韩中豪

[摘    要]通过建设智慧机房，将智能感知、数图融合、智能报警融入到传统的机房中，提高医院机房的容灾和预警能力，在保障机房内部软硬件安全的同时，提高医院的网络安全防护等级。在医院现有的传统机房基础上，通过对机房现有的系统架构以及网络架构进行深度分析，找出当前机房在安全上存在的风险点。然后针对风险点结合智慧机房的解决方案对机房的网络安全、数据安全、环境安全、硬件安全进行改造建设。通过梳理传统机房软硬件方面的风险点，同时结合智慧化的建设方案，大幅提高了机房的容灾预警能力。通过智慧机房的建设，降低了机房出现故障的风险，实现了机房智能化的管理，对医院机房安全起了重大的作用。

[关键词]智慧机房;容灾;预警

[中图分类号]R197.324;TP308 [文献标志码]A [文章编号]2095–6487（2021）03–00–02

[Abstract]Objective through the construction of intelligent computer room， the intelligent perception， digital image fusion and intelligent alarm are integrated into the traditional computer room， so as to improve the disaster recovery and early warning ability of the hospital computer room， ensure the internal hardware and software security of the computer room， and also improve the network security protection level of the hospital. Methods on the basis of the existing traditional computer room in the hospital， through the in-depth analysis of the existing system architecture and network architecture of the computer room， find out the risk points of the current computer room in security. Then， aiming at the risk points， combined with the solution of smart computer room， the network security， data security， environmental security and hardware security of the computer room are reconstructed. Results by combing the risk points of traditional computer room software and hardware， and combining with the intelligent construction scheme， the disaster recovery and early warning ability of computer room was greatly improved. Conclusion through the construction of intelligent computer room， the risk of computer room failure is reduced， the intelligent management of computer room is realized， which plays an important role in the safety of hospital computer room.

[Keywords]smart computer room; disaster recovery; early warning

當前，四川大学华西第二医院机房的建设严格遵循国家标准规范，但是整体建设水平比较低，建设的模式比较传统，安全防护能力水平较差。因此，对机房进行优化与升级改造，通过重新定义机房的用途，梳理现有的风险点，结合智慧机房方案改造机房，以达到提高机房容灾预警的能力。

1 机房架构

网络基础建设情况：医院网络在物理上采用有线接入域，医院服务器平台和用户接入网络均为千兆网络，医院内网和医院互联网采用物理隔离的方式。

网络安全建设情况：医院内网和外网采用物理隔离，医院内网和办公互联网均为单独的互联网出口，内网采用防火墙、网闸进行安全隔离和访问控制。……