A non-intrusive encrypted transmission method based on the DICOM protocol

Abstract

This invention discloses a non-intrusive encrypted transmission method based on the DICOM protocol, belonging to the field of medical data transmission technology. It includes a terminal, an edge device, a aggregation device, and a server. The method acquires the DICOM protocol of the terminal and transmits it in plaintext to the edge device; it also acquires the DICOM protocol of the edge device and transmits it encrypted to the aggregation device. To address the problem of escalating network attacks and data theft incidents in medical institutions, causing economic losses and threatening patients' health, this invention encrypts transmitted image data based on the DICOM protocol in a non-intrusive manner, preventing data theft during transmission. Encryption of transmitted data is achieved without software modification, remaining transparent to the network. The terminal and server are unaware of the edge and aggregation devices. Encryption is optional, supports national cryptographic algorithms, and supports one-time encryption, reducing economic losses and ensuring patient health and safety.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of medical data transmission, in particular to a non-invasive encryption transmission method based on DICOM protocol. BACKGROUND

[0002] Medical data is a national strategic resource, and its secure transmission, privacy protection, and other issues have become major data security problems. In July 2021, the China Information and Communication Research Institute released the "Medical Internet of Things Security Research Report (2021)", which pointed out that with the rapid increase of medical Internet of Things (IoMT) devices in recent years, multiple types and models of IoMT devices are distributed in multiple departments, and the remote operation and maintenance methods of device manufacturers are diverse, which has increased the risk exposure area, making it difficult for the original security protection measures to cope with the increasing medical network security risks and challenges. Hackers are increasingly targeting China's public medical institutions, and the overall network security situation of medical institutions is not optimistic. The number of network attacks and data theft incidents in medical institutions has increased, causing not only economic losses but also threats to patient health. SUMMARY

[0003] The purpose of the present application is to provide a non-invasive encryption transmission method based on DICOM protocol, which encrypts the DICOM protocol-based image data information transmitted in a non-invasive manner to prevent data from being stolen during transmission. Without software modification, the transmitted data can be encrypted, and the network is transparent. The terminal and server are not aware of the edge device and the aggregation device. The encryption is optional, supports national encryption algorithm, and supports one-time encryption, which can reduce economic losses and protect patient health and safety to solve the problems raised in the background technology.

[0004] To achieve the above purpose, the present application provides the following technical scheme:

[0005] A non-invasive encryption transmission method based on DICOM protocol, comprising a terminal, an edge device, an aggregation device and a server,

[0006] Obtain the DICOM protocol of the terminal and transmit it to the edge device in clear text;

[0007] Obtain the DICOM protocol of the edge device and transmit it to the aggregation device in encrypted form;

[0008] Obtain the DICOM protocol of the aggregation device and transmit it to the server in clear text;

[0009] Obtain the DICOM protocol of the server and transmit it to the aggregation device in clear text;

[0010] Obtain the DICOM protocol of the aggregation device and transmit it to the edge device in encrypted form;

[0011] The DICOM protocol of the edge device is acquired and transmitted to the terminal in plaintext.

[0012] Further, the edge device is configured to

[0013] The DICOM protocol from the terminal is encrypted and transmitted to the convergence device.

[0014] The edge device is further configured to decrypt the DICOM protocol from the convergence device and transmit it to the terminal.

[0015] The convergence device is configured to decrypt the DICOM protocol from the edge device and transmit it to the server.

[0016] The convergence device is further configured to encrypt the DICOM protocol from the server and transmit it to the edge device.

[0017] Further, the edge device accepts the DICOM protocol request transmitted from the terminal.

[0018] The edge device and the convergence device customize algorithms, and the edge device and the convergence device generate a public-private key pair.

[0019] The edge device encrypts using the public key and transmits the encrypted DICOM protocol to the convergence device.

[0020] The convergence device decrypts using the private key and transmits the decrypted DICOM protocol to the server.

[0021] Further, the edge device and the convergence device each include a key reading unit, a key identification unit, a key verification unit, a key storage unit, and a key execution unit, wherein

[0022] The key reading unit is configured to read the encrypted DICOM protocol and transmit the read DICOM protocol to the key identification unit.

[0023] The key identification unit is configured to identify the read DICOM protocol and identify the input key corresponding to the encrypted DICOM protocol.

