CN107004059A

CN107004059A - System and method for encrypting, changing and interact medical image

Info

Publication number: CN107004059A
Application number: CN201580067622.9A
Authority: CN
Inventors: 马丁·韦斯廷; 约翰娜·沃勒特·梅林; 阿萨·舍布卢姆·努德格伦; 约翰·阿克塞尔·埃里克松; 奥德雷·瑟曼
Original assignee: Denise Imaging Co
Current assignee: Denise Imaging Co; Trice Imaging Inc
Priority date: 2014-10-15
Filing date: 2015-10-15
Publication date: 2017-08-01
Also published as: KR102571307B1; KR20170085496A; CA2964779A1; EP3207480A2; EP3207480A4; WO2016061415A2; WO2016061415A3; KR20230125352A

Abstract

A kind of system for transmitting image, the system includes：Imaging device, the imaging device is used to catching, be imaged and generating digital image file, and the imaging device includes device identifier；A series of routines, a series of routines are used to mark the digital image file, accounts information is associated with the digital image file, the device identifier is associated with the digital image file, and the digital image file is sent to server；And server, the server is used to receiving digital image file and at least one according to the label associated with the digital image file, the accounts information associated with the digital image file and in the device identifier associated with the equipment of the seizure digital image file is handled the digital image file.

Description

System and method for encrypting, changing and interact medical image

Technical field

Embodiment described herein is related to the conveying of medical image recording, is more particularly, to delivered to mobile device And/or encryption and the conversion automatically of the medical image files of telecommunication system.

Correlation technique

In recent years, medical diagnostic apparatus and medical image system become to become increasingly complex.In response to digital imaging technology not Disconnected increased challenge, radiology institute of the U.S. (ACR) and nema (NEMA) develop Digital imaging in medicine With communication (DICOM) standard.DICOM is the standard for handling, storing, print and transmitting the information in medical imaging.It is wrapped Include file format definition and network communication protocol.Network communication protocol is the application communicated between the systems using TCP/IP Agreement.One of target of the standard is that the transmission for making medical image and information between source of checking and scanning source is consistent, to cause The user of different imaging softwares and/or hardware can share information.DICOM file can receive the figure of DICOM format Swapped between picture and two entities of patient data.DICOM makes it possible to the scanner from multiple manufacturers, service Device, work station, printer and the network hardware are integrated into picture archiving and communication system for storing and downloading digital picture (PACS).Distinct device is unanimously declared with DICOM, and the statement clearly illustrate that the DICOM classifications that they are supported. DICOM is widely used by hospital, and is popularized in less dentist office and doctor's office.

DICOM file generally comprises image；Therefore, they are generally claimed DICOM images.It is understood however that DICOM file is not necessarily required to include image.On the contrary, such file can include measurement or data reporting.Therefore, DICOM File can include media data, such as, video and voice data, or not include media data.In this case, DICOM file can only originate the metadata of mode, operator or just examined patient comprising mark.Here mode refers to Any image generating device in medical imaging, such as ultrasonic (US), magnetic resonance imaging (MRI), computed tomography (CT), Positron emission computerized tomography (PET), radiograph etc..

Available data type is different with data volume in any one DICOM image file.DICOM file is usually using mark Know patient (Patient), examine (Study), serial (Series) and example (Instance) data to come by the hierarchic sequence Construction.One patient can be included in it is some inspection (case) in, these examine again can comprising it is some series (check or just Examine), these series can include some examples (file for generally comprising image) again.This means DICOM file can be bright Really identify and be placed into the hierarchical structure.All DICOM files all include the identifier for the generation mode.Change sentence Words say that identifier will reflect equipment or the position of predicate file.These files also include (example) and serial in itself on file The timestamp of both.By using timestamp and identifier is originated, the data can be used to positively identify image, without relating to And any recognizable patient information, so as to protect patients' privacy problem.In addition, DICOM file form is different from other data Form, because information block is data set by it.For example, the file of chest x-ray image is actually comprising the patient in this document ID, to allow image never mistakenly to be separated with the information.

Most of images of the PACS processing from various medical imaging instruments (including US, MRI, PET, CT etc.).Electronic chart Picture and report are digitally transmitted by PACS；The need for this eliminates filing manually, retrieval or transports piece folder.PACS is by four masters Component is wanted to constitute：Image mode, such as CT and MRI；Secure network, it is used to transmit patient information；Work station, it is used to explain And examine image；And long-term and short-term archive room, it is used to storing and retrieving image and report.With available emerging Web skills Art is combined, and PACS has timely transport picture, explanation and related data and expeditiously access images, explanation and related data Ability.PACS has broken and traditional image retrieval based on film, the distribution physical obstacle associated with display and time Obstacle.

The usual output digital image data of medical imaging devices.Equipment as most (if not all) will Dicom standard had not only been used for image file format but also for network transmission.These images cannot generally be checked by consumer image Device or mobile device are read.Therefore, it is intended that the patient for sharing their medical image labours for the conversions of these images and defeated Send.One good example is the image of the shared ultrasonic examination from period of gestation.Following father and mother generally want to retain, shared The image of the child following with them are shown.They may also want to by these images be sent to they friend and relative honeybee Cellular telephone or e-mail accounts.They may even want they being attached on social networks, or they want to protect them In the individual digital " photograph album " for staying in them.All these events will need the image hard copy of their scanning and printings, or look for To, buy, install and learn using with export ability DICOM reader software kits.These software kits are generally not easy to obtain , or they are uneconomic for limited use.

It is also to be noted that this problem is not necessarily limited to DICOM file.Generally, patient does not have practical methods to look into See the related images such as the disease to them, treatment, state.Moreover, there's almost no (if any) doctor or clinical doctor It is raw by its can rapidly, remotely retrieving be used to diagnose or other purposes image effective means.

In fact, many less medical practice places (such as, Branch Clinic, doctor's office and dentist office) also because It can not economically, in time change, convey and receive medical image and be affected.These facilities are generally whole without operation PACS is transported to Remote doctor to obtain the technology branch of the second opinion and the consultation of doctors for progress picture archiving and by image Hold personnel or fund.They are generally by means of the film or writable cd used by mail or postman's transmission.This is both slow, is again Disagreeableness environment, and in the case where using non-register, this is unsafe.Operation PACS cost be not only Pay license fee.Major investment in high level architecture including periphery software, hardware and facility and for educational work personnel Cost and spend in the managerial time will increase operation PACS cost.These major investments be it is expensive, therefore, generally It is unable to reach for most of small enterprises.

In addition, the local network that many medical practice places may be transmitted without medical imaging devices, or locally Network is dangerous or can not be suitably used for receiving and transmitting medical image.Medical image equipment also lacks capture in itself The ability that image is encrypted or changed.Local network (if there is no), which possibly can not combine the network equipments such as PACS, to be come Carry out the management of digital picture.

The content of the invention

The invention provides a kind of ancillary equipment for being used to be attached with medical imaging devices, it realizes adding for medical image Image file format close and that medical image is converted to safety and standard, and realize will be encrypted on telecommunication network And/or converted image is sent to safe server.

According on one side, a kind of system for transmitting image, the system includes imaging device, and the imaging device is used for Catch image and generate digital image file, the imaging device includes device identifier；A series of routines, this series of routine is used It is in reference numerals image file, accounts information is associated with digital image file, by device identifier and digital image file It is associated, and digital image file is sent to server；And server, the server is for receiving digital image file And according to the label associated with digital image file, the accounts information associated with digital image file and with catching numeral At least one in the associated device identifier of the equipment of image file is handled digital image file.

According on the other hand, a kind of imaging device, the imaging device includes mode, and the mode is used to catch image and life Into digital image file；Device identifier；Shared key；And a series of routines, this series of routine is for reference numerals figure As file, accounts information is associated with digital image file, and device identifier is associated with digital image file, by using Digital image file is encrypted shared key, and digital image file is sent into server；Wherein, label, account Information and device identifier indicate how the server is handled digital image file.

These and other feature, aspect and embodiment are described in the chapters and sections of following entitled " embodiment ".

