Efficient and safe medical image cloud data transmission architecture

Abstract

The utility model discloses an efficient and safe medical image cloud data transmission architecture, which comprises a medical module, a cloud platform module, a safety encryption communication module and a firewall module, the medical module is connected with the cloud platform module through the firewall module and the security encryption communication module; and the medical module comprises a hospital platform module, a front service module and a data cache module. The medical image communication system has the beneficial effects that the medical image communication efficiency is improved on the basis of not changing a traditional equipment communication protocol and a hospital network structure bandwidth; dicom communication is converted into standard http communication, various internet security mechanisms can be endowed, and medical data security is guaranteed; based on a data scheduling strategy associated with a service, the defect that a request is transmitted first and a request is transmitted at the same time in the prior art is overcome, and the network bandwidth is utilized more efficiently; measures such as data compression, packaging and encryption are provided, data security and data transmission efficiency are improved, and the influence of fragmented files is solved.

Description

Technical Field

[0001] The utility model belongs to the field of medical imaging information systems, and specifically relates to an efficient and secure medical imaging cloud data transmission architecture. Background Art

[0002] After nearly 30 years of development, my country's hospital information technology has entered an era of digitization, informatization, and intelligence. The DICOM 3.0 medical digital imaging and communication protocol, based on international standards, is the most widely deployed medical information standard. Since its introduction around 1995, the global imaging information technology platform architecture has remained largely unchanged. The DICOM protocol, with its inefficient clear-text communication, has numerous conflicts with current application requirements and platform architectures. This standard has also resulted in the medical technology architecture remaining largely unchanged for 30 years.

[0003] Digital medical equipment is now widely used in most medical institutions. From a few images in its early days to volumetric scans and the current widespread use of functional imaging technologies like spectroscopy and spectroscopy, data volumes have exploded, rendering the DICOM standard inadequate for handling this massive volume. Hospital information technology is also upgrading to 10G and 100G network architectures, significantly increasing construction costs.

[0004] 85% to 90% of existing hospital data storage comes from imaging, making imaging the most advanced application in healthcare information technology. The medical cloud is a platform for building medical big data, with the medical imaging cloud platform at its core. Solving the communication, storage, and application of big data within the cloud architecture and existing hospital networks is a pressing issue.

[0005] In order to solve the problem of efficient communication and application of Dicom big data, this utility model proposes a medical imaging communication architecture, which is mainly designed for the traditional PACS system. It mainly includes four aspects: 1. Adding front-end service equipment between medical institution imaging equipment and cloud services; 2. Converting traditional Dicom data communication to http data communication; 3. Repackaging Dicom image data to solve the problem of fragmented files; 4. Providing a scheduling strategy for image transmission.

[0006] The Dicom protocol is an international standard for medical imaging and related information. It provides specifications for information exchange between medical imaging devices. Traditional medical imaging information systems have the following defects:

[0007] 1. Dicom communication efficiency is low, the fragmented files are small, and the bandwidth requirements are high. It is acceptable in a local area network environment, but it is difficult to ensure efficient transmission on the Internet, which affects actual use;

[0008] 2. The security of medical equipment and Internet Dicom services is not guaranteed;

[0009] 3. Data communication has no priority, which can easily lead to bottlenecks caused by concentrated large requests. Utility Model Content

[0010] The purpose of the present invention is to provide an efficient and secure medical image cloud data transmission architecture to solve the problems raised in the above background technology.

[0011] To achieve the above objectives, the present invention provides the following technical solutions: an efficient and secure medical imaging cloud data transmission architecture, comprising a medical module, a cloud platform module, a secure encryption communication module, and a firewall module;

[0012] The medical module is connected to the cloud platform module through the firewall module and the secure encryption communication module;

[0013] The medical module includes an in-hospital platform module, a front-end service module and a data cache module. The in-hospital platform module is connected to the firewall module through the front-end service module, and the data cache module is connected to the front-end service module.

[0014] The cloud platform module includes a security gateway module, a communication service cluster module, a high-performance data processing cluster module and a storage module, and the security gateway module, the communication service cluster module, the high-performance data processing cluster module and the storage module are connected in sequence.

[0015] Preferably, the in-hospital platform module includes in-hospital medical technology equipment, in-hospital application terminals and in-hospital Dicom system, and the in-hospital medical technology equipment, in-hospital application terminals and in-hospital Dicom system are respectively connected to the front-end service module.

[0016] Preferably, the storage module includes a database module and a file storage module.

[0017] Compared with the prior art, the beneficial effects of the present invention are:

[0018] 1. This utility model provides an efficient and secure medical imaging communication architecture that improves the efficiency of medical imaging communication without changing the traditional equipment communication protocol and the bandwidth of the hospital network structure;

[0019] 2. Converting Dicom communication into standard http communication can provide various Internet security mechanisms to ensure the security of medical data;

[0020] 3. Based on the data scheduling strategy associated with the business, it solves the drawbacks of the traditional first-come-first-served and simultaneous requests and simultaneous transmission, and makes more efficient use of network bandwidth;

[0021] 4. Provide measures such as data compression, packaging and encryption to improve data security and data transmission efficiency and solve the impact of fragmented files. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 This is a module diagram of the present utility model.

