Identity and Trust Management Platform in DICOM

1
Identity and Trust Management Platform in DICOM

• Huiping Sun
• School of Software and Microelectronics, Peking
  University

2
Content

• Regional Medical Image Exchange Sharing
• Challenge Security, Trust, Privacy
• IDTMP Identity Trust Management Platform
• IDTMP Model
• IDTMP Framework
• Conclusions

3
Regional Medical Image Exchange Sharing
Hospital A
Hospital B
PACS
PACS
Regional Medical Image Exchange Sharing Center
Others
Government
Insurer
Academia
4
ChallengeSecurity, Trust, Privacy

• Security
• Confidentiality, Availability, Integrity,
  Non-repudiation
• Trust
• Cycle of trust
• Privacy
• Who, When, How using my medical image
• Big Brother, Little Sister

5
IDTMPIdentity and Trust Management Platform
Hospital A
Hospital A
Regional Medical Image Exchange Sharing Center
IDTMP Identity Trust Management Platform
Others
Government
Insurer
Academia
6
IDTMP Model
Data Control User Control Operation Control
Service Control
Data origin authentication Device
Authentication user authentication
Device Trust Doctor Trust Operation Trust Data
Content Trust
Operation Log Operation Trails
7
IDTMP Framework
Audit Service
Policy Management
Trust Management
Medical Image Data
Reputation System
Other Trust Info Sources
8
Conclusions

• IDMTP
• For security
• Uniform authentication based CPK
• Authorization model based role, time, content
• Access control based entity trust resource risk
• For trust
• Trust Metric, Reputation system
• For privacy
• User-centric policy and trust control
• Audit log and trails

9
Thanks for you attention !

• Huiping Sun (???)
• sunhp_at_ss.pku.edu.cn
• http//www.ss.pku.edu.cn