SlideShare a Scribd company logo
Image Management Using
Orthanc in a Multi-Centre
Research PET Study
OrthancCon I, 2019
Andrew Crabb
The Johns Hopkins University
I Do Imaging
Overview
• We are a Radiology lab running multiple studies, all different
• Five-year research neuro PET pharmaceutical imaging study
• Four US academic medical centres
• 600 subjects, 2 scans each
• Images uploaded by scanner techs or Radiology admins
• Research subjects: No Protected Health Information entered
• High variability: Subject codes, sites, scanners, staff
• Some scanners could not have a DICOM node configured
• Some sites insist on encrypted transport
Neuro PET
Requirements
• A small, flexible solution with quick deployment
• Stability – no memory leaks, restart on crash/reboot
• Scalable to ~ TB scale
• Client upload via DICOM transport and Web interface
• Not every DICOM modality can be configured for our node
• Security – Encrypted transport
• Potential to achieve HIPAA compliance
• Client multi language/environment support
• Hierarchical development environment
Orthanc
• Small
• Flexible
• Quick deployment
• Stable
• Scalable
• Upload via DICOM & Web
• Multi language
Has web interface including drag/drop
Plain text config files
DICOM nodes in separate config
Configuration synchronised by Git
# orthanc_nodes.json
{
"DicomModalities" : {
"siteone": ["SITEONE", "1.2.3.4", 104 ],
"sitetwo": ["SITETWO", ”2.3.4.5", 104 ]
}
}
orthanc and nginx daemons are stable
Auto restart with supervisordOrthanc easily handles our scale
Images stored in external DB
Compiles and installs easily on AWS Linux
Simple directory/symlink config files
Install in /opt/orthanc
Language-independent with REST
We develop & test with curl & Postman
Clients in Python and Matlab
Runs easily in 2 GB, 1 core instance
Why a Cloud Solution?
• Problems with DICOM transport:
• Not (easily) encrypted over public internet
• Ports (104 or custom) usually blocked
• C-MOVE not possible behind NAT
• Cloud location is available from anywhere
• Can allow only certain IP ranges
• Many features are easily deployed
• Encryption of storage and transport
• Backups of database instances
• Logging of users and actions
Implementation
EC2 RDS
11112
443
Site 1
Site 2
Study Manager
Rapid Prototyping: Postman
HIPAA Compliance
Requires (amongst others):
• Encryption of data in transport
• Encryption of data at rest
• Access control
• Logging of all actions
• Configuration monitoring
• Verified backup/archive procedure
Possible HIPAA-Compliant
Implementation
EC2 RDS
443
Site 2
Study Manager
Encryption of data in transport
Encryption of data at rest
Access control
Logging of all actions
Configuration monitoring
Verified backup/archive procedure
Clinical Medicine vs. Medical Research
Clinical
Read individually, now
Read by humans
Immediate reading
Research
Processed in batch, later
Processed automatically
Delayed processing
= William / Will ≠ Nicknames
= William / Wiliam ≠ Misspelling
= Sarah / Sara ≠ Alternate spellings
= A010 / AO10 ≠ Spoken digits
Accommodating Error
Every human process includes random error
Medicine has a strong culture of reducing and correcting error
Automation achieves zero ambiguity by accommodating error
Why not just fix the errors?
• Difficult
• Dispersed backups immediately
created
• PACS systems have limited access
• Slow, heavyweight process
• No history (provenance) of edits
• Only conforms to one view of
correctness
idoimaging.com/turku2017
‘Fixing’ is an attempt to say that something did not happen, that did happen
The ‘fixing’ process itself will contain error
Identity
“Eddy Merckx” SUBJ1001
Patient Developer Investigator
What is the correct identity of this subject?
It depends on who you ask.
Multiple Identities
• Name, birthdate, hospital history numberPersonal Identity
• Name or code wished to be used at scan timeStudy Identity
• Name and history actually used at scan timeScan Identity
A person enrolled in a study and who receives a scan has three identities:
Eliminating Error in Software
Development
Code
Test
Input Run Output
✔
✘
Lightweight
Iterative
Version control
Truth Replicable
Correct
Deterministic
Accommodating Error in Identity
Mapping
Test
Images Process Output
✔
✘
Lightweight
Iterative
Individual
Version control
Truth Replicable
Correct
Deterministic

More Related Content

PPTX
Recent Developments in Free Medical Imaging Software
PPTX
Security for devs
PDF
Thick Application Penetration Testing - A Crash Course
PDF
Flare: an overview
PDF
Patient-Like-Mine
PPTX
Healthcare content management at jan yperman hospital
PPTX
Ncicbiit
PDF
NURS FPX 6416 Assessment 1 Needs Assessment Meeting with Stakeholders.pdf
Recent Developments in Free Medical Imaging Software
Security for devs
Thick Application Penetration Testing - A Crash Course
Flare: an overview
Patient-Like-Mine
Healthcare content management at jan yperman hospital
Ncicbiit
NURS FPX 6416 Assessment 1 Needs Assessment Meeting with Stakeholders.pdf

