Research picture archiving communications system

• US 10,204,117 B2
• Filed: 06/03/2014
• Issued: 02/12/2019
• Est. Priority Date: 06/04/2013
• Status: Active Grant

• Current Assignee: Synaptive Medical (Barbados) Inc.
• Original Assignee: Synaptive Medical (Barbados) Inc.
• Inventors: Chau, Clinton, Resnick, Jonathan, Bright, Stewart
• Primary Examiner(s): Hoang, Son T
• Application Number:
  US14/891,026
• Publication Number:
  US 20160124949A1
• Time in Patent Office: 1,715 Days
• Field of Search: None
• CPC Class Codes: G06F 16/00 Information retrieval; Database structures therefor; File system structures therefor
• CPC Class Codes: G06F 16/113 Details of archiving lifecycle management in storage systems G06F3/0649; backup systems G06F11/1446
• CPC Class Codes: G06F 16/51 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06T 1/00 General purpose image data processing
• CPC Class Codes: G16H 30/20 for handling medical images, e.g. DICOM, HL7 or PACS

Abstract

A system for de-identifying images and metadata containing personal information. A clinical subsystem connects to a clinical picture archiving and communication system (PACS) containing image data including metadata with personal information. The clinical subsystem includes an image data editor for de-identifying image data by deleting or altering the personal information in the image data according to instructions specified in a de-identification script. The de-identification subsystem includes an image metadata database and runs an edit script generator that can be used by a user to generate a de-identification script based on metadata stored in the image metadata database, without access to the associated image data.

Claims

1. A research picture archiving and communication system comprising:

(a) a first clinical subsystem comprising a hardware processor, wherein the first clinical subsystem is in secure electronic communication via a network with a first clinical picture archiving and communication system (PACS), the first PACS having image data stored therein, wherein the image data comprising images and metadata associated with each image, and personal information is included in image content and the metadata of each image, the first clinical subsystem being configured to receive the image data from the first PACS, and the first clinical subsystem comprising an image data editor for de-identifying the personal information by applying a de-identification script to the image data, thereby deleting or altering the personal information to produce de-identified image data, wherein the de-identification script is configured to replace patient names with pseudonyms or numbers.

(b) a de-identified image database subsystem comprising a storage device in electronic communication via the network with the first clinical subsystem for storing the de-identified image data, and

(c) a de-identification subsystem being remote from the first clinical subsystem, the de-identification subsystem comprising a hardware processor, wherein the de-identification subsystem is in electronic communication via the network with the first clinical subsystem, the de-identification subsystem comprising an edit script generator usable by a user to generate the de-identification script based at least on the metadata provided by the first clinical subsystem,

the de-identification script being developed by the user by repeatedly (i) specifying or modifying the de-identification script, (ii) running the de-identification script on the metadata, and (iii) previewing output de-identified image data, until the user is satisfied that the de-identification script is correct,

wherein the image data editor of the first clinical subsystem is configured to receive via the network the de-identification script from the de-identification subsystem, apply the de-identification script to the stored image data to produce the de-identified image data, and store the de-identified image data in the storage device of the de-identified image database subsystem, and

wherein the image content is never stored in the de-identification subsystem or the de-identified image database subsystem.

2. The system of claim 1, wherein the de-identification subsystem and the de-identified image database subsystem are co-located.

3. The system of claim 1, wherein the de-identification subsystem further comprises a metadata editor is further configured to run the de-identification script on the metadata provided by the first clinical subsystem and provide results to the user.

4. The system of claim 3, wherein the metadata editor is further configured to provide to the user a comparison of the metadata before and after application of the de-identification script to the metadata.

5. The system of claim 3, wherein the de-identification subsystem further comprises an image metadata database for storing the metadata provided by the first clinical subsystem.

6. The system of claim 1, wherein the user is a clinical gatekeeper.

7. The system of claim 6, further comprising at least one additional clinical subsystem in secure electronic communication with at least one additional PACS.

8. The system of claim 1, wherein the image data received by the first clinical subsystem from the first PACS is stored in a clinical image database in the first clinical subsystem.

9. The system of claim 1, wherein the first clinical subsystem provides an image to the user'"'"'s workstation for display, the image being associated with the metadata provided by the first clinical subsystem to the de-identification subsystem.

10. The system of claim 9, wherein the image provided to the user'"'"'s workstation is not stored in non-volatile memory in the workstation or the de-identification subsystem.

11. The system of claim 1, wherein metadata provided by the first clinical subsystem is stored in an image metadata database in the de-identification subsystem.

12. The system of claim 1, wherein the de-identified image data comprises de-identified metadata produced by the application of the de-identification script to the metadata.

13. The system of claim 1, wherein the de-identification script is configured to remove personal information from the images in the image data, and the de-identified image data comprises de-identified images produced by the application of the de-identification script to the images in the image data.