JP4071390B2 - Image communication apparatus and communication relay apparatus - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an image communication method and apparatus, and more particularly to an image communication method and apparatus in which an image using apparatus captures an image from an image storage apparatus through a communication line.
[0002]
[Prior art]
As one of medical image networks, there is an image communication system (system) compliant with the standard DICOM (Digital Imaging & Communication in Medical). In this system, one or a plurality of image using devices (viewers) are connected to one or a plurality of image storage devices (servers) via a communication line, and a desired server is accessed from the viewer. The stored images can be viewed. Individual viewers accessible to the server are registered in advance in the server, and the viewer selects and accesses a desired server.
[0003]
[Problems to be solved by the invention]
In an image communication system compliant with DICOM, the viewer needs to recognize and access in advance to which server a desired image is stored. If this is unknown, all the servers until the corresponding server is reached. There was a problem that they had to be accessed in order. Further, since there is no means for determining the legitimacy of the system user, there has been a security problem that unauthorized access cannot be prevented.
[0004]
In addition, just because of such problems, the standard cannot be immediately revised, and the original specifications that improve accessibility and security are compatible with the standard ( There is a problem in that connectivity is lost due to loss of compatibility (compatibility).
[0005]
The present invention has been made to solve the above problems.
[0006]
[Means for Solving the Problems]
(1) According to a first aspect of the present invention for solving the above-described problem, when the image utilization device captures an image from the image storage device through a communication line, the mediation device accepts an image communication request from the image utilization device and the image storage device. The image communication method is characterized in that an image communication request is transmitted to the image storage device, and the mediation device receives the image transmitted from the image storage device and performs image communication to the image utilization device.
[0007]
(2) A second invention for solving the above-mentioned problem is characterized in that the intermediary device authenticates the image communication request based on an authentication signal from an authentication means paired with the image using device. The image communication method according to claim 1.
[0008]
(3) A third invention for solving the above-described problem is an image communication apparatus having an image storage apparatus and an image utilization apparatus connected through a communication line, wherein the image communication request is received from the image utilization apparatus and the image is received. An image communication comprising: an intermediary device that performs transmission of an image communication request to a storage device and that receives an image transmitted from the image storage device and performs image communication to the image using device Device.
[0009]
(4) A fourth invention that solves the above-described problem includes an authentication unit that is paired with the image utilization device, and the mediation device authenticates the image communication request based on an authentication signal from the authentication unit. (3). The image communication apparatus according to (3).
[0010]
In the second invention or the fourth invention, after the mediation device authenticates the validity once, it is preferable in terms of efficiency improvement to omit authentication for the same image utilization device within a predetermined time. .
[0011]
(Function)
In the present invention, the intermediary device accepts an image communication request from the image utilization device and performs transmission of the image communication request to the image storage device, and receives an image transmitted from the image storage device and transmits it to the image utilization device. Acting for image communication. Further, the image communication request is authenticated based on an authentication signal from an authentication unit paired with the image using apparatus.
[0012]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The present invention is not limited to the embodiment. FIG. 1 shows a block diagram of a medical image network system. This system is an example of an embodiment of an image communication apparatus of the present invention. An example of an embodiment of the apparatus of the present invention is shown by the configuration of the system. An example of an embodiment of the method of the present invention is shown by the operation of the system.
[0013]
The configuration of this system will be described. As shown in FIG. 1, the system includes image storage devices 102, 104, and 106. The image storage devices 102, 104, and 106 are connected to the communication line 200. The image storage devices 102, 104, 106 and the communication line 402 are compliant with, for example, the standard DICOM. The image storage devices 102, 104, and 106 are examples of embodiments of the image storage device according to the present invention. Communication line 402 is an example of an embodiment of a communication line in the present invention.
[0014]
The image storage devices 102, 104, and 106 have a communication interface (interface) and an image library (library) (not shown). Note that the number of image storage devices connected to the communication line 200 is not limited to three and may be appropriate. Hereinafter, the image storage device is referred to as a server. The servers 102, 104, and 106 have the same configuration and functions as existing servers in the image communication system compliant with DICOM.
[0015]
A communication relay device 302 is connected to the communication line 200. The communication relay apparatus 302 is capable of communication conforming to DICOM. The communication relay device 302 is an example of an embodiment of an intermediary device in the present invention. The network identifier of the communication relay apparatus 302 is registered in advance in the servers 102, 104, and 106. Note that the number of communication relay apparatuses 302 is not limited to one, and may be an appropriate number. The network identifiers of the plurality of communication relay apparatuses are also registered in advance in the servers 102, 104, and 106. The communication relay device 302 will be described later.
[0016]
An image utilization device 602 is connected to the communication relay device 302 via a communication line 402. The communication line 402 and the image utilization device 602 are compliant with DICOM. Communication line 402 is an example of an embodiment of a communication line in the present invention. The image utilization device 602 is an example of an embodiment of an image utilization device according to the present invention.
[0017]
The image utilization device 602 has, as an interface for a user, a display unit such as a graphic display that displays images and other information, and an operation unit such as a keyboard. . Note that the number of image storage devices connected to the communication relay device 302 is not limited to one, and may be an appropriate number. Hereinafter, the image utilization device is referred to as a viewer. The viewer 602 has the same configuration and function as an existing viewer in an image communication system compliant with DICOM.
