Medical image file transmission method, electronic device and storage medium
By sequentially disrupting and splitting medical image files on the server side and transmitting them with specific encryption keys, the lack of secure encryption of medical image files during public network transmission is solved, and effective protection of medical image files is achieved , prevent leakage.
Patent Information
- Application Number
- CN202311198706.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-09-18
- Publication Date
- 2025-02-07
- Estimated Expiration
- 2043-09-18
AI Technical Summary
The existing medical image cloud system lacks effective security encryption measures during the public network transmission process, which makes it difficult to ensure the privacy and security of medical image files.
By disrupting the image matrix data in the medical image file sequentially on the server and splitting it into multiple sub-image data, the sub-image data is stored and transmitted using a specific encryption key to ensure that the data is in the transmission process. out of order in order to prevent leakage.
It effectively prevents the leakage of medical image files during network transmission, ensures the privacy and security of the subjects, and meets the higher security requirements of the medical image cloud system.
Smart Images

Figure CN118474269B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of computer technology applications, and in particular to a medical image file transmission method, electronic equipment and storage medium. Background Art
[0002] Medical imaging cloud systems have been increasingly widely used. They use cloud storage of medical imaging information as the data basis and provide various forms of online cloud service models based on medical imaging for medical institutions, medical insurance departments and individuals through cloud transmission. The transition from traditional in-hospital medical imaging to medical imaging cloud service models for public network services will inevitably put forward higher requirements on the security requirements of the system, which is related to the privacy security of the majority of examinees. At present, there are some security protection methods for imaging cloud systems based on credit mechanisms and other means, as well as secure transmission methods based on tunnel data transmission, but there is little research on the secure encryption of medical imaging files during public network transmission. Therefore, there is an urgent need for an encryption method to securely encrypt medical imaging files during network transmission. Summary of the invention
[0003] In view of the above technical problems, the technical solution adopted by the present invention is:
[0004] An embodiment of the present invention provides a method for transmitting medical image files. The method is applied to a first scenario. The first scenario includes a server and multiple clients that are in communication with the server. The server stores medical image files. The method includes the following steps:
[0005] S100, the client r sends a request instruction R to the server to request to obtain a medical image file r ; The value of r ranges from 1 to m, where m is the number of clients;
[0006] S200, in response to receiving R r , the server is based on the encryption key Key corresponding to the client r r The medical image data in the requested medical image file is split to obtain N sub-image data; wherein the encryption key is an unordered sequence obtained by arranging 1, 2, 3, ..., k*k in random order, and k is an integer greater than or equal to 2; N = max(Key r ), max() is to get the maximum value;
[0007] S300, the obtained N sub-image data are processed according to Key r The corresponding order is stored, and the encrypted medical image file is obtained as the target medical image file and sent to the client r.
[0008] Optionally, the size and shape of any two sub-image data are the same.
[0009] Optionally, each sub-image data is square.
[0010] Optionally, the encrypted medical image file is sent to the client r via a public network.
[0011] Optionally, after S100, the method further includes:
[0012] S110, in response to receiving R r , the server superimposes the identification information corresponding to the client r into the filling area in the medical image data in the requested medical image file to obtain the processed medical image data;
[0013] S200 is replaced by:
[0014] S210, based on the encryption key Key corresponding to the client r r The processed medical image data is split to obtain N sub-image data; wherein the encryption key is an unordered sequence obtained by arranging 1, 2, 3, ..., k*k in random order, where k is an integer greater than or equal to 2; N = max(Key r ), max() is the maximum value.
[0015] Optionally, S110 specifically includes:
[0016] S1101, obtaining identification information corresponding to the medical image file requesting end, and converting the identification information into a pixel matrix;
[0017] S1102, superimposing the pixel matrix into the filling area to obtain processed medical image data.
[0018] Optionally, the identification information corresponding to the client r includes at least: a user ID corresponding to the client r, an IP address of the client r, and a r time.
[0019] Optionally, it also includes:
[0020] S400: In response to receiving the target medical image file, the client r restores the medical image data in the received target medical image file based on the corresponding encryption key.
[0021] An embodiment of the present invention also provides a non-transitory computer-readable storage medium, in which at least one instruction or at least one program is stored, and the at least one instruction or the at least one program is loaded and executed by a processor to implement the aforementioned method.
[0022] An embodiment of the present invention further provides an electronic device, including a processor and the aforementioned non-transitory computer-readable storage medium.
