Abstract: In order to reduce the access risk of medical information shared by multiple end users, the compulsory access control system for medical information sharing is optimized and designed from two aspects of database and software functions. The database tables of medical shared information and users are built, connecting the database tables according to the logical relationship, and completing the design of the system database. The process of medical information sharing is simulated and the sensitivity level of medical information sharing is determined. Multi-terminal user roles and permissions are allocated, abnormal access behaviors of access users are detected in real time, and authorization and behavior detection results are combined to realize the mandatory access control function of medical information sharing of the system. The test results show that the access control error rate of the design system is reduced by about 24. 4% , and the access risk of medical shared information is significantly reduced under the control of the design system.

Key words: multi-terminal system, user access, medical information, forced access, information sharing