Distributed nursing information security monitoring and management method and system
Through the distributed care information security monitoring and management method, the distributed security server and policy manager are used to realize dynamic policy adjustment and automated response, solving the single point of failure and static permission problems of traditional centralized systems, and improving the system's fault tolerance and real-timeness.
Patent Information
- Application Number
- CN202510620109.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-05-14
- Publication Date
- 2025-08-29
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
Traditional centralized nursing information systems are prone to system paralysis due to server downtime or network attacks, security incidents require manual intervention and handling, making it difficult to adjust strategies dynamically in real time, static permission allocation cannot adapt to dynamic risk scenarios, lack of hierarchical early warning and automated response, resulting in high-risk operations that cannot be blocked in time.
Adopting a distributed architecture, the care terminal and the distributed security server are connected one by one, and multiple distributed security servers are coordinated through the security policy manager to monitor security event data and make dynamic policy adjustments based on the data security risk index, including permission degradation and biometric authentication, to achieve automated response and real-time early warning.
Avoid single point of failure, support horizontal scaling, ensure system fault tolerance and real-time, automatically respond to high-risk events, and reduce the impact on normal services.
Smart Images
Figure CN120567448A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of information management terminals, and in particular to a distributed nursing information security monitoring and management method and system. Background Art
[0002] Nursing information systems are widely used in medical institutions to manage sensitive information such as patient data, medical order execution, and nursing records. Traditional systems often adopt a centralized architecture, relying on a single server for security monitoring and policy management. With the surge in medical data and the diversification of network security threats (such as illegal access, data tampering, and privacy leaks), centralized architectures are prone to system paralysis due to server downtime or network attacks, affecting the continuity of medical services. Security incidents require manual intervention, making it difficult to adjust policies in real time, resulting in the inability to block high-risk operations in a timely manner. Static permission allocation cannot adapt to dynamic risk scenarios (such as sudden malicious access), which can easily lead to over-authorization or insufficient permissions. The lack of hierarchical warnings and automated responses makes it difficult for administrators to identify key threats in a timely manner.
[0003] Therefore, it is necessary to propose a distributed nursing information security monitoring and management method and system to solve the above-mentioned problems. Summary of the Invention
[0004] The main purpose of the present invention is to provide a distributed nursing information security monitoring and management method and system to effectively solve the above-mentioned problems mentioned in the background technology.
[0005] The technical solutions of the present invention are as follows:
[0006] In the first aspect, a distributed nursing information security monitoring and management method is proposed, which includes the following steps:
[0007] S1. Connect multiple nursing terminals to multiple distributed security servers one by one, and all distributed security servers are connected to the security policy manager;
[0008] S2. Monitor security event data of multiple nursing terminals over a period of time through multiple distributed security servers, and upload the security event data to the security policy manager;
[0009] S3. Determine whether to trigger the security policy execution unit to perform dynamic adjustments based on the data security risk index;
[0010] S4. After the security policy execution unit is dynamically adjusted, it is determined whether a global warning needs to be triggered to the administrator terminal.
[0011] A further improvement of the present invention is that the distributed security server in S1 includes a security monitoring unit and at least one security policy execution unit.
[0012] A further improvement of the present invention is that S2 comprises the following specific steps:
[0013] S21. Preset a safety monitoring time period based on the patient's diagnosis and treatment cycle;
[0014] S22. During the security monitoring period, the security monitoring unit of the distributed security server is used to monitor security event data of the nursing terminal connected thereto, wherein the security event data includes time data, security event type data, and severity level data;
[0015] S23. Calculate the data security risk index based on the time data, security event type data, and severity level data.
[0016] A further improvement of the present invention is that the safety monitoring time period in S21 uses the start time of the patient's diagnosis and treatment cycle as the initial time of safety monitoring and the end time of the patient's diagnosis and treatment cycle as the end time of safety monitoring.
[0017] A further improvement of the present invention is that the calculation formula of the data security risk index in S23 is:
[0018]
[0019] Among them, S represents the data security risk index, k is the time decay factor, N is the number of security policy execution units in the distributed security server, T is the security processing capacity threshold, m is the number of security event types, E i is the number of occurrences of the i-th type of security incident, ω i is the weight of the i-th type of security incident.
[0020] A further improvement of the present invention is that, in S3, judging whether to trigger the security policy execution unit to perform dynamic adjustment based on the data security risk index includes: when the data security risk index S is greater than or equal to the security processing capability threshold T, calling the security policy execution unit to execute the dynamic adjustment policy.
