摘要： 针对传统电子病历签名较少关注患者的隐私保护问题，提出适用于电子病历的签名方案。该方案采用基于内容提取签名(CES)的算法，实现一种新的安全需求，即在不出示完整病历文档的情况下认证文档中的部分内容。该方案除具有普通数字签名的优点外，还可根据病历所有者的意愿，实现隐私保护的功能。使用C#开发了一个具有实用功能的原型系统。

关键词: 电子病历, 内容提取签名, XML数字签名, 隐私保护, 转换算法

Abstract: Aiming at the problem that it is rare to concern patients’ privacy protection in traditional digital signature schemes of Electronic Health Record(EHR), a digital signature scheme for EHR is presented. It fulfills a kind of new security requirement based on the Content Extraction Signature(CES) algorithm, i.e. verifies the part of the content within EHR without to disclose the whole document. The scheme has the merit of average digital signature and can protect the privacy of patient according to their wills. An experimental system is developed based on C#.

Key words: Electronic Health Record(EHR), Content Extraction Signature(CES), XML digital signature, privacy protection, convert algorithm

中图分类号: 

• TP309.2