WW Audit Messages (Informative) (Current)
Prev		Next

WW Audit Messages (Informative)

This annex holds examples of audit messaging, as described by the Audit Trail Message Format Secure Use Profile in PS3.15.

WW.1 Message Example

An example of one of the DICOM Instances Transferred messages is shown in Example WW.1-1.

Example WW.1-1. Sample Audit Event Report

<?xml version="1.0" encoding="UTF-8"?>
<AuditMessage
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
	  xsi:noNamespaceSchemaLocation="D:\data\DICOM\security\audit-message.rnc">
  <EventIdentification
      EventActionCode="C"
      EventDateTime="2001-12-17T09:30:47"
      EventOutcomeIndicator="0">
    <EventID code="110104"
      codeSystemName="DCM"
      displayName="DICOM Instances Transferred"/>
  </EventIdentification>
  
  <ActiveParticipant
      UserID="123"
      AlternativeUserID="AETITLE=AEFOO"
      UserIsRequestor="false" 
		  NetworkAccessPointID="192.168.1.2"
		  NetworkAccessPointTypeCode="2">
    <RoleIDCode
        code="110153"
        codeSystemName="DCM"
        displayName="Source Role ID"/>
  </ActiveParticipant>
  
  <ActiveParticipant
      UserID="67562"
      AlternativeUserID="AETITLE=AEPACS"
      UserIsRequestor="false" 
		  NetworkAccessPointID="192.168.1.5"
		  NetworkAccessPointTypeCode="2">
    <RoleIDCode
        code="110152"
        codeSystemName="DCM"
        displayName="Destination Role ID"/>
  </ActiveParticipant>
  
  <ActiveParticipant
      UserID="smitty@readingroom.hospital.org"
		  AlternativeUserID="smith@nema"
		  UserName="Dr. Smith" 
		  UserIsRequestor="true"
		  NetworkAccessPointID="192.168.1.2"
		  NetworkAccessPointTypeCode="2">
    <RoleIDCode
        code="110153"
        codeSystemName="DCM"
        displayName="Source Role ID"/>
  </ActiveParticipant>
  
  <AuditSourceIdentification
      AuditEnterpriseSiteID="Hospital"
      AuditSourceID="ReadingRoom">
    <AuditSourceTypeCode code="1"/>
  </AuditSourceIdentification>
  
  <ParticipantObjectIdentification
      ParticipantObjectID="1.2.840.10008.2.3.4.5.6.7.78.8" 
			ParticipantObjectTypeCode="2"
			ParticipantObjectTypeCodeRole="3" 
			ParticipantObjectDataLifeCycle="1">
    <ParticipantObjectIDTypeCode
        code="110180"
        codeSystemName="DCM"
        displayName="Study Instance UID"/>
    <ParticipantObjectDescription>
      <MPPS UID="1.2.840.10008.1.2.3.4.5"/>
      <Accession Number="12341234" />
      <SOPClass UID="1.2.840.10008.5.1.4.1.1.2" NumberOfInstances="1500"/>
      <SOPClass UID="1.2.840.10008.5.1.4.1.1.11.1" NumberOfInstances="3"/>
    </ParticipantObjectDescription>
  </ParticipantObjectIdentification>
  
  <ParticipantObjectIdentification
      ParticipantObjectID="ptid12345"
      ParticipantObjectTypeCode="1"
		  ParticipantObjectTypeCodeRole="1">
    <ParticipantObjectIDTypeCode code="2"/>
    <ParticipantObjectName>John Doe</ParticipantObjectName>
  </ParticipantObjectIdentification>
</AuditMessage>

The message describes a study transfer initiated at the request of Dr. Smith on the system at the IP address 192.168.1.2 to a system at IP address 192.168.1.5. The study contains 1500 CT SOP Instances and 3 GSPS SOP Instances. The audit report came from the audit source "ReadingRoom".

Prev		Next
VV.3 Measurement Terminology Composition	Home	WW.2 Workflow Example