Brief description of the drawings

Feature, aspect and embodiment are described in conjunction with the accompanying, in the accompanying drawings：

Fig. 1 is to illustrate to be used for automatic conversion medical image and by these medical images point according to one embodiment The diagram for any one example system being dealt into a variety of output modalities；

Fig. 2 is to illustrate the example data that can the be included in the system of fig. 1 conversion according to one embodiment With the high level block diagram of some components of induction system；

Fig. 3 be illustrate according to one embodiment by Fig. 2 data conversion and induction system perform it is exemplary from The flow chart of dynamicization message establishing process；

Fig. 4 is the letter for illustrating the exemplary types that can be checked during Fig. 3 according to one embodiment The flow chart of breath and data；

Illustrated during Fig. 5 according to the data conversion and induction system by Fig. 2 of one embodiment using be embedded in it is defeated Enter the flow chart of the example process of the information of the inside for the metadata that file is included together；

The behaviour for the image conversion module that can be included in Fig. 2 data conversion and induction system is illustrated during Fig. 6 The flow chart of work；

Fig. 7 is to illustrate can be included in Fig. 2 data conversion and induction system according to one embodiment Web GUI typically used as and its for finding figure by originating mode in the case of not any recognizable patient information The flow chart at the streamlined interface of picture；

Illustrated during Fig. 8 according to the Web GUI of one embodiment typically used as change and its for by using One recognizable patient data finds the flow chart at the streamlined interface of image；

Fig. 9 is to illustrate to be used for automatic conversion medical image and by these medical images according to another embodiment The diagram for any one example system being distributed in a variety of output modalities；And

Figure 10 is the ancillary equipment according to an embodiment of the invention being connected with medical imaging devices and for changing And encrypt the diagram of the remote server of the medical image files from medical imaging devices.

Figure 11 is the network equipment according to an embodiment of the invention being connected with medical imaging devices and for changing And encrypt the diagram of the remote server of the medical image files from medical imaging devices；And

Figure 12 is the flow chart of the signal stream by network.

Figure 13 is according to an embodiment of the invention to be used to change and encrypted medical using encryption and converting unit The diagram of the system of image, medical imaging devices and remote server；

Figure 14 is illustrated with Figure 15 and the conventional operation stream that medical image is shared is carried out in primary care is set with emergency ward Journey；

Figure 16 is the flow chart of the embodiment of the system of the real time remote interactive collaboration for medical diagnosis；

Figure 17 illustrates the user interface that the user of real time remote interactive system will be seen that；

Figure 18 illustrates the user interface that the user of real time remote interactive system will be seen that；

Figure 19 illustrates the user interface that the user of real time remote interactive system will be seen that；

Figure 20 illustrates the user interface that the user of real time remote interactive system will be seen that；

Figure 21 illustrates the user interface that the user of real time remote interactive system will be seen that；

Figure 22 illustrates the user interface that the user of real time remote interactive system will be seen that；

Figure 23 illustrates the user interface that the user of real time remote interactive system will be seen that；

Figure 24 illustrates the user interface that the user of real time remote interactive system will be seen that；

Figure 25 illustrates the user interface that the user of real time remote interactive system will be seen that；

Figure 26 is the mobile device according to an embodiment of the invention being connected with medical imaging devices and for changing And encrypt the diagram of the remote server of the medical image files from medical imaging devices.

Figure 27 and Figure 28, which are illustrated, to be sent to image by using IP networkings equipment or the calculating of server The example process run in machine system；And

Figure 29 illustrates the diagram of the example system of the routine including Figure 27 and Figure 28.

Embodiment

Fig. 1 is to illustrate for automatic conversion medical image and these medical images are distributed into a variety of output modalities In any one example system 100 diagram.Term output modalities (output modality) is used to represent various types of Equipment, system and the service of type, are provided below its several example.It can be seen that, system 100 can include many introduces a collection medical science into As mode 10, such as ultrasound, MRI, CT and PET device, local PACS 20 (usually source images archive server) or can Send any other equipment of medical data (such as DICOM data) (being usually medical image).Mode 10 and PACS 20 can be with Be connected by router 50 via internet 60 with such as central computer system (CCS) 30, router be typically provided with encryption and Firewall protection.

Central computer system (CCS) 30 can include the data conversion and induction system for being used to handle medical data (DCDS)32.CCS can include one or more servers, and can include one or more processors or CPU and (one It is individual or multiple) processor associated memory, data memory module, display unit and input/output interface part.Should , it is realized that various other ancillary equipment and module can be connected with CCS, such as other servers, other data memory modules or Command detection system.CCS can also be an interoperability server zone, and each interoperability server is responsible for specific in system Business.Similar, independent clothes shown in fig. 2 and in all modules discussed below may each be such cluster It is engaged in device, so as to distributed load and improves the ability of system.

DCDS 32 can be used for by the medical image associated with medical data be converted to such as consumer close friend image, Video or both.DCDS 32 and then image that can be then by these conversions are sent to some destinations or by DCDS 32 User/operator indicated by or by being included in the output modalities 40 of the information defined in medical data.These destinations 40 can be such as website, such as social network sites (including：Such as, Twitter, Facebook and Google Health), honeycomb Phone, PDAs, email account can receive any department of computer science of data by agreements such as SOAP and REST System.DCDS 32 works in this way, i.e. it allow by most harsh fire wall set 50 come protect source mode (10, 20), while still allowing to be transmitted by internet 60.Original source image data can alternatively it is not any processing or Destination 40 is sent in the case of conversion.

For example, when patient is subjected to ultrasonic examination in period of gestation, ultrasonoscopy can be sent to DCDS 32, so as to The social networks webpage of patient can be sent to by being converted to, their mobile device, their friend and the equipment of household or One group of image of webpage etc..More particularly, during ultrasonic examination is carried out, operator, which can catch and store, brandishes his arm The good sequence of the fetus of arm.Ultrasound practitioner's (being typically nurse or technical staff) sends out (such as DICOM) file of storage It is sent to DCDS 32.Nurse, technical staff or any employee (user) by new person at Patient facility can use and DCDS The remote graphical user interface (GUI) of 32 interfaces connection proposes the required sequence sent by source mode 10.User and then can be with Any personal information indicated by cell phone number, web account informations, e-mail address etc. and patient is inputted, then Start course of conveying.The DICOM file for being such as converted into the compatible video format of cell phone (such as, 3gpp) now is right After can be sent to mobile phone as multimedia messages, and be converted into the file of other suitable forms and can also be sent out It is sent to given Email and web accounts.

Alternatively, in the patient information field that the nurse or technical staff at Patient facility can be in ultrasound machines Input the cell phone number of patient.When receiving such as DICOM data files, DCDS 32 can be configured to and then look for Go out to be embedded in this number and the automatic video file by after the image of conversion or processing in DICOM data files to forward To the required position specified by patient.The example of these processes described in detail below.

Fig. 2 is the high level block diagram for some components for illustrating the exemplary DCDS 32 according to one embodiment.It is appreciated that , Fig. 2 diagram is in order at the purpose of explanation and illustration, is not intended to embodiment as described herein being limited to any specific frame Structure or design.Fig. 2 is also not intended to provide the detailed view of exemplary DCDS 32 all component.In operation, from mode 10 request can be handled by input stage, and the input stage includes receiver 203 and storage and resolver 204.Receiver 203 can use In the connection from source mode 10 is authenticated and handle completion request necessary to network trading.

Storage and resolver 204 can be used for parsing received data and by any view data 205 and all first numbers It is stored according to 206 in storage system 214.For example, view data 205 can be stored as binary data, and metadata can be with Be stored as structural data, thus allow search between the typical structured access for data, such as disparity items and Association.Storage and resolver 204 can be used for some embodiments or it is some under the conditions of construct from the data file of input Remove all sensitive patient informations.For example, system operator can use graphic user interface (GUI) (such as Web GUI 208) it is considered as sensitive part come optionally set metadata.Alternatively, system can be programmed to automatically It is sensitive to determine which of metadata field.This process is referred to as anonymization, and it is to protect to perform the process Patients' privacy.Anonymization is discussed in further detail below.

In certain embodiments, the event signal for indicating that newly stored data have been added can be triggered.When event system Module 209 of uniting is when analytically device 204 receives event signal, it be determined for result should take what action (if If having).If for example, automatic output rule has been set and has been stored in receiving recently in structured database 206 Suitable metadata values are found in data, then event system module 209 can be used for signaling order to send to output module 213 Change data indicated by these automatic transports rule.This process can also be described in more detail below.

Output module 213 can be used for including conventional data, the information to be sent and conveying destination numbering from DCDS 32 The other parts of (including e-mail address) are received and called.For example, the data may include text message, such as DICOM schemed The reference of picture, two cell phone numbers and an e-mail address.Output module 213 can be used for the suitable form of assembling The output " bag " of change or message, and send using the framework based on modular insert the message of gained.For each correspondence The plug-in unit (not shown) of the destination of type, which can be output module 213, to be included and uses.