[0024] The key verification unit is configured to verify the key of the encrypted DICOM protocol and check the authenticity of the public-private key pair.

[0025] The key storage unit is configured to store the public-private key pair used to encrypt the DICOM protocol.

[0026] The key execution unit is configured to execute different decisions according to different key verification results.

[0027] Further, the edge device accepts a DICOM protocol request transmitted from the terminal, and the edge device encrypts the DICOM protocol;

[0028] The encrypted DICOM protocol is read by the key reading unit, and the public key of the DICOM protocol is read out;

[0029] The read public key of the DICOM protocol and the input private key corresponding to the encrypted DICOM protocol are identified by the key identification unit;

[0030] The public key and the input private key corresponding to the encrypted DICOM protocol are verified by the key verification unit, and it is determined whether the input private key corresponds to the private key stored in the key storage unit, and different verification results are given;

[0031] Different decisions are executed by the key execution unit;

[0032] For the case that the input private key corresponds to the private key stored in the key storage unit, the private key decryption is used by the aggregation device, and the decrypted DICOM protocol is transmitted to the server;

[0033] For the case that the input private key does not correspond to the private key stored in the key storage unit, the aggregation device cannot decrypt the transmitted DICOM protocol and cannot read the DICOM protocol content.

[0034] Further, the edge device and the aggregation device further comprise a pre-warning prompt unit, wherein

[0035] When the input private key does not correspond to the private key stored in the key storage unit, a pop-up window prompts that the input private key fails;

[0036] The private key is obtained, and the private key is input again for verification;

[0037] When the input private key succeeds, the private key decryption is used by the aggregation device, and the decrypted DICOM protocol is transmitted to the server;

[0038] When the input private key fails, the pre-warning prompt unit issues a pre-warning prompt.

[0039] Further, when the pre-warning prompt unit issues a pre-warning prompt,

[0040] The IP address of the user inputting the private key is obtained, and the user IP information is determined;

[0041] According to the user IP information, the user identity information is found, and the user identity information is returned, and the user is locked.

[0042] Further, the edge device and the convergence device customize the algorithm, and adopt RSA encryption algorithm for encryption processing, and set a public-private key pair of the public key A and the private key B,

[0043] When the edge device transmits the DICOM protocol to the convergence device, the convergence device transmits the public key A of itself to the edge device.

[0044] After the edge device receives the public key A transmitted by the convergence device, the public key A is used to encrypt the DICOM protocol to be transmitted.

[0045] After the DICOM protocol is encrypted, the edge device transmits the encrypted DICOM protocol to the convergence device.

[0046] After the convergence device receives the encrypted DICOM protocol, the convergence device uses the private key B of itself to decrypt the encrypted DICOM protocol, so that the DICOM protocol is encrypted and transmitted.

[0047] Compared with the prior art, the beneficial effects of the present application are:

[0048] The DICOM protocol based non-invasive encryption transmission method of the present application, the edge device receives the DICOM protocol request transmitted from the terminal, the edge device and the convergence device customize the algorithm, the edge device and the convergence device generate a public-private key pair, the edge device adopts the public key for encryption, and transmits the encrypted DICOM protocol to the convergence device, the convergence device adopts the private key for decryption, and transmits the decrypted DICOM protocol to the server, wherein the edge device is used for encrypting the DICOM protocol from the terminal and transmitting it to the convergence device, the edge device is also used for decrypting the DICOM protocol from the convergence device and transmitting it to the terminal, the convergence device is used for decrypting the DICOM protocol from the edge device and transmitting it to the server, the convergence device is also used for encrypting the DICOM protocol from the server and transmitting it to the edge device, the DICOM protocol based image data information is encrypted in a non-invasive manner, and the data is prevented from being stolen in the transmission process, the encrypted transmission is used, the terminal and the server software do not need to be invaded, the transmission data is encrypted without software modification, the network is transparent, the terminal and the server do not perceive the edge device and the convergence device, and the encryption is optional, supports the national encryption algorithm, supports one-time encryption, can reduce economic loss, and protects the health and safety of patients. BRIEF DESCRIPTION OF DRAWINGS

[0049] Fig. 1 The principle diagram of the DICOM protocol based non-invasive encryption transmission method of the present application;

[0050] Fig. 2 The module diagram of the DICOM protocol based non-invasive encryption transmission method of the present application;

[0051] Fig. 3 Flow chart of the DICOM protocol based non-invasive encryption transmission method of the present application. DETAILED DESCRIPTION

[0052] The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the protection scope of the present application.