[0021] A further improvement of the present invention is that the specific contents of the dynamic adjustment strategy in S3 are: limiting access rights of high-risk nursing terminals, limiting the number of concurrent requests, and starting biometric authentication.
[0022] A further improvement of the present invention is that S4 includes the following specific steps:
[0023] S41. Obtain the adjusted data security risk index S1. If S1 is greater than or equal to the security processing capability threshold T, send a level 1 warning message to the security policy manager and send it to the administrator terminal.
[0024] S42. If S1 is less than the safety processing capability threshold T and greater than or equal to 0.8T, send a level 2 warning and continue monitoring; otherwise, do not trigger the warning.
[0025] Secondly, a distributed nursing information security monitoring and management system is proposed, which includes:
[0026] Equipment deployment module, security monitoring module, dynamic adjustment module, and security warning module;
[0027] The device deployment module is used to connect multiple nursing terminals to multiple distributed security servers in a one-to-one correspondence, and all distributed security servers are connected to the security policy manager;
[0028] The security monitoring module is used to monitor the security event data of multiple nursing terminals over a period of time through multiple distributed security servers and upload the security event data to the security policy manager;
[0029] The dynamic adjustment module is used to determine whether to trigger the security policy execution unit to perform dynamic adjustment based on the data security risk index;
[0030] The security warning module is used to determine whether it is necessary to trigger a global warning to the administrator terminal after the security policy execution unit is dynamically adjusted.
[0031] The technical effects of the present invention are as follows:
[0032] A distributed nursing information security monitoring and management method has been constructed. The nursing terminals of the present invention correspond one-to-one with distributed security servers to avoid single points of failure and support horizontal expansion. The security policy manager coordinates multiple servers to ensure seamless switching in the event of failure and improve system fault tolerance. Risks are quantified through the data security risk index, and policy execution (such as permission downgrade and biometric authentication) is automatically triggered to ensure real-time performance. Concurrent requests are limited only to high-risk terminals to reduce the impact on normal services. BRIEF DESCRIPTION OF THE DRAWINGS
[0033] Other features, objects and advantages of the present invention will become more apparent upon reading the detailed description of non-limiting embodiments made with reference to the following drawings:
[0034] Figure 1 This is a flow chart of a distributed nursing information security monitoring and management method according to Example 1 of the present invention;
[0035] Figure 2 This is a structural diagram of a distributed nursing information security monitoring and management system according to embodiment 2 of the present invention. DETAILED DESCRIPTION
[0036] The present invention aims to propose a distributed nursing information security monitoring and management method and construct a distributed nursing information security monitoring and management system. The present invention avoids single point failure and supports horizontal expansion through one-to-one correspondence between nursing terminals and distributed security servers; the security policy manager coordinates multiple servers to ensure seamless switching in the event of failure and improve system fault tolerance; quantifies risks through data security risk index and automatically triggers policy execution (such as authority downgrade, biometric authentication) to ensure real-time performance; concurrent request restrictions are only for high-risk terminals to reduce the impact on normal services.
[0037] Example 1:
[0038] This embodiment proposes a distributed nursing information security monitoring and management method, such as Figure 1 As shown, the following specific steps are included:
[0039] S1. Connect multiple nursing terminals to multiple distributed security servers one by one, and all distributed security servers are connected to the security policy manager;
[0040] S2. Monitor security event data of multiple nursing terminals over a period of time through multiple distributed security servers, and upload the security event data to the security policy manager;
[0041] S3. Determine whether to trigger the security policy execution unit to perform dynamic adjustments based on the data security risk index;
[0042] S4. After the security policy execution unit is dynamically adjusted, it is determined whether a global warning needs to be triggered to the administrator terminal.
[0043] In this embodiment, the distributed security server in S1 includes a security monitoring unit and at least one security policy execution unit.
[0044] In this embodiment, S2 includes the following specific steps:
[0045] S21. Preset a safety monitoring time period based on the patient's diagnosis and treatment cycle;
[0046] S22. During the security monitoring period, the security monitoring unit of the distributed security server is used to monitor security event data of the nursing terminal connected thereto, wherein the security event data includes time data, security event type data, and severity level data;
[0047] S23. Calculate the data security risk index based on the time data, security event type data, and severity level data.
[0048] In this embodiment, the safety monitoring time period in S21 uses the start time of the patient's diagnosis and treatment cycle as the initial time of safety monitoring, and uses the end time of the patient's diagnosis and treatment cycle as the end time of safety monitoring.
