DE102016015369A1 - Apparatus and method for evaluating physiological parameter values of a patient - Google Patents

Abstract

The present invention relates to a device for evaluating physiological parameter values of a patient, comprising a network interface, a processor unit and a memory unit, wherein the network interface is designed to receive from a medical device a first data message which has a physiological parameter type and a quality of physiological parameter values of the physiological parameter type wherein the memory unit is designed to provide a required minimum quality of physiological parameter values and wherein the processor unit is designed to evaluate physiological parameter values of the indexed physiological parameter type to generate a control signal as a function of the indexed quality and the minimum quality provided. A method is also used and for using a device according to the invention.

Description

Medical devices are known from the prior art, which detect a sensor signal via a sensor interface, which indicates a physiological parameter of a patient, such as a blood pressure or a heart rate.

A typical situation of intensive care medicine or a medical operation is often of the type that different medical devices by means of respective different sensors detect respective different physiological parameters of a patient. The different medical devices can thus provide via respective interfaces respective physiological information obtained based on physiological parameters of the patient. Furthermore, it is possible that at least one medical device further comprises an actuator for physiological action on the patient. Such an actuator is, for example, a gas delivery unit of a ventilator.

A data-technical connection of the medical devices for an orderly dissemination or announcement of the different physiological information of a single patient is often left to a user on the data network side, so that without an own activity or interaction of the user an orderly use of the physiological information is not possible.

A central instance, e.g. a workstation, a data network for medical devices can in principle then group respective provided physiological information and use it in an orderly manner, if this central entity has advance knowledge of the physiological parameters to which a medical device can provide physiological information. For this purpose, it is a possibility that the workstation in a pre-configuration each individual medical device with the respective individual provided by the medical device individual physiological information is made known by an administrator. This requires a certain administrative effort by the administrator before the central entity can even access any particular physiological information of a particular medical device and then use it.

In other words: If a medical device with a measurement functionality related to a new physiological parameter in the network, it is possible that the central unit does not know this parameter per se. This is the case in particular when all possible types of physiological parameters have to be entered or specified at the central unit by preconfiguration by a user or user. This makes it cumbersome to bring in a network of medical devices a medical device with a new measurement functionality based on a new physiological parameters, since then without a configuration by the user or user at the central unit of these new physiological parameters is not known and therefore not can be used for an evaluation.

Another aspect is that it is important for a central entity, which wishes to evaluate psychological parameter values for an alarming function, to know the quality of the physiological parameter values provided by a medical device. Less reliable physiological parameter values, for example, can still be selected for the purpose of documentation, but could already be unsuitable, for example, for a secure alarming function in relation to the physiological parameter, because then possibly false or undesired alarms could be made. On the other hand, although physiological parameter values of a certain quality may be of sufficient quality for an alarming function, they may be unsuitable, for example, for determining a control signal for changing an operating parameter of an actuator which is physiologically acting on the patient, for such a control may require physiological parameter values of very high quality.

• - mit einer neuen Messfunktionalität bezogen auf einen neuen physiologischen Parameter
• - oder aber eine Funktionalität eines bekannten physiologischen Parameters mit einer neuen Qualitätsstufe

ausgestattet, so ist es für die zentrale Einheit von Vorteil, hiervon automatisiert Kenntnis zu erlangen, ohne dass ein Anwender eine solche Information explizit in der zentralen Einheit konfigurieren muss. Heutige Datenprotokolle zum Austausch physiologischer Parameterwerte weisen hierzu einen zu geringen Informationsgrad auf.It is possible for a medical device to be placed in a network at a first time and to provide first physiological parameter values of a first type of parameter with a first quality level, which may then be known to the central entity at the first time by pre-configuration. Then at a later, second time the medical device eg via a software update

• - with a new measurement functionality related to a new physiological parameter
• or else a functionality of a known physiological parameter with a new quality level

It is advantageous for the central unit to automatically gain knowledge of this without a user having to explicitly configure such information in the central unit. Today's data protocols for the exchange of physiological parameter values have a too low degree of information.

