Protected Network Architecture for Ensuring Consistency of Medical Data through Validation of User Behavior and DICOM Archive Integrity

Abstract

The problem of consistency of medical data in Hospital Data Management Systems is considered in the context of correctness of medical images stored in a PACS (Picture Archiving and Communication System) and legality of actions authorized users perform when accessing MIS (Medical Information System) facilities via web interfaces. The purpose of the study is to develop a SIEM-like (Security Information and Event Management) architecture for offline analysis of DICOM (Digital Imaging and Communications in Medicine) archive integrity and users’ activity. To achieve amenable accuracy when validating DICOM archive integrity, two aspects are taken into account: correctness of periodicity of the incoming data stream and correctness of the image data (time series) itself for the considered modality. Validation of users’ activity assumes application of model-driven approaches using state-of-the-art machine learning methods. This paper proposes a network architecture with guard clusters to protect sensitive components like the DICOM archive and application server of the MIS. New server roles were designed to perform traffic interception, data analysis and alert management without reconfiguration of production software components. The cluster architecture allows the analysis of incoming big data streams with high availability, providing horizontal scalability and fault tolerance. To minimize possible harm from spurious DICOM files the approach should be considered as an addition to other securing techniques like watermarking, encrypting and testing data conformance with a standard.

Analysis of the Path of Utilizing Big Data to Innovate Archive Management Mode to Enhance Service Capability

“…In this process, it is necessary to take archival information data security as the primary consideration, improve the awareness of data security management, ensure the security of archival information database, and prevent archival information data from being leaked or tampered with. However, some archive management departments are backward in archival information data security management technology due to the lack of corresponding data security prevention and control technology, and some archive managers lack corresponding awareness of archival information data security management, which makes it difficult to provide secure archival information services to archive users [5][6][7].…”

“…In the era of big data, data storage replaces the traditional paper archive management mode, which to a certain extent expands the content and space of the original archive management. Archival information data storage does not occupy substantial storage space, thus making the collection and arrangement of archival information data no longer restricted by time and space, theoretically making archival information data storage reach infinity, and also enabling the dynamic collection, arrangement, and storage of archival information [6][7][8]. For example, for personnel record management, there is a large amount of dynamic archival information data to be collected, organized, and stored in the process of personnel recruitment, interview, entry and exit, etc.…”