title: Security of patient and study data associated with DICOM images when transferred using compact disc media.
abstract: The transmission of patient and imaging data between imaging centers and other interested individuals is increasingly achieved by means of compact disc digital media (CD). These CDs typically contain, in addition to the patient images, a DICOM reader and information about the origin of the data. While equipment manufacturers attach disclaimers to these discs and specify the intended use of such media, they are often the only practical means of transmitting data for small medical, dental, or veterinary medical centers. Images transmitted by these means are used for clinical diagnosis. This has lead to a heavy reliance on the integrity of the data. This report describes attempts to alter significant patient and study data on CD media and their outcome. The results show that data files are extremely vulnerable to alteration, and alterations are not detectable without detailed analysis of file structure. No alterations to the DICOM readers were required to achieve this; changes were applied only to the data files. CDs with altered data can be readily prepared, and from the point of view of individuals viewing the images, function identically to the original manufacturer's CD. Such media should be considered unsafe where there is a potential for financial or other gain to be had from altering the data, and the copy cannot be cross-checked with the original data.
authors: Department of Small Animal Clinical Sciences, Faculty of Life Sciences, Frederiksberg Campus, University of Copenhagen, Copenhagen, Denmark. fme@life.ku.dk
authors: Fintan J
authors: FJ
authors: McEvoy
authors: Eiliv
authors: E
authors: Svalastoga
mesh_terms: D016250:Compact Disks / Q000592:standards*; D003195:Computer Communication Networks / Q000592:standards*; D016494:Computer Security / Q000592:standards*; D006801:Humans; D016247:Information Storage and Retrieval / Q000592:standards*; D016347:Medical Records Systems, Computerized / Q000592:standards*; D011873:Radiology Information Systems / Q000592:standards*
references: Stud Health Technol Inform. 2000;77:865-9
references: 11187677
references: J Med Internet Res. 1999 Oct-Dec;1(2):E8
references: 11720917
references: Int J Med Inform. 2001 Dec;64(2-3):429-38
references: 11734403
references: Int Endod J. 2004 Mar;37(3):214-20
references: 15032230
references: Eur J Radiol. 2004 Sep;51(3):286-9
references: 15294339
references: IEEE Trans Image Process. 2004 Aug;13(8):1147-56
references: 15326856
references: Equine Vet J. 1998 Jul;30(4):274-6
references: 9705106
references: Rofo. 2005 Jan;177(1):124-9
references: 15657831
references: Radiographics. 2005 Nov-Dec;25(6):1709-21
references: 16284146
references: J Digit Imaging. 2006;19 Suppl 1:72-7
references: 17024522
references: J Digit Imaging. 2009 Mar;22(1):53-64
references: 17619929