In example provided above, when DCDS 32 receives service call, output module 213 can be assembled and included The image of jpeg versions and Message-text MMS message bag, the image and Message-text are all combined according to MMS specifications And coding.Then, the message can be sent twice, and each telephone number destination asked, second are sent to for the first time It is secondary to be sent to specified each e-mail address destination.

Output module 213 can ask the image after conversion to image converter 211, so as to recognize original image and refer to Fixed asked form and size.Image converter 211 is then available in the conversion image buffer storage 212 matched with the request Search conventional images.If not finding matching, it can generate image by raw image data 205.Image converter 211 can For determining whether asked form is suitable using the metadata 206 for the original image being stored in database.If no Properly, then it can be responded with error.For example, the mp3 audio versions of request rest image can cause error, and ask The jpeg rest images of multiframe DICOM image files (effective for video) are then suitable.

Image converter 211, which can be used for responding to the event from resolver 204 and rob, first carries out common turn Change.This will improve the response of system component (specifically, output module 213 and Web GUI 208)；However, its cost is institute Memory is needed to increase, also general safety rank slight decrease.

Web GUI 208 are provided to such as medical worker and are connected (https) 202 couples of DCDS 32 by Secure Web browser Remote access.Such Web GUI 208 can provide execution management role and (such as set up for event system module 209 Rule) interface and for identification image and send the optimization interface of output message.These interfaces described in detail below Typical operation.

Web GUI 208 can be operated to find simultaneously identification image to structural metadata 206.Web GUI 208 Converted, with the thumbnail and preview graph of such as display image, and provided wherein defeated available for request image converter 211 Outbound message can be designated and be sent to output module 213 for the service request list of conveying.

Adaptable garbage collector 207 can continuously assess the state of all data and by the state with by being The configuration that system keeper formulates is compared.The configuration can set project to need to meet to retain in systems or from being The a certain standard that system is deleted.One basic standard can be the age of project.If for example, project was before one week or one Stored before a little days, then the project can be automatically left out.Other standards that are automatically deleted can be time that project had previously been sent The value of number, the system status information stored and any metadata.This feature is that part is useful for reduction resource usage amount , and the patient data that system is safeguarded no longer is needed by removing, additionally aid patient's confidentiality.

It should be noted that in certain embodiments, image will be used for clinical or diagnostic purpose.In this case, Usually require that be eventually displayed in for check image equipment on image keep certain resolution ratio or picture quality.With regard to this point In, in certain embodiments, one or more of resolver 204, event system module 209 and image converter 211 can So that image of the configuration just to be checked in identifying and diagnosing or clinical practice is deployed alone or in combination.Such identification can be based on The information stored or the information provided by GUI 208 in information that metadata includes, picture system 214.

For example, being identified for receiving the address of image or equipment in the metadata can be identified as and clinical or diagnosis Using associated address or equipment, image or serial identity symbol can also be associated with clinical or diagnostic application etc..Alternatively Ground, operator can indicate that the image to be sent is intended to be used for clinical or diagnostic purpose by GUI 208.

When it is determined that image will be used for clinical or diagnostic purpose, image converter 211 can be used for such as being based on being stored in Information in storage system 214 is come the resolution ratio or picture quality needed for determining.For example, being answered for various types of images, clinic It can be stored in storage system 214 with resolution ratio, picture quality waited or both.Then, image converter can be determined Correct image resolution ratio and quality and according to the image resolution ratio and quality come transition diagram picture.In certain embodiments, DCDS 32 be determined for identified output equipment or address whether can send have required image resolution ratio and The image is shown before the transition diagram picture of quality.If the equipment or address can not, DCDS can produce error message or instruction Other notices of such case.Error message can be shown in equipment by GUI 208, or both of which can.

As it is indicated above, DCDS 32 can be used for obtaining the medical image files of input and it turned automatically Change any one to be distributed in a variety of input mode and checked by the input mode.Fig. 3 is to illustrate The flow chart of the exemplary embodiment operated according to the automation message establishing performed by DCDS 32 of one embodiment. In the example of fig. 3, it is assumed that destination information (such as, output modalities information) is included in the medical image that DCDS 32 is received In file.In other embodiments, user such as can access DCDS 32 by GUI 208, and specify which file should Which output modalities be sent to；However, the DCDS 32 constructed according to system and method as described herein powerful aspect embodies Destination can be automatically determined at it and is suitably changed as described as follows and format data.

In step 320, file is received, and checks the file header associated with this document to determine various information.It is logical Cross input 203 receive medical image files be typically included metadata, the metadata provide with medical data or with the doctor Learn the information for the image correlation that data are included together.For example, in DICOM file, medical image files will include file header, This document head includes multiple fields.These fields are all identicals generally for every kind of input mode 10.Therefore, DCDS 32 can For checking file header field with determine below in relation to Fig. 4 be described in detail various information.

In step 322, it may be determined that output destination type or mode.For example, file header can include identification image The information of the recipient for the image that file includes.Or more particularly, file header can include mark and each recipient Or service (for example, such as online photograph album page, website or service；Social network page or service, mobile device etc.) it is associated Output modalities information.The destination of fundamental type can include：Mobile device, such as cell phone；Email accounts； Such as Web application specific interface (API) associated with online website or service etc..Therefore, DCDS 32 can be used for checking head File and the associated output equipment of determination or service (that is, mode).

As possible, DCDS 32 and then the specific spy available for the every kind of destination type indicated in searching step 324 Property.These characteristics can include the ability and physical characteristic and network classification and the specification and limit of type of message of destination equipment System.Then, the information is used to determine the output format specification and other specifications needed for every kind of output modalities.For example, the information View data is changed available for the specification of the type based on the message for just being sent, such as, Email has can be with The specification limit and practice being altered；And MMS has the very different limitation that can be altered.

The ability and characteristic determined in step 324 can include：The Pixel Dimensions of picture size, i.e. image or video, Such as, 640*480 etc.；Data rate or size of data, such as, MMS message may generally be no more than 300KB total sizes, exceed 10MB e-mail attachment is not received generally, etc.；The coded format supported, such as, and mpeg4, jpeg etc.；And disappear Cease placement rule, i.e. how can constitute information for destination, such as, MMS is made up of " page ", and each page can show Show single image or video and with the single text for playing video, and Email can realize HTML layout and can be with Accommodate annex of any file type, etc..

In step 326, basic compatibility checks can be performed, to determine whether the data that are included in image file can be with According to form conveying that can be compatible with output modalities.If for example, view data includes video data, can determine to export mould Whether state can receive and show video data.

Then most suitable transfer scheme is selected in step 328, to ensure that the output information finally produced includes output The manageable best in quality data of mode.This is for example used in inspection or the setting of diagnostic purpose in clinical setting or data May be more important.The resolution information for being suitable for diagnostic purpose and DCDS 32 discussed further below provide such resolution ratio Ability.

Then, in a step 330, it can extract as needed and change data.For example, MMS message only allows to have very much The total information size of limit.Therefore, image or video are generally especially needed is altered and optimizes, so that final message meets specific defeated Go out the form and code requirement of mode.On the contrary, Email Information is not limited strictly generally for size, it therefore, it can connect Receive bigger file, such as, the image or video of higher resolution.But, or even email account can also be including limitation The rule of very big file, therefore, or even email message may also require that the optimization of such as video file, to ensure enough matter Amount, but also observe size and limit.

If input file has been encoded into form that can be compatible with output modalities, do not enter in a step 330 generally Row conversion, to retain highest possible picture quality.

In step 332, anonymization can be carried out to data as needed for any applicable anonymization rule.Example Such as, data can be extracted and be copied as general format, to allow some data to be removed, edit.Then, data Final output form can be converted into.Step 330 and step 332 can be performed parallel, or as needed for particular implementation As conversely perform.

, then can be according to determining conversion in the step of above using form and specification in step 334 Data assembling is output message.Alternatively, other data can be included together with message.The information can such as pass through GUI 208 are manually entered, or it can be from the meta-data extraction for receiving file.Further, the data can be base In above-mentioned feature collection, the data of retrieval are set from configuration.

In certain embodiments, output message will be included by being assembled according to the pattern rule of the type for the message being just created Data component.For example, various pattern rules can be stored in storage system 214 and be output module 213 access so as to Assemble output message.For example, MMS message is based on page metaphor (page metaphor), in the page metaphor, each The page can include image or video, text element and audio element.Therefore, two or more images are sent or including text This, audio or both with (one or more) image together with including will then need to be assembled into message in several pages.Phase Instead, email message can include any amount of image, annex etc. according to the limitation of such as message size.

Then, output module 213 can be used for selecting suitable output gateway, for the transmission assembling in step 336 Output message.For example, output module 213 can be used for sending email messages to smtp server (not shown) and incite somebody to action MMS message is sent to MMS gateway (not shown).