[0053] In order to solve the technical problem that the network attacks and data theft events of existing medical institutions are increasing, not only causing economic losses, but also threatening the health of patients, please refer to Figs. 1-3 The technical solutions are provided in the embodiments as follows.

[0054] A DICOM protocol based non-invasive encryption transmission method comprises a terminal, an edge device, a convergence device and a server,

[0055] DICOM protocol of the terminal is obtained and transmitted to the edge device in clear text;

[0056] DICOM protocol of the edge device is obtained and transmitted to the convergence device in encrypted text;

[0057] DICOM protocol of the convergence device is obtained and transmitted to the server in clear text;

[0058] DICOM protocol of the server is obtained and transmitted to the convergence device in clear text;

[0059] DICOM protocol of the convergence device is obtained and transmitted to the edge device in encrypted text;

[0060] DICOM protocol of the edge device is obtained and transmitted to the terminal in clear text.

[0061] It should be noted that DICOM, which stands for Digital Imaging and Communications in Medicine, is an international standard for medical images and related information. It defines a medical image format that can be used for data exchange and meets the quality needs of clinical use.

[0062] DICOM is widely used in radiology, cardiovascular imaging and radiology diagnosis and treatment devices (X-ray, CT, nuclear magnetic resonance, ultrasound, etc.), and is increasingly widely used in other medical fields such as ophthalmology and dentistry. Among the tens of thousands of medical imaging devices in use, DICOM is one of the most widely deployed medical information standards, and there are currently about 10 billion DICOM standard medical images for clinical use.

[0063] Since the first edition of the DICOM standard was published in 1985, DICOM has revolutionized the practice of radiology, replacing x-ray film with a fully digital workflow. Just as the Internet became a new platform for information dissemination applications, DICOM has made advanced medical image applications possible that "change the face of clinical medicine". For example, in the emergency department, cardiac stress testing, breast cancer screening, DICOM serves doctors and patients, and is the standard for effective work of medical imaging.

[0064] DICOM standard covers almost all information exchange protocols such as acquisition, archiving, communication, display and query of medical digital images; defines a set of objects including various types of medical diagnostic images and related analysis, report and other information using open interconnection architecture and object-oriented method; defines a set of services and commands for information transmission and exchange, as well as standard response of messages; details the technology for identifying various types of information objects; provides service support for network environment; and defines the compatibility declaration of manufacturers in a structured manner.

[0065] The edge device is used for

[0066] The DICOM protocol from the terminal is encrypted and transmitted to the convergence device;

[0067] The edge device is also used for decrypting the DICOM protocol from the convergence device and transmitting it to the terminal;

[0068] The convergence device is used for decrypting the DICOM protocol from the edge device and transmitting it to the server;

[0069] The convergence device is also used for encrypting the DICOM protocol from the server and transmitting it to the edge device.

[0070] It should be noted that when the terminal transmits the DICOM protocol to the server, the DICOM protocol of the terminal is obtained, transmitted to the edge device in plaintext, the DICOM protocol of the edge device is obtained, transmitted to the convergence device in encrypted form, the DICOM protocol of the convergence device is obtained, and transmitted to the server in plaintext;

[0071] When the server feeds back the DICOM protocol to the terminal, the DICOM protocol of the server is obtained, transmitted to the convergence device in plaintext, the DICOM protocol of the convergence device is obtained, transmitted to the edge device in encrypted form, the DICOM protocol of the edge device is obtained, and transmitted to the terminal in plaintext.

[0072] The edge device receives the DICOM protocol request transmitted from the terminal;

[0073] The edge device and the convergence device define an algorithm, and the edge device and the convergence device generate a public-private key pair;

[0074] The edge device adopts public key encryption, and transmits the encrypted DICOM protocol to the convergence device;

[0075] The convergence device adopts private key decryption, and transmits the decrypted DICOM protocol to the server.