[0023] The present invention has at least the following beneficial effects:
[0024] In the medical image file transmission method provided by the embodiment of the present invention, when a user requests a server to obtain a medical image file through a network, the server scrambles the image matrix data in the medical image file and then transmits it to the requesting client through the network. The client first restores the image matrix data in sequence in the memory using a local matrix sequence key and then displays it in the image reading system. During the entire medical image file transmission process, the image matrix data in the medical image file is always in a disordered state, which can effectively prevent the occurrence of network transmission leakage. BRIEF DESCRIPTION OF THE DRAWINGS
[0025] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.
[0026] Figure 1 The present invention provides a flowchart of a medical image file transmission method according to an embodiment of the present invention. DETAILED DESCRIPTION
[0027] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.
[0028] The embodiment of the present invention provides a medical image file transmission method, which is intended to prevent the leakage of medical image files during network transmission. The method is applied to a first scenario, which includes a server and multiple clients communicating with the server, and the server stores medical image files. In the embodiment of the present invention, the server is deployed in a medical image cloud system based on a C / S architecture. The server and the client can be connected to each other through a public network.
[0029] Furthermore, if Figure 1 As shown, the medical image file transmission method provided by the embodiment of the present invention may include the following steps:
[0030] S100, the client r sends a request instruction R to the server to request to obtain a medical image filer ; The value of r is 1 to m, where m is the number of clients.
[0031] In the embodiment of the present invention, the client r is an authorized client. Specifically, when a user requests the server of the medical imaging cloud system to obtain a medical imaging file through the network, the network request is first authorized and reviewed to screen out unauthorized illegal requesters. For authorized network requests, the corresponding identification information is extracted. The network request sent by the user will contain identity authentication information. If the identity authentication information contained belongs to the preset identity information library, it means that the client is an authorized client, otherwise, it is an unauthorized client.
[0032] In the embodiment of the present invention, the request instruction R r The ID of the requested medical image file may be included. On the server side, each medical image file has a unique ID. The specific form of the ID can be set based on actual needs, as long as the medical image file can be distinguished.
[0033] Further, in an embodiment of the present invention, the format of the medical image file may be a DICOM file format, that is, a DICOM file. A DICOM file consists of two main components: metadata and pixel data. The metadata in a DICOM file is called a "tag," and each tag contains specific information about the image. A tag consists of an identifier and a value. The identifier tells us what type of information this tag corresponds to, such as the patient's name or date and time. The value provides specific information, such as the patient's actual name or the exact time the image was acquired. A DICOM file contains more than 1,000 different tags, which are organized into different groups for effective organization and management. The group and element number of the tag are used to determine the unique identifier of the tag. The pixel data is the actual medical image data, such as a CT or MRI image. The specific encoding structure of the DICOM file format enables metadata and pixel data to be stored in the same file, making it easy to read and understand. Pixel data is generally at the end of a DICOM file.
[0034] S200, in response to receiving R r , the server is based on the encryption key Key corresponding to the client r r The medical image data in the requested medical image file is split to obtain N sub-image data; wherein the encryption key is an unordered sequence obtained by arranging 1, 2, 3, ..., k*k in random order, and k is an integer greater than or equal to 2; N = max(Key r ), max() is the maximum value. In the embodiment of the present invention, the value of k can be set based on actual needs, and the present invention does not make any special limitation.
[0035] In an exemplary embodiment, if the encryption key is 3, 5, 6, 2, 4, 1, each medical image data in the medical image file can be split into 6 sub-image data. In the embodiment of the present invention, the sub-image data will be numbered according to the position in the corresponding medical image data. The specific numbering method can be set based on actual needs, as long as the position of each sub-image data in the corresponding medical image data can be known.
[0036] In an embodiment of the present invention, the specific splitting method can be set based on actual needs. In an illustrative embodiment, the size and shape of any two sub-image data are the same. Preferably, each sub-image data is square. That is, the medical image data can be equally divided into a plurality of square sub-image data.
[0037] S300, the obtained N sub-image data are processed according to Key r The corresponding order is stored, and the encrypted medical image file is obtained as the target medical image file and sent to the client r.
[0038] When the encryption key is 3, 5, 6, 2, 4, 1, the 6 split sub-image data can be stored in the order of 3, 5, 6, 2, 4, 1, that is, the sub-image data numbered 3 (located at the third position in the corresponding medical image data) is placed and saved in the first position. Those skilled in the art know that when a medical image file contains multiple medical image data, for example, 3 medical image data, then from the first sub-image data to the Nth sub-image data is the first medical image data, from the N+1th sub-image data to the 2Nth sub-image data is the second medical image data, from the 2N+1th sub-image data to the 3Nth sub-image data is the third medical image data, and so on, the sub-image data corresponding to any medical image data can be known.
