Intelligent computer network information security control system

Abstract

The invention discloses an intelligent computer network information security control system, and particularly relates to the technical field of network information security control, and the system comprises a terminal equipment security evaluation module, an access control module, a network state control module, a backup data security control module, an early warning display module and a database. According to the method, the security level of the terminal equipment is comprehensively evaluated by acquiring each parameter of the terminal equipment, and password verification strategies of different levels are set according to the security level of the terminal equipment, so that the protection capability of the terminal equipment with low security level is enhanced, the influence of malicious terminal equipment on a hospital patient information server is effectively avoided, and the safety of the hospital patient information server is improved. And the convenience of login verification of the high-security-level terminal equipment is improved. The security level of the backup data of the hospital patient information server is analyzed, the response measures corresponding to the security level of the backup data are implemented, and the security and continuity of the backup data are ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of network information security control, and in particular to an intelligent computer network information security control system. Background Art

[0002] With the promotion of digital medicine, network security has become the key to ensuring the continuity and efficiency of medical services. Hospitals store a large amount of patients' personal health information, which is highly sensitive data. If it is not properly protected, once leaked, it may lead to the violation of patient privacy and may even be used for fraud. Therefore, it is necessary to study the network information security control system of hospital patient information servers.

[0003] The prior art, such as the invention patent application announced as CN106131018A, discloses a medical and patient information management system based on network security, which system includes: a patient information acquisition terminal, an expert data update platform, an information encryption unit, a medical institution and an expert terminal. The cloud network automatically matches the highest-scoring medical institution and practicing physician to the patient based on the received disease-related information. After the patient confirms the selection, the disease-related information of the patient is sent to the medical institution or practicing physician selected by the patient; an identity authentication unit is used to verify the practicing qualifications of the medical institution and the expert terminal; a security protection system is used to provide security protection for the cloud network.

[0004] The prior art, such as the invention patent application announced as CN114157462A, discloses a computer network information security control system and method, which includes: a central control system, a sub-control system, a central control defense system and an encrypted communication system. The central control system includes an emergency disconnection system, an abnormal comparison database, a data log storage system, a whole machine data encryption system, and an anti-virus detection system. Through the set-up of the backstage personnel intervention system, the backstage personnel intervention system is a manual operation by professional technicians of the backstage personnel intervention system after the overall computer connection deployment of the joint defense mechanism system fails, which increases further protection security and avoids the mistakes of overly programmed system operations in response to intrusions.

[0005] In combination with the above scheme, it is found that the network information security control of the hospital patient information server in the existing technology ignores the security assessment of the terminal device. In the process of the terminal device accessing the hospital patient information server through the Internet, the security of the terminal device itself will directly affect the security of the hospital patient information server, and increase the risk of the hospital patient information server being damaged by the terminal device, thereby causing the hospital patient information server to fail to work normally, reducing work efficiency, and causing patients to be unable to see a doctor. At the same time, it causes the risk of hospital patient information leakage, thereby causing the personal privacy of hospital patients to be leaked, damaging the privacy security of hospital patients.

[0006] On the other hand, the existing technology ignores the security assessment of backup data. Backup data serves as the information guarantee of important systems. After a data loss failure occurs in the system, data can be restored in time to ensure the normal operation of the system data. The network status parameters and system parameters of the backup data will affect the security of the backup data, thereby causing security risks to the backup data. When a hospital patient information server fails, the data cannot be effectively restored, resulting in the loss of hospital patient information and the inability of patients to obtain medical information in a timely manner. Summary of the invention

[0007] The purpose of the present invention is to provide an intelligent computer network information security control system to solve the problems existing in the background technology.

[0008] In order to solve the above technical problems, the present invention adopts the following technical solutions: The present invention provides an intelligent computer network information security control system, including: a terminal device security assessment module, which is used to obtain the total number of abnormal applications on the terminal device of the log-in user, the success rate of the anti-virus software, the network bandwidth and the number of historical terminal device failures, calculate the safety factor of the terminal device of the log-in user, and evaluate the security level of the terminal device of the log-in user.