[0076] It should be noted that the edge device receives the DICOM protocol request transmitted from the terminal, the edge device and the convergence device define an algorithm, the edge device and the convergence device generate a public-private key pair, the edge device adopts public key encryption, and transmits the encrypted DICOM protocol to the convergence device, and the convergence device adopts private key decryption, and transmits the decrypted DICOM protocol to the server. The edge device is used to encrypt the DICOM protocol from the terminal and transmit it to the convergence device, and the edge device is also used to decrypt the DICOM protocol from the convergence device and transmit it to the terminal. The convergence device is used to decrypt the DICOM protocol from the edge device and transmit it to the server, and the convergence device is also used to encrypt the DICOM protocol from the server and transmit it to the edge device. Through a non-invasive method, the DICOM protocol-based image data information transmitted is encrypted to prevent data from being stolen during transmission. Using encrypted transmission, there is no need to intrude into the terminal and server software. Through a non-invasive method, there is no need to modify the software, so that the transmitted data can be encrypted and the network is transparent. The terminal and the server are not aware of the edge device and the convergence device. The encryption is optional, supports the national encryption algorithm, supports one-time encryption, can reduce economic losses, and protects the health and safety of patients.

[0077] The edge device and the convergence device each include a key reading unit, a key identification unit, a key verification unit, a key storage unit, and a key execution unit, wherein

[0078] The key reading unit is configured to read the encrypted DICOM protocol and transmit the read DICOM protocol to the key identification unit;

[0079] The key identification unit is configured to identify the read DICOM protocol and identify the input key corresponding to the encrypted DICOM protocol;

[0080] The key verification unit is configured to verify the encrypted DICOM protocol and check the authenticity of the public-private key pair;

[0081] The key storage unit is configured to store the public-private key pair used to encrypt the DICOM protocol;

[0082] The key execution unit is configured to execute different decisions according to different key verification results.

[0083] It needs to be explained that the edge device receives the DICOM protocol request transmitted from the terminal, the edge device performs encryption processing on the DICOM protocol, the key reading unit reads the key of the encrypted DICOM protocol, the public key of the DICOM protocol is read out, the key identification unit identifies the read public key of the DICOM protocol and the input private key corresponding to the encrypted DICOM protocol, the key verification unit verifies the public key and the input private key corresponding to the encrypted DICOM protocol, judges whether the input private key corresponds to the private key stored in the key storage unit, and then gives different verification results, for the case that the input private key corresponds to the private key stored in the key storage unit, the aggregation device uses the private key to decrypt, and the decrypted DICOM protocol is transmitted to the server; for the case that the input private key does not correspond to the private key stored in the key storage unit, the aggregation device cannot decrypt the transmitted DICOM protocol and cannot read the DICOM protocol content.

[0084] The edge device receives the DICOM protocol request transmitted from the terminal, and the edge device performs encryption processing on the DICOM protocol.

[0085] The key reading unit reads the key of the encrypted DICOM protocol, and the public key of the DICOM protocol is read out.

[0086] The key identification unit identifies the read public key of the DICOM protocol and the input private key corresponding to the encrypted DICOM protocol.

[0087] The key verification unit verifies the public key and the input private key corresponding to the encrypted DICOM protocol, judges whether the input private key corresponds to the private key stored in the key storage unit, and then gives different verification results.

[0088] The key execution unit executes different decisions.

[0089] For the case that the input private key corresponds to the private key stored in the key storage unit, the aggregation device uses the private key to decrypt, and the decrypted DICOM protocol is transmitted to the server.

[0090] For the case that the input private key does not correspond to the private key stored in the key storage unit, the aggregation device cannot decrypt the transmitted DICOM protocol and cannot read the DICOM protocol content.

[0091] The edge device and the aggregation device also each include a pre-warning prompt unit, wherein

[0092] When the input private key does not correspond to the private key stored in the key storage unit, a pop-up window prompts that the input private key fails;

[0093] Obtaining a private key, and inputting the private key again for verification;

[0094] If the input of the private key is successful, the aggregation device decrypts using the private key, and transmits the decrypted DICOM protocol to the server;

[0095] If the input of the private key fails, the early warning prompt unit issues an early warning prompt.

[0096] When the early warning prompt unit issues an early warning prompt,

[0097] Obtaining the IP address of the user inputting the private key, and determining the user IP information;

[0098] According to the user IP information, searching for the user identity information, and returning the user identity information, and locking the user.