Fig. 4 is the flow chart of the information and data that illustrate the exemplary types that can be examined in step 320.Such as Fig. 4 is visible, when file is inputted, at step 420, can check that metadata (or more specifically, file header) is defeated to recognize Enter mode.In step 422, it may be determined that the mode and the compatibility of system determined at step 420.If compatible , then in step 424, it may be determined that the particular characteristics for the data that image file includes., can be with for example, in step 424 Whether determine file actually includes whether any image or video data or data are only to report or measure.When input text When part includes such as report or metric data, then in step 426, such information can be extracted and such information is deposited Store up as such as common structured format.In step 428, it then can also extract and store any view data, and can be with Determine various characteristics, binary coded format, frame sign, color bit depth, still image or video etc..

Fig. 5 is to illustrate to use to be embedded according to the DCDS 32 of one embodiment to be included together with input file The flow chart of the example process of information inside metadata.Metadata (such as, file header field) can be used to ensure that and it The safe and reliable conveying for the view data being included together.For example, DICOM image files can include multiple file header words Section, these file header fields are the keys in some data types (character string, numeral, date, special metric type etc.) Value pair.Field can be embedded in the file for providing it metadata, or can be linked with this document.So, it is impossible to obscure File and associated data, because they are not separation.

In step 520, DCDS 32 can be used for automatically following the trail of and recording each network equipment for sending image File header field.So, DCDS 32 can identify the particular device associated with input file.DSDC 32 can pass through following sides Formula is so done, i.e. recording which field in step 522 is present for modality-specific 10, and then record is used in step 524 The data included in the unrelated file header field of equipment of associated mode.Particular device should be reported always on such as making Make the identical value of business, model name, model number etc..Therefore, DCDS 32 can use the information to represent particular device.

In step 526, DCDS can detect any change in data, then take suitable action.For example, should not The change of the file header field data (such as, manufacturer's information) of the change can indicate that file has been tampered or someone just tries Figure invasive system.In response to detecting such change, system can record event, notify operator, input data is placed In review queue, by data or any other data from associated equipment blocking, refuse the data, refusal comes from equipment All Future Datas, only lifted several possible actions.

In step 528, DCDS can be used for the search in file header field to identify expected as already pointed out connect The data of debit.Mark can be actual such as e-mail address, movement station international member directory number (ISDN), website The form of address etc..In fact, such direct mark can be preferably as it make use of the presence of file header field. Mark can also be indirect, such as, can be used for such as searching directly in the registration table being stored in storage system 214 The ID of location.It is also to be noted that each field can include the data and different types of data of one or more.Therefore, appoint What identification field or address field can include telephone number and e-mail address etc..Further, mark data can To be included in more than one field.

Then, DCDS 32 can be used for determining in step 528 based on any mark data detected in step 530 In the action taken.Only lift several examples, such action can include suitable message being sent to find any address, Message is compatibly formatted as described above, notifies operator, message is added in queue (such as, so as to careful manually Core), find out other data or information and the data or information be added to output message.

Therefore, Fig. 6 is the flow chart for the operation for illustrating DCDS 32 in more detail.With reference to Fig. 6, it can receive at least Convert requests 301 comprising the internal identifier for image and destination form.As it is indicated above, convert requests can be with It is the result of information that the metadata associated with input file includes and data.However, as noted below, request may be used also To be from the result by the inputs received of GUI 208.Alternatively, request can be defeated by what is sent comprising that will be scaled Go out the new images size of image.Image converter 211 can be used for and then by attempting to find out and it in metadata database 303 Associated metadata determines the presence of asked image 304.If record, converter is not present in the image asked Placeholder image (305,308) can alternatively be returned or conversion is terminated and attempt 306.Placeholder is typically to pass on to be asked The unavailable image of image, video or similar media.This moment, converter can be also used for determining that asked output format is It is no feasible.

If the metadata 303 in database is implicitly present in, converter can be used for such as coming from video memory 302 DICOM images be loaded as original binary format.Then, converter 211 can be used for determine view data size whether It should be readjusted as the size needed for the size provided in request or the output format asked.For example, Web GUI 208 jpeg preview graphs can according to the layout of suitable html documents any size present, and the video of MMS message have it is non- Normal certain size is to follow specification.

Then, view data can be by the 311 destination form to be asked of conversion.Result can be stored in into image to delay Deposit 312, and 313 can be updated to metadata record to indicate the presence of transition diagram picture.Finally, can be by the figure of conversion As being returned as the response to request.Then converter 211 can directly return to the binary data of conversion or will quote Return to its position 313 in image buffer storage.

As noted, DCDS 32 can also be operated by Web GUI 208 and interface is set up with it and is connected.GUI 208 can make it that DCDS 32 can either be remotely accessed, again can local IP access DCDS 32, and cause can be in storage system Image is found in 208.Image may need to be found or analyze or diagnose or for being sent to designated destination or ground Location.

The major way of two kinds of access files can be provided.First way is related to the situation in not any identification information Under find file.This mode is explained in detail below in conjunction with Fig. 7.However, first it is noted that sending the file to DCDS 32 The file header field that can be transmitted by recording and mapping input file of each equipment identify.Equipment can also be at least partly The network address based on them, AE titles for transmission or both identify.Then each equipment can be given only One and for operator preferably significant title.File and its series, examine or both, may then pass through it Originate from it equipment, the time and date of picture catching, identify equipment for catching image operator file header Field is identified.

Because not needing patient information, DCDS 32 can handle anonymization data, and will not be due to system it is indiscriminate With and be collected into patient information.In addition, it is most of use highlight can by as nearest image storage in systems.Cause This, the highly effective rate of searching image can be made in this manner.Once file, series, inspection etc. have been found, GUI 208 Direct access to the feature for checking image, transmission image etc. can be just provided to operator.

In view of this point, Fig. 7 is to illustrate according to the typically used as of the Web GUI 208 of one embodiment and its be used for The streamlined interface of image (401-404) is found by originating mode in the case of not any recognizable patient information Flow chart.When image is identified (405), the interface display wherein user's input and output destination information and other message is thin The service request list of section.If data verification (407), the conversion (408) needed for being asked to image converter (211).It is right In all successful requests, data (409-411) are assembled by suitable output inserter, and send the result to suitable mesh Ground (412-414).Collect status information (415) on each single output, and return this information to (416 or 417) list diagram (405) is to be shown.This moment, user can select to repeat transmission process or return to find another Image.

Web GUI 208 allow transmission to belong to identical (such as, DICOM) serial image sets.Operating procedure is similar to Fig. 7 The operating procedure illustrated with Fig. 8.Web GUI 208 are also presented for tectonic event system 209, are organized and store output mesh Way address and necessary other management roles interface.It is important to note that being used as safety measure, Web GUI 208 Any mandate for being allowed to storage image or the source mode to the access privileges of these images is not handled.These important settings are only Having can just be obtained by the independent access method of Local or Remote.The feelings operated in DCDS in Unix- style operating systems Under condition, remote access will be carried out generally by Secure Shell (SSH) agreement.If DCDS is run in Windows operating system, Then remotely access generally to be carried out by terminal service.Both agreements are the examples of safely remote access operation system.

The second way for accessing file is to use identification information.For example, operator can use patient information (such as surname Name, birthday, patient ID etc.) carry out search file.Operator can for example input search terms, and if there is matching, then system All obtainable inspections can be presented.If returning to multiple patients, these patients can be presented to be selected.Once choosing Patient is selected and has found associated file, series, inspection etc., then GUI 208 can be provided to for checking to operator The direct access of the feature of image, transmission image etc..

Fig. 8 is to illustrate Web GUI 208 typically used as modification and its for recognizable by using each Patient data (patient's name and birthday etc.) etc. find image (501-504) streamlined interface flow chart.It can replace Ground is changed, any unrelated id password or PIN code can be used for avoiding using actual patient information, to ensure patients' privacy. Hereafter, the process step as described in above with respect to Fig. 7 can then be performed.

In certain embodiments, illustrate as illustrated in fig. 9, CCS 30 can be connected with the interface of server 902, the service Device 902 can be used for being responsible for and support various increasings related to the image that mode 10 is being caught, for such as patient and household Value service.For example, if image is fetal ultrasound image, server 902 can be used for providing each to father and mother, household, friend etc. Plant service.For example, DCDS 32 can be used for converting the image into a kind of appropriate format that server 902 and related service are supported Or a variety of appropriate formats.Server 902 can be sent images to and be stored in storage system 904.

