Build a patient-facing zero-footprint imaging portal that lets patients access their own DICOM studies via a web browser

Steps

1. Provision a web-based DICOM viewer (e.g., OHIF Viewer or a commercial zero-footprint viewer) with HTTPS and configure it to authenticate patients using an OAuth 2.0 identity provider linked to the institution's patient portal
2. Implement authorization logic that restricts each patient's QIDO-RS queries to their own StudyInstanceUIDs by pre-filtering on PatientID derived from the authenticated identity before proxying to the backend DICOMweb server
3. Serve DICOM pixel data through a server-side proxy that injects credentials and enforces patient-scoped authorization, rather than exposing the raw DICOMweb server URL or credentials to the browser
4. Apply DICOM de-identification of metadata fields containing referring physician names and facility details in the viewer's display layer if the portal policy restricts that information from patient view
5. Implement audit logging of every study access with the patient identity, timestamp, study UID, and IP address to satisfy HIPAA audit requirements for PHI disclosure