|
|
Available in LEADTOOLS Medical Imaging toolkits. |
|
|
Available in LEADTOOLS Medical Imaging toolkits. |
The Integrated Secure Communication Layer (ISCL) provides a means of adding security to DICOM communication. The security added targets three main areas:
Computer or Entity Authentication
Confidentiality
Data Integrity
Computer/Entity Authentication
Computer or entity authentication let©s both the client and the server make sure the computer to which they are communicating (the peer computer) is "legitimate" for communication. This is accomplished by exchanging challenge codes and response codes. This occurs during "mutual authentication". Currently, the only mutual authentication protocol is the "Three-pass-four-way" protocol. For a more detailed description of this protocol, refer to the "MEDIS-DC STANDARDS for Integrated Secure Communication Layer Protocols V 1.00".
Confidentiality
Communication confidentiality is achieved by encrypting the data sent over the communication channel. Currently, the encryption options are:
No encryption
DES-CBC encryption. This is a 56 bit effective key length in a 64 bit key encryption in cipher block chaining mode.
For a more information on encryption, refer to the "MEDIS-DC STANDARDS for Integrated Secure Communication Layer Protocols V 1.00".
Data Integrity
Data integrity is maintained by using message authentication codes for each message sent across a DICOM Network. These message authentication codes are encrypted using the same encryption mode used for encrypting data. Currently, ISCL uses DESMAC (64 bit) and MD5 (128 bit) message authentication codes.
