WW Audit Messages (Informative) (Current)
Prev		Next

WW Audit Messages (Informative)

This annex holds examples of audit messaging, as described by the Audit Trail Message Format Secure Use Profile in PS3.15.

WW.1 Message Example

An example of one of the DICOM Instances Transferred messages is shown in Example WW.1-1.

Example WW.1-1. Sample Audit Event Report

<?xml version="1.0" encoding="UTF-8"?>
<AuditMessage
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
	  xsi:noNamespaceSchemaLocation="D:\data\DICOM\security\audit-message.rnc">
  <EventIdentification
      EventActionCode="C"
      EventDateTime="2001-12-17T09:30:47"
      EventOutcomeIndicator="0">
    <EventID csd-code="110104"
      codeSystemName="DCM"
      originalText="DICOM Instances Transferred"/>
  </EventIdentification>
  
  <ActiveParticipant
      UserID="123"
      AlternativeUserID="AETITLE=AEFOO"
      UserIsRequestor="false" 
		  NetworkAccessPointID="192.168.1.2"
		  NetworkAccessPointTypeCode="2">
    <RoleIDCode
        csd-code="110153"
        codeSystemName="DCM"
        originalText="Source Role ID"/>
  </ActiveParticipant>
  
  <ActiveParticipant
      UserID="67562"
      AlternativeUserID="AETITLE=AEPACS"
      UserIsRequestor="false" 
		  NetworkAccessPointID="192.168.1.5"
		  NetworkAccessPointTypeCode="2">
    <RoleIDCode
        csd-code="110152"
        codeSystemName="DCM"
        originalText="Destination Role ID"/>
  </ActiveParticipant>
  
  <ActiveParticipant
      UserID="smitty@readingroom.hospital.org"
		  AlternativeUserID="smith@nema"
		  UserName="Dr. Smith" 
		  UserIsRequestor="true"
		  NetworkAccessPointID="192.168.1.2"
		  NetworkAccessPointTypeCode="2">
    <RoleIDCode
        csd-code="110153"
        codeSystemName="DCM"
        originalText="Source Role ID"/>
  </ActiveParticipant>
  
  <AuditSourceIdentification
      AuditEnterpriseSiteID="Hospital"
      AuditSourceID="ReadingRoom">
    <AuditSourceTypeCode code="1"/>
  </AuditSourceIdentification>
  
  <ParticipantObjectIdentification
      ParticipantObjectID="1.2.840.10008.2.3.4.5.6.7.78.8" 
			ParticipantObjectTypeCode="2"
			ParticipantObjectTypeCodeRole="3" 
			ParticipantObjectDataLifeCycle="1">
    <ParticipantObjectIDTypeCode
        csd-code="110180"
        codeSystemName="DCM"
        originalText="Study Instance UID"/>
    <ParticipantObjectDescription>
      <MPPS UID="1.2.840.10008.1.2.3.4.5"/>
      <Accession Number="12341234" />
      <SOPClass UID="1.2.840.10008.5.1.4.1.1.2" NumberOfInstances="1500"/>
      <SOPClass UID="1.2.840.10008.5.1.4.1.1.11.1" NumberOfInstances="3"/>
    </ParticipantObjectDescription>
  </ParticipantObjectIdentification>
  
  <ParticipantObjectIdentification
      ParticipantObjectID="ptid12345"
      ParticipantObjectTypeCode="1"
		  ParticipantObjectTypeCodeRole="1">
    <ParticipantObjectIDTypeCode
		  csd-code="2"
		  codeSystemName="RFC-3881"
		  originalText="Patient Number"/>
    <ParticipantObjectName>John Doe</ParticipantObjectName>
  </ParticipantObjectIdentification>
</AuditMessage>

The message describes a study transfer initiated at the request of Dr. Smith on the system at the IP address 192.168.1.2 to a system at IP address 192.168.1.5. The study contains 1500 CT SOP Instances and 3 GSPS SOP Instances. The audit report came from the audit source "ReadingRoom".

Prev		Next
VV.3 Measurement Terminology Composition	Home	WW.2 Workflow Example