DICOM PS3.15 2026a - Security and System Management Profiles

A.5.3.5 Data Import

This message describes the event of importing data into an organization, implying that the data now entering the system was not under the control of the security domain of this organization. Transfer by media within an organization is often considered a data transfer rather than a data import event. An example of importing is creating new local instances from data on removable media. Multiple patients may be described in one event message.

A single user (either local or remote) shall be identified as the requestor, i.e., UserIsRequestor with a value of true. This accommodates both push and pull transfer models for media.

Table A.5.3.5-1. Audit Message for Data Import

Real-World Entities

Field Name

Opt.

Value Constraints

Event: EventIdentification

EventID

M

EV (110107, DCM, "Import")

EventActionCode

M

Shall be:

C

Create

EventDateTime

M

Not specialized.

EventOutcomeIndicator

M

Not specialized.

EventTypeCode

U

Not specialized.

Active Participant: ActiveParticipant

Users and/or processes importing the data (1..N)

UserID

M

The identity of the local users or processes importing the data.

AlternativeUserID

U

Not specialized.

UserName

U

Not specialized.

UserIsRequestor

M

See Section A.5.3.5.

RoleIDCode

M

EV (110152, DCM, "Destination Role ID")

NetworkAccessPointTypeCode

U

Not specialized.

NetworkAccessPointID

U

Not specialized.

Active Participant: ActiveParticipant

Source Media (1)

UserID

M

See Section A.5.2.1.

AlternativeUserID

U

See Section A.5.2.2.

UserName

U

Not specialized.

UserIsRequestor

M

Shall be:

false

RoleIDCode

M

DCID 402 “Audit Active Participant Role ID Code”

See Section A.5.2.7.

NetworkAccessPointTypeCode

U

Not specialized.

NetworkAccessPointID

MC

Required if NetworkAccessPointTypeCode is present. May be present otherwise.

MediaIdentifier

M

Volume ID, URI, or other identifier for media.

MediaType

MC

DCID 405 “Media Type Code” or DCID 406 “Application Type Code”

Required if NetworkAccessPointID is not present. May be present otherwise.

Active Participant: ActiveParticipant

Source (0..N)

UserID

M

See Section A.5.2.1.

AlternativeUserID

U

See Section A.5.2.2.

UserName

U

Not specialized.

UserIsRequestor

M

See Section A.5.3.5.

RoleIDCode

M

EV (110153, DCM, "Source Role ID")

NetworkAccessPointTypeCode

U

Not specialized.

NetworkAccessPointID

MC

Shall be present if Net Access Point Type Code is present.

Participant Object: ParticipantObjectIdentification

Studies (0..N)

ParticipantObjectTypeCode

M

Shall be:

2

System Object

ParticipantObjectTypeCodeRole

M

Shall be:

3

Report

ParticipantObjectDataLifeCycle

U

Not specialized.

ParticipantObjectIDTypeCode

M

EV (110180, DCM, "Study Instance UID")

ParticipantObjectSensitivity

U

Not specialized.

ParticipantObjectID

M

The Study Instance UID.

ParticipantObjectName

MC

Required if ParticipantObjectQuery is not present.

ParticipantObjectQuery

MC

Required if ParticipantObjectName is not present.

ParticipantObjectDetail

U

Not specialized.

ParticipantObjectDescription

U

Not specialized.

SOPClass

MC

See Section A.5.2.

Accession

U

Not specialized.

NumberOfInstances

U

Not specialized.

Instances

U

Not specialized.

Encrypted

U

Not specialized.

Anonymized

U

Not specialized.

Participant Object: ParticipantObjectIdentification

Patients (1..N)

ParticipantObjectTypeCode

M

Shall be:

1

Person

ParticipantObjectTypeCodeRole

M

Shall be:

1

Patient

ParticipantObjectDataLifeCycle

U

Not specialized.

ParticipantObjectIDTypeCode

M

Shall be:

2

Patient Number

ParticipantObjectSensitivity

U

Not specialized.

ParticipantObjectID

M

The patient ID.

ParticipantObjectName

M

The patient name.

ParticipantObjectDetail

U

Not specialized.

ParticipantObjectDescription

U

Not specialized.


DICOM PS3.15 2026a - Security and System Management Profiles