[0009] The access control module is used to obtain the security level of the terminal device of the registrant, set the password verification policy corresponding to the security level of the terminal device of the registrant, obtain the identity information and historical access data of the registrant, calculate the behavioral security index of the registrant, and set the permissions of the registrant to access patient information based on the identity information and behavioral security index of the registrant.

[0010] The network status control module is used to obtain various environmental data, daily inspection frequency and historical network equipment failure times of the hospital patient information server, calculate the network hardware safety factor of the hospital patient information server, obtain the historical network access failure times and network bandwidth of the hospital patient information server, calculate the network access safety factor of the hospital patient information server, calculate the network status index of the hospital patient information server based on the network hardware safety factor and network access safety factor of the hospital patient information server, evaluate the network status level of the hospital patient information server, and implement response measures corresponding to the network status level of the hospital patient information server.

[0011] The backup data security control module is used to obtain various parameters of the network status and system parameters of the backup data, calculate the security index of the backup data, evaluate the security level of the backup data, and implement response measures corresponding to the security level of the backup data.

[0012] The early warning display module is used to display and warn the network status level of the hospital patient information server, the security level of the backup data and the security level of each terminal device.

[0013] The database is used to store the minimum required network bandwidth for normal terminal device access to the hospital patient information server, store the influencing factors of unit abnormal application programs, the influencing factors of the number of historical terminal device failures, the influencing factors of the success rate of the unit anti-virus software, store various security judgment intervals of the terminal equipment, store various parameters of historical accesses, store the access interval time threshold, the influencing factors of the unit number of different IP addresses, store the minimum network bandwidth requirement value of the hospital patient information server, the influencing factors of the number of network access failures, store various judgment intervals of the network status of the hospital patient information server, store various parameters of the network status of backup data, store various system parameters of backup data, store the influencing factors of the number of network connection failures extracted from the database, the influencing factors of various parameters of the network status of the unit backup data, the allowed response time of the network connection, and store various judgment intervals of the security of the backup data.

[0014] Compared with the prior art, the beneficial effects of the present invention are as follows: 1. The present invention obtains multiple parameters of the terminal device to comprehensively evaluate the security level of the terminal device, and sets different levels of password verification strategies according to the security level of the terminal device. On the one hand, the protection capability of terminal devices with low security levels is enhanced, and the influence of malicious terminal devices on the hospital patient information server is effectively avoided. On the other hand, the convenience of login verification of terminal devices with high security levels is improved.

[0015] 2. The present invention comprehensively considers the behavioral security index of the registrant and the registrant's identity information corresponding to the authority to access patient information, sets the information content that the registrant can obtain, causes the leakage of hospital patient information, ensures the confidentiality of hospital patients, and increases the network information security of the hospital patient information server.

[0016] 3. The present invention comprehensively considers the network hardware security factors and network access security factors of the hospital patient information server, and combines the analysis of the network status index of the hospital patient information server to evaluate the status level of the hospital patient information server, so that the network status of the hospital patient information server can be effectively supervised and the network status stability of the hospital patient information server is guaranteed.

[0017] 4. The present invention analyzes the security level of the backup data of the hospital patient information server, implements response measures corresponding to the security level of the backup data, and ensures the security and continuity of the backup data. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0019] Figure 1 It is a system structure connection diagram of the present invention. DETAILED DESCRIPTION

[0020] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0021] Reference Figure 1 As shown, the present invention provides an intelligent computer network information security control system, including: a terminal device security assessment module, which is used to obtain the total number of abnormal applications on the terminal device of the log-in user, the success rate of the anti-virus software, the network bandwidth and the number of historical terminal device failures, calculate the safety factor of the terminal device of the log-in user, and evaluate the security level of the terminal device of the log-in user.

[0022] The access control module is used to obtain the security level of the terminal device of the registrant, set the password verification policy corresponding to the security level of the terminal device of the registrant, obtain the identity information and historical access data of the registrant, calculate the behavioral security index of the registrant, and set the permissions of the registrant to access patient information based on the identity information and behavioral security index of the registrant.

