Designing a Medical Information Security System Based on IHE for Tourism

為確保病人隱私權，在跨醫院機構的電子病歷交換
時，醫療資訊安全問題不容忽視。然而，資訊技術日
新月異，資安的解決方法又層出不窮，致使醫療資訊
安全方案無法落實。為達到異質系統間互通性，應要
考慮標準化，以及資訊技術的可得性(availability)與可
再用性，本論文乃提出一個機制來整合醫療療程
(IHE)、資訊技術(Web Services)、及滿足在PKI 及SSO
等領域的安全需求。這套機制是以IHE XDS 系統架構
《ebXML 的註冊與儲存庫架構為規範》為基礎，結合
WS Security 去設計一套醫療資訊安全系統架構，並應
用至保險資訊系統。使在旅遊時，當意外發生就醫時，
臨床醫師即為有正確醫療資訊，使得就醫民眾獲得最
高的醫療品質，並且降低醫療錯誤的發生機率。未來
希望醫療院所與保險業者合作，使銀髮族及慢性病患
得以參加旅遊產業，達到「玩得老，活得快樂」的境
界。
In order to ensure that patient privacy is protected,
medical information security issues must be at the
forefront when considering exchanging electronic
medical records among different medical institutions.
However, because the information technology advances
very quickly, and new "solutions" in information security
appears all the time, it becomes difficult to construct a
concrete medical information security project without
being tempted into alternatives. To enhance
interoperability among heterogeneous systems, it is
important to consider the establishment of standards, the
availability of the technology, and the re-usability of
these technologies. This paper proposes a mechanism to
integrate IHE, Web Services to satisfy the security needs
in PKI and SSO. Based on IHE XDS system framework
which is deployed in registration and repository functions
of ebXML under the WS security constraints, this
research also designed a medical information security
system for travel and insurance services. When a traveler
requires medical attention during a trip, through this
system a medical service provider may examine the
patient's medical record immediately, thus the quality of
medical service may improve while reducing potential
medical errors. This system provides a cooperative
infrastructure for medical service provider, insurance
agent and travel industry. Thus, the seniors and chronic
disease patients may travel confidently to enjoy their
lives.