臺灣博碩士論文加值系統

目前台灣的整體醫療與照護行為已經不僅侷限於在一家醫院或診所內部，包含居家生理量測、跨院會診、長照服務等都是整個醫療照護的一部份，所以跨機構與系統的醫療資源互通是很重要的議題，如何確保資源合法且安全的調閱使用是值得探究的方向。本研究的目的是建立一個標準化的single sign-on (SSO) portal，參考Health Level 7 (HL7) Fast Healthcare Interoperability Resources (FHIR)設計標準化介面輔助人員、組織、裝置與雲端資源的URL的管理，另外參考Integrating the Healthcare Enterprise (IHE) Internet User Authorization (IUA)建置授權管理的機制。通過應用情境模擬測試，設計不同的個人端系統與雲端儲存管理系統，與本研究的SSO portal互通測試，模擬標準化資源規格註冊與存取控制所產生的例外或錯誤狀況，測試FHIR規格皆符合標準，驗證系統間資訊互通的存取控制。

Standard is important for medical records and health record sharing across systems. At present, electronic medical record (EMR) systems and personal health record (PHR) systems usually without support standard protocol and cannot be integrated. This study establish of standards single sign-on (SSO) portal based on Health Level 7 (HL7) Fast Healthcare Interoperability Resources (FHIR) to solve the following two problems. Frist, this study addresses the interaction specifications for sharing personal and system information across EMR and PHR system. Second, basing on FHIR resources and protocols, our SSO portal provides interfaces for resource owner (healthcare workers and patients) to authorize client users the right to exchange data with FHIR servers. Through the standard specifications addressed above, this study also provides data and scenario for testing the integration and access control across systems in the framework.

第一章 緒論
1.1 研究背景
1.2 現行應用情境探討
1.2.1 照護中心與居家生理紀錄系統
1.2.2 個人化癌病病患衛教服務系統
1.3 研究動機與目的
1.3.1 研究動機
1.3.2 研究目的
第二章 文獻探討
2.1 IHE PIX/PDQ
2.2 Continua Health Alliance
2.3 HL7 FHIR
2.3.1 REST
2.4 IHE IUA
2.4.1 JWT
第三章 系統設計
3.1 系統架構
3.2 人員、組織、裝置註冊
3.2.1 新增組織
3.2.2 Portal新增人員(包含Person 、Patient)說明
3.2.3 Person
3.2.4 Patient
3.3 權限管理
3.3.1 授權管理
3.3.2 存取控制
3.4 存取控制應用情境
3.4.1 瀏覽器調閱資源
3.4.2 APP調閱資源
3.5 FHIR Server Resource的新增與查詢
3.5.1 Client上傳resource到FHIR Server
3.5.2 FHIR Server收到Client的Request
第四章 測試與驗證
4.1 應用情境與測試結果
4.1.1 預設瀏覽器使用憑證與Server做雙向SSL互通
4.1.2 測試開發工具與系統資源
4.1.3 FHIR Portal測試範例
4.1.4 病患授權API使用權限給其它用戶
4.1.5 Client系統透過portal取得雲端生理量測紀錄
4.2 驗證權限失敗或錯誤案例
4.2.1 FHIR Server驗證非法的JWT
4.3 FHIR Server測試案例
4.3.1 正確的FHIR xml格式
4.3.2 錯誤的FHIR xml格式
第五章 討論
第六章 結論與未來展望
參考文獻
附錄

[1] 龔筠庭, “電子病歷系統與個人健康記錄系統的資訊互通介面設計-以乳房健康檢查為例,” 慈濟大學醫學資訊學系碩士班, 花蓮縣, 2014.
[2] J. De Clercq, "Single sign-on architectures," in Infrastructure Security, 2002.
[3] C.-H. Choung, Y.-W. Chen, Y.-H. Shih, H.-M. Yeh and C.-H. Hsiao, "Construct a service integration framework for cancer patient," in the 2nd Global Conference on Biomedical Engineering, 2016.
[4] HL7, "FHIR Release 3 (STU; v3.0.1-11917) generated on Wed," 19 9 2017. [Online]. Available: http://hl7.org/fhir/. [Accessed 26 7 2017].
[5] IHE International, "IHE IT Infrastructure," [Online]. Available: https://www.ihe.net/IT_Infrastructure/. [Accessed 30 01 2018].
[6] ITI Technical Committee, "Patient Identifier Cross-Reference HL7 V3 (PIXV3) and Patient Demographic Query HL7 V3 15 (PDQV3)," 10 8 2010. [Online]. Available: http://www.ihe.net/Technical_Framework/upload/IHE_ITI_Suppl_PIX_PDQ_HL7v3_Rev2-1_TI_2010-08-10.pdf. [Accessed 25 07 2017].
[7] Personal Connected Health Alliance, "Fundamentals of Data Exchange," 9 2015. [Online]. Available: http://www.pchalliance.org/sites/pchalliance/files/Fundamentals_Data_Exchange_Sep2015A.pdf. [Accessed 25 7 2017].
[8] Personal Connected Health Alliance, "Interoperability design guidelines for personal connected health systems," 4 8 2016. [Online]. Available: http://www.pchalliance.org/sites/pchalliance/files/H.810-813%20DG2016.zip. [Accessed 26 7 2017].
[9] HL7, "Resourcelist - FHIR v3.0.1," 19 4 2017. [Online]. Available: http://hl7.org/fhir/resourcelist.html. [Accessed 27 01 2018].
[10] Fielding, Roy T and Taylor, Richard N, Architectural styles and the design of network-based software architectures, University of California, Irvine Doctoral dissertation, 2000.
[11] R. T. Fielding, "REST: architectural styles and the design of network-based software architectures," Doctoral dissertation, University of California, 2000.
[12] S. Chou, "REST to RESTful Web Service," 2011. [Online]. Available: http://www.slideshare.net/samejack/rest-to-restful-web-service. [Accessed 26 7 2017].
[13] ITI Technical Committee, "Internet User Authorization," 31 8 2015. [Online]. Available: http://www.ihe.net/uploadedFiles/Documents/ITI/IHE_ITI_Suppl_IUA.pdf. [Accessed 26 7 2017].
[14] ITI Technical Committee, "IHE ITI Technical Framework Supplement Internet User Authorization Trial Implementation," 31 August 2015. [Online]. Available: http://www.ihe.net/uploadedFiles/Documents/ITI/IHE_ITI_Suppl_IUA.pdf. [Accessed 25 07 2017].
[15] "Internet User Authorization - IHE Wiki," 07 11 2017. [Online]. Available: https://wiki.ihe.net/index.php/Internet_User_Authorization. [Accessed 25 01 2018].
[16] Auth0, "JSON Web Tokens Debugger," [Online]. Available: https://jwt.io/. [Accessed 29 01 2018].