Zubaida Diagnostics — Clinical Intranet, Queue Automation & Medical Document Vault

The Problem: The hospital's X-Ray machines run legacy Windows 7 (PC 1 is 32-bit; PC 2 is 64-bit) connected directly to high-precision radiological detector panels. These panels communicate over a hardcoded, static IP subnet via the computer's onboard Ethernet port. Connecting the onboard Ethernet directly to the clinic intranet caused severe IP conflicts and broadcast packet intrusion, which immediately destabilized sensor calibration and triggered machine lockouts. Furthermore, manufacturer warranty strictly forbade connecting these machines to the public internet, preventing modern Windows updates or .NET runtime installations.

The Dual-NIC Hardware Solution: We physically isolated the networks by installing a dedicated USB-to-LAN Ethernet adapter on each X-Ray computer. The primary onboard network card (NIC 1) remained exclusively dedicated to the medical sensor panel on its isolated subnet. The USB-to-LAN adapter (NIC 2) was routed to the clinic's internal Gigabit switch, receiving an intranet IP from the clinic router. Because NIC 2 operates on an independent hardware bus, the medical sensor panel is completely unaware of the clinic intranet, eliminating collision risks entirely.

USB-to-LAN Hardware Bridge

Physical isolation hardware separating the static medical detector panel from hospital LAN traffic.

Electron 22 Portable Shell

Single portable .exe browser targeting 192.168.0.118, built specifically for Windows 7 compatibility.

Server IP Configuration

Configuring the target intranet host (192.168.0.118) directly from the Electron interface.

32-Bit & 64-Bit Binaries

Independently compiled binaries targeting Windows 7 IA32 and x64 architectures.

Single-File Runner Architecture

Self-contained portable deployment executed off a flash drive without modifying the OS.

{
  "name": "zubaida-diagnostics-electron-app",
  "version": "1.0.0",
  "description": "Zero-Install Windows 7 Desktop Client for Air-Gapped X-Ray PCs",
  "main": "main.js",
  "scripts": {
    "start": "electron .",
    "build:portable": "electron-builder --win portable",
    "build:portable32": "electron-builder --win portable --ia32"
  },
  "devDependencies": {
    /* Last official Chromium/Node build supporting Windows 7 */
    "electron": "22.3.24",
    "electron-builder": "^24.9.1"
  }
}
            

The Problem: When physicians hand-write clinical prescriptions, the prescription department needs to digitize the paper slip immediately. In modern web browsers (Chrome or Edge), security sandboxing strictly blocks direct access to local scanner hardware drivers (TWAIN/WIA). Operators previously had to minimize their browser, open an external scanner utility, save the scan to a folder, return to the browser, click "Browse", search for the file, and upload it. For non-technical staff handling dozens of patients an hour, this cumbersome process led to mislabeled files, misplaced records, and severe delays.

The Engineering Fix: We engineered a lightweight C# Windows Forms application that serves as an embedded browser shell. WinForms has unrestricted access to native Windows COM APIs. We implemented ScannerService.cs, utilizing Windows Image Acquisition (WIA 2.0 COM API). On a dedicated Single-Threaded Apartment (STA) thread, it communicates with the attached Epson L3210 scanner, captures an A4 scan at 150 DPI (optimal for clear handwriting without ballooning file sizes), copies the resulting bitmap directly into the Windows Clipboard, and triggers a simulated paste event into the embedded browser.

Hardware Scan Button

Native WinForms toolbar button triggering STA background scan capture via Epson L3210.

Clipboard Web Auto-Paste

Captured scan immediately ingested by React global paste handler without browsing file directories.

Server IP Config Dialog

Allows technicians to toggle target intranet endpoints (192.168.0.118) via Ctrl+S.

Compiled .NET 4.0 Binaries

Native Windows 7 C# release build running immediately without Visual Studio or runtimes.

Home Navigation Action

Dedicated toolbar button resetting the browser frame back to the main hospital landing page.

Toolbar Refresh Control

One-tap browser refresh synchronized with active server status polling.