Similar to Image Management Using Orthanc in a Multi-Centre Reserach PET Study (20)

PPTX
Predicting Patient Outcomes in Real-Time at HCA
PPTX
IHE / RSNA Image Sharing Project - IHE Colombia Workshop (12/2014) Module 5b
PDF
HIPAA Solutions on Cloud Foundry
PDF
Survey on Cloud Based Services and its Security Analysis in the Healthcare Se...
PDF
Securing Patient Privacy in Web-Based DICOM Systems A Complete Guide.pdf
PPTX
Hadoop Enabled Healthcare
PDF
Securing_Medical_Imaging_in_the_Cloud_Whitepaper
PDF
NURS FPX 6416 Assessment 1 Needs Assessment Meeting with Stakeholders.pdf
PDF
How to Keep Critical Medical Images Flowing Smoothly Across Hospital Systems.pdf
PDF
NURS FPX 6416 Assessment 1 Needs Assessment Meeting with Stakeholders.pdf
PPTX
INNOWAVE FREEDOM NANO PACS
PPT
PACS strategic plan and needs assessment, technical Issues, PACS architecture.
PPTX
NanoSec Conference 2019: Attacking and Securing HealthCare Standards & Pentes...
DOCX
Intelligent generator of big data medical
PPTX
Assure Patient and Clinician Digital Experiences with ThousandEyes for Health...
PDF
FHIR® in Action: How UCSF Uses FHIR® to Enable Innovation by Ed Martin
PPT
Medical Imaging (DICOM) with WebSphere Message Broker
PDF
Scalable Data Computing for Healthcare and Life Sciences Industry
PDF
IRJET- A Novel Survey to Secure Medical Images in Cloud using Digital Wat...
PPTX
Mohannad hussain dicom and imaging tools
Predicting Patient Outcomes in Real-Time at HCA
IHE / RSNA Image Sharing Project - IHE Colombia Workshop (12/2014) Module 5b
HIPAA Solutions on Cloud Foundry
Survey on Cloud Based Services and its Security Analysis in the Healthcare Se...
Securing Patient Privacy in Web-Based DICOM Systems A Complete Guide.pdf
Hadoop Enabled Healthcare
Securing_Medical_Imaging_in_the_Cloud_Whitepaper
NURS FPX 6416 Assessment 1 Needs Assessment Meeting with Stakeholders.pdf
How to Keep Critical Medical Images Flowing Smoothly Across Hospital Systems.pdf
NURS FPX 6416 Assessment 1 Needs Assessment Meeting with Stakeholders.pdf
INNOWAVE FREEDOM NANO PACS
PACS strategic plan and needs assessment, technical Issues, PACS architecture.
NanoSec Conference 2019: Attacking and Securing HealthCare Standards & Pentes...
Intelligent generator of big data medical
Assure Patient and Clinician Digital Experiences with ThousandEyes for Health...
FHIR® in Action: How UCSF Uses FHIR® to Enable Innovation by Ed Martin
Medical Imaging (DICOM) with WebSphere Message Broker
Scalable Data Computing for Healthcare and Life Sciences Industry
IRJET- A Novel Survey to Secure Medical Images in Cloud using Digital Wat...
Mohannad hussain dicom and imaging tools
Ad

Recently uploaded (20)

PPTX
Operating system designcfffgfgggggggvggggggggg
PDF
Wondershare Filmora 15 Crack With Activation Key [2025
PPT
Introduction Database Management System for Course Database
PDF
top salesforce developer skills in 2025.pdf
PDF
Understanding Forklifts - TECH EHS Solution
PDF
How to Choose the Right IT Partner for Your Business in Malaysia
PDF
Design an Analysis of Algorithms II-SECS-1021-03
PDF
Adobe Premiere Pro 2025 (v24.5.0.057) Crack free
PDF
System and Network Administraation Chapter 3
PDF
Digital Systems & Binary Numbers (comprehensive )
PDF
Odoo Companies in India – Driving Business Transformation.pdf
PDF
Which alternative to Crystal Reports is best for small or large businesses.pdf
PDF
Designing Intelligence for the Shop Floor.pdf
PPTX
Oracle E-Business Suite: A Comprehensive Guide for Modern Enterprises
PPTX
Embracing Complexity in Serverless! GOTO Serverless Bengaluru
PDF
Design an Analysis of Algorithms I-SECS-1021-03
PDF
medical staffing services at VALiNTRY
PPTX
Computer Software and OS of computer science of grade 11.pptx
PPTX
ai tools demonstartion for schools and inter college
PDF
System and Network Administration Chapter 2
Operating system designcfffgfgggggggvggggggggg
Wondershare Filmora 15 Crack With Activation Key [2025
Introduction Database Management System for Course Database
top salesforce developer skills in 2025.pdf
Understanding Forklifts - TECH EHS Solution
How to Choose the Right IT Partner for Your Business in Malaysia
Design an Analysis of Algorithms II-SECS-1021-03
Adobe Premiere Pro 2025 (v24.5.0.057) Crack free
System and Network Administraation Chapter 3
Digital Systems & Binary Numbers (comprehensive )
Odoo Companies in India – Driving Business Transformation.pdf
Which alternative to Crystal Reports is best for small or large businesses.pdf
Designing Intelligence for the Shop Floor.pdf
Oracle E-Business Suite: A Comprehensive Guide for Modern Enterprises
Embracing Complexity in Serverless! GOTO Serverless Bengaluru
Design an Analysis of Algorithms I-SECS-1021-03
medical staffing services at VALiNTRY
Computer Software and OS of computer science of grade 11.pptx
ai tools demonstartion for schools and inter college
System and Network Administration Chapter 2
Ad