[0023] The network status control module is used to obtain various environmental data, daily inspection frequency and historical network equipment failure times of the hospital patient information server, calculate the network hardware safety factor of the hospital patient information server, obtain the historical network access failure times and network bandwidth of the hospital patient information server, calculate the network access safety factor of the hospital patient information server, calculate the network status index of the hospital patient information server based on the network hardware safety factor and network access safety factor of the hospital patient information server, evaluate the network status level of the hospital patient information server, and implement response measures corresponding to the network status level of the hospital patient information server.

[0024] The backup data security control module is used to obtain various parameters of the network status and system parameters of the backup data, calculate the security index of the backup data, evaluate the security level of the backup data, and implement response measures corresponding to the security level of the backup data.

[0025] The early warning display module is used to display and warn the network status level of the hospital patient information server, the security level of the backup data and the security level of each terminal device.

[0026] The database is used to store the minimum required network bandwidth for normal terminal device access to the hospital patient information server, store the influencing factors of unit abnormal application programs, the influencing factors of the number of historical terminal device failures, the influencing factors of the success rate of the unit anti-virus software, store various security judgment intervals of the terminal equipment, store various parameters of historical accesses, store the access interval time threshold, the influencing factors of the unit number of different IP addresses, store the minimum network bandwidth requirement value of the hospital patient information server, the influencing factors of the number of network access failures, store various judgment intervals of the network status of the hospital patient information server, store various parameters of the network status of backup data, store various system parameters of backup data, store the influencing factors of the number of network connection failures extracted from the database, the influencing factors of various parameters of the network status of the unit backup data, the allowed response time of the network connection, and store various judgment intervals of the security of the backup data.

[0027] It should be noted that in a specific embodiment, the terminal device security assessment module is connected to the access control module, the access control module is connected to the network status control module, the network status control module is connected to the backup data security control module, the backup data security control module is connected to the early warning display module, and the database is connected to the access control module, the terminal device security assessment module, the network status control module, and the backup data security control module.

[0028] In a specific embodiment of the present invention, the security factor of the terminal device of the registrant is calculated and the security level of the terminal device of the registrant is evaluated. The specific analysis method is: based on the total number A of abnormal applications of the terminal device, the success rate S of the antivirus software, the network bandwidth D and the number of historical terminal device failures f.

[0029] By formula: The safety factor α of the terminal device is calculated, where D′ represents the minimum required network bandwidth for the terminal device to normally access the hospital patient information server extracted from the database, ω represents the impact factor of the preset unit abnormal application extracted from the database, ξ represents the impact factor of the preset unit historical number of terminal device failures extracted from the database, and ψ represents the impact factor of the preset unit antivirus software success rate extracted from the database.

[0030] It should be noted that, in a specific embodiment, when a terminal device accesses a hospital patient information server, after obtaining the user's consent, some information parameters of the terminal device can be obtained to calculate the safety factor of the terminal device.

[0031] If α is in the first security interval of the terminal device, the security level of the terminal device is determined to be excellent.

[0032] If α is in the second security interval of the terminal device, the security level of the terminal device is determined to be general.

[0033] If α is in the third security interval of the terminal device, the security level of the terminal device is determined to be unqualified.

[0034] It should be noted that, in a specific embodiment, the first safety interval, the second safety interval, and the third safety interval of the terminal device are divided based on a comprehensive evaluation by technical personnel according to the historical safety factors of each terminal device and the impact of subsequent terminal devices on the hospital patient information server, and are stored in a database.

[0035] In a specific embodiment of the present invention, the password verification policy corresponding to the security level of the terminal device of the log-in user is specifically analyzed as follows: based on the security level of the terminal device, if the security level of the terminal device of the log-in user is excellent, the password verification policy is set to a simple single-verification mode.

[0036] If the security level of the terminal device of the registrant is general, the password verification policy is set to the medium mode of double verification.

[0037] If the security level of the terminal device of the registrant is unqualified, the password verification policy is set to the triple verification difficult mode.

[0038] The single-factor verification simplified mode refers to a method of using a password verification after the login user enters the login account to determine whether the login user can successfully log in.

[0039] The double verification medium mode refers to using two password verification methods after the registrant enters the login account to determine whether the registrant can successfully log in.

[0040] The triple verification difficulty mode refers to using three password verification methods after the logon user enters the login account to determine whether the logon user can successfully log in.