History Back & Forward

Preserves standard browser forward/backward traversal inside the sandboxed desktop shell.

public static Task<Image> ScanA4DocumentAsync(int dpi = 150)
{
    var tcs = new TaskCompletionSource<Image>();

    // Dedicated STA thread required to pump unmanaged WIA COM dialog messages cleanly
    Thread staThread = new Thread(delegate()
    {
        try
        {
            Type devMgrType = Type.GetTypeFromProgID("WIA.DeviceManager");
            dynamic devMgr = Activator.CreateInstance(devMgrType);
            dynamic scanner = devMgr.DeviceInfos[1].Connect();
            dynamic item = scanner.Items[1];

            // Configure 150 DPI resolution and A4 dimensions
            item.Properties["6147"].Value = dpi; // Horizontal DPI
            item.Properties["6148"].Value = dpi; // Vertical DPI

            dynamic imageFile = item.Transfer("{B96B3CAB-0728-11D3-9D7B-0000F81EF32E}");
            byte[] imageBytes = (byte[])imageFile.FileData.BinaryData;

            using (var ms = new MemoryStream(imageBytes))
            {
                Image scanBitmap = Image.FromStream(ms);
                Clipboard.SetImage(scanBitmap); // Stream directly to Windows Clipboard
                tcs.SetResult(scanBitmap);
            }
        }
        catch (Exception ex) { tcs.SetException(ex); }
    });

    staThread.SetApartmentState(ApartmentState.STA);
    staThread.Start();
    return tcs.Task;
}
            

On the frontend, AddDocument.jsx registers a global paste event listener. When WinForms triggers paste, the React component extracts the raw bitmap from the clipboard data items, executes client-side canvas compression (`compressImageFile`) to downsample 30MB bitmaps to ~450KB JPEGs while retaining sharp medical stamps, and auto-queues the file for upload with an instant visual thumbnail preview.

Driverless Hardware Thermal Printing: Conventional web printing calls `window.print()`, presenting an operating system print preview dialogue that requires 3 manual clicks per patient. In a busy clinic, this creates long queues. Our Node.js backend implements native socket communication directly with thermal printers (EscPosPrinterWin on Windows, and /dev/usb/lp0 on Linux). When an appointment is confirmed, the server transmits raw ESC/POS byte streams over USB, instructing the printer to print the clinic header, patient MR Number, queue token, and cut the paper in under 300ms.

Anti-Tamper Revenue Lock: To prevent financial tampering at the front desk, appointments enforce a strict one-time fee finalization rule. In routes/appointments.js, once an appointment's fee is entered and marked finalized, any subsequent modification attempt is immediately blocked with an HTTP 400 error. The record is permanently locked against alterations.

Appointment Queue Directory

Real-time queue ledger showing daily token numbers, patient demographics, and audit states.

Instant Appointment Booking

Pre-populated demographics allowing the receptionist to press Enter and issue token in 2 seconds.

Numerical Token Sort

Instant table sorting on daily token number column (1–999) for rapid queue dispatch.

Token Printed Confirmation

Success notification confirming that ESC/POS commands successfully triggered hardware cut.

Local USB ESC/POS Print

Hardware print dispatch executed directly on the receptionist's locally connected printer.

Remote Server Print Routing

Allows doctors or remote floor operators to trigger token prints at the central reception desk.

Fee Collection Modal

Input validation ensuring fee amounts are non-negative and bounded to prevent input errors.

Editable Active State

Unlocked appointment record allowing the receptionist to amend fees prior to closing the transaction.

Locked Finalized Record

Immutable state enforcement preventing receptionist fee edits after initial receipt printing.

Regex Smart Search Box

Sub-second query parsing supporting raw integers, mr123, and 2D QR barcode scanner injections.

// 1. Atomic Daily Token Reset & Appointment Creation in PostgreSQL
const appointment = await prisma.$transaction(async (tx) => {
  let tokenRecord = await tx.dailyToken.upsert({
    where: { date: dateStr },
    update: { lastToken: { increment: 1 } },
    create: { date: dateStr, lastToken: 1 }
  });

  if (tokenRecord.lastToken > 999) {
    tokenRecord = await tx.dailyToken.update({
      where: { date: dateStr },
      data: { lastToken: 1 }
    });
  }

  return tx.appointment.create({
    data: { patientId, tokenNumber: tokenRecord.lastToken, amountPaid, reason }
  });
});