[0099] The edge device and the aggregation device customize an algorithm, and use an RSA encryption algorithm for encryption processing, and set a public-private key pair combined with a public key A and a private key B,

[0100] When the edge device transmits the DICOM protocol to the aggregation device, the aggregation device transmits its own public key A to the edge device;

[0101] After the edge device receives the public key A transmitted by the aggregation device, the public key A is used to encrypt the DICOM protocol to be transmitted;

[0102] After the DICOM protocol is encrypted, the edge device transmits the encrypted DICOM protocol to the aggregation device;

[0103] After the aggregation device receives the encrypted DICOM protocol, the aggregation device uses its own private key B to decrypt the encrypted DICOM protocol, so that the DICOM protocol is encrypted and transmitted.

[0104] It should be noted that the RSA encryption algorithm is used for encryption processing, and after encryption using the public key, only the private key can be used for decryption. Conversely, after encryption using the private key, only the public key can be used for decryption. The private key is strictly confidential, and the public key is arbitrarily distributed. Hackers cannot crack the ciphertext by obtaining the public key. Through a non-intrusive method, the DICOM protocol-based image data information transmitted is encrypted to prevent data from being stolen during transmission. Using encrypted transmission, there is no need to intrude into the terminal and server software, and through a non-intrusive method, there is no need to modify the software. The transmitted data can be encrypted, and the network is transparent. The terminal and the server are not aware of the edge device and the aggregation device. The encryption is optional, supports the national encryption algorithm, supports one-time encryption, can reduce economic losses, and protects the health and safety of patients.

[0105] Wherein the public key is the non-secret half of a key pair used with a private key algorithm, the public key is usually used to encrypt a session key, verify a digital signature, or encrypt data that can be decrypted with the corresponding private key, the public key and the private key are a key pair obtained by an algorithm, one of which is open to the outside world, called public key, and the other is kept by oneself, called private key, the key pair obtained by the algorithm can ensure that it is unique in the world, when using the key pair, if one of the keys is used to encrypt a piece of data, the other key must be used to decrypt, such as using the public key to encrypt data, the private key must be used to decrypt, if the private key is encrypted, the public key must be used to decrypt, otherwise the decryption will not be successful, the private key is strictly confidential, the public key is distributed arbitrarily, and the hacker cannot crack the ciphertext by obtaining the public key, so that the security of the DICOM protocol transmission can be fully guaranteed.

[0106] In summary, the non-invasive encryption transmission method based on the DICOM protocol of the application, the edge device receives the DICOM protocol request transmitted from the terminal, the edge device and the aggregation device define an algorithm, the edge device and the aggregation device generate a public-private key pair, the edge device encrypts using the public key, and transmits the encrypted DICOM protocol to the aggregation device, the aggregation device decrypts using the private key, and transmits the decrypted DICOM protocol to the server, wherein the edge device is used to encrypt the DICOM protocol from the terminal and transmit it to the aggregation device, the edge device is also used to decrypt the DICOM protocol from the aggregation device and transmit it to the terminal, the aggregation device is used to decrypt the DICOM protocol from the edge device and transmit it to the server, the aggregation device is also used to encrypt the DICOM protocol from the server and transmit it to the edge device, the image data information based on the DICOM protocol is encrypted in a non-invasive manner, so as to prevent the data from being stolen in the transmission process, the encrypted transmission is used, the terminal and the server software do not need to be invaded, the transmission data is encrypted without software modification, the network is transparent, the terminal and the server are not aware of the edge device and the aggregation device, and the encryption is optional, supports the national secret algorithm, supports one-time encryption, can reduce economic loss, and guarantees the health and safety of patients.

[0107] The above is only a preferred embodiment of the application, but the protection scope of the application is not limited thereto, any person skilled in the art can make equivalent replacement or change according to the technical scheme and the inventive concept of the application within the technical range disclosed by the application, which should be covered within the protection scope of the application.