The object of the present invention is therefore to provide a device and a method in which a device in can automatically determine whether they should use certain physiological parameter values of a physiological parameter type, which are provided by a medical device for an evaluation or for what kind of evaluation.

The object of the invention is achieved by a device according to claim 1 and a method according to claim 8 and a device according to claim 9.

Advantageous embodiments of the invention are the subject of the dependent claims and are explained in more detail in the following description with partial reference to the figures.

The device according to the invention for evaluating physiological parameter values of a patient has a network interface, a processor unit and a memory unit, wherein the network interface is designed to receive from a medical device a first data message which indicates a physiological parameter type and a quality of physiological parameter values of the physiological parameter type the memory unit is designed to provide a required minimum quality of physiological parameter values, and wherein the processor unit is designed to carry out an evaluation of physiological parameter values of the indexed physiological parameter type to generate a control signal as a function of the indexed quality and the minimum quality provided.

The device according to the invention is advantageous in that the device for evaluating physiological parameter values of the patient is automatically informed by the medical device as to which type of physiological parameter the medical device can in principle provide physiological parameter values. Furthermore, the device automatically acquires knowledge about the quality of the physiological parameter values that can be provided by the medical device. Because the device is preconfigured in its memory unit such that it can provide a required minimum quality, the minimum quality preferably being based on a specific type of evaluation of parameter values of the physiological parameter type, it is thus possible for the device to automatically decide for itself whether physiological parameter values of the relevant physiological parameter type that can be provided by the medical device have a sufficient quality for a specific, intended evaluation.

On the one hand, therefore, the device is informed about which physiological parameter type can be measured at all by the medical device or to which physiological parameter type corresponding physiological parameter values can be provided. Thus, the device need not be preconfigured to advance, e.g. In the case of network installation, data must be available which explicitly specify which physiological parameter types the respective medical device can measure. Thus, a measurement functionality based on a new physiological parameter type can also be newly introduced by the medical device at a later time.

Furthermore, by indicating the quality of the physiological parameter values of the new physiological parameter type which can be provided, it can be ensured at the same time that the central unit or the device for an evaluation uses the physiological parameter values only if the quality of the physiological parameter values such a minimum quality is fulfilled. which the device needs for a particular evaluation.

Thus, by means of a simple preconfiguration of the device with regard to a necessary minimum quality, based on the evaluation of physiological parameter values, it can be ensured that the device itself can decide whether the physiological parameter values that can be supplied are actually used for newly introduced measurement functionalities in relation to new physiological parameter types of a medical device Evaluation used or not. This does not have to be configured at the time of the new metering of the device to the device by an administrator or user. It is sufficient if, during the initial setup of the central device, this is configured beforehand in terms of the physiological parameter types to be considered for the evaluation and by means of data elements which indicate a respective minimum quality of the corresponding physiological parameter values for a particular desired evaluation.

The advantages referred to the device according to the invention also apply to the method according to the invention of claim 8 and to the device of claim 9.

Preferably, the first data message further comprises a data element indicating a textual description of the physiological parameter type. Such a textual description also includes, for example, a measurement unit and / or a position of the measurement on the body of the patient.

Such a data element is preferably a so-called string, for example in the form of a predetermined coding rule. Such Coding rule is eg the ASCII coding. This is advantageous since, for displaying physiological parameter values of the physiological parameter type, this textual description can be directly included to inform a user in the display unit of what kind of physiological parameter values are. Preferably, the network interface of the device is adapted to further receive from the medical device a second data message indicating physiological parameter values of the physiological parameter type, and in the event that the indexed quality meets the provided minimum quality, the processor unit indexes those indicated in the second data message physiological parameter values used in the evaluation.

The data element which indicates the textual description of the physiological parameter type may alternatively or additionally be included in the later, second data message from the medical device to the device.