[0041] It should be noted that, in a specific embodiment, the password verification method is set in advance by the registrant when registering an account, and may include, for example, a password, security question, face and fingerprint, etc. One password verification method gives priority to password verification, double password verification gives priority to password plus fingerprint verification, and triple password verification gives priority to password, fingerprint and face verification.

[0042] The present invention obtains multiple parameters of the terminal device to comprehensively evaluate the security level of the terminal device, and sets different levels of password verification strategies according to the security level of the terminal device. On the one hand, it strengthens the protection capability of terminal devices with low security levels and effectively avoids the influence of malicious terminal devices on the hospital patient information server. On the other hand, it improves the convenience of login verification of terminal devices with high security levels.

[0043] In a specific embodiment of the present invention, the calculation of the log-in user's behavior safety index is specifically analyzed by: the log-in user's historical access data includes the interval length ti of each access, the total number of accesses G, and the IP address Hj of each access, where i=1, 2, ..., m, i represents the interval number of each historical access, m Indicates the total number of intervals of historical visits, j = 1, 2, ..., n, j represents the number of each historical visit, and n represents the total number of historical visits.

[0044] Based on the IP addresses Hj of each historical visit, count the number of IP address changes L , based on the intervals between historical visits, the interval between statistical visits is less than σ The number of visits Q, σ Indicates the preset access interval time threshold extracted from the database.

[0045] It should be noted that, in a specific embodiment, the counting of the number of IP address changes specifically refers to first comparing the IP address of the first historical visit with the IP addresses of the remaining n-1 historical visits. If they are all different, the number of IP address changes is increased by 1. Then, the IP address of the second visit is compared with the IP addresses of the remaining n-2 historical visits. If they are all different, the number of IP address changes is increased by 1. This is repeated in this way, and the comparison of the IP addresses of each historical visit is completed to obtain the number L of IP address changes.

[0046] Similarly, the interval between completing statistical access is less than σ The number of visits Q.

[0047] By formula: The behavior safety index β of the log-in user is calculated, where μ represents the influence factor of a preset unit number of different IP addresses extracted from the database.

[0048] It should be noted that, in a specific embodiment, the interval duration of each historical visit, the total number of historical visits, and the IP address of each historical visit all reflect whether the logon user is maliciously accessing the hospital patient information server, and therefore needs to be detected and analyzed.

[0049] In a specific embodiment of the present invention, the specific analysis method for setting the permissions of the patient information that the registrant can access is as follows: the patient information includes basic information, general information and sensitive information, the basic information includes the patient's name, gender, age and diagnosis department, the general information includes the drug list and nursing report, and the sensitive information includes the patient's diagnosis, examination report and reimbursement list.

[0050] Based on the identity information of the registrant, the permission level of the registrant corresponding to the identity information of the registrant is matched from the database.

[0051] Based on the registrant's behavioral safety index β, if β<χ, the registrant's behavioral safety level is judged to be unqualified, and the registrant is prohibited from accessing patient information. Face recognition is required to verify the identity information. After the system passes the judgment, the login operation is performed again, where χ represents the judgment threshold of the registrant's behavioral safety index extracted from the database.

[0052] If β≥χ, the behavior security level of the registrant is determined to be qualified, and subsequent judgment is performed: if the registrant's authority level is level three, the patient information that the registrant can access includes basic information.

[0053] If the login user's permission level is level 2, the patient information that the login user can access includes basic information and general information.

[0054] If the login user's permission level is level one, the patient information that the login user can access includes basic information, general information, and sensitive information.

[0055] It should be noted that, in a specific embodiment, the threshold for judging the behavior safety index of the registrant is set by a technician based on a comprehensive evaluation of the behavior safety index of each registrant and the subsequent impact on the hospital's patient information service, and is stored in a database.

[0056] The present invention comprehensively considers the behavioral security index of the registrant and the authority of the registrant's identity information to access patient information, sets the information content that the registrant can obtain, causes the leakage of hospital patient information, ensures the confidentiality of hospital patients, and increases the network information security of the hospital patient information server.

