According to the "People's Republic of China *** and the State Computer Information System Security Protection Regulations" and "Information Security Level Protection Management Measures", the provinces and municipalities of the health insurance center dedicated network belongs to the focus of the network security, in accordance with the requirements of the public security departments, information security management departments and the Human Resources Development Council, it must be implemented in the network dedicated to the implementation of various types of extranets, including the Internet to carry out the physical segregation. In this regard, the provinces, municipalities and autonomous regions have strict requirements, in order to Shaanxi Province, Xianning City, the provisions of an example:
The designated medical institutions, designated retail pharmacies (hereinafter referred to as "two" organizations) is an important part of the work of the health insurance, its computers, IC cards, terminals, is the cutting-edge equipment, in order to ensure that the network of health insurance information security, hereby make the following provisions. The following provisions.
Article I "two" organizations should be equipped with special computers and equipment, and clear specialists responsible for management.
The second is strictly prohibited health insurance network computer and Internet connection. If you need temporary access to the Internet, there must be a county, city (district) Human Resources and Social Security Bureau of information technology management agency technicians or authorized personnel to guide, under the premise of ensuring the safety of the entire network system can be accessed; deal with the affairs, must be disconnected immediately.
The third access to the health insurance network of computers, may not be built-in computer games, may not be arbitrary use of foreign storage devices (including USB flash drives, mobile hard drives, CD-ROMs, etc.) and software; such as the need to be anti-virus treatment and to confirm the safety of the case, before use.
Article 4: The computers, IC cards and terminals connected to the health insurance network must go through the procedures of record-keeping.
Article 5 of the "two" organizations must be strictly in accordance with the operating procedures for the use of access to the health insurance network of computers, health insurance settlement software and IC cards and other related equipment, is strictly prohibited to change the date of the system and the system-related attributes of the settings.
Article 6: The two organizations shall accurately and timely input and upload the information on medical consultations and drug purchases into the system on a daily basis, and shall not misrepresent, conceal, falsify, or tamper with it, and shall download the information from the center in a timely manner.
Article 7: In the process of using the system, if there are hardware problems or operating system problems, please contact the hardware provider to solve them; if there are software problems, they should be reported to the information management organization of the Human Resources and Social Welfare Bureau at the same level in time, and be handled and solved by the information management organization.
Article VIII of the "two" organizations must purchase and use genuine antivirus software and firewall software.
Article 9 "two fixed" organizations must regularly consult the notices and information published on the portal of the Municipal Bureau of Human Resources and Social Security to publicize health insurance-related policies and operations.
Article 10: After terminating the health insurance service agreement, the two organizations should immediately stop using the health insurance network facilities, and cooperate with the same level of human resources and social informatization management agencies to do a good job of cleaning up the health insurance information system related software, data and information, and the recovery of PSAM cards.
Article 11 of the "two" institutions in the event of change, transfer, must be declared to the same level of information technology management agency of the human society for approval; approval of the approval, notify the same level of the information technology management agency of the Human Resources and Social Security Bureau of the changes to the health insurance information facilities.
Article XII shall not extend the health insurance network system outward on its own and carry out card settlement; shall not move, reconnect, dismantle and relocate the health insurance network facilities without authorization; theft or damage to the health insurance network facilities shall be promptly reported to the same level of the Human Resources and Social Security Bureau of informatization management institutions.
Article XIII of the "two" institutions end of the health insurance system managers, operators are strictly prohibited from using third-party software and tools to modify or delete the central database and local database.
Article 14 of the "two" organizations to keep the administrator, operator account and password, is strictly prohibited to lend or transfer.
Article XV of the county, city (district) Bureau of Human Resources Management information technology management agency technicians will be regularly or irregularly to the "two" agencies to check, "two" agencies must cooperate. In the inspection if found on the "Golden Insurance Project" health insurance network may pose a threat to the security problems, can directly take measures to suspend the network of the "two" organizations to access the network.
Article XVI of the economic losses caused by violation of this system, in addition to their own responsibility, but also in the Human Resources and Social Security Bureau portal to give notice; the circumstances are serious, will be canceled access to the health insurance network qualification; the circumstances are particularly serious, resulting in the City Human Resources and Social Security Bureau of the data center data loss, data tampering, leakage of information, or network can not function normally, in addition to canceling the access to the health insurance network qualification will also be transferred to the judicial authorities for treatment, and be held legally responsible. Judicial organs to deal with and pursue legal responsibility.
Article XVII of this system shall come into force on the date of issuance. Municipal Human Resources and Social Security Bureau is responsible for the interpretation.
Extended reading: insurance how to buy, which is good, hand to teach you to avoid these insurance "pit"