[0049] In this embodiment, the calculation formula of the data security risk index in S23 is:
[0050]
[0051] Among them, S represents the data security risk index, k is the time decay factor, N is the number of security policy execution units in the distributed security server, T is the security processing capacity threshold, m is the number of security event types, E i is the number of occurrences of the i-th type of security incident, ω i is the weight of the i-th type of security incident.
[0052] In this embodiment, judging whether to trigger the security policy execution unit to perform dynamic adjustment according to the data security risk index in S3 includes: when the data security risk index S is greater than or equal to the security processing capability threshold T, calling the security policy execution unit to execute the dynamic adjustment policy.
[0053] In this embodiment, the specific content of the dynamic adjustment policy in S3 is: limiting the access rights of high-risk nursing terminals, limiting the number of concurrent requests, and starting biometric authentication.
[0054] In this embodiment, S4 includes the following specific steps:
[0055] S41. Obtain the adjusted data security risk index S1. If S1 is greater than or equal to the security processing capability threshold T, send a level 1 warning message to the security policy manager and send it to the administrator terminal.
[0056] S42. If S1 is less than the safety processing capability threshold T and greater than or equal to 0.8T, send a level 2 warning and continue monitoring; otherwise, do not trigger the warning.
[0057] Example 2:
[0058] This embodiment proposes a distributed nursing information security monitoring and management system, such as Figure 2 As shown, it includes: equipment deployment module, security monitoring module, dynamic adjustment module, and security warning module;
[0059] The device deployment module is used to connect multiple nursing terminals to multiple distributed security servers in a one-to-one correspondence, and all distributed security servers are connected to the security policy manager;
[0060] The security monitoring module is used to monitor the security event data of multiple nursing terminals over a period of time through multiple distributed security servers and upload the security event data to the security policy manager;
[0061] The dynamic adjustment module is used to determine whether to trigger the security policy execution unit to perform dynamic adjustment based on the data security risk index;
[0062] The security warning module is used to determine whether it is necessary to trigger a global warning to the administrator terminal after the security policy execution unit is dynamically adjusted.
[0063] Example 3
[0064] This embodiment provides an electronic device, including: a processor and a memory, wherein the memory stores a computer program that can be called by the processor; the processor executes the above-mentioned distributed nursing information security monitoring and management method by calling the computer program stored in the memory.
[0065] The electronic device may have relatively large differences due to different configurations or performances, and may include one or more processors (Central Processing Units, CPU) and one or more memories, wherein the memory stores at least one computer program, which is loaded and executed by the processor to implement a distributed nursing information security monitoring and management method provided by the above method embodiment. The electronic device may also include other components for realizing the functions of the device. For example, the electronic device may also have components such as a wired or wireless network interface and an input / output interface for data input and output. This embodiment will not be described in detail here.
[0066] Example 4
[0067] This embodiment proposes a computer-readable storage medium on which a rewritable computer program is stored; when the computer program runs on a computer device, the computer device executes the above-mentioned distributed nursing information security monitoring and management method.
[0068] For example, computer-readable storage media can be read-only memory (ROM), random access memory (RAM), compact disc read-only memory (CD-ROM), magnetic tape, floppy disk, and optical data storage device.
[0069] It should be understood that in the various embodiments of the present application, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.
[0070] It should be understood that determining B based on A does not mean determining B based solely on A. B can also be determined based on A and / or other information.
[0071] The above embodiments can be implemented in whole or in part through software, hardware, firmware, or any other combination. When implemented using software, the above embodiments can be implemented in whole or in part in the form of a computer program product. A computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer program are loaded or executed on a computer, the processes or functions according to the embodiments of the present invention are generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via a wired network or / and a wireless network. The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that contains a collection of one or more available media. The available media can be magnetic media (e.g., floppy disks, hard disks, tapes), optical media (e.g., DVDs), or semiconductor media. The semiconductor media can be a solid-state drive.
[0072] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed in the present invention can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the present invention.
[0073] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.
[0074] In the several embodiments provided by the present invention, it should be understood that the disclosed systems, devices, and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the units is only one type. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.
[0075] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.
[0076] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.
[0077] Throughout this specification, references to terms such as "one embodiment," "example," or "specific example" indicate that the specific features, structures, materials, or characteristics described in conjunction with that embodiment or example are included in at least one embodiment or example of the present invention. In this specification, schematic representations of these terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.
