PHILIPS Ultrasound Workspace 6.0 Owner’s Manual
- September 10, 2024
- Philips
Table of Contents
Ultrasound Workspace 6.0
Specifications
Product: Philips Ultrasound Workspace 6.0
Model Number: 300014005871_A/ * JUN 2024
Product Information
Introduction
The Ultrasound Workspace (UWS) is a software platform designed
for processing and analyzing ultrasound data. This document
outlines the supported data formats, hardware, and software
requirements for the UWS.
Data Compatibility
The UWS supports various data formats and modalities for cardiac
imaging, including 2D and 3D data. It is important to ensure
compatibility with supported probes and acquisition protocols for
optimal performance.
Cardiac Imaging Constraints
-
Minimal frame rate: 10 fps
-
Minimal number of frames per cardiac cycle: 10
frames/cycle -
Minimal number of frames per clip: 3 frames/clip
-
Supported stages for stress studies: Varies (refer to
StageNumber tag) -
Modality for detection of stress echo studies: AutoStrain
LV/SAX/RV/LA
Product Usage Instructions
Data Compatibility
The UWS supports different modalities and formats for 2D and 3D
data. Ensure that the acquired data matches the supported formats
and transducers listed in the user manual for accurate
processing.
Cardiac Imaging Constraints
When performing cardiac imaging using the UWS, adhere to the
specified constraints such as frame rates, number of frames per
cycle, and stages for stress studies to achieve optimal results.
Make sure to have the necessary 3D license if required.
FAQ
What should I do if my ultrasound machine’s modality is not
listed in the supported probes?
If your ultrasound machine’s modality is not listed in the
supported probes, contact your modality provider for guidance on
special configurations or compatibility issues with the Ultrasound
Workspace.
Technical Specification English
Ultrasound Workspace 6.0
300014005871_A/ * JUN 2024
Contents
Contents
1 Introduction ………………………………………………………………………………………………………………………….. 5
2 Data Compatibility………………………………………………………………………………………………………………….. 5 Cardiac
Imaging……………………………………………………………………………………………………………………………… 5 Radiology
Imaging………………………………………………………………………………………………………………………….. 8 Image Visualization
………………………………………………………………………………………………………………………… 9
3 Single Seat Installation ……………………………………………………………………………………………………………. 9 Single
Seat Workstation Requirements …………………………………………………………………………………………….. 9
Operating System…………………………………………………………………………………………………………………………… 9 Hardware
……………………………………………………………………………………………………………………………………… 9 Disk Space
…………………………………………………………………………………………………………………………………… 10 MSSQL Database
………………………………………………………………………………………………………………………….. 10 Configuration
………………………………………………………………………………………………………………………………. 12 Backup Strategy
…………………………………………………………………………………………………………………………… 13
4 Server Client Installation…………………………………………………………………………………………………………. 13
Client Workstation Requirements…………………………………………………………………………………………………… 14
Operating System …………………………………………………………………………………………………………….. 14 Hardware
………………………………………………………………………………………………………………………… 14 Disk Space
……………………………………………………………………………………………………………………….. 14 Configuration
…………………………………………………………………………………………………………………… 15 Web Client Requirements
……………………………………………………………………………………………………………… 15 Officially Supported Browser
……………………………………………………………………………………………… 15 Server Requirements
……………………………………………………………………………………………………………………. 16 Operating System
…………………………………………………………………………………………………………….. 16 MSSQL
Database………………………………………………………………………………………………………………. 16 Hardware (physical or
virtual) ……………………………………………………………………………………………. 17 Disk Space
……………………………………………………………………………………………………………………….. 18 Configuration
…………………………………………………………………………………………………………………… 18 Backup Strategy
……………………………………………………………………………………………………………….. 19
5 License Server……………………………………………………………………………………………………………………….. 20 Operating
System…………………………………………………………………………………………………………………………. 20 Configuration
………………………………………………………………………………………………………………………………. 20
6 System Scaling………………………………………………………………………………………………………………………. 20
7 System Virtualization……………………………………………………………………………………………………………… 20
8 File Access and Virus Scanner ………………………………………………………………………………………………….. 21
Philips
Ultrasound Workspace 6.0
3
Contents
9 Security Considerations ………………………………………………………………………………………………………….. 21 User
Authentication ……………………………………………………………………………………………………………………… 22 Operating
System…………………………………………………………………………………………………………………………. 22 Network
Security………………………………………………………………………………………………………………………….. 22 Network Encryption
……………………………………………………………………………………………………………………… 22 Firewalls
……………………………………………………………………………………………………………………………………… 23 Remote
Administration…………………………………………………………………………………………………………………. 23 Malware
Prevention and Detection………………………………………………………………………………………………… 23 Operational
Security …………………………………………………………………………………………………………………….. 23 Physical Security
and Limited Access to Systems………………………………………………………………………………. 24 Protecting
Personal Information…………………………………………………………………………………………………….. 24 Protecting
Personal Health Information ………………………………………………………………………………………….. 25 About the
EU Directives ………………………………………………………………………………………………………………… 25 About HIPAA Rules
……………………………………………………………………………………………………………………….. 26 Further Security
Information …………………………………………………………………………………………………………. 26
300014005871_A/ * JUN 2024
Philips
4
Ultrasound Workspace 6.0
300014005871_A/ * JUN 2024
Introduction
1 Introduction
This document describes the supported data formats and the standard hardware
and software requirements for Ultrasound Workspace (UWS).
