DICOM Tables


DIGITAL SIGNATURES MACRO ATTRIBUTES

Tag
Tag Name
Requirement
Description
(4FFE,0001) MAC Parameters Sequence
3
A sequence of one or more items that describe the parameters used to calculate a MAC for use in Digital Signatures.
(0400,0005) >MAC ID Number
1
A number used to identify this MAC Parameters Sequence item.
(0400,0010) >MAC Calculation Transfer Syntax UID
1
The Transfer Syntax UID used to encode the values of the Data Elements included in the MAC calculation. Only Transfer Syntaxes that explicitly include the VR and use Little Endian encoding shall be used. Notes: Certain Transfer Syntaxes, particularly those that are used with compressed data, allow the fragmentation of the pixel data to change. If such fragmentation changes, Digital Signatures generated with such Transfer Syntaxes could become invalid.
(0400,0015) >MAC Algorithm
1
The algorithm used in generating the MAC to be encrypted to form the Digital Signature. Defined Terms: RIPEMD160 MD5 SHA1 . Note: Digital Signature Security Profiles (see PS 3.15) may require the use of a restricted subset of these terms.
(0400,0020) >Data Elements Signed
1
A list of Data Element Tags in the order they appear in the Data Set which identify the Data Elements used in creating the MAC for the Digital Signature. See Section C.12.1.1.3.1.1.
(FFFA,FFFA) Digital Signatures Sequence
3
Sequence holding one or more Digital Signatures.
(0400,0005) >MAC ID Number
1
A number used to identify which MAC Parameters Sequence item was used in the calculation of this Digital Signature.
(0400,0100) >Digital Signature UID
1
A UID that can be used to uniquely reference this signature.
(0400,0105) >Digital Signature DateTime
1
The date and time the Digital Signature was created. The time shall include an offset (i.e., time zone indication) from Coordinated Universal Time. Note: This is not a certified timestamp, and hence is not completely verifiable. An application can compare this date and time with those of other signatures and the validity date of the certificate to gain confidence in the veracity of this date and time.
(0400,0110) >Certificate Type
1
The type of certificate used in (0400,0115). Defined Term: X509_1993_SIG Note: Digital Signature Security Profiles (see PS 3.15) may require the use of a restricted subset of these terms.
(0400,0115) >Certificate of Signer
1
A certificate that holds the identity of the entity producing this Digital Signature, that entity’s public key or key identifier, and the algorithm and associated parameters with which that public key is to be used. Algorithms allowed are specified in Digital Signature Security Profiles (see PS 3.15). Notes: 1. As technology advances, additional encryption algorithms may be allowed in future versions. Implementations should take this possibility into account. 2. When symmetric encryption is used, the certificate merely identifies which key was used by which entity, but not the actual key itself. Some other means (e.g., a trusted third party) must be used to obtain the key.
(0400,0120) >Signature
1
The MAC generated as described in Section 12.2.1.1 and encrypted using the algorithm, parameters, and private key associated with the Certificate of the Signer (0400,0115). See Section C.12.1.1.3.1.2.
(0400,0305) >Certified Timestamp Type
1C
The type of certified timestamp used in the Certified Timestamp (0400,0310) Attribute. Required if Certified Timestamp (0400,0310) is present. Defined Terms: CMS_TSP – Internet X.509 Public Key Infrastructure Time Stamp Protocol Note: Digital Signature Security Profiles (see PS 3.15) may require the use of a restricted subset of these terms.
(0400,0310) >Certified Timestamp
3
A certified timestamp of the Digital Signature (0400,0120) Attribute Value, which shall be obtained when the Digital Signature is created. See Section C.12.1.1.3.1.3.