Medical Image/Date Security Assurance - Digital Envelope

描述(由申请人提供)： 在远程放射学和其他远程医疗应用中，当数字图像和其他患者信息通过公共网络传输时，以数据隐私、真实性和完整性为特征的健康数据安全是一个至关重要的问题。联邦政府已经发布了确保医疗数据安全的命令(例如HIPAA[医疗保险可携带性和责任法案])，医疗保健组织机构(例如美国放射学会)继续发布DICOM(医学数字成像和通信)标准等指南；然而，医学成像社区内尚未有系统的研究和开发努力来解决这一关键问题。 在过去的六年里，图像处理和信息学实验室/洛杉矶儿童医院/南加州大学(PI/CHLA/USC)的成员积极研究与PACS(图像存档和通信系统)和远程医疗相关的图像安全问题，取得了非常令人鼓舞的结果。这一申请代表了一种有组织和严格的方法，以此为基础对这一主题进行进一步研究。该提案概述了数字信封(DE)概念的系统发展，以确保通过公共网络传输图像/数据期间的数据完整性、真实性和隐私。DE包括图像的数字签名(DS)以及来自DICOM图像头的加密的患者信息。该提案列出了八项具体任务，包括审查和选择适用于医学成像应用的数字安全技术，根据这些新选择修改我们现有的DE安全算法，设计符合DICOM的DE，以及执行从实验室到医院内，最后是医院间环境的三个阶段评估。 这项为期三年的研究计划最终将提供一种便携式、自给自足和不断发展的DE包，供医学图像社区用于远程医疗和远程放射学应用。对于远程医疗和远程放射学，由于数据不能被限制在由防火墙保护的专用局域网内，DE包提供了最有用的安全保证。该方法还为传统的网络安全保护提供了额外的图像/数据保证。

DESCRIPTION (provided by applicant): Health Data security, characterized in terms of data privacy, authenticity, and integrity, is a vital issue when digital images and other patient information are transmitted through public networks in teleradiology and other telehealth applications. Mandates for ensuring health data security have been issued by the federal government (e.g. HIPAA [Health Insurance Portability and Accountability Act]), and guidelines such as DICOM (Digital Imaging and Communication in Medicine) standard continue to be published by organizing bodies in healthcare (e.g. American College of Radiology); however, there has not been a systematic research and development effort within the medical imaging community to address this critical matter. Over the past six years, members in the Image Processing and Informatics Laboratory/Children's Hospital Los Angeles/University of Southern California (PI/CHLA/USC) has actively researched image security issues related to PACS (Picture Archiving and Communication System) and telehealth with very encouraging results. This application represents an organized and rigorous approach to further research on this topic based on this experience. The proposal outlines the systematic development of the digital envelope (DE) concept to assure data integrity, authenticity, and privacy during image/data transmission through public networks. The DE includes the digital signature (DS) of the image as well as encrypted patient information from the DICOM image header. The proposal delineates eight specific tasks, including review and selection of digital security technologies suitable for medical imaging applications, revamping our existing DE security algorithm based on these new selections, designing the DE to be DICOM compliant, and performing a three-phase evaluation from the laboratory, to intra-hospital, and finally inter-hospital environments. The three-year research plan will culminate in the delivery of a portable, self-contained, and evolving DE package available for the medical image community to use in telemedicine and teleradiology applications. For telemedicine and teleradiology, since data cannot be limited within a private local area network protected by a firewall, the DE package offers the most useful security assurance. This method also provides additional image/data assurance to conventional network security protections.