2 Data Compatibility
The following symbols are used in the tables to indicate support or
compatibility.
Symbol
Meaning
Supported or compatible
Not supported or compatible
Cardiac Imaging
Constraints
4D LVANALYSIS 3D Auto RV 3D Auto CFQ 3D Auto TV
3D Auto MV
Minimal frame 10
rate (fps)
Minimal number 10
of frames per
cardiac cycle
(frames/cycle)
Minimal number
3
of frames per clip
(frames/clip)
Minimal number
of Stages for
stress studies
(different values in StageNumber tag)
Modality for
detection of
stress echo
studies
4D CARDIO VIEW
AutoStrain LV/ SAX/RV/LA 2D Auto LV
IMAGECOM
2
2
US
Philips
Ultrasound Workspace 6.0
5
300014005871_A/ * JUN 2024
Data Compatibility
2D Data
Modality (2) DICOM 2D US
Acquisition Protocol BMode
DICOM 2D US MMode, Doppler
AutoStrain LV/ SAX/RV/LA
2D Auto LV
IMAGECOM
(6)
(6, 7)
DICOM 2D US Stress Echo
DICOM 2D XA, NM
(6)
(6, 7)
3D Data
Modality (2) Format and Transducers
GE Vivid7 3D,
Supported probes 3V-D, 4V-D, 4Vc-D, 6VT-D, 6Vc-D
GE E9 3D and GE E95 3D
using raw un-compressed tissue
Tissue only (no color Doppler)
SW Version (v110-v113) (v201-v204) (v206)
4D LV ANALYSIS 3D Auto RV 3D Auto TV
3D Auto MV
Philips 3D X8-2t
(3)
(4)
X7-2t X3-1 X5-1 X7-2 X5-1c X11-4t
VeriSight Pro ICE
(3)
(4)
4D CARDIO VIEW
3D Auto CFQ
(4)
(8)
(4)
(4)
IMAGE COM
(1)
(1, 4) (1, 4)
(1, 4)
Philips
6
Ultrasound Workspace 6.0
Data Compatibility
Modality (2)
Acquisition Protocol
Format
4D LV ANALYSIS 3D Auto RV 3D Auto TV
Toshiba
Full Volume Rev 2 and 3
(3, 5)
ARTIDA 3D
Toshiba ARTIDA 3D
Single Volume Rev 2 and 3
CANON 3D
Tissue only (no color Doppler)
HAM Cardiac Normal and
F75 3D
Cycle Scan
Tissue only (no color Doppler)
Siemens
SC2000 TTE / TEE 3D
4D real time
Tissue only (no color Doppler)
3D Auto MV 4D CARDIOVIEW
3D Auto CFQ IMAGECOM
(3, 5)
(1)
(1) (1) (1)
Footnotes for Cardiac Imaging:
1. Requires a separate 3D license.
2. Contact your modality provider regarding special configurations of your
ultrasound machine.
3. Supports tissue data only.
4. Supports tissue and color (Doppler, power etc.) data.
5. Datasets containing multiple cardiac cycle data are automatically cropped
to one cardiac cycle. For the analysis of Toshiba ARTIDA 3D datasets, only the
last cardiac cycle of a multiple cardiac cycle dataset is used. For all other
datasets, the first cardiac cycle is used.
6. Support for Philips native single plane 2D data.
7. Segmental Wall Motion requires that the images were taken with supported
transducers (X5-1, X5-1c, S5-1), have standard orientations, are not
pediatric, and that all three apical views are available. If any of these
conditions are not met for images, the corresponding workflow step is grayed
out.
8. Supports color data only.
300014005871_A/ * JUN 2024
Philips
Ultrasound Workspace 6.0
7
Data Compatibility
Radiology Imaging
Modality DICOM multi-frame (handheld) Zonare (Z.ONE)
General Electric (Voluson, Logiq)
Philips
Alpinion (E-Cube)
Siemens ABVS
Acquisition Protocol Format
4D SONO-SCAN IMAGE-COM
Manually acquired 2D multi-frame DICOM (*.dcm or
2D multi-frame clips without extension).
(3)
(1)
Specific Format(2): DicomUS
Wobbler probe
DICOM encapsulated Zonare’s
(3)
(1)
acquisition
proprietary 3D/4D volume data.
Acquisition modes: 3D/4D static & realtime
Specific Format(2): ZONARE_DATA
Wobbler or Matrix DICOM encapsulated GE’s
(4)
(1)
probe acquisition proprietary (.V00 or .vol) 3D/4D
Acquisition modes: volume data
4D, Tru3D, Advanced Specific Format(2):
3D and Easy 3D mode GE_Kretzfile_Wobbler
Matrix probe acquisition
Acquisition modes: 3D, 4D
Philips 3D
(3)
(1)
Acquisition mode: 4D DICOM encapsulated Philips’
(3)
(1)
proprietary 3D/4D volume data.
