ОРГАНІЗАЦІЯ ЗАХИСТУ ІНФОРМАЦІЇ В ІНФОРМАЦІЙНІЙ СИСТЕМІ ВИЗНАЧЕННЯ ТЯЖКОСТІ СТАНУ ПАЦІЄНТІВ З СЕРЦЕВО-СУДИННИМИ ПАТОЛОГІЯМИ

Abstract

The work is devoted to the organization of information protection in the information system for determining the severity of the condition of patients with cardiovascular pathologies. The analysis of threats to the security of personal data of patients was carried out. A conclusion is drawn about the threats to the information system being developed. To prevent these threats, it is necessary to ensure confidentiality, as well as the integrity of information about the patient. This can be done using cryptographic methods. Medical informational systems and methods which used in them are considered. The shortcomings of the above medical informational systems and methods of information protection are highlighted. The choice of block symmetric encryption of DSTU 7624: 2014 for data protection was analyzed and justified for the information system to determination state of severity of the patients with cardiovascular pathologies. A structural diagram of the information system is formed and its main modules are described. The main stages of encryption using the "Kalina" algorithm (DSTU 7624: 2014) are described. The scheme is presented and the main stages of key unfolding are described. The considered encryption algorithm DSTU 7624: 2014 provides a high level of resistance against attacks, as well as the speed of software implementation, allows you to select the length of the key and data block. The listed advantages of encryption with the use of the algorithm "Kalina" allow you to use it when encrypting medical and biological information, both long-term storage, and in situations where the speed of encryption is not critical. The presence of the proposed cryptography reduces the probability of theft of patient data in the information system for determining the severity of the condition of patients with cardiovascular pathologies.