Image Management Using Orthanc in a Multi-Centre Reserach PET Study

  • 1. Image Management Using Orthanc in a Multi-Centre Research PET Study OrthancCon I, 2019 Andrew Crabb The Johns Hopkins University I Do Imaging
  • 2. Overview • We are a Radiology lab running multiple studies, all different • Five-year research neuro PET pharmaceutical imaging study • Four US academic medical centres • 600 subjects, 2 scans each • Images uploaded by scanner techs or Radiology admins • Research subjects: No Protected Health Information entered • High variability: Subject codes, sites, scanners, staff • Some scanners could not have a DICOM node configured • Some sites insist on encrypted transport
  • 4. Requirements • A small, flexible solution with quick deployment • Stability – no memory leaks, restart on crash/reboot • Scalable to ~ TB scale • Client upload via DICOM transport and Web interface • Not every DICOM modality can be configured for our node • Security – Encrypted transport • Potential to achieve HIPAA compliance • Client multi language/environment support • Hierarchical development environment
  • 5. Orthanc • Small • Flexible • Quick deployment • Stable • Scalable • Upload via DICOM & Web • Multi language Has web interface including drag/drop Plain text config files DICOM nodes in separate config Configuration synchronised by Git # orthanc_nodes.json { "DicomModalities" : { "siteone": ["SITEONE", "1.2.3.4", 104 ], "sitetwo": ["SITETWO", ”2.3.4.5", 104 ] } } orthanc and nginx daemons are stable Auto restart with supervisordOrthanc easily handles our scale Images stored in external DB Compiles and installs easily on AWS Linux Simple directory/symlink config files Install in /opt/orthanc Language-independent with REST We develop & test with curl & Postman Clients in Python and Matlab Runs easily in 2 GB, 1 core instance
  • 6. Why a Cloud Solution? • Problems with DICOM transport: • Not (easily) encrypted over public internet • Ports (104 or custom) usually blocked • C-MOVE not possible behind NAT • Cloud location is available from anywhere • Can allow only certain IP ranges • Many features are easily deployed • Encryption of storage and transport • Backups of database instances • Logging of users and actions
  • 9. HIPAA Compliance Requires (amongst others): • Encryption of data in transport • Encryption of data at rest • Access control • Logging of all actions • Configuration monitoring • Verified backup/archive procedure
  • 10. Possible HIPAA-Compliant Implementation EC2 RDS 443 Site 2 Study Manager Encryption of data in transport Encryption of data at rest Access control Logging of all actions Configuration monitoring Verified backup/archive procedure
  • 11. Clinical Medicine vs. Medical Research Clinical Read individually, now Read by humans Immediate reading Research Processed in batch, later Processed automatically Delayed processing = William / Will ≠ Nicknames = William / Wiliam ≠ Misspelling = Sarah / Sara ≠ Alternate spellings = A010 / AO10 ≠ Spoken digits
  • 12. Accommodating Error Every human process includes random error Medicine has a strong culture of reducing and correcting error Automation achieves zero ambiguity by accommodating error
  • 13. Why not just fix the errors? • Difficult • Dispersed backups immediately created • PACS systems have limited access • Slow, heavyweight process • No history (provenance) of edits • Only conforms to one view of correctness idoimaging.com/turku2017 ‘Fixing’ is an attempt to say that something did not happen, that did happen The ‘fixing’ process itself will contain error
  • 14. Identity “Eddy Merckx” SUBJ1001 Patient Developer Investigator What is the correct identity of this subject? It depends on who you ask.
  • 15. Multiple Identities • Name, birthdate, hospital history numberPersonal Identity • Name or code wished to be used at scan timeStudy Identity • Name and history actually used at scan timeScan Identity A person enrolled in a study and who receives a scan has three identities:
  • 16. Eliminating Error in Software Development Code Test Input Run Output ✔ ✘ Lightweight Iterative Version control Truth Replicable Correct Deterministic
  • 17. Accommodating Error in Identity Mapping Test Images Process Output ✔ ✘ Lightweight Iterative Individual Version control Truth Replicable Correct Deterministic