[0018]
An authentication terminal 702 is also connected to the communication relay apparatus 302 via a communication line 502. The authentication terminal 702 includes a display unit such as a graphic display that displays character information and the like, and an operation unit such as a keyboard. The communication line 502 and the authentication terminal 702 are configured with unique specifications that do not depend on DICOM. The authentication terminal 702 is an example of an embodiment of authentication means in the present invention. The authentication terminal 702 is provided as a pair with the viewer 602.
[0019]
The communication relay device 302 has a configuration capable of communicating with the authentication terminal 702 as described later. As a result, the communication relay apparatus 302 performs communication conforming to DICOM with the servers 102 to 106 and the viewer 602, and performs authentication communication with the authentication terminal 702 according to a predetermined specification that does not conform to DICOM.
[0020]
FIG. 2 shows a block diagram of the communication relay device 302. As shown in the figure, the communication relay apparatus 302 has a CPU (central processing unit) 10. A main memory 20, a server communication interface 30, a viewer communication interface 40, an authentication communication interface 50, and an external storage device 60 are connected to the CPU 10 by a bus 70.
[0021]
The server communication interface 30 performs communication based on DICOM with the servers 102, 104, and 106 through the communication line 200. The viewer communication interface 40 performs communication based on DICOM with the viewer 602 through the communication line 402. The authentication communication interface 50 performs authentication communication with the authentication terminal 702 through the communication line 502 without conforming to DICOM.
[0022]
The CPU 10 operates according to a program read from the external storage device 60 to the main memory 20 and controls each communication interface to perform authentication of a viewer user and mediation of communication between the viewer 602 and the servers 102 to 106.
[0023]
Such a communication relay device 302 is configured by, for example, an EWS (Engineering Work Station). In that case, the parts other than the authentication communication interface 50 are configured to conform to DICOM. In addition, the authentication communication interface 50 and software (software) such as a program related thereto are configured independently of DICOM. Therefore, there is no need to make any changes to DICOM in configuring the communication relay device 302.
[0024]
The external storage device 60 is provided with several databases for communication control. One of these databases is a database related to servers on the communication line 200. For example, as shown in FIG. 3, an identifier on the network is registered for each server. This server database is used by the communication relay device 302 to access the servers 102 to 106.
[0025]
In addition, there is a database related to a viewer connected to the communication relay apparatus 302. For example, as shown in FIG. 4, an identifier on the network related to each viewer is registered. This viewer database is used by the communication relay device 302 to communicate with the viewer.
[0026]
In addition, there is a database related to the authentication terminal connected to the communication relay device 302. For example, as shown in FIG. 5, an identifier relating to each authentication terminal and a viewer identifier paired with the authentication terminal are registered. This authentication terminal database is used by the communication relay device 302 to communicate with the authentication terminal.
[0027]
There is also a database on users of this system. For example, as shown in FIG. 6, a name, a password, a restriction item, a viewer identifier, and the like are registered for each user. This authentication database is used by the communication relay apparatus 302 to authenticate the user. Here, the restriction item is information for designating the restriction of the content to be disclosed to the user. For example, designation is made such that the patient's personal information is not disclosed to a person other than the closely related person such as the attending physician.
[0028]
The operation of this system will be described. FIG. 7 shows a flow diagram of the operation of this system. As shown in the figure, in step 901, the user makes a query through the viewer 602. A query is a communication request procedure compliant with DICOM. However, the query here is performed by designating the communication relay device 302 instead of designating a specific server as in the existing system. Since there is no need to specify each server individually, it is possible to efficiently query a plurality of servers. If the connection relationship between the viewer 602 and the communication relay device 302 is constant, the specification of the communication relay device 302 can be omitted.
[0029]
Based on the query, in step 902, the communication relay apparatus 302 activates the authentication terminal 702 paired with the viewer 602. As a result, a message requesting input of user name and password authentication information is displayed on the display unit of the authentication terminal 702, for example.
[0030]
When the user inputs the user name and password to the authentication terminal 702 in step 903, in step 904, the communication relay apparatus 302 determines whether the user is a valid user based on the input information. . The determination is made with reference to the user database.
[0031]
If it is determined that the user is not an authorized user, communication with the viewer 602 is disconnected in step 905. As a result, subsequent communication becomes impossible and access by an unauthorized user is prevented. If it is determined (authenticated) that the user is a legitimate user, in step 906, a query is substituted. In this way, user authentication based on the user database is performed, and only valid user queries are valid.
[0032]
An effective period that lasts for an appropriate period of time may be set for the effect of authentication, and authentication may be omitted for communication requests from the same viewer within the effective period. This is preferable in terms of improving the efficiency of image acquisition when the same user uses the same viewer continuously.
[0033]
The proxying means that the communication relay apparatus 302 changes to the viewer 602 and makes a query to the server 10i (i: 2, 4, 6). A server database is used to perform the query, and all servers existing on the communication line 200 are queried.