Because the device can receive the physiological parameter values by means of the second data message, a continuous notification of physiological parameter values to the device can be made by the medical device, but precisely these physiological parameter values are only used in the evaluation if the minimum quality provided is met ,

• - ein Anzeigen aus den physiologischen Parameterwerten abgeleiteter Daten,
• - ein Ausgeben eines Alarmsignals,
• - ein Verändern eines Betriebsparameters eines Aktuators eines Medizingerätes,
• - ein Verändern eines Vorgabewertes für eine Alarmierungsfunktion bezogen auf eine Überwachung physiologischer Parameter eines Patienten.

The control signal generated by evaluating the physiological parameter values may index one or more of the following requirements:

• an indication of the physiological parameter values of derived data,
• an output of an alarm signal,
• a modification of an operating parameter of an actuator of a medical device,
• - Changing a default value for an alarming function based on monitoring physiological parameters of a patient.

It is thus possible that the device uses the physiological parameter values for displaying parameter values or data, for outputting an alarm signal by means of preferably its own alarm monitoring, for changing the operating parameter of an actuator of its medical device, which the aforementioned medical device or a can be different, or for changing a default value or threshold for an alarm function.

Preferably, the processor unit of the device is further configured to send, prior to receiving the first data message via the network interface, a request message to the medical device indicating a request to send the first data message from the medical device to the device.

This embodiment is advantageous because the device itself has in its hand whether it would like to receive from the medical device the first data message and preferably the second data message for the evaluation of physiological parameter values, or whether such a transmission of the first or the second data message by the medical device should be omitted. So sends the device from the request message, it is in an operating state in which it expects the first and preferably also the second data message.

Preferably, the network interface of the device is configured to receive an identification message from the medical device prior to receiving the first data message indicating group membership of the medical device, the memory unit configured to provide group membership of the device, and wherein the processor unit evaluates the physiological parameter values depends on the group affiliation of the medical device and the group affiliation of the device.

This embodiment is advantageous because the device can thus ensure that it only takes into account physiological parameter values from such medical devices which have the same group membership as the device itself. In this way, therefore, medical devices and also the proposed device can be arranged in a so-called group association so that physiological parameter values for evaluation and also for determining a control signal are taken into account only by such medical devices, which are also relevant for the device itself. This can be ensured by pre-configuring the group affiliation in the device and by pre-configuring the group affiliation in the medical device.

Preferably, the memory unit of the device is further configured to provide a private key and a public key, wherein the processor unit is further configured to exchange handshake messages with the medical device based on the private and public keys via the network interface to successfully negotiate an agreement to bring about a symmetric key to the medical device and, after successful agreement, the symmetrical one Apply at least the first data message.

This embodiment is advantageous because the device can thus carry out an encrypted transmission of the first data message and also further data messages on the basis of the symmetric key. A symmetric encryption is more efficient than an asymmetric encryption, so that in this way a transmission of the first data message and also other possible data messages can be particularly efficient between the medical device and the device.

Preferably, the processor unit of the device is further configured, in the event that on the basis of the handshake messages, no successful symmetric key agreement can be brought about, the evaluation of the physiological parameter values of the indexed physiological parameter type for generating the control signal is not performed.

This embodiment is advantageous in that the device can use the result of the symmetric key agreement by exchanging the handshake messages as to whether the device considers the medical device trustworthy and can decide whether the physiological parameter values depend on the result of the trustworthiness check to actually evaluate the generation of the control signal.

• 1 eine bevorzugte Ausgestaltung eines Medizingerätes und eine bevorzugte Ausgestaltung der erfindungsgemäßen Vorrichtung,
• 2 einen Austausch von Nachrichten gemäß einer bevorzugten Ausführungsform des erfindungsgemäßen Verfahrens,
• 3 eine Übermittlung einer Anforderungsnachricht,
• 4 Nachrichten, welche im Zuge einer Überprüfung aller Gruppenzugehörigkeiten ausgewertet werden,
• 5 bevorzugte Schritte im Zuge eines Austausches von Handshake Nachrichten zur Einigung über einen symmetrischen Schlüssel,
• 6 eine bevorzugte Ausgestaltung eines Datenelementes, welches eine Mindestqualität indiziert,
• 7 eine bevorzugte Ausgestaltung der Kodierinformation C'.