It is to be understood that server 902 can actually include multiple servers, computer, router etc. and perform Suitable software and firmware needed for function described herein.In addition, storage system 904 can include one or more databases, One or more storage servers and required other physical storage mediums.

Then server 902 can be used for：For example, master subscriber can create the website of account thereon.User then can To access the image on website and buy image, pregnancy calendar, cup, key chain, T-shirt, the drawing board of customization etc..In addition, net Stand available for picture, diagram and the information presented on fetus and child development, health and nutrition patch scholar etc..Such website can Enable to realize service as follows as registration table：Such as, on baby bath；To the automatic of friend and household Update；Digital gift and virus-type (viral) gift, such as baby image with digital lullaby；Invite card and thanks card； Etc..

The expense for setting up account number can disposably or be periodically collected to user, such as, network fee can also Collected to user and family and friends on various products and service or the expense of both.

Furthermore it is possible to which at least some of self-aided terminal in same services can be provided by being set up such as in obstetrical ward (kiosk)908.Self-aided terminal 908 can be independent, i.e. be directly connected with the interfaces of CCS 30, or can be as illustration It is connected like that with the interface of server 902.Therefore, family and friends such as can just order picture and other business in waiting room Product.

In addition, user even can continue to use account after child is born.For example, website can be whole at its Childhood is at least tracked in head some months or several leading year to the situation of child.Website can be used for reminding the birthday and logical Accuse and give friend and household or notify other special events, growth mileage etc. to friend and household.Moreover, website can be with For continuing to be rendered into long message and pasting scholar for the health of both mother and child and nutrition.

It is in fact possible to preferably, make father and mother upload the contact details on friend and household.By this way, take Business device 902 will be reminded and be sent to friend and household the birthday available for continuation.In certain embodiments, server 902 is responsible for Website can be under the jurisdiction of or be responsible for " gift shop " for providing various products and service.Alternatively, or in addition, website can be with Discount, the reward voucher in various other enterprises and shop etc. are provided.Because server 902 is by with the related population related to child Statistical information, such as, and residence information, sex, age, race, possible even father and mother's age, professional and other memberships, institute Can be sent with website be suitable for child and household, reminded by welcomes such as similar populations, gift recommendation, discount etc..

At this point, it may be preferable that give the chance that user provides such demographic information.Therefore, at one In embodiment, user can access website and customize or provide profile information, contact method, preference etc..On server 902 The algorithm of operation can be used for and then carry out Products Show etc. using obtainable information.In fact, because server 902 will have Be related to global personal information, thus the algorithm may be used in shared similar demographic statistics, income level, partially The information of the colony waited well is recommended.

In certain embodiments, user can buy article by website (that is, by server 902).For example, service Device 902 can be used for receiving credit card payment, PayPal account or move charging.Therefore, server 902 can be used for place Reason merchandise and deduct suitable expense or to relevant enterprise, be subordinate to company, affiliate etc. and collect tranaction costs.Moreover, Information can also will be bought to be fed into the algorithm and for carrying out following recommendation.In fact, the purchase of whole Reference Group Buy can be used for carrying out more targetedly, the recommendation that is more suitable for.

Therefore, as child grows up, (honed) algorithm can be continuously updated and temper, to carry out such as gift Recommend.It is able to will automatically recommend to be sent to friend and household during for many years.As database is with the time is into length and has There is increasing user, the algorithm can be tempered to provide more correlation and more targetedly recommend.

It is also to be noted that database will must include a large amount of letters on the relation between huge colony and contact Breath.This includes directly linking for such as friend and household, but also including more indirect links, such as preference, similar purchase Custom etc..Such interconnection information is for targetedly advertising with Products Show and for simply following the trail of and mapping The interconnectivity of huge colony is probably very valuable.

It should be noted that such website can be built around Other diseases or event, such as cancer support website, Physical treatment support website etc..Can it should also be noted that the interconnectivity data of these various other diseases and event are combined Make information and products ＆ services that there is targetedly more good algorithm to expand the strength of information, and can produce.

It is also to be noted that user can use computer 914 and mobile device 912 to be accessed by such as internet Website.In addition, website can be connected with other social network sites (Twitter, Facebook etc.) interface.In some embodiments In, website can essentially be converted to application program or the widget of other websites can be exported to (widget).Updated for example, application program can be placed on her Facebook pages and more easily receive by grandmother And notice, without signing in on server 902.This can increase interacts with website, and the interaction can increase for example services Device 902 is available, information and data volume of input as above-mentioned algorithm.

Although some embodiments are hereinbefore described, it is to be appreciated that described embodiment is merely exemplary 's.Therefore, systems and methods described herein should not be limited based on described embodiment.On the contrary, described herein System and method only should be limited by following claims combination above description and accompanying drawing.

Periphery encryption and conversion equipment

In one embodiment, ancillary equipment can be attached with medical imaging devices, to be encrypted and incite somebody to action to medical image It is converted to the image file format of safety and standard, and will be encrypted and/or converted on telecommunication network Image is sent to safe server.As shown in Figure 10, ancillary equipment 102 other types of can set for cyberdog or independently Standby, the autonomous device can be with the physical attachment of medical imaging devices 101, and processor and memory with oneself are to perform Conversion with medical image, encryption and medical image is transmitted to remote server on another network from medical imaging devices 103 related various functions.Ancillary equipment 102 can be with COM1 (such as network port, serial port on medical imaging devices Or other communication interfaces) attachment.Ancillary equipment can be used as wave filter, to monitor all medical science generated on medical imaging devices Image file is simultaneously encrypted and changed to the medical image files of selection, so that these medical image files are transmitted in another net The equipment of long-range connection on network, such as server or mobile device.

Cyberdog may be configured with to be connected with the individual networks of LAN (LAN) or wide area network (WAN), or cyberdog is available The network being connected in use with medical imaging devices.If medical imaging devices are not with network connection or with that can not transmit The network connection of medical image, cyberdog can have the network hardware, make cyberdog communicated by WiFi or cellular network or Or even receiving directly carries out Ethernet cable with the not connected local network for having medical imaging devices and is connected.

In another embodiment, encrypted electronic dog 102 can be connected using unsafe connection with imaging device 101, at this In the case of kind, encrypted electronic dog 102 exercises following functions：Acquisition is stored in the medical image on medical imaging devices 101 and will These image encryptions, with by the network connection of safety by these image transmittings to remote equipment, such as medical image The remote security service device or mobile device of final destination.

One embodiment provides one kind in the case where not being built-in with any cryptographic capabilities by DICOM network attached encryptions And the methods and techniques system being route at slave unit.

One embodiment of the present of invention can be monitored the unprotected known port that communicates, and automatically should The connection is route by the opposite end for the encryption that connection is encrypted and passes through the port in an encrypted form.For example, in TCP port 104 or Common DICOM connections on 11112 can be encrypted as SSL/TLS and be route as the DICOM/TLS on TCP port 2762. This will effectively make the connection occur occurring on the remote server and as unprotected connection as the TLS connections of safety On a client device.By using the network port attachment of embodiments of the invention and imaging device or as with equipment phase Network router on same shielded local network, maintains high-caliber security.

Equally, common " web " that is carried out by http protocol connection on TCP port 80 can be encrypted as SSL/TLS And it is route as the HTTPS on TCP port 443.This will effectively be such that the connection occurs as the HTTPS connections of safety On HTTP server, and the connection is set to be appeared in as unprotected connection in HTTP clients.Now, it should be noted that , HTTP flows only can carry out on the legacy client and server of secure connection it is just useful.However, exactly using one General embodiment of the present invention is illustrated to the known network port.

Embodiments of the invention include wireless network connection, such as WiFi function or cellular modem function, with In the case of existing network facility is not present near imaging device, operation, which is not only encrypted, can also carry out internet access.This It is highly useful for the portable equipment run when can go out based on battery electric quantity.

Embodiments of the invention can be pre-configured with, so that shielded flow only is forwarded into single remote endpoint.

Embodiments of the invention can be used any encryption method to all related encryption methods to ensure connection.These Example includes foregoing SSL/TLS standards and other common encryption standards.It is characterized by, the present invention will be supported by embodiment Each connection simulation the machine encryption standard.Can by special chip (electronic hardware component), software or software with it is hard Part accelerate combination come to encryption code and decode.