Specific Format(2): ALPINION_VOLUME
Mechanically
2D multi-frame DICOM data
(3)
(1)
acquired 3D data (it is (*.dcm or without extension)
actually spatially
that includes the frame distance.
calibrated 2D multi- Specific Format(2): DicomUS frame data) with a
Siemens ABVS device.
Footnotes for Ultrasound in Radiology: 1. Requires a separate 3D license. 2. As displayed in the DICOM properties dialog of IMAGE-COM. 3. Supports tissue data only. 4. Supports tissue and color (Doppler, power etc.) data.
300014005871_A/ * JUN 2024
Philips
8
Ultrasound Workspace 6.0
Single Seat Installation
Image Visualization
Image Visualization on Client Workstations and Standalone Workstations · No
image compression algorithms are used for image visualization.
3 Single Seat Installation
Single Seat Workstation Requirements
This specification is intended to describe the standard hardware and software
requirements for application installed and used on a singular workstation.
Operating System
Name
Architecture
Windows 10
x64
Windows 11
x64
For more information, see: https://support.microsoft.com/en- us/lifecycle/search
Hardware
Hardware
Minimum
Recommended
CPU
Intel Core i-Series 6th generation or higher Intel Core i-Series 10th generation or higher
min. 2.2 GHz Base Clock, Dual Core
Memory
16 GB or higher
16 GB or higher
Graphics Card
DirectX 9.0c compatible (1)
DirectX 9.0c compatible (1) Dedicated graphics card recommended
Screen Resolution 1280×1024 or higher
1920×1080
Pointing Device
Mouse with wheel or equivalent input device
Network
100 Mbit/s or higher
1 Gbit/s or higher
1. DirectX 9.0c feature set is included in higher versions, like DirectX 10, 11, and 12. Intel iSeries CPUs with integrated GPUs are compatible.
300014005871_A/ * JUN 2024
Philips
Ultrasound Workspace 6.0
9
Single Seat Installation
Disk Space
The following table is an example of disk space partitioning based on standard
values and use cases. This recommendation may vary depending on the
infrastructure used and the setup scenario.
Partition 1
Operating System
Size 100 GB (SSD recommended)
2
UWS-Application
100 GB (SSD recommended)
3
UWS-Database + UWS-Archive
minimum 500 GB(1) (SSD recommended)
1. Depending on study throughput
NOTE
In case of PACS Archiving, the size of the file archive should be configured
depending on the required time spread, where the data shall be accessible from
the Online Cache. Older data will be retrieved from the PACS.
In case of Mass Storage Archiving, the size of the archive depends on the
required online availability of the data.
A rough guideline for the size of the UWS-Archive can be estimated in both
cases by the following formula:
Minimum size of UWS-Archive [GB] (assumed 25 days of acquiring data/month) = A
- T * 25
A = Average Amount of data per day [GB], Input
T = Time spread of availability in Online Cache/Mass Storage Archive [Month]
MSSQL Database
Ultrasound Workspace (6.0 or higher) is delivered with the PostgreSQL database. Existing installations can continue to use MSSQL as a database. The following SQL Server versions are compatible with Ultrasound Workspace and can be used as an alternative to the delivered PostgreSQL database.
Name
Release
End of Support Mainstream (1) End of Support Extended (1)
SQL Server 2016
2016-01
2021-07
2026-07
SQL Server 2019
2019-11
2025-01
2030-01
1. For more information, see: https://support.microsoft.com/en- us/lifecycle/search
300014005871_A/ * JUN 2024
Philips
10
Ultrasound Workspace 6.0
Single Seat Installation
NOTE · The MSSQL database is not part of the product and must be provided and
maintained by
the customer. · Only case insensitive collations are allowed (preferably
Latin1_General_CI_AS). · Ultrasound Workspace uses the TCP/IP protocol to
connect to the SQL Server on the
default port 1433.
More information can be found in the official documentation:
https://docs.microsoft.com/en-us/sql/sql-server/install/hardware-and-software-
requirementsfor-installing-sql-server-ver15?view=sql-server-ver15
CAUTION We urge you to keep your Microsoft SQL version up to date by
installing the latest patches after the setup on a regular level, to receive
the latest fixes for known vulnerabilities. Retaining an outdated version with
known vulnerabilities puts your system at risk of an attack.
CAUTION We recommend configuring TLS encryption for your SQL server and
adjusting the JDBC URL in tomtec.properties accordingly to secure the
communication with the database and to prevent the disclosure of private data.
For examples and more information on how to setup TLS encryption, see: ·
https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/enable-
encrypted-connections-to-the-database-engine?view=sql-server-ver15 for
configuring your SQL server, and · https://docs.microsoft.com/en-
us/sql/connect/jdbc/connecting-with-ssl-encryption? view=sql-server-ver15 for
configuring the JDBC URL
300014005871_A/ * JUN 2024
Philips
Ultrasound Workspace 6.0
11
Single Seat Installation
TLS versions 1.0 and 1.1 are outdated and do not comply with current cybersecurity standards. Therefore, TLS versions 1.0 and 1.1 must not be used for Ultrasound Workspace.