In the following the invention with reference to specific embodiments without limiting the general inventive concept is explained in detail with reference to the figures. Showing:

• 1 a preferred embodiment of a medical device and a preferred embodiment of the device according to the invention,
• 2 an exchange of messages according to a preferred embodiment of the method according to the invention,
• 3 a transmission of a request message,
• 4 Messages that are evaluated as part of a review of all group affiliations,
• 5 preferred steps in the exchange of handshake messages to agree on a symmetric key,
• 6 a preferred embodiment of a data element which indicates a minimum quality,
• 7 a preferred embodiment of the coding information C '.

The 1 shows an exemplary medical device MG, which detects a sensor signal SIG by means of a sensor SEN on a patient PT via a sensor connection SV and a sensor interface SES. A processor or a processor unit P of the medical device MG then derives from the sensor signal SIG physiological parameter values based on a physiological parameter type of the patient PT, for example the blood pressure, the intracranial pressure or the heartbeat rate. Furthermore, it is preferably possible for the processor unit P to additionally or alternatively consider a value of an operating parameter of an actuator AK in order to derive the physiological parameter value. For example, an operating parameter is a pressure value for an actuator AK in the form of a gas delivery unit of a ventilator.

The processor P can provide via a network interface N in principle by means of data messages DN measured physiological parameter values based on a physiological parameter or parameter type of the patient PT to a device V, preferably via a data network NW.

Preferably, the medical device has the actuator AK, which can act physiologically on the patient PT via an actuator interface AKS and an actuator connection AV. For example, the actuator may be a breathing gas delivery unit, such as a bag-in-a-bottle or a blower or radial compressor as a drive unit of a respirator or an anesthetic machine. Another embodiment of the actuator AK can be a stepper motor of a syringe pump or injection pump for introducing an injection fluid via the actuator connection AV in the patient PT. The processor P preferably activates the actuator AK via a control signal STE.

In the event that the processor P of the medical device MG allows an alarming function with respect to a physiological parameter of the patient PT, the processor P can control an alarming unit ALE via a control signal STE2 to output an alarm signal. The alarm unit ALE can be an optical and / or acoustic unit for outputting an optical and / or acoustic warning signal.

Furthermore, the medical device has a memory unit SPE, in which data DMG are provided for performing individual method steps.

The in the 1 shown preferred embodiment of the device V according to the invention comprises a network interface N, a processor P and a memory unit SP.

Via the network interface N, the processor P of the device V exchanges data messages DN, preferably via a data network NW, with the medical device MG.

The processor P is designed to evaluate physiological parameter values which can be provided by the medical device MG and / or an operating parameter value of an actuator which physiologically influences the patient in order to determine and provide a control signal STA as a function of the physiological parameter values. The processor unit P does this as a function of a quality indexed by the medical device by means of a data message and by the minimum quality provided in the data D of the memory unit SP Erauf further discussed in more detail below.

Such a control signal STA may be a control signal STAL, which activates an audible and / or visual alarm unit AL. The control signal STAL thus indicates a request to output an alarm signal to the alerting unit AL. Alternatively, such a control signal for requesting an output of an alarm signal may also be transmitted as a data control signal DST via the network interface N to the medical device MG or another device located in the data network NW.

Another preferred embodiment of a control signal STA by the processor unit P of the device V is the control signal STAN, which indicates a request to display data on a display unit AN, the data being derived from the physiological parameter values by the processor unit P.

It is also possible here for the control signal STAN, STA to be output to an external unit or external network unit in the form of a data signal or data control signal DST via the network interface N.

The control signal DST as a data signal or data control signal can indicate via network interface N a request for changing an operating parameter of an actuator, for example the actuator AK of the medical device. As a result, the processor unit P of the device V can thus control or control and / or regulate an actuator of a medical device with regard to an operating parameter such as, for example, a pressure, a minimum end expiratory pressure, a rotational speed of a gas delivery unit or other operating parameters.

