Access limitation to pacs

igroup · January 21, 2021 at 11:53 AM

With the conquest default configuration, each station / user can send studies to the pacs and can query pacs to see the studies present even if he cannot download them if this user / pc is not present in acrnema.conf

Is there a way to prevent anyone from interrogating the pacs and sending the studies?

Thanks

Massimo

marcelvanherk · January 21, 2021 at 1:15 PM

hi,

this can be done by AE through dgatesop.lst, but if you add one it will reject all others so you have to add all including the server console itself.

or using a script, e.g.

[lua]

association=if Association.ConnectedIP!='192.168.1.135' then reject() end

Marcel

igroup · January 21, 2021 at 1:37 PM

Thanks Marcel for the quick reply,

give me an example of what needs to be added in dgatesop.lst

thanks

Massimo

marcelvanherk · January 21, 2021 at 1:42 PM

Hi to limit access to CONQUESTSRV1 and CONQUESTSRV2:

CONQUESTSRV1 CONQUESTSRV1 RemoteAE

CONQUESTSRV2 CONQUESTSRV2 RemoteAE

The second column is used, first is description.

Marcel

igroup · January 21, 2021 at 6:21 PM

Thanks Marcel,

perfect, it seems to work fine, I inserted these lines at the end of the dgatesop.lst file:

CONQUESTSRV1 CONQUESTSRV1 RemoteAE

CONQUESTSRV1 EliteX2-max RemoteAE

CONQUESTSRV1 CONQUESTSRVWIN RemoteAE

CONQUESTSRV1 SERAX RemoteAE

CONQUESTSRV1 BONICNEW RemoteAE

CONQUESTSRV1 REDDREAM RemoteAE

CONQUESTSRV1 PS01 RemoteAE

CONQUESTSRV1 SANTEX RemoteAE

The use of these directives seems to me to significantly increase the security of the PACS system

Thanks

DrSteve · December 1, 2021 at 7:30 PM

Hi

As mentioned in previous thread i also added following lines in PACS Server but till i can send images from any AE (AE1) and retrieve list of Patient on Query from any AE (AE2) that is not mentioned in the list.

#JPEG2000 1.2.840.10008.1.2.4.91 transfer LittleEndianExplicit

PACS PACS LocalAE

WORKSTATION WKS1 RemoteAE

Local PACS AET is PACS

Please guide to implement restriction

marcelvanherk · December 1, 2021 at 9:06 PM

This line works, the second item is the AE

PACS CONQUESTSRV2 RemoteAE

If another AE accesses conquest I get:

[CONQUESTSRV2] *** multiplex: connection terminated

Marcel

marcelvanherk · December 1, 2021 at 9:07 PM

By the way this is in dgatesop.lst

Marcel

DrSteve · December 2, 2021 at 3:57 PM

Thanks i got it running

DrSteve · April 4, 2022 at 8:39 AM

Hi

Can you please guide me how can i configure to receive data from one modality only.

Regards

HM

marcelvanherk · April 4, 2022 at 9:34 AM

Hi,

you have define all AETs that have access in dgatesop.lst, but do not forget to define the server itself too. Once you add one or more it rejects all others, also for queries and retrieves. Or you can script it, e.g.:

ImportConverter0 = lua:if assocation.calling~='AETITLE' then reject() end

which would work for recieving only.

Marcel

DrSteve · April 4, 2022 at 9:59 AM

Hi

It means that i have to add workstations in dgatesop.lst and for modalities i have to use lua scripting.

ImportConverter0 = modalityblock.lua

marcelvanherk · April 4, 2022 at 11:35 AM

Well you can script workstations as well (using QueryConverter0 and RetrieveConverter0), and scripting is more fine grained.

dgatesop.lst is a global accept/reject mechanism.

Marcel

DrSteve · April 5, 2022 at 5:21 AM

If possible can you please share a algo/pesudo for the workstation lua script.

marcelvanherk · April 5, 2022 at 9:15 AM

QueryConverter0 = lua:if assocation.calling~='AETITLE' then reject() end

RetrieveConverter0 = lua:if assocation.calling~='AETITLE' then reject() end

Marcel

Access limitation to pacs

Participate now!

Tags