System and method of encryption for DICOM volumes

• US 8,756,437 B2
• Filed: 08/24/2009
• Issued: 06/17/2014
• Est. Priority Date: 08/22/2008
• Status: Active Grant

• Current Assignee: DatCard Systems Incorporated
• Original Assignee: DatCard Systems Incorporated
• Inventors: Monk, David, Canessa, John C., Canessa, Giancarlo, Canessa, Gino G.
• Primary Examiner(s): Kim, Jung
• Assistant Examiner(s): Ho, Thomas
• Application Number:
  US12/546,611
• Publication Number:
  US 20100115288A1
• Time in Patent Office: 1,758 Days
• Field of Search: 713/193, 713/166, 713/165, 380/44
• US Class Current: 713/193
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2131 Lost password, e.g. recovery of lost or forgotten passwords
• CPC Class Codes: G16H 30/20 for handling medical images, e.g. DICOM, HL7 or PACS

Abstract

Digital image storage and management systems capable of producing encrypted DICOM volumes on different types of media (e.g., Blu-ray, CD, DVD, memory stick, USB flash drive, etc.), with or without the automatic generation of labels, systems and mechanisms to generate and manage passwords for the encrypted volumes, and systems and mechanisms to manage access to encrypted data on such volumes are disclosed. Generated encrypted DICOM volumes, which can comprise confidential patient data, can be securely interchanged, archived, and distributed to users. The disclosed systems and methods can permit authorized users to access encrypted data, even if the users do not have access to the original encryption mechanism. Encrypted data stored on the volume can be easily and securely accessed by a variety of authorized users.

Claims

1. A computer-implemented system for providing access to securely stored medical data comprising:

a database configured to store a decryption password for decrypting encrypted medical data stored on a portable medium, wherein the decryption password is generated from a non-user ID, medically related information identified by a DICOM tag;

a secure interface configured to authenticate a request for decryption of the encrypted medical data stored on the portable medium; and

a password retrieval service configured to;

receive the authenticated request from the secure interface;

receive non-user ID, medically related information identified by at least one DICOM tag;

retrieve from the database a decryption password uniquely associated with the encrypted medical data stored on the portable medium, wherein the portable medium is associated with one decryption password;

communicate the decryption password for accessing the encrypted medical data stored on the portable medium;

access a security mechanism stored on the portable medium by comparing the communicated decryption password with a decryption key associated with the portable medium; and

when there is a match, transform the encrypted medical data stored on the portable medium into a format accessible by the user, wherein the decryption key is used to decrypt the encrypted medical data into plaintext.

2. The system of claim 1, wherein the secure interface is a secure web interface.

3. The system of claim 1, wherein medical data is represented in Digital Imaging and Communications in Medicine (DICOM) format.

4. The system of claim 1, wherein the non-user ID, medically-related information identified by a DICOM tag comprises the date of a medical exam.

5. The system of claim 1, wherein the non-user ID, medically-related information identified by a DICOM tag comprises the name of a physician.

6. The system of claim 1, wherein the non-user ID, medically-related information identified by a DICOM tag resides within encrypted medical data on the portable medium.