[1]陈 拓,东单锋,陈小花,等.医院数据交互安全治理平台构建研究[J].卫生经济研究,2026,43(09):32-36.
 CHEN Tuo,DONG Shanfeng,CHEN Xiaohua,et al.Research on the Construction of a Hospital Data Interaction Security Governance Platform[J].Journal Press of Health Economics Research,2026,43(09):32-36.
点击复制

医院数据交互安全治理平台构建研究

卫生经济研究[ISSN:1004-7778/CN:33-1056/F]

卷:
43
期数:
2026年09期
页码:
32-36
栏目:
理论研究
出版日期:
2026-09-02

文章信息/Info

Title:
Research on the Construction of a Hospital Data Interaction Security Governance Platform
作者:
陈 拓1东单锋2陈小花1吴能光3
1.浙江省人民医院(附属人民医院),杭州医学院,浙江 杭州 310018
2.南通市第一人民医院,江苏 南通 226001
3.福建医科大学第一附属医院,福建 福州 350000
Author(s):
CHEN Tuo DONG Shanfeng CHEN Xiaohua WU Nengguang
Zhejiang Provincial People's Hospital(Affiliated People's Hospital), Hangzhou Medical College, Hangzhou Zhejiang 310018, China
关键词:
六西格玛管理模式数据交互安全数据治理
Keywords:
Six Sigma management model data interaction security data governance
分类号:
R19
文献标志码:
A
摘要:
当前,医院数据交互管理存在资产底数不清、权限管控粗放以及风险监测片面等问题,亟须提升数据交互安全治理能力。对此,引入六西格玛管理模式,构建涵盖定义、测量、分析、改进与控制五阶段的应用程序接口(API)全生命周期安全治理平台,通过资产智能测绘、多维度风险监测、AI研判降噪及自动化闭环处置等技术手段,实现对医疗数据交互的精细化与系统化管理。某三甲医院的应用实践显示,平台上线后API资产发现率提升74%,盘点覆盖率达100%,风险告警误报率降至4.2%,应急响应时间缩短至5分钟内;实现了管理模式与安全技术的跨领域融合,显著提升了医疗数据交互安全治理效能,为医院数据安全建设提供了实践参考。
Abstract:
Currently, hospital data interaction management faces challenges such as unclear asset inventory, coarse-grained permission control, and one-sided risk monitoring, highlighting the urgent need to enhance data interaction security governance capabilities. In response, the Six Sigma(DMAIC) management model was introduced to construct an API full-life cycle security governance platform covering five phases: Define, Measure, Analyze, Improve, and Control. Through technical means including intelligent asset mapping, multi-dimensional risk monitoring, AI-based analysis and noise reduction, and automated closed-loop disposal, refined and systematic management of medical data interaction was achieved. Application practice in a tertiary hospital showed that after the platform went online, the API asset discovery rate increased by 74%, the inventory coverage rate reached 100%, the false positive rate of risk alerts dropped to 4.2%, and the emergency response time was shortened to within 5 minutes. The platform achieved cross-domain integration of management models and security technologies, significantly improving the efficiency of medical data interaction security governance, and providing a practical reference for data security construction in hospitals.

参考文献/References:

[1] 罗姚,魏苏璟,杨晶,等.公立医院数据安全风险治理路径研究[J].卫生经济研究,2025,42(03):71-74,78.
[2] Di Francesco, Paolo, Patricia Lago, et al. Architecting with microservices: a systematic mapping study[J]. Journal of Systems and Software, 2019, 150 : 77-97.
[3] 汤其宇,陈昌杰,王士勇.医院网络环境中API接口的安全性问题与对策探讨[J].中国数字医学,2024,19(06):115-120.
[4] 孙保峰,葛晓伟,杨扬,等.某三级甲等公立医院API接口安全监测实践与思考[J].中国数字医学,2024,19(07):115-120.
[5] 林怡,夏冰,王永,等.基于AI智能体的隐藏RESTful API识别与漏洞检测方法[J/OL].计算机应用,1-12[2025-11-20].
[6] 王利平,熊尚华,黄玉清,等.基于智能化监测平台的医疗数据交互风险治理研究[J].医学信息学杂志,2025,46(07):80-84.
[7] 余静芸,吴丽华,邝燕华,等.精益六西格玛在改善医用耗材验收环节的应用[J].中国医疗设备,2021,36(02):139-143.
[8] 杨思秋,龚超,宋苗瑞,等.精益六西格玛模型驱动下公立医院医疗绩效管理实践与效果评价[J].中国医院,2025,29(11):46-51.
[9] 朱雪清,葛杨.六西格玛管理法在高值耗材管理流程优化中的应用研究[J].中国护理管理,2020,20(01):140-144.
[10] 赵学东,林民,唐邦洋,等.KG和RAG协同知识增强的数学古籍领域智能体[J/OL].计算机工程与应用,1-15[2025-11-20].
[11] OWASP.OWASP API Security Top 10[EB/OL].(2019-05-29)[2023-06-01].https://owasp.org/API-Security/editions/2019/en/0x00-header.

更新日期/Last Update: 2026-09-02