Network encryption and conversion equipment

It is used for for the network equipments be connected with local network including at least one medical imaging devices to medical image The image file format of safety and standard is encrypted and be converted to it from least one medical imaging devices, and will be added Close and/or converted image is sent to the security server on telecommunication network.The network equipment can be used as local network On router or gateway, with the stream of the medical image of the destination equipment outside monitoring from medical imaging devices to local network Measure and ensure medical data file to be encrypted and converts thereof into appropriate form, to be transported in telecommunication network On equipment.After a test, the network equipment is encrypted and is converted to the medical image files of selection, by medical image text Part is transmitted to the equipment of the long-range connection on telecommunication network, such as server or mobile device.

One embodiment of the network equipment is illustrated in fig. 11, wherein, the network equipment 104 is used as encrypting router, with On potentially unsafe local network medical image files are received from one or more medical imaging devices 101.Then, encrypt Router 104 to medical image by for encrypting and converting thereof into safety and the image file format of standard.Then, road is encrypted It is (all in telecommunication network for encrypted and/or converted image to be sent to by secure attachment by device 104 Such as, internet) on security server 103.

In one embodiment, the network equipment 104 will be created for the privately owned of one or more medical imaging devices 101 Network, to be communicated.Then, encrypted DICOM images can be passed through WiFi, honeycomb (3G) or cable by the network equipment 104 Connection is transmitted to telecommunication network.In the configuration, the network equipment 104 is used as gateway, to ensure to being transmitted out from local network All medical images are changed and encrypted.

Figure 12 illustrates the medical science figure from LAN (LAN) 301 to the remote equipment on remote wide area (WAN) 307 As the flow chart of the data flow of file.The network equipment 104 may include the one or more assemblies illustrated herein, including：Encryption prison Port 302 is listened, the encryption listening port 302 monitors network traffics on the lan, with to not being encrypted or do not change Medical image files into appropriate format are transmitted.Encrypting database 305 can store encryption and set, and the encryption, which is set, to be indicated to answer This encrypts a certain specific medical image files with which kind of encryption type, and this is likely to be dependent on the type of network or long-range The type of destination equipment in WAN network 307.Processing 303 is carried out to medical image files, to encrypt this document, in encryption After operation, by a certain port mapping 304 to transmit this document.Then, by fire wall or other local routers 306 by Encrypted file is transmitted to long-range WAN network 307.

In one example, Vscan imaging devices capture medical image, the medical image for non-DICOM format and Unencryption, but be chosen so as to transmit to the remote security service device on telecommunication network from Vscan.Then, by medical image Send to the network equipment 104, the network equipment 104 is converted into the image is sent to before remote security service device DICOM images are simultaneously encrypted.

Because the network equipment is created and the server of the long-range connection on medical imaging devices and another network or is set Standby secure connection, so in dangerous or insecure local network, the network equipment is useful.In addition, with can Prevent network connection into the network of the high safety of the rigorous fire wall of remote security service device, the network equipment is useful.

In one embodiment, the network equipment can be configured to network satellite, and the network satellite is attached with local network, but should Network satellite is used as remote security service device, and in the case where network satellite is the final destination of medical image files, this one Individual or multiple medical imaging devices send image to network satellite.Then, network satellite will obtain medical image, also, will Its encrypt or conversion (or both) then by encrypted and converted image send to reality remote security service Device.In this embodiment, because medical imaging devices are to transmit file to it to be considered that the final destination of medical files is (remote Remote security service device on journey network), so need not indicate that medical imaging devices send medical image files to network On new position, such as network equipment.

One embodiment of the present of invention can be monitored the unprotected known port that communicates, and automatically should The connection is route by the opposite end for the encryption that connection is encrypted and passes through the port in an encrypted form.For example, in TCP port 104 or Common DICOM connections on 11112 can be encrypted as SSL/TLS and be route as the DICOM/TLS on TCP port 2762. This will effectively make the connection occur occurring on the remote server and as unprotected connection as the TLS connections of safety On a client device.By using the network port connection of embodiments of the invention and imaging device or as with equipment phase Network router on same shielded local network, maintains high-caliber security.

Equally, common " web " that is entered by http protocol connection on TCP port 80 can be encrypted as SSL/TLS simultaneously And route as the HTTPS on TCP port 443.This will effectively be such that the connection is appeared in as the HTTPS connections of safety On HTTP server, and the connection is set to be appeared in as unprotected connection in HTTP clients.Now, it should be noted that Be, HTTP flows only can carry out on the legacy client and server of secure connection it is just useful.However, exactly using a pair The known network port illustrates general embodiment of the present invention.

Encryption and conversion plug-in unit

The invention provides the system for being encrypted and changing to medical image files in the equipment in network and Method is encrypted and converting unit can be combined in the hardware and software of medical imaging devices or another network equipment, so as to Medical image is encrypted to transmit to telecommunication network and the medical image can be converted into and destination equipment or Web-compatible Form.The encryption and converting unit can also be used to converted and encrypted image is packed and transmitted to long-range Appropriate destination on network, such as security server.

Encryption and converting unit can be used as router or gateway on local network, to monitor from medical imaging devices to originally The flow of the medical image of destination equipment outside ground network and ensure that medical data file is encrypted and by its turn Appropriate form is changed into, to be transported to the equipment on telecommunication network.After a test, encryption and converting unit will be to selections Medical image files be encrypted and be converted, the equipment to transmit it to the long-range connection on telecommunication network is all Such as server or mobile device.

The one embodiment encrypted with converting unit is illustrated in fig. 13, wherein, encryption and converting unit 104 are used as adding Close router, to receive medical image text from one or more medical imaging devices 101 on potentially unsafe local network Part.Encryption and converting unit 104 can be combined in each medical imaging as the combination of software, hardware or software and hardware In equipment 101.In another embodiment, encryption and converting unit 104 can be router, gateway, fire wall or on network The part of other network equipments that flow is monitored and regulated and controled.No matter the class of the equipment where encryption and converting unit 104 How is type, and encryption and converting unit 104 to medical image all by for being encrypted and converting thereof into safety and the figure of standard As file format.Then, encryption and converting unit 104 are used to encrypted and/or converted image passing through safety Connection is sent to the security server 103 on telecommunication network (such as, internet).

Figure 12 illustrates the medical science figure from LAN (LAN) 301 to the remote equipment on remote wide area (WAN) 307 As the flow chart of the data flow of file.The encryption and converting unit 104 may include the one or more assemblies illustrated herein, as The combination of software, hardware or software and hardware.In one embodiment, encryption and converting unit 104 include encryption monitoring end Mouthfuls 302, the encryption listening port 302 monitors network traffics on the lan, with to not being encrypted or be not converted into fitting When the medical image files of form are transmitted.Encrypting database 305 can store encryption and set, and the encryption sets instruction to use Which kind of encryption type encrypts a certain specific medical image files, and this is likely to be dependent on the type of network or in long-range WAN nets The type of destination equipment on network 307.Processing 303 is carried out to medical image files, to encrypt this document, in cryptographic operation Afterwards, by a certain port mapping 304 to transmit this document.Then, will it be added by fire wall or other local routers 306 Close file is transmitted to long-range WAN network 307.

In one example, Vscan imaging devices capture medical image, the medical image for non-DICOM format and Unencryption, but be chosen so as to transmit the remote security service device to telecommunication network from Vscan.Encryption and converting unit 104 are embedded in as the software run in Vscan equipment, and are thus sent by the image from Vscan equipment to long-range DICOM images are converted into before security server and are encrypted.

Because encryption and converting unit create the clothes of long-range connection with medical imaging devices and on another network The secure connection of business device or equipment, so in dangerous or insecure local network, the encryption and converting unit are useful 's.In addition, with network connection can be prevented into the network of the high safety of the rigorous fire wall of remote security service device, net Network equipment is useful.

One embodiment of the present of invention can be monitored the unprotected known port that communicates, and automatically should The connection is route by the opposite end for the encryption that connection is encrypted and passes through the port in an encrypted form.For example, in TCP port 104 or Common DICOM connections on 11112 can be encrypted as SSL/TLS and be route as the DICOM/TLS on TCP port 2762. This will effectively make the connection occur occurring on the remote server and as unprotected connection as the TLS connections of safety On a client device.By the way that embodiments of the invention are communicated with the network port of imaging device or protected with equipment identical Network router communication on the local network of shield, maintains high-caliber security.

Embodiments of the invention can be pre-configured with, so that shielded flow only is forwarded into single remote endpoint.This hair Bright embodiment can be used any encryption method to all related encryption methods to ensure connection.These examples include foregoing SSL/TLS standards and other common encryption standards.It is characterized by, each connection that the present invention will be supported by embodiment Simulate the encryption standard of the machine.Can by special chip (electronic hardware component), software or hardware-accelerated combination come pair plus It is close to be coded and decoded.