Preferably, the control signal or data control signal DST indicates a request for changing a default value or threshold value for an alarming function of another device, for example the medical device MG. Thus, the processor unit P of the device V can carry out an evaluation of physiological parameter values provided by the medical device MG and then control an alarming function, which is carried out, for example, on the processor P of the medical device MG, for example by means of the default value which is contained in the data message DST is indexed, an alarm threshold for the processor P of the medical device MG is changed. The processor P of the medical device MG can then use such a new default value or a new alarm threshold for an alarm function for monitoring a physiological parameter of the patient PT.

If in this application of a change in an operating parameter or a change in a default value is mentioned, this is also understood as an initial or initial setting of an operating parameter or a default value.

2 shows data provided in the medical device MG and the device V DMG and D.

It preferably stores the medical device MG in its data DMG of the memory unit SPE from the 1 the network identity IDV of the device V from. Similarly, the device V stores in the data D of the memory unit SP from the 1 the network identity IDMG of the medical device MG.

The device V also has a data element MQ in the memory unit SP or in the data D, which is a minimum quality that must be fulfilled by the medical device MG in relation to the required evaluation of the physiological parameter values.

This shows the 6 a preferred embodiment MQ 'the minimum quality. The minimum quality MQ 'here is a list of minimum qualities MQ1, MQ2, ..., which is necessary for respective evaluations or evaluation types AW1, AW2, .... As a result, it is the device V from the 1 It is possible to carry out different types of evaluation AW1, AW2,..., whereby a respective minimum quality MQ1, MQ2,... by the device V can be required.

In the 2 a first data message DN1 is shown which receives the device V from the medical device MG. The data message DN1 indicates a physiological parameter type by means of a data element PT1, to which the medical device MG can in principle provide physiological parameter values. Furthermore, the data message DN1 has a data element QP1, which is a Quality of available physiological parameter values related to the physiological parameter type PT1 indicated.

The device V preferably provides coding information C to the memory unit SP by means of the data D, by means of which the processor unit P of the device V can determine which is the parameter type PT1 to which the medical device MG can provide physiological parameter values.

This shows the 7 a preferred embodiment C 'of the coding information C from the 2 in which this information C 'is a list in which there are different codes PT1, PT2, PT3 corresponding to respective physiological parameter types.

The 2 FIG. 12 shows a step S1 in which the processor unit P of the device V determines whether the indexed quality QP1 satisfies the minimum quality MQ provided. If this is the case, a branch is made from the S1 to a step S2, whereby preferably an acknowledgment message APN is sent back to the medical device MG.

Thus, if the indexed quality QP1 is one which satisfies the provided minimum quality MQ, then in a step S2 an evaluation of physiological parameter values PW1 for generating the control signal STA is carried out in a third step S3 or for providing the control signal.

If the indicated quality QP1 does not meet the minimum quality MQ, then physiological parameter values PW1 are not taken into account for an evaluation for generating the control signal STA.

In other words, the processor unit P of the device V of 1 performs an evaluation of physiological parameter values PW1 of the indexed physiological parameter type PT1 to generate the control signal STA as a function of the indexed quality QP1 and the minimum quality MQ provided.

In other words, the minimum quality MQ is a minimum quality of physiological parameter values PW1 of the physiological parameter type PT1 required with respect to a specific evaluation.

Via the network interface N of the device V from the 1 can according to the 2 receive a second data message DN2 which indicates the physiological parameter values PW1 of the physiological parameter type PT1. In this case, the second data message DN2 preferably also contains a data element PT1 which indicates the physiological parameter type PT1. Preferably, the data message DN2 further comprises a data element STR1, which is a character string or a text element which describes or characterizes the physiological parameter type PT1. This data element STR1 may alternatively or additionally be contained in the first data message DN1. Such a textual data string STR1 can then later be used for a possible display in order to enable display of the parameter values PW1 together with textual information for a user on the display.

