The paper expounds on the meaning of Electronic Health Records(EHR), analyzes the problems existing during its building process, such as regional imbalance, lack of standards and regulations ect. It gives corresponding advices on security management and application of EHR based on 4W (Why, Who, When, Way)elements.