The mobile device of encryption and converting unit is implemented

In some embodiments it is possible on the mobile devices such as smart mobile phone, tablet personal computer or other mobile devices Implement above-mentioned (for example being described relative to Figure 10-13) encryption function and translation function.It is shown in fig. 26, Wherein, it be instead of with mobile device 107 such as the encryption in Figure 13 and converting unit 105, software 109 is already installed on the movement and set On standby 107, the software 109 makes mobile device can perform encryption function as described above and translation function and routing function.

In many examples, can be by the way that equipment 107 will be downloaded to by encryption function and translation function and shifting using 111 Dynamic equipment 107 is integrated.Then, it will include or allow the software 109 of user's download execution desired function needs using 111.Cause This, can for equipment 107 processor architecture come composing software 109.

Then, software 109 can be used as router or tcp proxy servers, be sent out from the equipment 101 such as portable ultraphonic machine The data sent are passed through the router or tcp proxy servers.From the perspective of ultrasonic machine, ultrasonic machine is seemingly just directly with setting Dicom server communications on standby 107, but in fact, ultrasonic machine passes through the encryption tunnel provided by equipment 107 or safety connects Connect and directly communicated with the server 103 of trustship.

Port used in equipment 107 is usually 104, but also has replacement port 11112, whenever needing to be parked in port 1024 When upper, just using the replacement port 11112, but such case is seldom.

In certain embodiments, software can require to pay expense that is disposable or subscribing to.Thus, system can match somebody with somebody It is set to so that for example providing certificate to software 111 by server 103.Generally, certificate can be set to expire, so using 109 can be handled as follows：User is reissues proof payment expense, for example, the term of validity of extension certificate.This is referred to simply as " subscription ".In this case, the automatic expiration is quite useful.Therefore, it may include to obtain new authentication using 109 and new authentication be installed The ability of (for example, automatic install).

It may include payment function using 109, the payment function allows user to use credit card, mobile wallet or other accounts Family is to subscribe to or disposable payment expense, for example, expense is paid to extend or obtaining the new term of validity, it is effective at this During phase, software has effective certificate.

In some other embodiments, using may include the user interface of higher level in 109, the interface allows user to soft The function of part 111 carries out actual interaction, monitoring, fault detect or carries out above-mentioned all operations.This may include checking connection Property, with the presence or absence of the ability of secure connection, upload and speed of download etc..

In certain embodiments, mobile device 107 and imaging device 101 can by wireless communication link (such as, NFC, BlueTooth^TMOr WiFi) communicated.Thus, communications electronics dog (not shown) can be connected with the interface of equipment 101, with reality Existing this wireless connection, or this kind of function can be included in the apparatus 101.

Mobile device 107 can be communicated for example, by 3G/4G WAN systems with such as server 103 again.However, at it In its embodiment, equipment 107 can also use WiFi connections such as to be communicated with such as server 103.It means that for example, logical Crossing (can be by the mode of any use local network by WiFi and local network by the tablet personal computer without 3G/4G functions 101 access) connection, the tablet personal computer can still function as encryption device.

For example, if equipment 101 uses Wi-Fi, and mobile device 107 it is positive using wireless wide area network come with service Device 103 communicates, then mobile device 107 can be used as Wi-Fi base stations and the router that such as ultrasonic machine 101 is connected.Ultrasonic machine institute The IP address of connection is the IP address of equipment 107, when equipment 107 configures oneself by DHCP, no matter ultrasonic machine acquisition is What IP address of router, the IP address is all identical.

Integral image is managed

The invention provides system and the side for integrating the various communication protocols related to medical imaging and file type Method.The system added to current interface by software and intelligence by integrating the current interface with third party software, with reality Now with the communication of third party's image management software.

In one embodiment of integration software, the generation of the medical imaging user interface such as GE Viewpoint interfaces is more The medical image of individual portable document format (PDF).Then, pdf document is converted into by the system and method described in the present invention The image document of DICOM format, then, these image documents is sent to specific destination and PDF is then converted back, with Checked on appropriate electronic equipment (such as, personal computer, portable electric appts etc.).

In another embodiment, HL7 protocol devices communicate for medical software, and the equipment includes the mesh of particular document Ground packet.For example, it is desired to which the image created by HL7 equipment is sent into doctor or patient.Integration software obtains figure As upper information, the information is combined with the command information on the destination of image, the information is then added to DICOM again Message.

Integration software is converted, encrypted and by image by obtaining the information and determining needed from third party software system Send to the information needed for appropriate destination to play a role.

Real time remote is interacted

System and method described in the present invention are by using one shot using medical imaging devices such as MRI Or multiple patient medical images provide scene or real-time, long-range diagnosis to the medical problem of patient.The system can be specific The network with multiple computing devices and display device is shown as, the network shows graphic user interface (GUI) to each user, Make all users can real time inspection identical medical image.Following selection can also be provided a user：Image is explained in real time, led to Instant message transmission program is crossed to carry out on the chat of image and even with IP phone (VOIP) or tradition Communicating landline conference system engage in the dialogue.The system is provided the user multiple menus and diagnosed and it with organization chart picture, selection It is acted, and with multiple user's live collaborations to make diagnosis based on one or more medical images.

Figure 16 illustrates the total working flow interacted for real time remote, wherein, instrument board is presented or main to user first Picture, shows the different options that diagnosis is made for cooperating.Instrument board is further illustrated in figure 18.It can be shown to user Medical image from Vscan equipment, then can perform inspection Screening Treatment.In Screening Treatment is checked, image can be sent out Patient is delivered to, inspection result can be sent to patient, and resulting information can be sent for diagnosis.Then, it can do Go out scene or in real time diagnosis.In emergency circumstances, can really skip in flow chart illustrated step, so as to Urgent diagnosis is made in the case of not cooperated with long-distance user.

The overall GUI presented when Figure 17 illustrates the display of the computing device on network is checked to user.It can carry For main menu, main content area and navigation and message part.

Figure 18 illustrates " instrument board " GUI, and the instrument board lists with universe network or (all with the actual computing device of user Such as, the medical imaging devices on the local network of the user at hospital or medical institutions) connection medical imaging devices.The instrument Dial plate also list the image captured via these equipment and these images can be captured to order by patient, doctor etc. Row arrangement.If new images arrive, then these images can be moved to the top of list and highlighted, enable users to easily look for To them.In one embodiment, can be to the suitable of the responsible patient profiles when particular device captures one or more images When doctor or health care provider send remind, such as, SMS or email message.Instrument board may also provide search characteristics, Wherein, user can scan in the picture and in the information database related with patient to image.

Figure 19 shows main menu GUI further detail below, and the details is provided：Select option (its of DICOM images In, have found master image workflow)；And inbox, in the inbox, user disappears from reception at system or other users Breath；Patient or can be easily found parallel connection be tied to send other users of image and message and addressee's icon of contact person；With To handle the setting of imaging device, patient message and for by the setting figure of the anonymization of the label of inspection-classification or automation Mark；For showing statistics icon as time go by by the flow entirely applied；Demonstration manager manages user account With the management icon for setting patient image to classify；Non-administrator can check oneself Profile and other account details account Family icon；And allow user log off to exit icon.It is to be appreciated that listed icon and option can be changed herein Become and be not limited to above-mentioned these icons and option.

Figure 20 illustrates one embodiment of Picture workflow, wherein, the inspection of image or image can be selected from list Test, further to be checked.Checking information may include to distribute to the file of each single item inspection and quantity, the Yi Jiqi of label The quantity for the comment that its user is done to particular test and image.For still image, video, comment etc., it is possible to provide different Icon.These labels can on the diagnosis of suggestion or the particular category of image on being included in inspection or.

Figure 21 illustrate can quickly be checked before selecting one or more images further to be checked as breviary The a series of images of figure.A row are provided at the top of GUI to act, and other icons on thumbnail are there is provided the thumbnail It is no to represent video and whether the thumbnail belongs to specific picture format (such as DICOM) instruction.User can click on or select One in thumbnail is selected to open whole image or video.

Figure 22 is real time remote interactive cooperation GUI diagram, wherein, by medical image and one or more users to the figure As the note made together shows.Chat picture is shown, in the chat picture, during the diagnosis of patient is discussed, User can mutually send instant message, and the thumbnail list of other images in examining can be set at top.With new The arrival of image, may be updated thumbnail.It is live collaboration instrument, all letters of the instrument real-time update to be somebody's turn to do " field diagnostic picture " Cease and make the editor between user synchronous, including image, pin and the other changes for explaining, chatting, act, selecting.For needing The emergency ward situation of care diagnostic, field diagnostic picture is especially useful.In chat picture, user can select to invite in addition Participant takes the one or more of the other action related to the situation.