[0039] In the embodiment of the present invention, the encrypted medical image file is sent to the client r via a public network.
[0040] Furthermore, the method provided by the embodiment of the present invention also includes the following steps:
[0041] S400: In response to receiving the target medical image file, the client r restores the medical image data in the received target medical image file based on the corresponding encryption key.
[0042] After receiving the medical image file, the client r uses the encryption key stored in the client r to restore the disordered image data in memory, and then transmits it to the image reading system. At this time, the image information displayed will be consistent with the original data on the server.
[0043] In the medical image file transmission method provided by the embodiment of the present invention, in a medical image cloud system based on a C / S architecture, when a user requests a server to obtain a medical image file through a network, the server splits the medical image data in the medical image file according to an agreed encryption key and shuffles the order before transmitting it to the requesting client. The client first restores the received image data in order in the memory using a local encryption key, and then displays it in the image reading system. During the entire medical image file transmission process, the image data in the medical image file is always in a disordered state, which can effectively prevent the occurrence of network transmission leakage.
[0044] Furthermore, in another embodiment of the present invention, after S100, the following steps are also included:
[0045] S110, in response to receiving R r The server superimposes the identification information corresponding to the client r into the filling area in the medical image data in the requested medical image file to obtain the processed medical image data.
[0046] The pixels of medical image data in medical image files are generally composed of CT (Hu) values, ranging from -1024 to 3071. The original scanned data is generally not a regular rectangle (such as the original single-layer scan data of the CT machine is circular). In order to construct a data matrix, other background areas will be filled with a very low negative value (-2000 or -2048) to obtain the filled area, that is, the pixel value of the filled area is -2000 or -2048.
[0047] Those skilled in the art know that existing methods may be used to obtain the filling area corresponding to the medical image data in the medical image file.
[0048] Furthermore, S110 may specifically include:
[0049] S1101, obtaining identification information corresponding to the medical image file requesting end, and converting the identification information into a pixel matrix.
[0050] In the embodiment of the present invention, the identification information is information used to identify the identity of the user corresponding to the client. In an exemplary embodiment, the identification information corresponding to the client r includes at least: the user ID corresponding to the client r, the IP address of the client r, and the sending R r The user's ID can be the user's mobile phone number, ID card number, etc.
[0051] Those skilled in the art know that any method of converting the identification information into a pixel matrix falls within the protection scope of the present invention.
[0052] S1102, superimposing the pixel matrix into the filling area to obtain processed medical image data.
[0053] When the obtained pixel matrix is superimposed on the filling area of the corresponding image, the corresponding pixels will not change after the corresponding filling area is converted into a pixel map ranging from 0 to 255. Therefore, by adjusting the different window level values and window widths of the filling area, for example, when the common window level value is 1500 and the window width is 600, the pixel values of the corresponding pixel map filling area are all 0. Therefore, the superimposed information will not be directly observed and is concealed.
[0054] Those skilled in the art know that the method of converting CT value into gray value may be an existing technology.
[0055] Those skilled in the art know that the obtained pixel matrix can be superimposed on any corresponding area of the corresponding filling area as long as it is located in the filling area. The superposition method can be a method of adding the corresponding pixel values in the filling area and the pixel matrix.
[0056] Further, S200 is replaced by:
[0057] S210, based on the encryption key Key corresponding to the client r r The processed medical image data is split to obtain N sub-image data; wherein the encryption key is an unordered sequence obtained by arranging 1, 2, 3, ..., k*k in random order, where k is an integer greater than or equal to 2; N = max(Key r ), max() is the maximum value.
[0058] Furthermore, it also includes:
[0059] S500: In response to receiving that the target medical image file is in a set state, visually displaying the target medical image file to obtain corresponding identification information.
[0060] In the embodiment of the present invention, the set state is a leaked state, specifically a state in which the medical image file is owned by an unauthorized user.
[0061] Furthermore, in an embodiment of the present invention, the visual display of the target medical image file to obtain corresponding identification information specifically includes:
[0062] The window level value of the display software displaying the target medical image file is set to the pixel value corresponding to the filling area, and the window width of the display software is set to a set width range; the set width range is 10 to 255, so that the identification information can be displayed. In a non-limiting exemplary embodiment, the set width range can be 10 to 100.
