摘要： 从身份认证和访问控制入手，结合PKI和RBAC技术，提出了一种针对电子病历的基于身份的授权模型。在此基础上，考虑到同已有电子病历系统的相容性，给出了一种基于MCS的实现。定义了系统的角色、权限和角色继承，满足了安全性的多种需求，也保证了系统的效率和通用性。

关键词: 电子病历, 系统安全, 公钥基础设施, 访问控制, 基于角色的访问控制

Abstract: An identity-based authorization model is presented in this paper. It combined the identity authentication technique of PKI and the access control technique of RBAC. Considering the compatibility with the existed EMR systems, a realization based on MCS is demonstrated. The roles, privileges and role hierarchy for the EMR systems are defined. The mechanism not only meets the requirement of security, but also ensures the efficiency and generalization of the system.

中图分类号: 

• TP399