Hospital WLAN Wireless Authentication Solution

I. Background of the project

With the advancement of medical reform, hospitals are moving towards quality management in the end, thus improving the quality of medical service, easing the relationship between doctors and patients and improving the service efficiency of hospitals. With the patient-centered service concept, the hospital informatization also changes from the traditional internal management-based his system to the patient-centered clinical information system. With the clinical information, the hospital is gradually to achieve paperless, no film and wireless.

With the continuous maturation and popularization of WLAN technology, the application of WLAN in medical industry has become a trend in the world. As a supplement to the hospital wired LAN, wireless local area network (WLAN) effectively overcomes the disadvantage of wired network, using PDA, flat-panel wireless computer and mobile trolley to carry out vital signs data collection, inquiry and input of medical data, Doctor ward rounds, bedside nursing, call communication, nursing monitoring, drug distribution, Patient Identification code recognition, as well as WLAN-based voice multimedia applications and so on, give full play to the effectiveness of medical information systems, highlighting the technical advantages of digital hospitals.

However, based on the traditional wireless network, it can not effectively solve the hidden dangers such as information push, wireless authentication, preventing illegal rubbing network and anonymous access data security. In this context, a third hospital information department decided to build a wireless authentication system on the basis of the existing wireless WLAN, so as to solve the security hidden danger caused by the visitors, and to improve the overall service level and efficiency of the hospital through the information interaction between doctors and patients and the high quality Internet experience.

Second, demand analysis

Combined with the business model of medical industry related system, wireless application is the only way for hospital informationization, his only realizes Informationization, and CIS realizes the information collecting and processing in the mobile state, which is the base of mobile informatization.

in view of the present situation of the information construction of the three armour hospital, the wireless authentication system is fully considered. and future operations, a wireless authentication solution is required to meet the following requirements:

1. in the hospital existing wireless network based on the architecture of wireless authentication system solutions, and must not affect the hospital related business system;

2. hospital staff, including doctors and nurses, such as user Mobile terminal can be easily linked to the wireless network anytime, anywhere, do not need to do any authentication can easily access the relevant business system within the hospital;

3. for the hospital visitors to provide two kinds of authentication methods, one for the mobile phone short message authentication, mainly for the patient's family members or other visitors, through the way to obtain SMS password access to the Internet; another for the patient, through the static user name password authentication online, the user name password can be obtained from the case or receipt list;

4. The authentication page of the wireless authentication, the successful authentication page can be highly customized, support a variety of web design language, in order to achieve the free design of the requirements of the certification page;

5. convenient management, able to achieve access to the wireless network users in the Internet time, upload download speed and certification validity period, and other aspects of control management;

6. after the successful certification can be enforced to jump to the hospital website or other designated sites, can effectively carry out advertising and promotion;

7. easy to deploy, easy to maintain, full benefit of the old, do not affect the existing network and system operation, while the overall equipment needs easy to operate easy to manage, easy to maintain, the future increase in coverage and the number of users can be easily extended upgrade.

Iii. principles of programme design

Based on years of experience in product operation and a deep understanding of the operation needs of wireless authentication network, aiming at the wireless authentication demand of a certain tertiary hospital and launching "Hospital WLAN wireless authentication and Operation Solution", from the perspective of creating a manageable and operational wireless authentication Network, we are committed to building an efficient, reliable and The commercial wireless authentication network with low operating cost makes wireless network deployment easy, reliable and efficient. According to the user's needs and the characteristics of the user network, the design of the scheme follows the following principles:

1 , high reliability, stable and reliable wireless network operation is the key to ensure the normal operation of access authentication system, select High reliability network products in network design, reasonable design network architecture, suitable for 7x24 uninterrupted operation;

2 , advanced technology and practicality, in ensuring to meet the wireless access certification, but also to reflect the advanced access authentication system, fully consider the status quo and future development trend of the system, to facilitate the expansion of functions;

3 , standard openness, support the international standard of the network protocol, support the China Mobile WLAN Service Portal Protocol specification, to ensure smooth connection with other networks and devices, and the future expansion of the network;

4 , flexibility, and scalability, the network and equipment can be scaled up and upgraded smoothly, based on the growth and change of future business, and minimize the change of network architecture and existing equipment during the expansion and upgrade process;

5 , manageability, centralized monitoring and analysis of network conditions, with access to users, equipment, networks, traffic and other statistical analysis and management functions.