[0023] In the figure: 1. Medical module; 11. In-hospital platform module; 111. In-hospital medical equipment; 112. In-hospital application terminal; 113. In-hospital Dicom system; 12. Front-end service module; 13. Data cache module; 2. Cloud platform module; 21. Security gateway module; 22. Communication service cluster module; 23. High-performance data processing cluster module; 24. Storage module; 241. Database module; 242. File storage module; 3. Secure encryption communication module; 4. Firewall module. DETAILED DESCRIPTION

[0024] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0025] See also Figure 1 ,The utility model provides a technical solution: an efficient and secure medical image cloud data transmission architecture, including a medical module 1, a cloud platform module 2, a secure encryption communication module 3 and a firewall module 4;

[0026] The medical module 1 is connected to the cloud platform module 2 via the firewall module 4 and the secure encryption communication module 3;

[0027] The medical module 1 includes an in-hospital platform module 11, a front-end service module 12, and a data cache module 13. The in-hospital platform module 11 is connected to the firewall module 4 via the front-end service module 12, and the data cache module 13 is connected to the front-end service module 12;

[0028] The cloud platform module 2 includes a security gateway module 21, a communication service cluster module 22, a high-performance data processing cluster module 23 and a storage module 24, which are connected in sequence.

[0029] The in-hospital platform module 11 includes in-hospital medical technology equipment 111 , in-hospital application terminals 112 and in-hospital Dicom system 113 . The in-hospital medical technology equipment 111 , in-hospital application terminals 112 and in-hospital Dicom system 113 are all connected to the front-end service module 12 respectively.

[0030] The storage module 24 includes a database module 241 and a file storage module 242 .

[0031] Specifically, it includes three modules: cloud service module, hospital front-end service, in-hospital imaging equipment and imaging workstation.

[0032] The data communication business logic is as follows:

[0033] Medical imaging equipment and pre-services:

[0034] The front-end server provides standard Dicom services to achieve communication with imaging devices based on the Dicom3.0 standard, including sending and receiving data.

[0035] Inside the front-end service:

[0036] The front-end server provides data caching, security gateway strategy, data scheduling strategy, data compression packaging encoding and decoding, and encryption.

[0037] Data cache can be configured with a certain time and capacity, so that when accessing data within the hospital, data can be obtained directly locally instead of through the Internet, improving application efficiency and reducing network bandwidth usage.

[0038] The security gateway strategy is reinforced with various methods such as whitelists, private ports, firewalls, and dual network cards to isolate the internal and external networks. It is also deployed behind the hospital's security facilities to provide protection for Internet security.

[0039] The data scheduling strategy is to prioritize caching after receiving image data pushed by medical imaging equipment, and then adjust the order of cloud archiving based on the hospital's business and data relationship. For example, data for emergency and surgical procedures will be transmitted first, and the priority of data for general outpatient clinics will be lowered. Through a series of strategies, business stability and timeliness are guaranteed.

[0040] Data compression, packaging and encryption are the guarantee for efficient and secure communication of Internet data. Because Dicom files are small files of tens or hundreds of KB, it is difficult to improve transmission efficiency if the traditional Dicom method is used. Moreover, Dicom is plain text communication, and data security is not guaranteed. Therefore, the inspection data is packaged and encrypted to construct large data packets for efficient transmission in a stream manner.

[0041] Cloud and front-end services:

[0042] Communication between the cloud and front-end services is based on HTTP, supplemented by SSL for secondary security encryption. Transmission efficiency is over five times that of traditional Dicom, and the improvement is more significant with higher concurrency. For accessing historical data, the front-end service can pre-transfer image data from the cloud back to the hospital based on in-hospital business logic, improving application efficiency.

[0043] It can improve the efficiency of medical imaging communication without changing the traditional equipment communication protocol and the bandwidth of the hospital network structure; converting Dicom communication into standard http communication can provide various Internet security mechanisms to ensure the security of medical data; based on the data scheduling strategy associated with the business, it solves the drawbacks of the traditional first request first transmission and simultaneous requests and simultaneous transmission, and makes more efficient use of network bandwidth; it provides measures such as data compression, packaging and encryption to improve data security and data transmission efficiency and solve the impact of fragmented files.

[0044] Although embodiments of the present invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and variations may be made to these embodiments without departing from the principles and spirit of the present invention, and the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. An efficient and secure medical image cloud data transmission architecture, characterized in that: It comprises a medical module (1), a cloud platform module (2), a secure encrypted communication module (3) and a firewall module (4); The medical module (1) is connected to the cloud platform module (2) via a firewall module (4) and a secure encrypted communication module (3); The medical module (1) comprises an in-hospital platform module (11), a front-end service module (12) and a data cache module (13); the in-hospital platform module (11) is connected to the firewall module (4) via the front-end service module (12), and the data cache module (13) is connected to the front-end service module (12); The cloud platform module (2) comprises a security gateway module (21), a communication service cluster module (22), a high-performance data processing cluster module (23) and a storage module (24), wherein the security gateway module (21), the communication service cluster module (22), the high-performance data processing cluster module (23) and the storage module (24) are connected in sequence.

2. According to claim 1, an efficient and secure medical image cloud data transmission architecture is characterized by: The in-hospital platform module (11) comprises in-hospital medical technology equipment (111), an in-hospital application terminal (112) and an in-hospital Dicom system (113); the in-hospital medical technology equipment (111), the in-hospital application terminal (112) and the in-hospital Dicom system (113) are respectively connected to the front-end service module (12).

3. According to claim 1, an efficient and secure medical image cloud data transmission architecture is characterized by: The storage module (24) comprises a database module (241) and a file storage module (242).

Images