[0063] Generally, the CT value range of human tissue is -1000-1000, while the grayscale range that the monitor can display is 0-255, so in order to clearly display different tissues, a windowing operation is required. The windowing operation means that the CT value with the window level as the center and the window width as the range is mapped to 0 to 255, and the CT value outside the window is mapped to 0 or 255.
[0064] In an embodiment of the present invention, the display software may be any existing browsing software suitable for displaying DICOM files. In a non-limiting embodiment, the display software may be VolumeShop. By setting the display software to the pixel value corresponding to the filling area, and setting the window width of the display software to a set width range, when displaying the medical image file, the identification information of the requesting end may be displayed in the medical image data, so as to facilitate tracking and tracing the user who requested the file.
[0065] Compared with the above-mentioned embodiment, in this embodiment, the medical image file sent to the client is also superimposed with identification information of the user corresponding to the client, so that the user requesting the medical image file can be traced.
[0066] An embodiment of the present invention also provides a non-transitory computer-readable storage medium, which can be set in an electronic device to store at least one instruction or at least one program related to implementing a method in a method embodiment. The at least one instruction or the at least one program is loaded and executed by the processor to implement the method provided in the above embodiment.
[0067] An embodiment of the present invention further provides an electronic device, comprising a processor and the aforementioned non-transitory computer-readable storage medium.
[0068] An embodiment of the present invention further provides a computer program product, which includes program code. When the program product is run on an electronic device, the program code is used to enable the electronic device to execute the steps of the method according to various exemplary embodiments of the present invention described above in this specification.
[0069] Although some specific embodiments of the present invention have been described in detail by way of example, it should be understood by those skilled in the art that the above examples are for illustration only and are not intended to limit the scope of the present invention. It should also be understood by those skilled in the art that various modifications may be made to the embodiments without departing from the scope and spirit of the present invention. The scope of the present invention is defined by the appended claims.
Claims
1. A medical image file transmission method, characterized in that: The method is applied to a first scenario, the first scenario includes a server and a plurality of clients communicating with the server, the server stores medical image files, and the method includes the following steps: S100, the client r sends a request instruction R to the server to request to obtain a medical image file r ; The value of r ranges from 1 to m, where m is the number of clients; S110, in response to receiving R r , the server superimposes the identification information corresponding to the client r into the filling area in the medical image data in the requested medical image file to obtain the processed medical image data; S210, based on the encryption key Key corresponding to the client r r The processed medical image data is split to obtain N sub-image data; wherein the encryption key is an unordered sequence obtained by arranging 1, 2, 3, ..., k×k in random order, k is an integer greater than or equal to 2; N=max(Key r ), max() is the maximum value; S300, the obtained N sub-image data are processed according to Key r The encrypted medical image files are stored in the corresponding order, and the encrypted medical image files are obtained as the target medical image files and sent to the client r; S400, in response to receiving the target medical image file, the client r restores the medical image data in the received target medical image file based on the corresponding encryption key; S500, in response to receiving that the target medical image file is in a set state, visually displaying the target medical image file to obtain corresponding identification information; Among them, S110 specifically includes: S1101, obtaining identification information corresponding to the medical image file requesting end, and converting the identification information into a pixel matrix; S1102, superimposing the pixel matrix into the filling area to obtain processed medical image data; The step of visually displaying the processed medical image file to obtain corresponding identification information specifically includes: Setting the window level value of the display software displaying the processed medical image file to the pixel value corresponding to the filling area, and setting the window width of the display software to a set width range; the set width range is 10-255; Wherein, the format of the medical image file is DICOM file format.
2. The medical image file transmission method according to claim 1, characterized in that: The size and shape of any two sub-image data are the same.
3. The medical image file transmission method according to claim 2, characterized in that: Each sub-image data is square.
4. The medical image file transmission method according to claim 1, characterized in that: The encrypted medical image file is sent to the client r via a public network.
5. The medical image file transmission method according to claim 1, characterized in that: The identification information corresponding to the client r includes at least: the user ID corresponding to the client r, the IP address of the client r and the r time.
6. A non-transitory computer-readable storage medium, wherein at least one instruction or at least one program is stored in the storage medium, characterized in that: The at least one instruction or the at least one program is loaded and executed by the processor to implement the method according to any one of claims 1 to 5.
7. An electronic device, characterized in that: The invention comprises a processor and the non-transitory computer-readable storage medium as claimed in claim 6.
Citation Information
Patent Citations
Picture transmission method and apparatus
CN108377319A
Privacy-protecting biological characteristic image processing method and device
CN111401320A
Medical image management method and device, electronic equipment and storage medium
CN113946851A