Preferably, the message DN2 and also other subsequent data messages comprise a data element which indicates a quality if something has changed since the first message of the first indexed quality. This can be viewed as a dynamic quality attribute.

In other words, the parameter values PW1 are physiological parameter values measured and provided by the sender or medical device MG.

According to the 2 the control signal STA is preferably in a data message DNST, which preferably the data message DST from the 1 corresponds to a network unit such as the medical device MG.

In summary, too 1 and 2 it can be stated that the processor unit P of the device V is designed to determine the usability of the physiological parameter values PW1 of the physiological parameter type PT1 as a function of the indexed quality QP1 and the provided minimum quality MQ and, if the result of the determination is positive, a use of physiological parameter values PW1 of the physiological parameter values PW1 provided by the medical device MG philological parameter PT1 in the evaluation to generate the control signal STA.

The 3 shows a transmission of a request message RDN from the device V to the medical device MG. In the event that the device V has in principle knowledge of the existence and the network identity IDMG of the medical device MG, but nevertheless would like to check whether it wishes to evaluate physiological parameter values based on physiological parameter types of the medical device MG, then the device V can be chosen by choice the time of sending the request message RDN control at what time they would like to take into account physiological parameter values related to a physiological parameter type of the medical device MG at all.

The request message RDN indicates or contains the network identity IDV of the device V, so that the medical device MG has knowledge of which network unit, in this case the device V, should send the first data message DN1 as, for example, a directed data message.

If, in fact, a transmission of the first data message DN1 from the medical device MG to the device V is provided such that it is to take place as a directed data message in the data network NW, the first data message DN1 can be transmitted as a broadcast message or a unicast message. Message can be omitted, whereby an amount of data messages in the data network can be reduced or controlled per se.

The request message RDN is transmitted to the medical device MG before the first data message DN1 is received via the network interface N of the device V by the processor or the processor unit P. The request message RDN indicates a request to send the first data message DN1 by the medical device MG.

The 4 shows an exchange of a data message GN1 is a so-called group message, which makes it possible for the device V to take into account a membership of a group, which possibly also belongs to the medical device MG.

Before receiving the first data message and preferably before sending the request message RDN from the 3 the device V receives from the medical device MG an identification message GN1 which indicates a group membership GID1 of the medical device MG. The group membership GID1 can be previously stored or preconfigured in the data DMG of the memory unit SPE of the medical device MG. Likewise, a group membership or group identity GIDV of the device V in the data D of the memory unit SP of the device V can be stored or preconfigured. As a result, a membership of the device V to a group and an affiliation of the device MG to a group of devices can thus be determined by a central instance of the network or an administrator of the network. If the group changes, for example by using a device on a different bed, the V can react to it and eventually stop using the data.

In a step S0, therefore, the device belonging to the device V, the group membership GIDV of the device and the group membership GID1 of the medical device are considered by the processor P. The processor unit P of the device V makes the evaluation of the physiological parameter values PW1 for generating the control signal STA from the 2 depends on the group membership GID1 of the medical device and the group membership GIDV of the device. In a step S0, these group membership GID1 and GIDV are compared, wherein in the case of a match, then to the step S1 from the 2 is further branched so that in principle the physiological parameter values PW1 can be taken into account. However, this is of course still dependent on the quality evaluation, which in step S1 of 2 he follows.

If a check of the group membership GIDV, GID1 is negative, the physiological parameter values PW1 are not used for the evaluation and generation of the control signal STA.

The 5 shows an exchange of so-called hand shake messages HN to agree on a symmetric key S for encrypted data transmission between the device V and the medical device MG.

The storage unit SP of the device V provides a private key PSV and a public key OSV of the device V.

Furthermore, the memory unit SP preferably provides a so-called certificate by means of the data D. Such a certificate contains the public key OSV of the device V and a signature of a trusted, central certification authority.

The medical device MG also uses its data DMG via the memory unit SPE to provide a private key PSM and a public key OSM, and preferably a certificate ZM.

