以角色为基础之存取控制模型导入中西医药并用之医疗系统.PDF

以角色為基礎之存取控制模型導入中西醫藥併 用之醫療 系統 研究生： 馮堯保 指導教授：吳美玉 博士 中華大學 資訊管理學系 摘要 隨著醫療科技的進步， 結合中醫與西醫併用 不再只是空想，病人同時接收 中、西醫的專業治療，除了本身可以得到更多的資訊外，對整體的療程也會更具 有信心 。然而中西醫療併用同時也產生了許多問題，如病歷資料的權限歸屬問 題、中西藥併用產生交互作用的問題等，除此之外，將病歷資料透過電子化方式 安全傳遞，除了需要基本的網路平台外，更需要一套存取授權機制來做基層的權 限控管。因此，本研究提出以角色為基礎之存取控制模型導入中西醫療併用 系 統，醫護人員可藉由此系統授權適當的角色行使其權限，解決中西醫療併用 系統 下中、西醫師對同一病歷的權限問題，並且透過中西醫藥交互作用平台摒除中西 藥併用而 產生不好的 交互作用之可能性。 關鍵詞：中西醫療併用 、以角色為基礎之存取控制、中西醫藥交互作用平台 I Applying Role-based Access Control in Combining the Chinese and Western Medicine Systems Student ：Yao-Bao Fong Advisor ：Dr. Mei-Yu Wu Department of Information Management, Chung-Hua University ABSTRACT Developing the technological support for combining Chinese and Western medicine would be for the advancement of healthcare in general. Patients would be able to receive treatment from both the Chinese and Western medicine systems at the same time. Patients would not only have to obtain medical information, but also enhance their confidence in the treatment itself. However, in combining Chinese and Western medical treatments, some issues that are raised are the ownership of patient records and the correlation of Chinese and Western medicines. Besides, transmitting a patient’s electronic record requires an adaptive access control model to monitor access permission on a secure network platform. Therefore, a role-based access control model is proposed to combine Chinese and Western medicine systems. The model authorizes hospital staff to solve problems in a patient’s record. Moreover, this model could reduce incompatibilities when Chinese and Western medicines are combine