7.2. Association Level Security

dcm4che DICOM Archive 5 checks that the Association requestor specifies the correct Called AE Title. Each AE can be configured to accept Association Requests from only a limited list of Calling AE Titles. In addition the IP address of the requestor can be checked. Each AE can be configured to accepted only a limited list of Move Destinations in C-MOVE requests.

Each AE can be configured to associate a particular Access Control ID to received Studies - optionally also dependend on the Sending AE Title or on any DICOM Attribute of the first received object of the Study. Each AE can also be configured to hide Studies from access by Query/Retrieve services which associated Access Control ID does not match with a list of Access Control IDs associated with that AE.

Each AE can be configured to hide objects rejected by IHE IOCM Rejection Notes from access by Query/Retrieve services dependend on the Key Object Selection Document Title of the Rejection Note.

dcm4che DICOM Archive 5 can be configured to check the Receiving Application and Facility in received HL7 v2 messages. Each HL7 Application provided by dcm4che DICOM Archive 5 can be configured to accept HL7 v2 messages from only a limited list of Sending Application and Facility names.