关键词: 云影像归档和通信系统（PACS）, DICOM协议安全, USB Key身份认证, SSL身份认证

Abstract: The expense of storing and maintaining the huge medical image data in traditional PACS（Picture Archiving and Communication System） gets costly, and image data transmitted through DICOM protocol can be easily attacked by hacker, resulting in some security issues such as data being illegally usurped and patient privacy being leaked. A cloud-based PACS model is proposed to meet the requirements of data storage, maintenance and transmission security combined with the strength of cloud computing technique. Unified identity authentication framework is designed based on two kinds of hybrid authentication modes which are the USB Key identity strong authentication scheme and the SSL identity common authentication scheme. Security analysis shows that the proposed unified identity authentication framework not only can ensure data privacy, authenticity and integrity but also can resist man-in-the-middle attack, replay attack and dictionary attack. It is proven that unified identity authentication framework has the ability to secure DICOM protocol communication of cloud-based PACS.

Key words: cloud-based Picture Archiving and Communication System（PACS）, Digital Imaging Communication in Medicine（DICOM） protocol security, USB Key identity authentication, SSL identity authentication