Figure 23, which is illustrated, selection and to another user (such as, doctor or can be as a kind of in chat picture Patient provides the nurse of service) one embodiment of the action of mode being explicitly indicated is provided." action " tab can also be provided Action to selection and who perform and suggested the tracking of these actions, so as to suitably record the treatment of patient." inviting In teamworker " tab, user can invite multiple users to participate in field diagnostic process.The user being invited to can receive and invite them Participate in short message, Email or the phone of live chat session.User interface can be used for any kind of computing device, including Mobile phone and tablet personal computer, to allow user to participate in talking with using any kind of portable electric appts from any position.

Figure 24 illustrates GUI, in the GUI, based on one group of image, in order to be sufficiently accurate it may be desired to which particular patient is diagnosed.User can For the worry remained to be investigated the option different with possible diagnosis selection.Upon issuing the request, can via e-mail, text or The one or more users of Advise By Wire, and inbox picture can be set to be shown when receiving reply.

In fig. 25 there is provided the GUI for making diagnosis, which provide several images or multiple menus are appropriate to select Diagnosis.Image can be downloaded to computer desktop to be checked in more detail with other Software tools.Can be latent with highlighted or selection In the option of diagnosis.Once having reached final decision, then send and diagnose and place on record, to be checked and to be examined in the future Test.

Receive pipeline embodiment

In embodiment, such as relative to described by Figure 10, Figure 11 and Figure 13, it is necessary to DNS and private port.However, In certain embodiments, the need for standard port can be used to eliminate to DNS.In these embodiments, some Communications routines are The application of imaging device 101 or the computing system being connected with the interface of equipment 101 can be loaded into.These Communications routines can with for example DICOM imaging applications communication in equipment, to obtain DICOM images, is encrypted to image and believes there is provided label and account Breath, and then by the information transmission to one or more servers.Among other, label and accounts information can be used for counting The input of privately owned wildcard is calculated, As described in detail below, the privately owned wildcard can be used for encrypting.The information also may be used Stopped account is used to determine whether when account is disabled to prevent any transmission.

Figure 29 be a diagram that according to one embodiment be configured with can perform this message establishing function Communications routines, The schematic diagram of the example system 2900 of process etc. (routine 2906).In Figure 29 example, routine 2906 may include (all in equipment Such as, the terminal 2904 coupled with equipment 101) in, or be included in equipment 101 itself.Terminal 2904 can be computing device, bag Include：The portable computing devices such as notebook computer, tablet personal computer or smart phone.Routine 2906 can be used for slave unit 101 Image is obtained, establishment includes the message of view data, label, accounts information and other information, and these message can be provided on such as View data is managed, the view data or entire message is encrypted and one or more clothes is transferred a message to by network 2908 in where The information for device 2912 and the storage location 2910 of being engaged in.

Network 2908, storage location 2910 and server 2912 may indicate that basic cloud structure.

It is as described above, label and accounts information may indicate that or provide at necessary information so that such as server 2912 can handle message and the view data included together with the message.For example, label and accounts information may indicate that service The storage image data of device 2912 are simultaneously associated with specific clinician, clinician group, hospital etc., wherein, it can be used later Application (such as, above-described application) is checked to access and check view data.Alternatively, label and accounts information can refer to Show that image is forwarded to equipment or the website of clinician or patient by server 2912.

In certain embodiments, routine 2906, which can also be provided, makes view data be converted into being easier to transmit to server 2912 And the different-format that easily being serviced device 2912 is handled, or it is converted into the form associated with destination.In addition, routine The need for 2906 can eliminate to DNS or using the need for private port.

Figure 27 and Figure 28 illustrate two this routines 2906 for being referred to as viewdata receiver 2702 and communication 2704 Or the example embodiment of finger daemon.Here is the description to these finger daemons.First, as shown in figure 27, routine 2906 It may include (the Dcmtk of viewdata receiver 2702::storescp).As can be seen that (the Trice of subprocess 2704:sendFile) Image file can be linked to and these processes can be used to send the image files such as DICOM image files to cloud together In (the Trice of receiver routine 2710::receiver).

The privately owned wildcard of device-specific can be used in certain embodiments to realize Transport Layer Security (TLS).This A little keys are encryption key, wherein, sender and recipients are required for successfully calculating identical key making transmission success.Account Family information and label can be the two of which inputs of the calculating.Described configuration should provide strong file copy function, If there is any connectivity between equipment 101 and cloud, the function can successful operation.In the communication line of the diagrams of Figure 27 and 28 Any failure leads to the failure of the response to equipment 101, and this can make equipment 101 attempt to send view data again.

As illustrated in Figure 28, Communications routines 2704 can also be used for communicating with receiver 2710.If it is allowed, Communications routines 2704 can be responsible for initializing, send " heartbeat " to cloud, Trouble Report, config update and software upgrading.

It will can include with the local directory 2706 that read/write is accessed with storage configuration information.Can be by the catalogue Transmitted as the parameter of finger daemon 2702 and 2,704 2706 position.In most embodiments, as catalogue 2706 Disk Locality, is not required.Catalogue 2706 can storage information such as port #, local-ip addresses, DICOM dictionaries, error logging Deng.If equipment 101 is DICOM imaging devices, DICOM services can load DICOM dictionaries from such as catalogue 2706.Such as this It is literary described, heartbeat message can be sent to the port # including that can be read from the catalogue 2706 and local-ip addresses cloud and received Device.Also log information can be stored in the catalogue 2706.

The title of uniqueness can be calculated for equipment 101.If the device id associated with equipment 101, then this should be used Device id and non-computational name.If device id, then the filename comprising device id can be transferred to Communications routines 2704.This sets Standby ID can be the major key of anything in cloud database with up-link/device-dependent.Then, cloud service can be searched： The time transmitted in last sound heartbeat slave unit；The equipment time online first；The version for the software being carried in equipment；With Associated account of equipment etc..Up-link described in Figure 27 and Figure 28 sends cycle state information, the cycle state information It can remain in for heartbeat and as its major key in the cloud using device id.It should also be noted that for all communication, using Standard port (for example, 443).

Claims

1. a kind of system for transmitting image, the system includes：

Imaging device, the imaging device is used to catching, be imaged and generating digital image file, and the imaging device includes equipment Identifier；

A series of a series of routines, routines are used to mark the digital image file, by accounts information and the digitized map It is as file is associated, the device identifier is associated with the digital image file, and by the digital image file It is sent to server；And

Server, the server is used to receive digital image file and according to the mark associated with the digital image file Label, the accounts information associated with the digital image file and associated with the equipment of the seizure digital image file At least one in device identifier is handled the digital image file.

2. system according to claim 1, wherein, the imaging device also includes shared key, and wherein, the example Journey is used to the digital image file is encrypted by using the shared key.

3. system according to claim 2, wherein, the server includes multiple shared keys, and each is described shared Key is all associated with specific imaging device, and wherein, the server is used for by using associated with particular device Message from specific imaging device is decrypted shared key.

4. system according to claim 1, wherein, the routine is stored on the imaging device.

5. system according to claim 1, the system also includes the terminal coupled with the imaging device, and its In, the routine is stored in the terminal.

6. system according to claim 5, wherein, the terminal is mobile device.

7. system according to claim 6, wherein, the mobile device is portable computing device, tablet personal computer or intelligence Can mobile phone.

8. system according to claim 1, the system also includes one or more storage locations, and wherein, it is described Accounts information identifies document location in one or more of storage locations.

9. system according to claim 1, wherein, the routine is additionally operable to：It is sent to by the digital image file Before server, a pair form associated with the digital image file is changed.

10. system according to claim 1, wherein, the routine is additionally operable to perform initialization, sends heartbeat to described At least one of server, Trouble Report, config update and software upgrading.

11. a kind of imaging device, the imaging device includes：

Mode, the mode is used to catching, be imaged and generating digital image file；

Device identifier；

Shared key；And

A series of a series of routines, routines are used to mark the digital image file, by accounts information and the digitized map It is as file is associated, the device identifier is associated with the digital image file, by using the shared key pair The digital image file is encrypted, and the digital image file is sent into server；Wherein, label, the account Family information and the device identifier indicate how the server is handled the digital image file.

12. imaging device according to claim 11, wherein, the imaging device is ultrasonic device.

13. equipment according to claim 11, wherein, the routine is used to transmit digital picture number via standard port According to.

14. system according to claim 11, wherein, the routine is additionally operable to perform initialization, sends heartbeat to institute State at least one of server, Trouble Report, config update and software upgrading.