[0057] In a specific embodiment of the present invention, the network hardware safety factor of the hospital patient information server is calculated, and the specific analysis method is as follows: the various environmental data of the hospital patient information server, including ambient temperature, ambient humidity, and ambient dust concentration, are based on the characteristic value Wk of the various environmental data of the hospital patient information server, where k = 1, 2, 3, and k represents the subscript of the various environmental data of the hospital patient information server, through the formula: The status of each environmental data of the hospital patient information server is calculated to meet the judgment value Rk.

[0058] It should be noted that, in a specific embodiment, the ambient temperature and ambient humidity of the hospital patient information server are obtained through temperature and humidity sensors, and the ambient dust concentration of the hospital patient information server is obtained through a dust concentration sensor. Based on the ambient temperature, ambient humidity and ambient dust concentration of the hospital patient information server, the characteristic values ​​of various environmental data of the hospital patient information server are constructed.

[0059] Based on the daily inspection times Y of the hospital patient information server and the historical network equipment failure times U, the formula is: The network hardware security factor ε1 of the hospital patient information server is calculated.

[0060] In a specific embodiment of the present invention, the network access security factor of the hospital patient information server is calculated, and the specific analysis method is as follows: based on the network bandwidth value Vx of the hospital patient information server at each collection time point within the monitoring period, where x=1, 2, ..., B, x represents the number of each collection time point within the monitoring period, and B represents the total number of collection time points within the monitoring period, Vx is averaged to obtain the average network bandwidth value of the hospital patient information server within the monitoring period.

[0061] Based on the historical network access failure times P and average network bandwidth value of the hospital patient information server By formula: The network access safety factor ε2 of the hospital patient information server is calculated, where V′ represents the minimum network bandwidth requirement value of the hospital patient information server extracted from the database, and θ represents the impact factor of the preset unit network access failure number extracted from the database.

[0062] In a specific embodiment of the present invention, the network status level of the hospital patient information server is evaluated and the response measures corresponding to the network status level of the hospital patient information server are implemented. The specific analysis method is:

[0063] Based on the network hardware security factor ε1 and network access security factor ε2 of the hospital patient information server, the formula ρ = eε 1 +ε 2 , the network status index ρ of the hospital patient information server is calculated.

[0065] If ρ belongs to the first interval of the network status of the hospital patient information server, the network status level of the hospital patient information server is determined to be unqualified, and the first-level network status response measures are implemented.

[0066] If ρ belongs to the second interval of the network status of the hospital patient information server, the network status level of the hospital patient information server is determined to be good, and the secondary response measures for the network status are implemented.

[0067] If ρ belongs to the third interval of the network status of the hospital patient information server, the network status level of the hospital patient information server is determined to be excellent, and the third-level response measures for the network status are implemented.

[0068] The response measures at each level of the network status refer to notifying the technical staff to inspect the hospital patient information server, including the environment, server hardware equipment and network status, and increasing the frequency of subsequent inspections by λr corresponding to each level of the network status, r = 1, 2, 3, r represents the number of each level of network status, and λr represents the subsequent training frequency corresponding to each level of preset network status extracted from the database.

[0069] It should be noted that, in a specific embodiment, the subsequent inspection frequency is increased by λr corresponding to each level of network status. For example, the first-level response measure of the network status increases the subsequent inspection frequency to twice a day, the second-level response measure of the network status increases the subsequent inspection frequency to once a day, and the first-level response measure of the network status increases the subsequent inspection frequency to once every two days.

[0070] It should be noted that, in a specific embodiment, the first interval, the second interval, and the third interval of the network status of the hospital patient information server are set by technical personnel based on the network status index of the hospital patient information server and the subsequent work performance of the hospital patient information server, and are stored in the database through a comprehensive evaluation of the association mapping.

[0071] The present invention comprehensively considers the network hardware security factors and network access security factors of the hospital patient information server, and combines the analysis of the network status index of the hospital patient information server to evaluate the status level of the hospital patient information server, so that the network status of the hospital patient information server can be effectively supervised and the network status stability of the hospital patient information server is guaranteed.

[0072] In a specific embodiment of the present invention, the security index of the backup data is calculated, and the specific analysis method is as follows: the network status parameters Zg include the number of historical network connection failures, network interruptions and network connection response time extracted from the database, where g = 1, 2, 3, g Indicates the subscripts of various parameters of the network status.