Configuration
Server
Virus Scanner
The virus scanner has to be disabled for all directories used by Ultrasound
Workspace server for the exchange of DICOM data files (e.g. temporary folder
of DICOM service and folder of working archive, etc.).
For more information, see chapter “File Access and Virus Scanner” on page 21.
Ultrasound Workspace service
Ultrasound Workspace must have sufficient NTFS permissions for the folder that
will contain the UWS-Archives:
· List folder / read data · Read attributes · Read extended attributes ·
Create files / write data · Create folders / append data · Write attributes ·
Write extended attributes · Delete subfolders and files · Delete For a local
based file archive the easiest way to grant these permissions is to set the
user which is used to run the Ultrasound Workspace … (UWS) service to have
“Full access” to the archives folder. This can be done via the “Security” tab
of the folder properties. For remote drives, contact the administrator of the
remote server to configure the required permissions.
_JAVA_OPTIONS
The environment variable _JAVA_OPTIONS shall not be set as it will influence
the JVM used by Ultrasound Workspace.
Especially setting maximum heap size below Xmx4g will lead to startup failure
of the Ultrasound Workspace.
PostgreSQL Database For cyber security reasons, we strongly advise against letting the PostgreSQL database listen on an adapter other than the loopback.
300014005871_A/ * JUN 2024
Philips
12
Ultrasound Workspace 6.0
300014005871_A/ * JUN 2024
Server Client Installation
Server
Minimum Security Requirements
For minimum security requirements you must use a firewall appliance to limit,
control or eliminate unwanted access to your local network.
Furthermore, security safeguards to protect the system against the intrusion
of malware (viruses, Trojans, worms) must be in place and must be updated on a
regular level.
In general, access to the software client(s) must be restricted to authorized
users only.
For further security recommendations and more details refer to chapter
“Security Considerations” on page 21.
Client
Page File
The page file of the operating system must remain enabled. It is recommended to keep the default settings in the system properties. / Performance options / Virtual memory / : “Automatically manage paging file size for all drives”
Computer Name
The name of the computer shall not exceed 15 characters.
For more information, see: https://technet.microsoft.com/en-
us/library/cc731383.aspx https://technet.microsoft.com/en-
us/library/cc726016(v=ws.10).aspx
PDF Viewer
Adobe Acrobat Reader compatible with the installed operating system must be used.
Media Feature Pack For Windows 10 N versions a separate installation of the Media Feature Pack is required.
WebView2
Microsoft Edge WebView2 Runtime version 119 or higher is required.
Screen Scaling
Recommended system scaling factor should be configured.
Monitor
We strongly recommend an aspect ratio of 4:3 or 16:9. The application runs in full screen mode. It is not possible to change the size of the window. Therefore, two monitors are required to display the image review and reporting side by side. Tools that allow the virtual desktop to be split are not supported.
Energy Settings
The energy saving mode must be set to “Balanced”. The device must always be connected to a power source and have the highest power settings.
Backup Strategy
A backup strategy needs to be set up for every installation individually. To
restore the system completely it is recommended to back up the database, the
complete file archive and all configuration files.
4 Server Client Installation
Server client installations are for multi-seat configurations which supports
multiple clients at the same time.
Philips
Ultrasound Workspace 6.0
13
Server Client Installation
Client Workstation Requirements
This chapter describes the standard hardware and software requirements for all
scenarios where the client application is installed on a workstation system
with an external database such as an Ultrasound Workspace server or third-
party integrations.
Operating System
Name
Architecture
Windows 10
x64
Windows 11
x64
For more information, see: https://support.microsoft.com/en- us/lifecycle/search
Hardware
Hardware
Minimum
Recommended
CPU
Intel Core i-Series 6th generation or higher Intel Core i-Series 10th generation or higher
min. 2.3 GHz Base Clock, Dual Core
Memory
8 GB or higher(1)
16 GB or higher
Graphics Card
DirectX 9.0c compatible (2)
DirectX 9.0c compatible (2) Dedicated graphics card recommended
Screen Resolution 1280×1024 or higher
1920×1080
Pointing Device
Mouse with wheel or equivalent input device
Network
100 Mbit/s or higher(1)
1 Gbit/s or higher
1. For large image volumes, high frame rate studies, or uncompressed data, we
recommend using the recommended setting for optimal system performance.
2. DirectX 9.0c feature set is included in higher versions, like DirectX 10,
11, and 12. Intel iSeries CPUs with integrated GPUs are compatible.
Disk Space
Software Client Software
Size 4 GB (SSD recommended)
300014005871_A/ * JUN 2024
Philips
14
Ultrasound Workspace 6.0
300014005871_A/ * JUN 2024
Server Client Installation
Configuration
Client
Page File
The page file of the operating system must remain enabled. It is recommended to keep the default settings in the system properties. / Performance options / Virtual memory / : “Automatically manage paging file size for all drives”
Computer Name
The name of the computer shall not exceed 15 characters.