Claims

1. A non-invasive encryption transmission method based on a DICOM protocol, comprising a terminal, an edge device, a convergence device and a server, characterized in that the DICOM protocol of the terminal is obtained and transmitted to the edge device in plaintext; the DICOM protocol of the edge device is obtained and transmitted to the convergence device in encrypted form; the DICOM protocol of the convergence device is obtained and transmitted to the server in plaintext; the DICOM protocol of the server is obtained and transmitted to the convergence device in plaintext; the DICOM protocol of the convergence device is obtained and transmitted to the edge device in encrypted form; the DICOM protocol of the edge device is obtained and transmitted to the terminal in plaintext; the edge device and the convergence device each comprise a key reading unit, a key identification unit, a key verification unit, a key storage unit and a key execution unit, wherein the key reading unit is configured to read the encrypted DICOM protocol and transmit the read DICOM protocol to the key identification unit; the key identification unit is configured to identify the read DICOM protocol and identify the input key corresponding to the encrypted DICOM protocol; the key verification unit is configured to verify the key of the encrypted DICOM protocol and check the authenticity of the public-private key pair; the key storage unit is configured to store the public-private key pair used to encrypt the DICOM protocol; and the key execution unit is configured to execute different decisions according to different key verification results; the edge device receives the DICOM protocol request transmitted from the terminal, and encrypts the DICOM protocol; the key reading unit reads the encrypted DICOM protocol, reads the public key of the DICOM protocol; the key identification unit identifies the read public key of the DICOM protocol and the input private key corresponding to the encrypted DICOM protocol; the key verification unit verifies the public key and the input private key corresponding to the encrypted DICOM protocol, judges whether the input private key corresponds to the private key stored in the key storage unit, and then gives different verification results; the key execution unit executes different decisions; for the case that the input private key corresponds to the private key stored in the key storage unit, the convergence device uses the private key to decrypt, and transmits the decrypted DICOM protocol to the server; for the case that the input private key does not correspond to the private key stored in the key storage unit, the convergence device cannot decrypt the transmitted DICOM protocol and cannot read the DICOM protocol content; the edge device and the convergence device each further comprise a pre-warning prompt unit, wherein when the input private key does not correspond to the private key stored in the key storage unit, a pop-up window prompts that the input private key fails; the private key is obtained, and the private key is input again for verification; when the input private key is successful, the convergence device uses the private key to decrypt, and transmits the decrypted DICOM protocol to the server; and when the input private key fails, the pre-warning prompt unit issues a pre-warning prompt; the edge device is configured to encrypt the DICOM protocol from the terminal and transmit it to the convergence device; and the edge device is further configured to decrypt the DICOM protocol from the convergence device and transmit it to the terminal. ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ 2. The non-invasive encryption transmission method based on DICOM protocol according to claim 1, characterized in that, ​ ​ ​ The convergence device is used for decrypting the DICOM protocol from the edge device and transmitting to the server; The convergence device is also used for encrypting the DICOM protocol from the server and transmitting to the edge device.

3. The non-invasive encryption transmission method based on DICOM protocol according to claim 1, characterized in that, The edge device accepts the DICOM protocol request transmitted from the terminal; The edge device and the convergence device customize the algorithm, and the edge device and the convergence device generate a public-private key pair; The edge device uses the public key to encrypt, and transmits the encrypted DICOM protocol to the convergence device; The convergence device uses the private key to decrypt, and transmits the decrypted DICOM protocol to the server.

4. The non-invasive encryption transmission method based on DICOM protocol according to claim 1, characterized in that, When the early warning prompt unit issues the early warning prompt, The IP address of the user inputting the private key is acquired to determine the user IP information; According to the user IP information, the user identity information is found and returned, and the user is locked.

5. The non-invasive encryption transmission method based on DICOM protocol according to claim 3, characterized in that, The edge device and the convergence device customize the algorithm, and the RSA encryption algorithm is used for encryption processing, and the public key A and the private key B are set as a public-private key pair, When the edge device transmits the DICOM protocol to the convergence device, the convergence device transmits its own public key A to the edge device; After the edge device receives the public key A transmitted by the convergence device, the public key A is used to encrypt the DICOM protocol to be transmitted; After the DICOM protocol is encrypted, the edge device transmits the encrypted DICOM protocol to the convergence device; After the convergence device receives the encrypted DICOM protocol, the convergence device uses its own private key B to decrypt the encrypted DICOM protocol, so that the DICOM protocol is encrypted and transmitted.

Images