Iv. Detailed description of the programme

Combined with a wide range of wireless certification market demand, the introduction of the Portal Wireless authentication system solutions to maximize the existing wireless certification market demand. Through the Portal series products, users can easily set up a wireless authentication network to achieve Webportal authentication, user access, user management and many other functions.

4.1Scenario topology diagram

650) this.width=650, "src=" http://s3.51cto.com/wyfs02/M02/5B/7E/wKiom1UKNRyhQiIZAAHyu2qv4_U838.jpg "title=" hospital. JPG "alt=" Wkiom1uknryhqiizaahyu2qv4_u838.jpg "/>

Wireless authentication system mainly consists of: Mobile terminal (smart phone, tablet, notebook, etc.), AC Controller, AP, blue Sea Excellent portal Server, Blue Ocean Excellent RADIUS server and SMS gateway. In the overall scenario, the roles they serve are as follows:

1 , Mobile Terminal: Users use mobile devices such as mobile phones and tablets to connect to hospital wireless networks;

2 , AP: Wireless access point, to achieve a certain area of wireless signal coverage;

3 , AC controller: Centralized control of all AP devices, the establishment of a unified SSID according to demand;

4 , Portal Server: With AC equipment docking, to achieve the portal Certification page pop-up and wireless authentication process, certification page support any Web language for custom design;

5 , SMS Gateway: Responsible for sending password SMS to mobile phone users, so that users enter the password for wireless authentication online;

6 , Radius: Ability to set up packages and accounts to enable authentication of account password information for online users.

The above AC, AP use the hospital's original wireless network can, but need the original AC equipment to support Huawei or CMCC Portal Protocol, in order to connect with the Blue Ocean excellent portal system.

4.2Program Feature Description

1 ) Mac-free authentication

The mobile terminal (PAD) used by doctors and nurses in hospital is connected to the wireless network by the way of MAC authentication, so it is not necessary to authenticate to use the relevant business system as before, which will not affect the operation of the existing hospital business system.

2 ) Wireless access authentication

All wireless-capable visitors and patient mobile terminals can be conveniently connected to the wireless network, when the HTTP access request will be redirected to the portal certification page, the user can choose the mobile phone message authentication and static user name password authentication according to circumstances;

3 ) third-party data source authentication

Use to the static user name password authentication user, only need the RADIUS system can read in real-time hospital his or other patient information database can complete certification, can be easily traced;

4 ) certification page Customization

Certification page/Certification Success page can be customized according to their own design, support any web design language, to achieve a good page display effect; In the certification page and Certification Success page can be freely designed to carry advertising information;

5 ) page Jump

When the user completes the mobile phone message authentication, automatically jumps to the hospital official website or other designated website, realizes to the hospital brand two times marketing, strengthens the brand awareness, enhances the service level;

6 ) Mobile SMS authentication

Support mobile phone to obtain random password SMS authentication online, visitors only need to enter their own mobile phone number to receive a random password, in the specified time to enter the password to submit verification can be wireless authentication online;

7 ) User Management

Powerful user management function, can realize different authentication methods of users using different Internet strategies, including upload, download speed and online time, etc., to achieve wireless access to the user's speed, number of online users, the length of the Internet management;

8 ) AD Push

When the user first completed the normal mobile phone message authentication online process, no longer need to enter the mobile phone number and password for wireless authentication, but directly jump to an ad page, watch 10 seconds ads automatically jump to the hospital official website, to achieve the push function of advertising;

9 ) two times marketing

Through the RADIUS system can obtain the mobile phone message authentication mobile phone number information, convenient two times SMS marketing.

Hospital WLAN Wireless Authentication Solution