WW Audit Messages (Informative)
Prev |  | Next

# WW Audit Messages (Informative)

This annex holds examples of audit messaging, as described by the Audit Trail Message Format Secure Use Profile in PS3.15.

## WW.1 Message Example

An example of one of the DICOM Instances Transferred messages is shown in Example WW.1-1.

Example WW.1-1. Sample Audit Event Report

    <?xml version="1.0" encoding="UTF-8"?>
    <AuditMessage
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    	  xsi:noNamespaceSchemaLocation="D:\data\DICOM\security\audit-message.rnc">
      <EventIdentification
          EventActionCode="C"
          EventDateTime="2001-12-17T09:30:47"
          EventOutcomeIndicator="0">
        <EventID code="110104"
          codeSystemName="DCM"
          displayName="DICOM Instances Transferred"/>
      </EventIdentification>

      <ActiveParticipant
          UserID="123"
          AlternativeUserID="AETITLE=AEFOO"
          UserIsRequestor="false"
    		  NetworkAccessPointID="192.168.1.2"
    		  NetworkAccessPointTypeCode="2">
        <RoleIDCode
            code="110153"
            codeSystemName="DCM"
            displayName="Source Role ID"/>
      </ActiveParticipant>

      <ActiveParticipant
          UserID="67562"
          AlternativeUserID="AETITLE=AEPACS"
          UserIsRequestor="false"
    		  NetworkAccessPointID="192.168.1.5"
    		  NetworkAccessPointTypeCode="2">
        <RoleIDCode
            code="110152"
            codeSystemName="DCM"
            displayName="Destination Role ID"/>
      </ActiveParticipant>

      <ActiveParticipant
          UserID="smitty@readingroom.hospital.org"
    		  AlternativeUserID="smith@nema"
    		  UserName="Dr. Smith"
    		  UserIsRequestor="true"
    		  NetworkAccessPointID="192.168.1.2"
    		  NetworkAccessPointTypeCode="2">
        <RoleIDCode
            code="110153"
            codeSystemName="DCM"
            displayName="Source Role ID"/>
      </ActiveParticipant>

      <AuditSourceIdentification
          AuditEnterpriseSiteID="Hospital"
          AuditSourceID="ReadingRoom">
        <AuditSourceTypeCode code="1"/>
      </AuditSourceIdentification>

      <ParticipantObjectIdentification
          ParticipantObjectID="1.2.840.10008.2.3.4.5.6.7.78.8"
    			ParticipantObjectTypeCode="2"
    			ParticipantObjectTypeCodeRole="3"
    			ParticipantObjectDataLifeCycle="1">
        <ParticipantObjectIDTypeCode
            code="110180"
            codeSystemName="DCM"
            displayName="Study Instance UID"/>
        <ParticipantObjectDescription>
          <MPPS UID="1.2.840.10008.1.2.3.4.5"/>
          <Accession Number="12341234" />
          <SOPClass UID="1.2.840.10008.5.1.4.1.1.2" NumberOfInstances="1500"/>
          <SOPClass UID="1.2.840.10008.5.1.4.1.1.11.1" NumberOfInstances="3"/>
        </ParticipantObjectDescription>
      </ParticipantObjectIdentification>

      <ParticipantObjectIdentification
          ParticipantObjectID="ptid12345"
          ParticipantObjectTypeCode="1"
    		  ParticipantObjectTypeCodeRole="1">
        <ParticipantObjectIDTypeCode code="2"/>
        <ParticipantObjectName>John Doe</ParticipantObjectName>
      </ParticipantObjectIdentification>
    </AuditMessage>

The message describes a study transfer initiated at the request of Dr. Smith on the system at the IP address 192.168.1.2 to a system at IP address 192.168.1.5. The study contains 1500 CT SOP Instances and 3 GSPS SOP Instances. The audit report came from the audit source "ReadingRoom".

Prev |  | Next
VV.3 Measurement Terminology Composition | Home | WW.2 Workflow Example