By means of an exchange of the hand-shake messages HN, the device V tries to reach agreement with the medical device about a symmetrical key SY.

If this agreement is successful via the symmetric key SY, the device V applies this symmetric key SY at least to the first data message DN1 and preferably the second data message DN2.

Preferably, an application of the symmetric key SY by the device V to the identification message GN1 from the 4 since a transmission of this identification message GN1 after a successful handshake Shake or a successful agreement on the symmetric key SY can be done.

The handshake message exchange is preferably a TLS or SSL handshake.

The replacement of the certificate ZM of the medical device MG to the device V and preferably also the exchange of the certificate ZV of the device V to the medical device MG preferably takes place within the framework of the hand shake.

The device V can then check the received certificate or root certificate of the medical device MG on the basis of the public key OSM of the medical device MG. The public key OSM is transmitted in the course of the exchange of hand shake messages HN from the medical device MG to the device V, which then receives it.

In the event that a successful symmetric key SY agreement between the device V and the medical device MG can not be established on the basis of the hand shake messages HN, the processor unit P of the device V takes the evaluation of the physiological parameter values of the physiological parameter type PT1 for generating the control signal STA not available. Thus, it can already be checked by means of the hand-shake procedure by the device V whether the medical device MG is a trustworthy communication entity at all, in order to decide depending on the examination result, whether physiological parameter values of the medical device MG at all for an evaluation and for generating a Control signal to be considered.

The exchange of hand-shake news HN from the 5 preferably includes a so-called "keep-alive" request by the device V and / or the medical device MG. If the device V and the medical device MG have agreed on the "keep-alive" functionality, then the processor unit P of the device V monitors by means of a timer function T a so-called time-out, by means of which a maximum time window is monitored, within which Device V with the symmetric key SY encrypted messages, such as an encrypted data message DN1 must be received. The so-called tunnel function enabled by the symmetric key SY is only maintained if a corresponding symmetrically encrypted data message is received during the time-out or the corresponding time window. If the time-out or the time window ends without receiving such a symmetrically encrypted data message, the device V terminates the tunneling function or the encrypted transmission on the basis of the symmetric key SY.

Data messages transmitted on the basis of the symmetric key SY, such as the data message DN1 or DN2, then preferably carry in a header a data element which indicates that the corresponding data message DN1, DN2 is encrypted by means of the symmetric key SY. In this way, the receiving device V can deduce that the symmetric key SY is to be applied to the corresponding data message DN1, DN2.

Although some aspects have been described in the context of a device, it will be understood that these aspects also constitute a description of the corresponding method such that a block of a block diagram or a device of a device is also to be understood as a corresponding method step or feature of a method step , Similarly, aspects described in connection with or as a method step also represent a description of a corresponding block of a block diagram or detail or feature of a corresponding device.

Depending on particular implementation requirements, embodiments of the invention may be implemented in hardware or in software. The implementation may be performed using a digital storage medium, such as a floppy disk, a DVD, a Blu-Ray Disc, a CD, a ROM, a PROM, an EPROM, an EEPROM or FLASH memory, a hard disk, or other magnetic disk or optical memory are stored on the electronically readable control signals, which can cooperate with a programmable hardware component or cooperate such that the respective method is performed.

A programmable hardware component may be provided by a processor, a central processing unit (CPU), a graphics processing unit (GPU), a computer, a computer system, an application-specific integrated circuit (ASIC), an integrated circuit (IC), a system on chip (SOC) system, a programmable logic element or a field programmable gate array with a microprocessor (FPGA = Field Programmable Gate Array) may be formed.

The digital storage medium may therefore be machine or computer readable. Thus, some embodiments include a data carrier having electronically readable control signals capable of interacting with a programmable computer system or programmable hardware component such that one of the methods described herein is performed. One embodiment is thus a data carrier (or a digital storage medium or a computer readable medium) on which the program is recorded for performing one of the methods described herein.