For more information, see: https://technet.microsoft.com/en-
us/library/cc731383.aspx https://technet.microsoft.com/en-
us/library/cc726016(v=ws.10).aspx
PDF Viewer
Adobe Acrobat Reader compatible with the installed operating system must be used.
Media Feature Pack For Windows 10 N versions a separate installation of the Media Feature Pack is required.
WebView2
Microsoft Edge WebView2 Runtime version 119 or higher is required.
Screen Scaling
Recommended system scaling factor should be configured.
_JAVA_OPTIONS
The environment variable _JAVA_OPTIONS shall not be set as it will influence
the JVM used by Ultrasound Workspace.
Especially setting maximum heap size below Xmx4g will lead to startup failure
of the Ultrasound Workspace.
Minimum Security Requirements
For minimum security requirements you must use a firewall appliance to limit,
control or eliminate unwanted access to your local network.
Furthermore, security safeguards to protect the system against the intrusion
of malware (viruses, Trojans, worms) must be in place and must be updated on a
regular level.
In general, access to the software client(s) must be restricted to authorized
users only.
For further security recommendations and more details refer to chapter
“Security Considerations” on page 21.
NOTE
The user manuals are provided as PDF files. If you do not have a PDF reader
application installed, you can download Adobe Reader from the following
website: www.adobe.com
Web Client Requirements
Officially Supported Browser
Windows Based Browser Google Chrome / Edge Chromium
Architecture x86, x64
Supported Build >=104
Philips
Ultrasound Workspace 6.0
15
Server Client Installation
NOTE For security reasons we recommend that you always use the latest version of the browser.
Server Requirements
This chapter describes the standard physical and virtual hardware and software
requirements for server applications installed in a network server and client
infrastructure based on a standard clinical use case. For further scaling
considerations, refer to chapter “System Scaling” on page 20.
Operating System
Name
Architecture Release End of Support Mainstream End of Support Extended (1)
(1)
Windows Server 2016
x64
2016-09 2022-01
2027-01
Windows Server 2019
x64
2018-11 2024-01
2029-01
1. For more information, see: https://support.microsoft.com/en- us/lifecycle/search
NOTE The language of the operating system installed on the server must be English.
MSSQL Database
Ultrasound Workspace (6.0 or higher) is delivered with the PostgreSQL
database. Existing installations can continue to use MSSQL as a database. The
following SQL Server versions are compatible with Ultrasound Workspace and can
be used as an alternative to the delivered PostgreSQL database.
Name
Release
End of Support Mainstream (1) End of Support Extended (1)
SQL Server 2016
2016-01
2021-07
2026-07
SQL Server 2019
2019-11
2025-01
2030-01
1. For more information, see: https://support.microsoft.com/en- us/lifecycle/search
300014005871_A/ * JUN 2024
Philips
16
Ultrasound Workspace 6.0
300014005871_A/ * JUN 2024
Server Client Installation
NOTE · The MSSQL database is not part of the product and must be provided and
maintained by
the customer. · Due to limitations the Express Edition of the MS SQL Server
cannot be used for Client
Server Installations. · Only case insensitive collations are allowed
(preferably Latin1_General_CI_AS). · Ultrasound Workspace uses the TCP/IP
protocol to connect to the SQL Server on the
default port 1433.
More information can be found in the official documentation:
https://docs.microsoft.com/en-us/sql/sql-server/install/hardware-and-software-
requirementsfor-installing-sql-server-ver15?view=sql-server-ver15
CAUTION We recommend configuring TLS encryption for your SQL server and
adjusting the JDBC URL in tomtec.properties accordingly to secure the
communication with the database and to prevent the disclosure of private data.
For examples and more information on how to setup TLS encryption, see: ·
https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/enable-
encrypted-connections-to-the-database-engine?view=sql-server-ver15 for
configuring your SQL server, and · https://docs.microsoft.com/en-
us/sql/connect/jdbc/connecting-with-ssl-encryption? view=sql-server-ver15 for
configuring the JDBC URL
TLS versions 1.0 and 1.1 are outdated and do not comply with current cyber
security standards. Therefore, TLS versions 1.0 and 1.1 must not be used for
Ultrasound Workspace.
Hardware (physical or virtual)
Hardware
Minimum
Recommended
CPU
Intel Core i-Series 6th generation or Intel CPU Intel Xeon E-series or higher
Xeon E-series (Skylake) or higher
8 Cores
2.2 GHz clock speed or higher
Memory
16 GB or higher
32 GB or higher
Graphics Card
DirectX 9.0c compatible (1, 2)
DirectX 9.0c compatible (1, 2)
Network
100 Mbit/s or higher(3)
1 Gbit/s or higher
1. Only required when client applications are used on the server, otherwise no specific GPU required.
Philips
Ultrasound Workspace 6.0
17
300014005871_A/ * JUN 2024
Server Client Installation
2. DirectX 9.0c feature set is included in higher versions of DirectX like
version 10 and above. Intel i-Series CPUs with integrated GPUs are compatible.
3. For large image volumes, high frame rate studies, or uncompressed data, we
recommend using the recommended setting for optimal system performance.
