Medical Image/Date Security Assurance - Digital Envelope

描述（由申请人提供）： 在远程放射学和其他远程医疗应用中，当数字图像和其他患者信息通过公共网络传输时，以数据隐私、真实性和完整性为特征的健康数据安全性是一个至关重要的问题。 联邦政府已经发布了确保健康数据安全的命令（例如：健康保险携带和责任法案）和指南，如DICOM（医学数字成像和通信）标准继续由医疗保健组织机构发布（例如美国放射学会）;然而，在医学成像界还没有系统的研究和开发工作来解决这一关键问题。 在过去的六年里，图像处理和信息学实验室/洛杉矶儿童医院/南加州大学（PI/CHLA/USC）的成员积极研究了与PACS（图像存储和通信系统）和远程医疗相关的图像安全问题，并取得了非常令人鼓舞的结果。 该应用程序代表了一个有组织的和严格的方法，以进一步研究这一主题的基础上，这一经验。 该提案概述了数字信封（DE）概念的系统发展，以确保通过公共网络传输图像/数据期间的数据完整性，真实性和隐私性。 DE包括图像的数字签名（DS）以及来自DICOM图像标题的加密患者信息。 该提案描述了八项具体任务，包括审查和选择适合医学成像应用的数字安全技术，根据这些新选择修改我们现有的DE安全算法，设计符合DICOM标准的DE，并执行从实验室到医院内，最后是医院间环境的三个阶段的评估。 为期三年的研究计划将最终交付一个便携式，独立的，不断发展的DE包可供医学影像界使用的远程医疗和远程放射学应用。 对于远程医疗和远程放射学，由于数据不能被限制在受防火墙保护的私有局域网内，DE包提供了最有用的安全保证。 该方法还为传统的网络安全保护提供了额外的图像/数据保证。

DESCRIPTION (provided by applicant): Health Data security, characterized in terms of data privacy, authenticity, and integrity, is a vital issue when digital images and other patient information are transmitted through public networks in teleradiology and other telehealth applications. Mandates for ensuring health data security have been issued by the federal government (e.g. HIPAA [Health Insurance Portability and Accountability Act]), and guidelines such as DICOM (Digital Imaging and Communication in Medicine) standard continue to be published by organizing bodies in healthcare (e.g. American College of Radiology); however, there has not been a systematic research and development effort within the medical imaging community to address this critical matter. Over the past six years, members in the Image Processing and Informatics Laboratory/Children's Hospital Los Angeles/University of Southern California (PI/CHLA/USC) has actively researched image security issues related to PACS (Picture Archiving and Communication System) and telehealth with very encouraging results. This application represents an organized and rigorous approach to further research on this topic based on this experience. The proposal outlines the systematic development of the digital envelope (DE) concept to assure data integrity, authenticity, and privacy during image/data transmission through public networks. The DE includes the digital signature (DS) of the image as well as encrypted patient information from the DICOM image header. The proposal delineates eight specific tasks, including review and selection of digital security technologies suitable for medical imaging applications, revamping our existing DE security algorithm based on these new selections, designing the DE to be DICOM compliant, and performing a three-phase evaluation from the laboratory, to intra-hospital, and finally inter-hospital environments. The three-year research plan will culminate in the delivery of a portable, self-contained, and evolving DE package available for the medical image community to use in telemedicine and teleradiology applications. For telemedicine and teleradiology, since data cannot be limited within a private local area network protected by a firewall, the DE package offers the most useful security assurance. This method also provides additional image/data assurance to conventional network security protections.