In general, embodiments of the present invention may be implemented as a program, firmware, computer program, or computer program product having program code or data, the program code or data operative to perform one of the methods when the program resides on a processor or a computer programmable hardware component expires. The program code or the data can also be stored, for example, on a machine-readable carrier or data carrier. The program code or the data may be available, inter alia, as a source code, machine code or byte code as well as other intermediate code.

Claims (11)

Device (V) for evaluating physiological parameter values of a patient (PT), comprising a network interface (N), a processor unit (N) and a memory unit (SP), wherein the network interface (N) is adapted to receive from a medical device (MG) a first data message (DN1) which - a physiological parameter type and indicates a quality of physiological parameter values of the physiological parameter type, wherein the memory unit (SP) is designed to provide a required minimum quality of physiological parameter values and wherein the processor unit (P) is designed to perform an evaluation of physiological parameter values of the indexed physiological parameter type in order to generate a control signal (STA) as a function of the indexed quality and the minimum quality provided. Device (V) according to Claim 1 wherein the first data message (DN1) further comprises a data element indicating a textual description of the physiological parameter type. Device (V) according to Claim 1 or 2 wherein the network interface (N) is adapted to receive from the medical device (MG) further a second data message indicating physiological parameter values of the physiological parameter type, and in the case that the indexed quality satisfies the provided minimum quality, the processor unit (P ) uses the physiological parameter values indexed in the second data message in the evaluation. Device (V) according to one of the preceding claims, wherein the control signal (STA, STAL, STAN) indicates one or more of the following requirements: an indication of the physiological parameter values of derived data, an output of an alarm signal, a modification of an operating parameter of an actuator of a medical device, - Changing a default value for an alarming function based on monitoring at least one physiological parameter of a patient. Device according to one of the preceding claims, wherein the processor unit (P) is further configured, prior to receiving the first data message via the network interface (N), to send a request message to the medical device (MG) requesting that the first data message be sent by the medical device ( MG) to the device (V). Device (V) according to one of the preceding claims, wherein the network interface (N) is adapted, before receiving the first data message, to receive an identification message from the medical device (MG) which indicates a group membership of the medical device (MG), wherein the memory unit (SP) is designed to provide group membership of the device (V), and wherein the processor unit (P) makes the evaluation of the physiological parameter values dependent on the group membership of the medical device (MG) and the group affiliation of the device (V). Device (V) according to one of the preceding claims, wherein the memory unit (SP) is further adapted to provide a private key and a public key, wherein the processor unit (SP) is further adapted to exchange handshake messages via the network interface (N) to the medical device (MG) based on the private and public keys in order to successfully establish a symmetric key agreement with the medical device (MG) . and after successful agreement to apply the symmetric key at least to the first data message. Device (V) according to Claim 7 wherein the processor unit (P) is further configured, in the event that on the basis of the handshake messages, a successful symmetric key agreement can not be made, the evaluation of the physiological parameter values of the indexed physiological parameter type for generating the control signal is not performed. Method for evaluating physiological parameter values of a patient (PT), comprising the steps Receiving, by means of a network interface (N), a first data message (DN1) which indicates a physiological parameter type and a quality of physiological parameter values of the physiological parameter type, Providing, by means of a memory unit (SP), a required minimum quality of physiological parameter values, - Making, by means of a processor unit (P), an evaluation of physiological parameter values of the indexed physiological parameter type for generating a control signal as a function of the indicated quality and the provided minimum quality. Medical device (MG), comprising a sensor interface (SES) for detecting a sensor signal which indicates physiological parameter values of a physiological parameter type of a patient (PT), - a network interface (N) - And a processor unit (P) wherein the processor unit (P) is formed, derive the physiological parameter values from the sensor signal, send via the network interface (N) a first data message to a data network device, wherein the first data message o the physiological parameter type as well o indicates a quality of the physiological parameter values of the physiological parameter type and upon receiving an acknowledgment message from the data network device, send a second data message to the data network device indicating the physiological parameter values of the physiological parameter type. Medical device (MG) after Claim 10 wherein the first and / or the second data message further comprises a data element indicating a textual description of the physiological parameter type.

Images