7.1.5.1.1.13. User Authentication

7.1.5.1.1.13.1. Trigger Events

This message is sent if the archive is secured with Keycloak. The trigger events for this message are : - Login - Login Error - Logout - Logout Error

7.1.5.1.1.13.2. Message Structure

Table 7.76 Entities in User Authentication Audit Message

Event Identification

Active Participant: Source

Active Participant: Archive application

Audit Source

Table 7.77 Event Identification

Field Name	Opt	Description
EventID	M	EV (110114, DCM, ‘User Authentication’)
EventActionCode	M	Execute ⇒ ‘E’
EventDateTime	M	The time at which the event occurred
EventOutcomeIndicator	M	Success ⇒ ‘0’ Minor failure ⇒ ‘4’
EventOutcomeDescription	M	Error/Exception message when EventOutcomeIndicator ⇒ ‘4’
EventTypeCode	M	Login or Login error cases ⇒ EV (110122, DCM, ‘Login’) Logout or Logout error cases ⇒ EV (110123, DCM, ‘Logout’)

Table 7.78 Active Participant: Source

Field Name	Opt	Description
UserID	M	User name of logged in user
UserIDTypeCode	U	EV (113871, DCM, ‘Person ID’)
UserTypeCode	U	Person ⇒ ‘1’
UserIsRequestor	M	true
NetworkAccessPointID	U	IP address of calling user
NetworkAccessPointTypeCode	U	2

Table 7.79 Active Participant: Archive application

Field Name	Opt	Description
UserID	M	Device name of the archive device
UserIDTypeCode	U	EV (113877, DCM, ‘Device Name’)
UserTypeCode	U	Application ⇒ ‘2’
AlternativeUserID	MC	Process ID of Audit logger
UserIsRequestor	M	false
NetworkAccessPointID	U	Hostname/IP Address of the connection referenced by Audit logger
NetworkAccessPointTypeCode	U	NetworkAccessPointID is host name ⇒ ‘1’ NetworkAccessPointID is an IP address ⇒ ‘2’

7.1.5.1.1.13.3. Sample Message

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<AuditMessage xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://www.dcm4che.org/DICOM/audit-message.rnc">

    <EventIdentification EventActionCode="E" EventDateTime="2017-01-26T17:28:59.553+01:00" EventOutcomeIndicator="0">
        <EventID csd-code="110122" codeSystemName="DCM" originalText="Login"/>
    </EventIdentification>

    <ActiveParticipant UserID="admin" UserTypeCode="1" UserIsRequestor="true" NetworkAccessPointID="127.0.0.1" NetworkAccessPointTypeCode="2">
        <UserIDTypeCode csd-code="113871" codeSystemName="DCM" originalText="Person ID"/>
    </ActiveParticipant>

    <ActiveParticipant UserID="dcm4chee-arc" UserTypeCode="2" AlternativeUserID="3390" UserIsRequestor="false" NetworkAccessPointID="localhost" NetworkAccessPointTypeCode="1">
        <UserIDTypeCode csd-code="113877" codeSystemName="DCM" originalText="Device Name"/>
    </ActiveParticipant>

    <AuditSourceIdentification AuditSourceID="dcm4chee-arc">
        <AuditSourceTypeCode csd-code="4"/>
    </AuditSourceIdentification>

</AuditMessage>