Submit Public Comments on DICOM Supplement 230

Submit Public Comments on DICOM Supplement 230: Update BCP Secure Communications Profiles

This Supplement adds two new Secure Transport Connection Profiles and retires several others.
The IETF recently updated the Best Current Practice document called BCP-195. The new document no longer allows downgrading to TLS 1.0 or 1.1, which necessitates DICOM retiring Secure Transport Connection Profiles that are based on those protocols. The new version of BCP-195 is more in line with DICOM’s B.10 Non-Downgrading BCP 195 Secure Transport Connection Profile.

In addition, the Japanese government has modified their guidelines for “high-security type” devices, hence the old Extended BCP 195 profile (B.11) is also now out of date, needs to be retired, and a new profile created that reflects the new revisions.

All comments should be submitted as soon as possible but NO LATER than 11:59pm US EDT on Friday, September 2, 2022.

 Who can comment? All interested persons are invited to comment. Recipients of this solicitation should feel free to forward it to anyone who may be interested in this topic. There is no cost or obligation associated with commenting and DICOM membership is not required to comment. Commenters are requested to include their contact information.

 What will happen to your comments? DICOM Working Group 6 (Base Standard) and DICOM Working Group 14 (Security) will review the comments and discuss their resolution. WG-06 is authorized by the DICOM Standard Committee to decide on the technical merits of the comments.

 Instructions for accessing the documents and submitting comments:

1. Download documents from the website (www.dicomstandard.org/comment)
-- or --
FTP server (ftp://medical.nema.org/MEDICAL/Dicom/Supps/PC/) under the file names:
 PDF DOCUMENT - sup230_pc.pdf
 WORD DOCUMENT - sup230_pc.docx
 PPT OVERVIEW - sup230_pc.pptx
(To facilitate the readers’ understanding of this new proposed addition to the DICOM Standard, the authors prepared a PowerPoint presentation which describes the technical issues and use cases.)

2. Submit comment(s): Send your comments to Shayna Knazik (Cette adresse courriel est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.) via free text or Word Document. Be sure to include the following information:
 Commenter’s name, affiliation, e-mail address.
 Comment – may be a higher-level statement or a detailed technical comment with tables, illustrations, cut-and-paste from the draft, etc.
 Proposed solution – may be a higher-level statement or a marked-up version or new text, tables, illustrations, etc.
 Line numbers associated with your comment(s).