[0073] The system parameters Cd include the backup frequency extracted from the database, the total number of backup retention versions, the backup retention time and the number of historical failures of the backup data, d=1, 2, 3, 4, d represents the subscript of the system parameters.

[0074] By formula: Calculate the network status safety factor of the backup data Where γ1 represents the impact factor of the number of unit network connection failures extracted from the database, γ 2 represents the impact factor of the unit network interruption number, and Z3′ represents the allowed response time of the network connection extracted from the database.

[0075] By formula: Calculate the system parameter safety factor of the backup data τ1 represents the impact factor of the unit backup frequency, τ2 represents the impact factor of the total number of unit backup retention versions, τ3 represents the impact factor of the unit backup retention time, and τ4 represents the impact factor of the unit number of historical failures.

[0076] Network status safety factor based on backup data System parameter safety factor for backup data By formula: Calculate the security index of backup data

[0077] In a specific embodiment of the present invention, the security level of the backup data is evaluated and the response measures corresponding to the security level of the backup data are implemented. The specific analysis method is: based on the security index of the backup data, if If the backup data is in the first security interval, the security level of the backup data is determined to be a high level.

[0078] like If the backup data is in the second security interval, the security level of the backup data is determined to be medium, and medium-level security response measures for the backup data are executed.

[0079] like If the backup data is in the third security interval, the security level of the backup data is determined to be a low level, and a low-level security response measure for the backup data is executed.

[0080] The intermediate-level security response measure for the backup data refers to notifying the technical personnel to detect the network environment of the backup data to ensure the stability of the network connection.

[0081] The low-level security response measures for backup data refer to notifying technical personnel to detect the network environment of backup data, ensure the stability of network connection, extract adjustment plans for various system parameters of backup data from the database, and adjust various system parameters of backup data.

[0082] It should be noted that, in a specific embodiment, the low-level security response measures for the backup data adjust various system parameters of the backup data, such as increasing the backup frequency of the backup data to three times a week, increasing the total number of backup retention versions to five, and extending the backup retention period to 5 years.

[0083] It should be noted that, in a specific embodiment, the first, second and third security intervals of the backup data are set by technical personnel based on a comprehensive evaluation of the security index of the backup data and the stability performance of the backup data in later work, and are stored in a database.

[0084] The present invention analyzes the security level of the backup data of the hospital patient information server, implements response measures corresponding to the security level of the backup data, and ensures the security and continuity of the backup data.

[0085] The above contents are merely examples and explanations of the concept of the present invention. Those skilled in the art may make various modifications or additions to the specific embodiments described or replace them in a similar manner. As long as they do not deviate from the concept of the invention or exceed the scope defined by the present invention, they shall all fall within the protection scope of the present invention.

Claims

1. An intelligent computer network information security control system, characterized in that: The system comprises: The terminal device security assessment module is used to obtain the total number of abnormal applications on the terminal device of the logon user, the success rate of the antivirus software, the network bandwidth and the number of historical terminal device failures, calculate the security factor of the terminal device of the logon user, and assess the security level of the terminal device of the logon user; The access control module is used to obtain the security level of the terminal device of the log-in user, set the password verification policy corresponding to the security level of the terminal device of the log-in user, obtain the identity information and historical access data of the log-in user, calculate the behavior security index of the log-in user, and set the permissions of the patient information that the log-in user can access based on the identity information and behavior security index of the log-in user; A network status control module is used to obtain various environmental data, daily inspection frequency and historical network equipment failure times of the hospital patient information server, calculate the network hardware safety factor of the hospital patient information server, obtain the historical network access failure times and network bandwidth of the hospital patient information server, calculate the network access safety factor of the hospital patient information server, calculate the network status index of the hospital patient information server based on the network hardware safety factor and network access safety factor of the hospital patient information server, evaluate the network status level of the hospital patient information server, and implement response measures corresponding to the network status level of the hospital patient information server; The backup data security control module is used to obtain the network status parameters and system parameters of the backup data, calculate the security index of the backup data, evaluate the security level of the backup data, and implement response measures corresponding to the security level of the backup data; The early warning display module is used to display and warn the network status level of the hospital patient information server, the security level of the backup data and the security level of each terminal device.

