Zhang Jianguo, Yu Fenghai, Sun Jianyong, Yang Yuanyuan, Liang Chenwen
Shanghai Institute of Technical Physics, Chinese Academy of Sciences, Shanghai 200083, China.
IEEE Trans Inf Technol Biomed. 2007 Jan;11(1):70-80. doi: 10.1109/titb.2006.879606.
Image-data transmission from one site to another through public network is usually characterized in term of privacy, authenticity, and integrity. In this paper, we first describe a general scenario about how image is delivered from one site to another through a wide-area network (WAN) with security features of data privacy, integrity, and authenticity. Second, we give the common implementation method of the digital imaging and communication in medicine (DICOM) image communication software library with IPv6/IPv4 for high-speed broadband Internet by using open-source software. Third, we discuss two major security-transmission methods, the IP security (IPSec) and the secure-socket layer (SSL) or transport-layer security (TLS), being used currently in medical-image-data communication with privacy support. Fourth, we describe a test schema of multiple-modality DICOM-image communications through TCP/IPv4 and TCP/IPv6 with different security methods, different security algorithms, and operating systems, and evaluate the test results. We found that there are tradeoff factors between choosing the IPsec and the SSL/TLS-based security implementation of IPv6/IPv4 protocols. If the WAN networks only use IPv6 such as in high-speed broadband Internet, the choice is IPsec-based security. If the networks are IPv4 or the combination of IPv6 and IPv4, it is better to use SSL/TLS security. The Linux platform has more security algorithms implemented than the Windows (XP) platform, and can achieve better performance in most experiments of IPv6 and IPv4-based DICOM-image communications. In teleradiology or enterprise-PACS applications, the Linux operating system may be the better choice as peer security gateways for both the IPsec and the SSL/TLS-based secure DICOM communications cross public networks.
通过公共网络将图像数据从一个站点传输到另一个站点通常在隐私性、真实性和完整性方面具有特点。在本文中，我们首先描述一个关于图像如何通过广域网（WAN）从一个站点传输到另一个站点的一般场景，该广域网具有数据隐私、完整性和真实性的安全特性。其次，我们给出了使用开源软件通过IPv6/IPv4实现用于高速宽带互联网的医学数字成像和通信（DICOM）图像通信软件库的常见方法。第三，我们讨论两种主要的安全传输方法，即目前在具有隐私支持的医学图像数据通信中使用的IP安全（IPSec）和安全套接字层（SSL）或传输层安全（TLS）。第四，我们描述了一种通过TCP/IPv4和TCP/IPv6使用不同安全方法、不同安全算法以及操作系统进行多模态DICOM图像通信的测试方案，并对测试结果进行评估。我们发现，在选择基于IPv6/IPv4协议的IPsec和基于SSL/TLS的安全实现之间存在权衡因素。如果广域网仅使用IPv6，如在高速宽带互联网中，选择基于IPsec的安全方式。如果网络是IPv4或IPv6与IPv4的组合，最好使用SSL/TLS安全方式。Linux平台比Windows（XP）平台实现了更多的安全算法，并且在基于IPv6和IPv4的DICOM图像通信的大多数实验中能够实现更好的性能。在远程放射学或企业PACS应用中，Linux操作系统作为用于通过公共网络进行基于IPsec和基于SSL/TLS的安全DICOM通信的对等安全网关可能是更好的选择。
