Rubio Óscar J, Alesanco Álvaro, García José
eHealthZ Research Group, Communications Networks and Information Technologies for E-health and Quality of Experience Group (CeNITEQ), Aragón Institute of Engineering Research (University of Zaragoza), Edif. Ada Byron, C/María de Luna 3, 50018 Zaragoza, Spain.
J Biomed Inform. 2015 Aug;56:8-29. doi: 10.1016/j.jbi.2015.05.002. Epub 2015 May 11.
This paper introduces keytagging, a novel technique to protect medical image-based tests by implementing image authentication, integrity control and location of tampered areas, private captioning with role-based access control, traceability and copyright protection. It relies on the association of tags (binary data strings) to stable, semistable or volatile features of the image, whose access keys (called keytags) depend on both the image and the tag content. Unlike watermarking, this technique can associate information to the most stable features of the image without distortion. Thus, this method preserves the clinical content of the image without the need for assessment, prevents eavesdropping and collusion attacks, and obtains a substantial capacity-robustness tradeoff with simple operations. The evaluation of this technique, involving images of different sizes from various acquisition modalities and image modifications that are typical in the medical context, demonstrates that all the aforementioned security measures can be implemented simultaneously and that the algorithm presents good scalability. In addition to this, keytags can be protected with standard Cryptographic Message Syntax and the keytagging process can be easily combined with JPEG2000 compression since both share the same wavelet transform. This reduces the delays for associating keytags and retrieving the corresponding tags to implement the aforementioned measures to only ≃30 and ≃90ms respectively. As a result, keytags can be seamlessly integrated within DICOM, reducing delays and bandwidth when the image test is updated and shared in secure architectures where different users cooperate, e.g. physicians who interpret the test, clinicians caring for the patient and researchers.
本文介绍了密钥标签技术,这是一种通过实现图像认证、完整性控制、篡改区域定位、基于角色访问控制的私密字幕、可追溯性和版权保护来保护基于医学图像的测试的新技术。它依赖于将标签(二进制数据字符串)与图像的稳定、半稳定或易变特征相关联,其访问密钥(称为密钥标签)取决于图像和标签内容。与水印不同,该技术可以将信息与图像最稳定的特征相关联而不会产生失真。因此,这种方法无需评估即可保留图像的临床内容,防止窃听和勾结攻击,并通过简单操作实现了显著的容量-鲁棒性权衡。对该技术的评估涉及来自各种采集方式的不同大小的图像以及医学环境中典型的图像修改,结果表明上述所有安全措施都可以同时实施,并且该算法具有良好的可扩展性。除此之外,密钥标签可以用标准的加密消息语法进行保护,并且密钥标签过程可以很容易地与JPEG2000压缩相结合,因为两者都共享相同的小波变换。这将关联密钥标签和检索相应标签以实施上述措施的延迟分别减少到仅约30毫秒和约90毫秒。因此,密钥标签可以无缝集成到DICOM中,在不同用户协作的安全架构(例如解读测试的医生、照顾患者的临床医生和研究人员)中更新和共享图像测试时减少延迟和带宽。