2. An intelligent computer network information security control system according to claim 1, characterized in that: The specific analysis method of calculating the security factor of the terminal device of the registrant and evaluating the security level of the terminal device of the registrant is as follows: Based on the total number of abnormal applications A of the terminal device, the success rate S of the antivirus software, the network bandwidth D and the number of historical terminal device failures f; By formula: The safety factor α of the terminal device is calculated, where D′ represents the minimum required network bandwidth for the terminal device to normally access the hospital patient information server extracted from the database, ω represents the impact factor of the preset unit abnormal application extracted from the database, ξ represents the impact factor of the preset unit historical terminal device failure times extracted from the database, and ψ represents the impact factor of the preset unit antivirus software success rate extracted from the database; If α is in the first security interval of the terminal device, the security level of the terminal device is determined to be excellent; If α is in the second security interval of the terminal device, the security level of the terminal device is determined to be general; If α is in the third security interval of the terminal device, the security level of the terminal device is determined to be unqualified.

3. An intelligent computer network information security control system according to claim 2, characterized in that: The specific analysis method of setting the password verification strategy corresponding to the security level of the terminal device of the log-in user is as follows: Based on the security level of the terminal device, if the security level of the terminal device of the logon user is excellent, the password verification policy is set to the simple mode of single-factor verification; If the security level of the terminal device of the registrant is general, the password verification policy is set to the medium mode of double verification; If the security level of the terminal device of the logon user is unqualified, the password verification policy is set to the triple verification difficult mode; The one-step verification simple mode refers to a method of using a password verification after the login user enters the login account to determine whether the login user can successfully log in; The two-factor authentication medium mode refers to using two password authentication methods after the login user enters the login account to determine whether the login user can successfully log in; The triple verification difficulty mode refers to using three password verification methods after the logon user enters the login account to determine whether the logon user can successfully log in.

4. An intelligent computer network information security control system according to claim 3, characterized in that: The specific analysis method for calculating the behavior safety index of the registrant is as follows: The user's historical access data, including the interval between each access, t i , the total number of visits G, the IP address of each visit H j , where i = 1, 2, ..., m, i represents the interval number of each historical visit, m represents the total number of intervals of historical visits, j = 1, 2, ..., n, j represents the number of each historical visit, n represents the total number of historical visits; Based on the IP address of each historical visit j , count the number of IP address changes L, based on the interval length of each historical visit, count the number of visits Q with an interval length less than σ, σ represents the preset access interval length threshold extracted from the database; By formula: The behavior safety index β of the log-in user is calculated, where μ represents the influence factor of a preset unit number of different IP addresses extracted from the database.

5. An intelligent computer network information security control system according to claim 4, characterized in that: The specific analysis method for setting the permissions of the patient information that the log-in user can access is as follows: The patient information includes basic information, general information and sensitive information. Basic information includes the patient's name, gender, age and diagnosis department. General information includes the drug list and nursing report. Sensitive information includes the patient's diagnosis, examination report and reimbursement list. Based on the identity information of the login user, the permission level of the login user corresponding to the identity information of the login user is matched from the database; Based on the registrant's behavior safety index β, if β<χ, the registrant's behavior safety level is judged to be unqualified, and the registrant is prohibited from accessing patient information. After face recognition is performed to verify the identity information, the system judges that it is passed and the registrant can log in again, where χ represents the judgment threshold of the registrant's behavior safety index extracted from the database; If β≥χ, the behavior security level of the registrant is determined to be qualified, and the subsequent judgment is performed: if the registrant's authority level is level 3, the patient information that the registrant can access includes basic information; If the login user's permission level is level 2, the patient information that the login user can access includes basic information and general information; If the login user's permission level is level one, the patient information that the login user can access includes basic information, general information, and sensitive information.

6. The intelligent computer network information security control system according to claim 1 is characterized in that: The specific analysis method for calculating the network hardware safety factor of the hospital patient information server is as follows: The environmental data of the hospital patient information server include environmental temperature, environmental humidity, and environmental dust concentration, and the characteristic value W of each environmental data of the hospital patient information server is based on the characteristic value W of each environmental data of the hospital patient information server. k , where k = 1, 2, 3, k represents the subscript of each environmental data of the hospital patient information server, through the formula: The status of each environmental data of the hospital patient information server is calculated to meet the judgment value R k ; Based on the daily inspection times Y of the hospital patient information server and the historical network equipment failure times U, the formula is: The network hardware security factor ε1 of the hospital patient information server is calculated.