[0078] The preferred embodiments of the present invention disclosed above are intended only to help illustrate the present invention. These preferred embodiments do not exhaustively describe all details, nor do they limit the present invention to specific embodiments. Obviously, many modifications and variations are possible based on the contents of this specification. These embodiments are selected and described in detail in this specification to better explain the principles and practical applications of the present invention, thereby enabling those skilled in the art to better understand and utilize the present invention. The present invention is limited only by the claims and their full scope and equivalents.
[0079] Those skilled in the art will understand that the foregoing descriptions are merely preferred embodiments of the invention and are not intended to limit the invention. Although the invention has been described in detail with reference to the foregoing examples, those skilled in the art will still be able to modify the technical solutions described in the foregoing examples or substitute equivalents for some of the technical features therein. Any modifications, equivalent substitutions, etc. made within the spirit and principles of the invention shall be included within the scope of protection of the invention.
Claims
1. A distributed nursing information security monitoring and management method, characterized by: The specific steps include: S1. Connect multiple nursing terminals to multiple distributed security servers one by one, and all distributed security servers are connected to the security policy manager; S2. Monitor security event data of multiple nursing terminals over a period of time through multiple distributed security servers, and upload the security event data to the security policy manager; S3. Determine whether to trigger the security policy execution unit to perform dynamic adjustments based on the data security risk index; S4. After the security policy execution unit is dynamically adjusted, it is determined whether a global warning needs to be triggered to the administrator terminal.
2. A distributed nursing information security monitoring and management method according to claim 1, characterized in that: The distributed security server in S1 includes a security monitoring unit and at least one security policy execution unit.
3. A distributed nursing information security monitoring and management method according to claim 2, characterized in that: The S2 includes the following specific steps: S21. Preset a safety monitoring time period based on the patient's diagnosis and treatment cycle; S22. During the security monitoring period, the security monitoring unit of the distributed security server is used to monitor security event data of the nursing terminal connected thereto, wherein the security event data includes time data, security event type data, and severity level data; S23. Calculate the data security risk index based on the time data, security event type data, and severity level data.
4. A distributed nursing information security monitoring and management method according to claim 3, characterized in that: The safety monitoring time period in S21 takes the start time of the patient's diagnosis and treatment cycle as the initial time of the safety monitoring and the end time of the patient's diagnosis and treatment cycle as the end time of the safety monitoring.
5. A distributed nursing information security monitoring and management method according to claim 4, characterized in that: The calculation formula of the data security risk index in S23 is: Among them, S represents the data security risk index, k is the time decay factor, N is the number of security policy execution units in the distributed security server, T is the security processing capacity threshold, m is the number of security event types, E i is the number of occurrences of the i-th type of security incident, ω i is the weight of the i-th type of security incident.
6. A distributed nursing information security monitoring and management method according to claim 5, characterized in that: In S3, judging whether to trigger the security policy execution unit to perform dynamic adjustment according to the data security risk index includes: when the data security risk index S is greater than or equal to the security processing capability threshold T, calling the security policy execution unit to execute the dynamic adjustment policy.
7. A distributed nursing information security monitoring and management method according to claim 6, characterized in that: The specific contents of the dynamic adjustment strategy in S3 are: limiting the access rights of high-risk nursing terminals, limiting the number of concurrent requests, and starting biometric authentication.
8. A distributed nursing information security monitoring and management method according to claim 7, characterized in that: The S4 includes the following specific steps: S41. Obtain the adjusted data security risk index S1. If S1 is greater than or equal to the security processing capability threshold T, send a level 1 warning message to the security policy manager and send it to the administrator terminal. S42. If S1 is less than the safety processing capability threshold T and greater than or equal to 0.8T, send a level 2 warning and continue monitoring; otherwise, do not trigger the warning.
9. A distributed nursing information security monitoring and management system, implemented based on a distributed nursing information security monitoring and management method according to any one of claims 1 to 8, characterized in that: include: Equipment deployment module, security monitoring module, dynamic adjustment module, and security warning module; The device deployment module is used to connect multiple nursing terminals to multiple distributed security servers in a one-to-one correspondence, and all distributed security servers are connected to the security policy manager; The security monitoring module is used to monitor the security event data of multiple nursing terminals over a period of time through multiple distributed security servers and upload the security event data to the security policy manager; The dynamic adjustment module is used to determine whether to trigger the security policy execution unit to perform dynamic adjustment based on the data security risk index; The security warning module is used to determine whether it is necessary to trigger a global warning to the administrator terminal after the security policy execution unit is dynamically adjusted.