// 2. QR Scanner Input Regex Extractor (searchHelper.js)
function extractMrNumberSearch(search) {
  if (!search || typeof search !== 'string') return null;
  const match = search.trim().match(/^mr\s*(?:number)?\s*(\d+)$/i);
  return match ? parseInt(match[1], 10) : null;
}
            

The patient registration interface is optimized for maximum typing speed. When a patient arrives, the receptionist enters their Full Name, Father's Name, Age, and Contact Phone. If Date of Birth is provided, the age field is automatically computed via client-side date arithmetic. The form incorporates strict keyboard shortcuts: pressing Enter submits the patient record, instantly provisions a permanent numeric MR Number in PostgreSQL, and immediately forwards the application state to the "Add Appointment" screen with the new patient already selected. The receptionist only has to hit Enter one more time to generate the visit token, slashing intake time to under 35 seconds.

Patient Master Directory

Master index listing MR numbers, patient demographics, contact records, and quick actions.

Rapid Patient Registration

Automated MR Number generation with instantaneous forward to appointment scheduler.

Edit Patient Demographics

In-place editing dialogue allowing receptionists to correct telephone numbers or guardian names.

One-Click Appointment Action

Table row action icon jumping directly to token creation with the selected patient preloaded.

Inline Row Edit Control

Accessible table action icon opening demographic editor without leaving the current directory page.

Audited Deletion Guard

Protected deletion action with strict database foreign key cascade validation.

Configurable Table Density

Allows receptionists to expand row density to 25, 50, or 100 items per page for faster lookup.

Page Size Dropdown View

Expanded dropdown selector providing flexible pagination control across extensive hospital rosters.

Clinic technicians are specialists in radiography and medical procedures, not computers. If presented with complex navigation menus or manual document categorization options, misfiling was common (e.g. an X-Ray scan accidentally filed as an Ultrasound report). To make the system foolproof, we engineered automatic role-based navigation and document categorization:

• X-Ray Department (xr123): Header navigation is locked exclusively to "Documents". When the technician clicks "Add Document", the document type dropdown automatically locks to X-Ray.
• Ultrasound Department (us123): Navigation is locked exclusively to "Documents". "Add Document" automatically pre-selects Ultrasound.
• Prescription Department (ps123): Access is limited to "Documents" and "Files". "Add Document" automatically pre-selects Prescription.
• PFT Department (pft123): Direct document access with automatic default to PFT.
• Admin (admin): Full clinical permissions across Patient Records, Appointment Queue, Document Vault, Files Dossier, and Financial Auditing.

Diagnostic Document Vault

Role-filtered medical document vault with secure inline previews and audit trails.

Add Document Modal

Supports multi-scan batch uploads, clipboard paste ingestion, and instant thumbnail previews.

Role-Based Dropdown Lock

Authentication tokens automatically pre-select and restrict document classification per department.

High-Res View Action

Launches high-fidelity medical imaging viewer without leaving the document table.

Open Document Control

Direct action opening original DICOM, PDF, or bitmap files in dedicated browser tabs.

Guarded Delete Action

Administrative permission check protecting against unauthorized deletion of patient medical scans.

The Problem: When a physician consults with a patient, they need to review all tests ordered across different dates and floors simultaneously: the chest X-Ray from floor 2, the abdominal ultrasound from floor 1, the hand-written prescription, and the blood test lab report. Merging high-resolution bitmaps, PDFs, and Word reports on the internal Linux server would cause extreme CPU spikes and choke the mini-server during peak hours.

The Engineering Fix: We engineered a high-performance client-side PDF synthesizer using pdf-lib and offscreen HTML5 canvas conversion. In the "Files" tab, entering an MR Number retrieves all corresponding documents. The physician or receptionist can dynamically toggle document categories:

The browser pulls raw binary files from the local server, standardizes various image formats (BMP, WebP, PNG, JPEG) into uniform Uint8Array buffers, generates a formal clinical cover page with patient demographics, stamps headers, watermarks, page numbering, and downloads a unified, print-ready PDF dossier in seconds without stressing the central server.

Files Filter Interface

Granular category selection checkboxes with instant progress bar rendering during PDF synthesis.

Compiled Patient Dossier

Comprehensive stitched clinical record ready for single-click download and physician review.