Disk Space
The following table is an example of disk space partitioning based on a
standard departmental use case where a server is used to store and manage
image data. This recommendation may vary depending on the archiving workflow,
infrastructure used, and setup scenario such as Measurement Mapping service or
license service only. Contact your representative for a recommendation
tailored to your needs.
Partition 1
Operating System
Size 100 GB (SSD recommended)
2
UWS-Application
100 GB (SSD recommended)
3
UWS-Database + UWS-Archive
minimum 500 GB(1) (SSD recommended)
1. Depending on study throughput
NOTE
In case of PACS Archiving, the size of the file archive should be configured
depending on the required time spread, where the data shall be accessible from
the Online Cache. Older data will be retrieved from the PACS.
In case of Mass Storage Archiving, the size of the archive depends on the
required online availability of the data.
A rough guideline for the size of the UWS-Archive can be estimated in both
cases by the following formula:
Minimum size of UWS-Archive [GB] (assumed 25 days of acquiring data/month) = A
- T * 25
A = Average Amount of data per day [GB], Input
T = Time spread of availability in Online Cache/Mass Storage Archive [Month]
Configuration
Server TCP/IP Ports
Virus Scanner
Port 80 and 51080 must be accessible from all client workstations. Ports 2100
and 50145 must be accessible for HL7/DICOM communication. Port 1433 is used to
connect to the SQL Server. Port 5432 is used to connect to the PostgreSQL
server (localhost only).
The virus scanner has to be disabled for all directories used by Ultrasound
Workspace server for the exchange of DICOM data files (e.g. temporary folder
of DICOM service and folder of working archive, etc.).
For more information, see chapter “File Access and Virus Scanner” on page 21.
Philips
18
Ultrasound Workspace 6.0
Server Client Installation
300014005871_A/ * JUN 2024
Server Ultrasound Workspace Service
_JAVA_OPTIONS Minimum Security Requirements
Ultrasound Workspace must have sufficient NTFS permissions for the folder that
will contain the UWS-Archives:
· List folder / read data · Read attributes · Read extended attributes ·
Create files / write data · Create folders / append data · Write attributes ·
Write extended attributes · Delete subfolders and files · Delete For a local
based file archive the easiest way to grant these permissions is to set the
user which is used to run the Ultrasound Workspace … (UWS) service to have
“Full access” to the archives folder. This can be done via the “Security” tab
of the folder properties. For remote drives, contact the administrator of the
remote server to configure the required permissions.
The environment variable _JAVA_OPTIONS shall not be set as it will influence
the JVM used by Ultrasound Workspace. Especially setting maximum heap size
below Xmx4g will lead to startup failure of the Ultrasound Workspace.
For minimum security requirements you must use a firewall appliance to limit,
control or eliminate unwanted access to your local network. Furthermore,
security safeguards to protect the system against the intrusion of malware
(viruses, Trojans, worms) must be in place and must be updated on a regular
level. In general, access to the software client(s) must be restricted to
authorized users only. For further security recommendations and more details
refer to chapter “Security Considerations” on page 21.
CAUTION
The software requires ports 80 and 51080 to be accessible from all client
workstations. Ports 2100 and 50145 must be accessible for HL7/DICOM
communication. Port 1433 is used to connect to the SQL Server. Port 5432 is
used to connect to the PostgreSQL server (localhost only). Otherwise, all idle
ports should be closed by your firewall to limit access to your system.
Backup Strategy
A backup strategy needs to be set up for every installation individually. To
restore the system completely it is recommended to back up the database, the
complete file archive and all configuration files.
Ultrasound Workspace 6.0
19
Philips
300014005871_A/ * JUN 2024
License Server
5 License Server
This chapter describes the standard software requirements for all scenarios in
which the license server is installed as a separate component for third-party
integrations.
Operating System
Name
Architecture Release End of Support Mainstream End of Support Extended (1)
(1)
Windows Server 2016
x64
2016-09 2022-01
2027-01
Windows Server 2019
X64
2018-11 2024-01
2029-01
1. For more information, see: https://support.microsoft.com/en- us/lifecycle/search
NOTE The language of the operating system installed on the server must be English.
Configuration
CAUTION The license server requires port 50002 to be accessible from all
client workstations. Otherwise, all idle ports should be closed by your
firewall to limit access to your system.
6 System Scaling
The system is designed to support departmental use cases and a workstation and
server client based scenario. In case you plan to use the system in a multi-
department multi-site scenario, additional system scaling considerations shall
be considered which are highly dependent on the user workflow and use case.
Contact your service representative for further information.
7 System Virtualization
The product supports server virtualization only. All clinical applications,
which display or render data, must run on physical hardware with a rendering
engine. In case image display and rendering will be used for maintenance
purposes on virtual servers, a 3D acceleration support and WebGL is required.
NOTE Virtualization of clients, e.g. clinical applications, is not supported.
Philips
20
Ultrasound Workspace 6.0
300014005871_A/ * JUN 2024
File Access and Virus Scanner
8 File Access and Virus Scanner
For performance reasons, the virus scanner shall be deactivated for all
directories used by Ultrasound Workspace server. On-access scan exclusions
shall be configured for the data archive directories used as well as for log
file and temp directories that are created after the installation of
Ultrasound Workspace.