7. An intelligent computer network information security control system according to claim 6, characterized in that: The specific analysis method for calculating the network access security factor of the hospital patient information server is as follows: Based on the network bandwidth value V of the hospital patient information server at each collection time point during the monitoring period x , where x = 1, 2, ..., B, x represents the number of each acquisition time point in the monitoring period, B represents the total number of acquisition time points in the monitoring period, V x Perform mean processing to obtain the average network bandwidth value during the monitoring period of the hospital patient information server Based on the historical network access failure times P and average network bandwidth value of the hospital patient information server By formula: The network access safety factor ε2 of the hospital patient information server is calculated, where V′ represents the minimum network bandwidth requirement value of the hospital patient information server extracted from the database, and θ represents the impact factor of the preset unit network access failure number extracted from the database.

8. An intelligent computer network information security control system according to claim 7, characterized in that: The specific analysis method of evaluating the network status level of the hospital patient information server and implementing response measures corresponding to the network status level of the hospital patient information server is as follows: Based on the network hardware security factor ε1 and network access security factor ε2 of the hospital patient information server, the formula Calculate the network status index ρ of the hospital patient information server; If ρ belongs to the first interval of the network status of the hospital patient information server, the network status level of the hospital patient information server is determined to be unqualified, and the first-level response measures for the network status are implemented; If ρ belongs to the second interval of the network status of the hospital patient information server, the network status level of the hospital patient information server is determined to be good, and the secondary response measures of the network status are implemented; If ρ belongs to the third interval of the network status of the hospital patient information server, the network status level of the hospital patient information server is determined to be excellent, and the third-level response measures for the network status are implemented; The response measures at each level of network status refer to notifying technical personnel to inspect the hospital patient information server, including the environment, server hardware equipment and network status, and increasing the subsequent inspection frequency to λ, where λ represents the subsequent training frequency corresponding to each level of pre-set network status extracted from the database.

9. The intelligent computer network information security control system according to claim 1, characterized in that: The specific analysis method for calculating the safety index of the backup data is as follows: The network status parameters Z g , including the number of historical network connection failures, network interruptions and network connection response times extracted from the database, where g = 1, 2, 3, g represents the subscript of each parameter of the network status; The system parameters C d , including the backup frequency extracted from the database, the total number of backup retention versions, the backup retention time, and the number of historical failures of the backup data, d = 1, 2, 3, 4, d represents the subscript of each system parameter; By formula: Calculate the network status safety factor of the backup data Where γ1 represents the impact factor of the number of unit network connection failures extracted from the database, γ2 represents the impact factor of the number of unit network interruptions, and Z′3 represents the allowed response time of the network connection extracted from the database; By formula: Calculate the system parameter safety factor of the backup data τ1 represents the impact factor of the unit backup frequency, τ2 represents the impact factor of the total number of unit backup retention versions, τ3 represents the impact factor of the unit backup retention time, and τ4 represents the impact factor of the unit historical failure count; Network status safety factor based on backup data System parameter safety factor for backup data By formula: Calculate the security index of backup data 10. An intelligent computer network information security control system according to claim 9, characterized in that: The specific analysis method of evaluating the security level of the backup data and implementing the response measures corresponding to the security level of the backup data is as follows: Safety index based on backup data like If the backup data is in the first security interval, the security level of the backup data is determined to be high; like If the backup data is in the second security interval, the backup data security level is determined to be medium, and medium-level security response measures for the backup data are executed; like If the backup data is in the third security interval, the backup data security level is determined to be low, and the low-level security response measures for the backup data are executed; The intermediate-level security response measures for backup data refer to notifying technical personnel to detect the network environment for backup data and ensure the stability of network connection; The low-level security response measures for backup data refer to notifying technical personnel to detect the network environment of backup data, ensure the stability of network connection, extract adjustment plans for various system parameters of backup data from the database, and adjust various system parameters of backup data.

Images