妇幼卫生监测机构信息系统建设资金来源及使用方向[万元,n(%)]
Table 2 The use of information system construction funds in maternal and child health monitoring agencies[×104 yuan,n(%)]
表3 妇幼卫生监测信息系统硬件和信息安全防护措施[万元,n(%)]
Table 3 Hardware and information security protection measures in maternal and child health monitoring information system[×104 yuan,n(%)]
调查项目 地区 行政级别 合计
东部 中部 西部 省级 地市级 区县级
监测专用计算机              
  123(89.78) 173(89.18) 134(77.91) 27(90.00) 161(86.10) 242(84.62) 430(85.49)
  14(10.22) 21(10.82) 38(22.09) 3(10.00) 26(13.90) 44(15.38) 73(14.51)
服务器              
  105(76.64) 145(74.74) 118(68.6) 27(90.00) 157(83.96) 184(64.34) 368(73.16)
  32(23.36) 49(25.26) 54(31.4) 3(10.00) 30(16.04) 102(35.66) 135(26.84)
硬件防火墙              
  44(32.12) 43(22.16) 28(16.28) 14(46.67) 49(26.20) 52(18.18) 115(22.86)
  93(67.89) 151(77.84) 144(83.72) 16(53.54) 138(73.80) 234(81.82) 388(77.14)
UPS              
  91(66.42) 114(58.76) 82(47.67) 25(83.33) 131(70.05) 131(45.80) 287(57.06)
  46(33.58) 80(41.24) 90(52.33) 5(16.67) 56(29.95) 155(54.20) 216(42.94)
局域网信息              
  安全措施与互联网物理隔离 58(19.86) 60(15.54) 36(12.16) 16(19.05) 72(18.18) 66(13.36) 154(15.81)
  防病毒措施 90(30.82) 127(32.90) 81(27.37) 28(33.33) 126(32.82) 144(29.15) 298(30.59)
  数据备份 75(25.69) 109(28.24) 69(23.31) 24(28.57) 108(27.27) 121(24.49) 253(25.98)
  信息加密 27 (9.25) 35 (9.07) 55(18.58) 9(10.72) 31 (7.83) 41 (8.30) 81 (8.32)
  CA认证 5 (1.71) 12 (3.11) 12 (4.05) 5 (5.95) 15 (2.79) 9 (1.82) 29 (2.98)
  其他 4 (1.37) 2 (0.52) 2 (0.68) 1 (1.19) 5 (1.26) 2 (0.41) 8 (0.82)
未采取措施 33(11.30) 41(10.62) 77(26.01) 1 (1.19) 39 (9.85) 111(22.47) 151(15.5)
杀毒软件              
  134(97.81) 182(93.81) 155(90.12) 30(100.00) 170(90.91) 271(94.76) 471(93.64)
  3 (2.19) 12 (6.19) 17 (9.88) 0 (0.00) 17 (9.09) 15 (5.24) 32 (6.36)
[1]
Ding H, Zhang LM. Analysis of national maternal mortality rate surveillance[J]. Chin J Obstet Gynecol, 1999, 34(11):645-648.
[2]
Mi J, Lin LM, Liu YL, et al. Epidemiological analysis of accidental death in children aged 0 to 4 in 1991[J]. Chin J Child Health Care, 1994, 2(1):27-31.
[3]
China Birth Defects Monitoring Group. Atlas of China for birth defects[M]. Chengdu: Chengdu Cartographic Publishing House, 1992.
[4]
Zhu J. Discussion management experience of the national maternal and child health monitoring project[J]. Chin J Med Res Manage, 2002, 15(3):144-146.
[5]
Li Q, Dai L, Chen HG, et al. Use of network information in the monitoring of maternal and child health[J]. Mod Prev Med, 2006, 33(7):1185-1192.
[6]
Wang YX, Wang F, Li YB, et al. A comparative analysis on implementation and effect of medical insurance policy in community health service stations in the eastern, central and western regions[J]. Chin J Health Policy, 2011, 4(6):17-23.
[7]
Shi XM, Ma JQ, Yang GH, et al. Problems and countermeasures in the management of infectious disease outbreaks reporters in the medical institutions in China[J]. Dis Surveill, 2006, 21(5):225-226.
[8]
Tang XJ, Jin X, Nie Y, et al. Retrospect and prospect for informationization of China maternal and child health[J]. Chin J Woman Child Health Res, 2008, 19(3):282-284.
[9]
Wang Y, Shi L, An L. Analysis of maternal and child health information systems in some areas of China[J]. Maternal Child Health Care China, 2003, 18(9):516-518.
[10]
Zhang YM, Hu RH. Discussion on maternal and child health information management system[J]. World Health Digest, 2010, 7(25):5-6.
[11]
Wang JY. Construction and management research of Maternal and child health information database[J]. Chin Rural Health Serv Adm, 2007, 27(2):140-142.
[12]
Xue MJ. Current situation and explore of maternal and child health information management[J]. Matern Child Health Care China, 2006, 21(15):2043-2045.
[13]
Zhen JM. Thinking of information networks construction of MCH institution[J]. China Prac Med, 2008, 3(3):47-49.
[14]
Zhou AP, Zhou J, Tang XJ, et al. Comprehensive evaluation of the information work situation of the provincial maternal and child health care institution with principal component analysis[J]. Chin J Soc Med, 2010, 27(3):179-181.
[15]
Tang XJ, Du YK. Review and development strategy on information platform construction of the national maternal and child health center[J]. Matern Child Health Care China, 2008, 23(11):1469-1670.
[16]
Tang XJ. Importance of establishing maternal and child health information and data exchange standards[J]. J Mathemat Med, 2003, 16(5):468-469.
[17]
You CL, Chen XJ. To see legislation to protect privacy from maternal information leakage[J]. Gov Legality, 2008 (17):49.
[18]
Wang BJ, Ji ZR. Architecture study on information security technology system[J]. J Compu Appl, 2009, 29(s1):59-62.
[19]
Liu DY. Information security putting forward new requirements for the infornmtion system of disease control and prevention in our country[J]. Chin J Health Edu, 2008, 24(4):302-303.
[20]
Wang W, Wang LW, Ye L, et al. Research on national public health and security information system construction[J]. Med Soc, 2005, 18(9):58-60.
[1] 祝锦江, 白玲, 王华, 陈国振, 刘海平, 丁晨光. 区块链技术在公民逝世后器官捐献及移植工作中的应用探索[J]. 中华移植杂志(电子版), 2022, 16(03): 165-167.
阅读次数
全文


摘要