MedSeC Project: Application Scenario for Secure Communication

 The data flows between applications and users within the distributed environment of the MedSeC project: 
Interactive remote control (Datastream 1):
The image data are transferred from the project image server (DICOM-PACS) of the hospital to the application server. The application server, located outside the hospital, starts an interactive image processing such as 3D visualization. The firewall admits the datastream because it has been initiated from inside the hospital network. The data are encrypted during the transfer via the DICOM protocol.
Provision for external partners (Datastream 2): 
For an external diagnosis, the images are released by the physician or radiologist of the hospital. The images are first encrypted with the public key of the externally located physician and then temporarily stored on the external DICOM server. The external user is informed about this provision via e-mail or phone.
Use of external data (Datastream 3): 
The data released in datastream 2 can be used by an authorized external user. This user can view the images for diagnostic purposes. If necessary, the external user can send the images to an external application server to preprocess or postprocess the images. The corresponding findings can be encrypted, saved on the DICOM server, or sent via e-mail to the requesting physician.
Off-line calculation (Datastream 4): 
In the case of time-consuming image processing (e.g., precalculating 3D images or movies) the application server receives the image data in batch mode. The application then stores the calculated images back onto the DICOM server. Stored data is encrypted with an application-specific key. This process does not require user interaction. Only authorized applications or users may have access to this data.
 

back