[0034]
In step 907, the server 10 i transmits an answer to the query to the communication relay device 302. The content of the answer is based on DICOM and is a list of images stored in each server. Note that the identifier of the communication relay apparatus 302 registered in advance in each server is used for response transmission.
[0035]
In step 908, the communication relay apparatus 302 merges the answers received from the server 10i, that is, integrates (merges) the image lists received from the servers. In step 909, the proxy is sent to the viewer 602, that is, the merged image list is transmitted to the viewer 602. The transmitted image list is displayed on the display unit of the viewer 602.
[0036]
In step 910, the user designates a desired image from the image list displayed on the viewer 602 and retrieves the image. Retrieve is an image transmission request procedure compliant with DICOM. Based on this retrieval, in step 911, the communication relay apparatus 302 performs retrieval proxy. In performing the retrieval, the communication relay apparatus 302 identifies the server storing the image requested by the viewer 602 based on the previously received response from the server 10i, and retrieves it.
[0037]
In step 912, the corresponding server performs a move in response to the retrieve. “Move” is a procedure for transmitting a designated image to a request source, and is an image transmission procedure compliant with DICOM.
[0038]
In step 913, the communication relay apparatus 302 receives the image and temporarily stores it. Temporary storage of images is performed in the external storage device 60. In step 914, the communication relay apparatus 302 confirms restrictions imposed on the user regarding the use of the image. The restriction is confirmed based on the user database.
[0039]
If there are no restrictions, the move, that is, the image transmission to the viewer 602 is substituted in step 915. If there are restrictions, in step 916, the restricted move, that is, the restricted image transmission to the viewer 602 is performed. As a result, an image is displayed on the viewer 602. In step 917, the user uses the image.
[0040]
A record of such a series of communications is recorded and stored in the external storage device 60 by the communication relay device 302. The communication record is read as necessary by an administrator of the system and used for the purpose of effectively operating the system.
[0041]
As described above, the example of the image communication system conforming to DICOM has been described. However, the standard of image communication is not limited to DICOM, and the same effect can be obtained even when applied to an existing image communication system based on an appropriate standard. Can do.
[0042]
In addition, although the example of using a user name and password registered in advance to perform user authentication has been described, user identification for authentication is performed by, for example, fingerprint verification, iris verification, voiceprint verification, and the like. You may make it carry out based on an advanced personal identification. The function of the authentication terminal may be incorporated into the viewer as software.
[0043]
【The invention's effect】
As described above in detail, according to the present invention, it is possible to realize an image communication method and apparatus that acquire an image without specifying an image storage apparatus while conforming to an established standard. In addition, it is possible to realize an image communication method and apparatus that prevents unauthorized access while complying with an established standard.
[Brief description of the drawings]
FIG. 1 is a block diagram of an exemplary apparatus according to an embodiment of the present invention.
FIG. 2 is a block diagram of a communication relay device in the device shown in FIG.
3 is a conceptual diagram of a database in the communication relay device shown in FIG.
4 is a conceptual diagram of a database in the communication relay device shown in FIG.
5 is a conceptual diagram of a database in the communication relay device shown in FIG.
6 is a conceptual diagram of a database in the communication relay device shown in FIG.
7 is a flowchart of the operation of the apparatus shown in FIG.
[Explanation of symbols]
102 to 106 Image storage apparatus 200, 402, 502 Communication line 302 Communication relay apparatus 602 Image utilization apparatus 702 Authentication terminal

Claims (4)

An image communication device having an image storage device and an image utilization device connected through a communication line,
An authentication device connected to the image storage device and the image using device through a first communication line compliant with DICOM and paired with the image using device through a second communication line different from the first communication line A communication relay device connected to
The image utilization device transmits an image communication request to the image storage device to the communication relay device, and the authentication device transmits authentication data for authentication to the communication relay device,
The communication relay device determines whether or not the user is a valid user based on the authentication data. If the communication relay device determines that the user is a valid user, the communication relay device sends the image communication request to the image storage device. Send
The image storage device transmits an image requested by the image using device to the communication relay device,
The image communication apparatus, wherein the communication relay apparatus transmits the received image to the image utilization apparatus. The image communication apparatus according to claim 1,
The communication relay device transmits a request for input of the authentication data to the authentication device when receiving an image communication request from the image utilization device, and a user is a valid user based on the authentication data. An image communication apparatus characterized in that communication with the image utilization apparatus is disconnected when it is determined that it is not. An authentication device connected to the image storage device and the image using device through a first communication line compliant with DICOM and paired with the image using device through a second communication line different from the first communication line A communication relay device connected to
While receiving an image communication request from the image utilization device to the image storage device, receiving authentication data for authentication from the authentication device,
Determining whether the user is a valid user based on the authentication data;
If it is determined that the user is a legitimate user, the image communication request is transmitted to the image storage device,
A communication relay device that receives an image requested by the image utilization device from the image storage device and transmits the image to the image utilization device. In the communication relay device according to claim 3,
When an image communication request is received from the image utilization device, a request for inputting the authentication data is transmitted to the authentication device, and when it is determined that the user is not a valid user based on the authentication data Is a communication relay device that disconnects communication with the image utilization device.

Images