Installations that are integrated into third-party systems use additional
configurable directories for the exchange of DICOM data. For performance
reasons, these directories should also be excluded from the on-access scan of
the virus scanner. For information about the on-access scan exclusions,
contact your service representative.
9 Security Considerations
CAUTION The product must only be used within a secured, private network
environment (e.g. only accessible from software clients inside of the network)
that meets the minimum security requirements as defined for the specific
setups within this document (see chapters “Single Seat Installation” on page 9
and “Server Client Installation” on page 13 respectively ). Using the product
otherwise is not secure and results in severe risk for disclosure of sensitive
data or the integrity of the system in general. Philips is not responsible for
any security incidents that may result from using the product beyond these
restrictions.
Security standards like user identification, password handling or automatic
timed session terminations are offered by this product. Further actions to
support cybersecurity (e.g. security updates, malware protection or network
communication protection) need to be taken by the local IT or
Security/Cybersecurity responsible at user site.
Protection can only be realized if you implement a comprehensive, multi-
layered strategy (including policies, processes, and technologies) to protect
information and systems from external and internal threats. Following industry
standard practice, your strategy should address physical security, operational
security, procedural security, risk management, security policies, and
contingency planning. The practical implementation of technical security
elements varies by site and may employ several technologies, including
firewalls, virus-scanning software, authentication technologies, etc. As with
any computer-based system, protection must be provided such that firewalls
and/or other security devices are in place between the medical system and any
externally accessible systems.
Following security and industry best practices, security strategies should
address:
· Physical security: e.g. locks, cameras, keycards, sensors, and so on, for
restricting unauthorized access.
· Operational security: e.g. access/authorization controls, change management,
network segmentation based on data classification, password protection of
BIOS, disabling booting from external drives like USB, disabling unused
ports/services.
Philips
Ultrasound Workspace 6.0
21
300014005871_A/ * JUN 2024
Security Considerations
· Procedural security: e.g. unattended workstation locking, no sharing of
access credentials, termination checklists, risk management (that is,
performing risk assessments and mitigating identified risks), and so on.
· Security policies: e.g. ensuring that the system service documentation and
media, CDs, and DVDs are securely stored; and that systems are in line with
your IT security policies.
· Training and awareness; · Contingency planning; When installing a new system
or upgrading an existing system, it is important to work with your IT
department to ensure that the proper security measures and policies are in
place.
User Authentication
Ensure that Ultrasound Workspace host PCs are configured for user
authentication and that the individuals using Ultrasound Workspace host PCs
have a user name and password. You can use this information to protect the
data in the folders and individual files. Use strong passwords for access to
Ultrasound Workspace host PCs and data.
Operating System
Ensure that the operating system and applications on Ultrasound Workspace host
PCs are kept current with patches, updates, and upgrades.
Network Security
If the Ultrasound Workspace host PC is connected to a local area network, the
network should be securely configured, providing protection against computer
viruses and other harmful code or traffic. Ensure that the local area network
uses appropriate protection, such as using only secure wireless technologies,
firewalls, intrusion-detection systems, and virus scanners.
Network Encryption
CAUTION To improve security the operator can insulate the product by adding a
proxy supporting encrypted communication (HTTPS).
NOTE Contact your service representative for further information.
Philips
22
Ultrasound Workspace 6.0
Security Considerations
Firewalls
The use of a firewall appliance as a good security practice is highly
recommended. It is advised that the customer takes proper precautions to
limit, control or eliminate unwanted access. You can obtain a list of the
ports, services and protocols that must be configured in the firewall from
your service representative.
Remote Administration
If remote administration is used on the Ultrasound Workspace host PCs, ensure
that they are configured for secure remote administration.
Malware Prevention and Detection
Security safeguards to protect the system against the intrusion of malware
(viruses, Trojans, worms,) are recommended. Malware prevention software should
be configured to receive automatic updates. Additionally, be sure to adhere to
local IT policies and procedures regarding malware infection, which may
include disconnecting from the network until the situation is resolved.
Operational Security
CAUTION To keep the system secure, it is recommended to follow proper
operational security measures like: · Password-protected BIOS · Disallow
booting from external drives in the boot order. · Disable unused I/O device
interfaces. · Disable unused services and ports. · Control physical access to
the product. Only authorized personnel should have access. · Create and
enforce policies that ensure unauthorized users cannot gain access.
300014005871_A/ * JUN 2024
Philips
Ultrasound Workspace 6.0
23
Security Considerations
Physical Security and Limited Access to Systems
CAUTION It is important to consider physical security measures like keeping
the system in a secure location, limiting access to only authorized personnel,
proper locking measures, card-key or other access limitations, and so on.
Access to systems must be limited to authorized users and controls must be
implemented to ensure that unauthorized users cannot gain access.
NOTE Contact your service representative for further information.
Protecting Personal Information
It is essential that policies and procedures for the proper handling of
personal or sensitive data are in place. Consider the confidentiality,
integrity, and the availability of the types of data. Each organization using
this product must provide the protective means necessary to safeguard personal
information consistent with each country law, code and regulation, and
consistent with the company policies for managing this information. Although
the handling of personal data is outside the scope of this document, in
general, each organization is responsible for identifying the following:
· Who has access to personal data and under what conditions an individual has
the authorization to use this data?
