DICOM Data Masking with Hierarchical Storage Preservation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The safe dissemination of medical image data, particularly in DICOM format, is challenged by the need to accurately and reasonably mask sensitive and private patient information, which is often not adequately addressed in existing systems.
Innovation Solution
A method and system for data masking in medical systems that involves obtaining original files, applying masking templates based on hierarchical relationships, and generating target files while preserving data structure for efficient retrieval and storage, with flexibility in masking modes and formats.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sensitive patient information is masked in medical image data, then patient privacy is protected, but data utility for medical research and teaching is reduced
Solution Approach 1:
The patent applies different masking strategies to different types of data elements within the DICOM file. Sensitive personal information (patient name, ID, address) is masked or removed, while clinically relevant information (diagnosis, treatment data, imaging parameters) is preserved. This selective approach protects privacy while maintaining data utility for medical research and teaching purposes.
Solution Approach 2:
The masking process segments the DICOM data into different categories: personally identifiable information (PII) that requires masking, sensitive medical information that may need protection, and non-sensitive clinical data that can be freely shared. This segmentation allows differential privacy protection while preserving research value.
2Reliability
If comprehensive masking is applied to all patient information, then privacy protection is maximized, but data retrieval and management efficiency is reduced
Solution Approach 1:
The system performs preliminary masking of sensitive information during the data ingestion and preprocessing stage, before the data is stored or queried. By pre-processing the data to replace or remove PII, the system eliminates the need for complex real-time masking during retrieval operations, thereby maintaining both high privacy protection and efficient data management.
Solution Approach 2:
The patent introduces an intermediary masking layer that sits between the raw DICOM data and the storage/retrieval systems. This intermediary process automatically identifies and masks sensitive fields based on predefined rules, allowing the underlying data management system to operate efficiently on already-anonymized data without requiring complex privacy logic.
3Adaptability or versatility
If multiple masking modes and templates are supported, then flexibility in data protection is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal masking framework that handles multiple masking modes (complete masking, partial masking, pseudonymization) and various data types through a single integrated system. The same masking engine can apply different strategies based on the data element type, allowing the system to provide versatile masking capabilities without requiring separate systems for each masking approach.
Solution Approach 2:
The masking system is designed to be dynamic and configurable, allowing the masking template and rules to be adjusted based on different requirements. The system can switch between different masking strategies for different data elements and can adapt to changing privacy requirements without requiring fundamental system changes, thus providing flexibility with manageable complexity.
Data Source
AI summary
The present disclosure is related to systems and methods for data masking. The method includes obtaining at least one original file and a hierarchical relationship that is associated with data in the at least one original file. The method includes obtaining a masking template for the data in the at least one original file. The method includes masking the data in the at least one original file based on the masking template, to generate at least one target file. The method includes storing the at least one target file based on the hierarchical relationship.