· How is the data stored, under what conditions and by whom it is stored? ·
How is the data transmitted and under what conditions is this data
transmitted?
CAUTION When disposing of the hard drive, first purge all sensitive data using
software capable of DoD 5220.22-M standards, or comparable. Media such as CDs,
DVDs, USB drives, and printouts must be disposed of in a secure manner when
they are no longer needed, since they might hold sensitive information.
300014005871_A/ * JUN 2024
Philips
24
Ultrasound Workspace 6.0
300014005871_A/ * JUN 2024
Security Considerations
Protecting Personal Health Information
CAUTION Protecting personal health information is a primary part of a security
strategy. Considering the nature of the product, the information stored is
highly personal and sensitive and should be protected following HIPAA or
Council of the European Union security and privacy rules. The system does not
encrypt patient health information when stored. Unencrypted patient health
information will be present in the system files, backup files, and files saved
to primary, auxiliary, and portable storage devices. Thus, particular care
must be taken with this information when designing backup, archiving, and
disaster recovery plans to ensure the utmost security and confidentiality.
Additionally, industry standard methods and best practices of applying disk
level encryption may be applied to protect data at rest. Philips recommends a
careful examination of the encryption method as it may affect the overall
performance of the system. Take measures to compensate for resource drain when
encryptingdecrypting files or data. This will need to be identified during the
beginning stages of implementation, prior to server build.
CAUTION When disposing of the hard drive, first purge all sensitive data using
software capable of DoD 5220.22-M standards, or comparable. Media such as CDs,
DVDs, USB drives, and printouts must be disposed of in a secure manner when
they are no longer needed, since they might hold sensitive information.
About the EU Directives
If applicable, your facility’s security strategy should include the practices
set forth in the Directive on Privacy and Electronic Communications (Directive
2002/58/EC of the European Parliament and of the Council of 12 July 2002)
concerning the processing of personal data and the protection of privacy in
the electronic communications sector. In addition, your facility should also
consider any additional, more stringent standards put forward by any
individual EU countries; that is, Germany, France, and so on. For more
information, visit http://eurlex.europa.eu/homepage.html
About Setting up a Testing Environment Customers are encouraged to put
policies in place to maintain proper operating systems, antivirus, and
Microsoft security updates and service packs, driver updates, new hardware and
changes to existing hardware, and so on. Ultrasound Workspace is a software-
only product. Proceed with caution when you make any changes to any part of
the system. Be sure to set up a test environment that mimics the current
environment for testing changes to the system before deploying the changes
into the live environment. Real patient data should not be used for the
test/demo environment. Any such test setup must use de-identified data only.
Philips
Ultrasound Workspace 6.0
25
Security Considerations
About HIPAA Rules
If applicable, your facility’s security strategy should include the standards
set forth in the Health Insurance Portability and Accountability Act of 1996
(HIPAA), introduced by the United States Department of Health and Human
Services. You should consider both the security and the privacy rules and the
HITECH Act when designing policies and procedures. For more information, visit
https://www.hhs.gov/hipaa/index.html.
Further Security Information
User Accounts We suggest user accounts (example: for installation, monitoring,
troubleshooting, remote access purpose, runtime and emergency account) with
proper read/write/execute access levels to shared resources (shared network
drives, services, database) be created as per Hospital’s IT policy.
Network
CAUTION The product relies on the existing network infrastructure to provide
security. All DICOM interfaces use unencrypted DICOM. All HL7 interfaces use
unencrypted HL7.
Disclosure TeamDev JxBrowser and Microsoft WebView2 are used within the
product. JxBrowser and WebView2 may send data back to Google or Microsoft.
Thus, you might detect unexpected traffic from the system. This is normal. To
our best knowledge, no sensitive data is transferred by JxBrowser.
Nevertheless, you can block the traffic with your firewall without any impact
on the behavior of the product.
300014005871_A/ * JUN 2024
Philips
26
Ultrasound Workspace 6.0
www.philips.com/healthcare Philips Ultrasound LLC 22100 Bothell Everett Hwy
Bothell, WA 98021-8431 USA
EC REP
Philips Medical Systems Nederland B.V. Veenpluis 6 5684 PC Best The
Netherlands
2797
© 2013- 2024 Koninklijke Philips N.V. All rights reserved. Reproduction or
transmission in whole or in part, in any form or by any means, electronic,
mechanical or otherwise, is prohibited without the prior written consent of
the copyright owner. Trademarks are the property of Koninklijke Philips N.V.
or their respective owners. 300014005871_A/ * JUN 2024 – en-US
References
- Innovative Medical Solutions - Philips Healthcare
- Connecting with encryption - JDBC Driver for SQL Server | Microsoft Learn
- Search Product and Services Lifecycle Information - Microsoft Lifecycle | Microsoft Learn
- Selecting the Forest Root Domain | Microsoft Learn
- Provide Computer Information | Microsoft Learn