DE102017117406B3 - Remote access to operating parameters of a medical device - Google Patents

Abstract

Medical device (10, 20) having a control unit (12, 22) which is set up to establish a data connection (16, 26) with an external data processing unit (30) via an external interface (11, 21), the control unit ( 12, 22) is further adapted to receive a request for remote access of the external data processing unit (30) to operating parameters of the medical device (10, 20) via the data link (16, 26), wherein on a data memory (14, 24) data sets (41, 42, 43) each comprising a classification of one of the operating parameters of the medical device (10, 20) as critical or noncritical with respect to patient safety, wherein the control unit (12 , 22) is further adapted to the requested Match operating parameters with the data sets (41, 42, 43) and allow remote access exclusively to operating parameters classified as non-critical, characterized in that the medical device (10, 20) is adapted to terminate remote access when a completion input is made to the medical device and the medical device (10, 20) is operable in an idle state, wherein the medical device (10, 20) is adapted to check, prior to allowing remote access, whether the medical device (10, 20) is operating in the idle state wherein remote access is permitted when the medical device (10, 20) is operated in the idle state and remote access is disabled when the medical device (10, 20) is not operated in an idle state.

Description

The invention relates to a medical device, a medical data communication system, a method for establishing a remote access to operating parameters of at least one medical device and a computer program.

Medical devices often have a large number of operating parameters. Such operating parameters make it possible to adapt the devices to specific medical needs, to configure the devices according to the needs of the users, to optimize the operation or safety or to change various functions of the devices. Some of these operating parameters directly affect the medical function of the devices and are therefore important to patient safety. Other operating parameters do not concern patient safety, such as educational functions or functions associated with the administration of medical devices in a hospital.

Some operating parameters are frequently changed, such as the passwords for the medical devices. This requires access to the devices. This usually requires a person to change the operating parameters directly on the device. However, this is associated with a high outlay, especially for large hospitals, since medical devices are distributed over the entire hospital area. Even with minor changes in the operating parameters such as changing the passwords, it is therefore necessary to change the passwords individually directly to the devices. This requires a great deal of time and effort.

In addition, some medical devices are located in places that are not always freely accessible, such as in operating theaters. The operating parameters of devices in these locations can therefore not be changed at any time on site. For example, changing the operating parameters of devices in operating rooms is only possible if the operating theaters are not used, that is usually late in the evening or at night. This also applies if the devices are not even used during an operation.

Furthermore, operating parameters that are critical to patient safety should only be able to be changed by those who work with these devices and who can assess the consequences of changing those operating parameters.

US 2005/0078082 A1 discloses a method and apparatus for selectively blocking remote access by blackening or graying out areas of a screen.

From the US 2016/0294951 A1 A management server emerges that allows various parameters of medical devices such as defibrillators to be remotely accessed. The management server checks, for example, whether the medical devices are ready for use. In addition, medical information may be transmitted to the server during or after use of the medical device. In addition, by means of the management server, an existing software on the medical device can be updated.

It is an object of the present invention to provide a medical device, a medical data communication system, a method for establishing remote access to operating parameters of at least one medical device, and a computer program for making access to operating parameters of medical devices faster, more efficient and / or safer.

The object is achieved by a medical device with a control unit, which is set up to establish a data connection with an external data processing unit via an external interface, which is further developed in that the control unit is further configured to request a remote access of the external data processing unit to receive operating parameters of the medical device via the data link, wherein there are records on a data memory of the medical device, each comprising a classification of one of the operating parameters of the medical device as critical or non-critical in terms of patient safety, wherein the control unit is further adapted to match the requested operating parameters with the data sets and to permit remote access exclusively to operating parameters classified as non-critical, whereby the medical device is thereby developed, that it is arranged to terminate remote access when a completion entry is made to the medical device and the medical device is operable in an idle state, the medical device being adapted to check, prior to allowing remote access, whether the medical device is in use Idle state, where remote access is allowed when the medical device is operating in idle mode and remote access is disabled when the medical device is not operating in idle mode.

In the context of the present description, remote access means access to the operating parameters of the medical device that takes place without an input being made locally directly on the medical device. Remote access is via or via a external data processing unit (for example, a computer or server) via a data connection (eg, a dial-up line), which may be wired or wireless. The data connection ends at an external interface of the medical device. Remote access never takes place locally directly on the medical device.

The external data processing unit is not part of the medical device itself. Advantageously, it does not have to be in the same room as the medical device, so that access to the operating parameters can take place even if the room in which the medical device is located. can not be entered. The external data processing unit is, for example, a central computer of a hospital that communicates with a plurality of medical devices.

Critical operating parameters of the medical device in the context of the present description are those whose alteration could affect the operation of the medical device such that the safety of the patients could be compromised. This includes, for example, operating parameters that control the application of medicaments or concern the monitoring of bodily functions of the patients.

Uncritical operating parameters in the context of the present description are those operating parameters of the medical device whose change has no direct influence on the safety of the patients. These are, for example, the modification of access passwords of the medical devices, the configuration of teaching functions, settings concerning the transmission of image, video or protocol data (for example file formats) or the adaptation of user-dependent device specifications, for example the arrangement of picture elements on a display of the medical device.

Advantageously, the operating parameters of the medical device can be accessed without this having to happen directly at the location of the device. The operating parameters may be changed from the location of the external data processing unit, for example from an IT room. It is not necessary for a person to go to the location of the medical device. This leads to a saving of work and time.

It also ensures that only uncritical operating parameters can be changed by the persons who perform the remote access, so for example IT staff, so for example, regularly changing access passwords. By contrast, critical operating parameters can only be changed directly on the device, for example, by the healthcare professional who works with the device. This ensures that changing the operating parameters remotely does not compromise patient safety.

Advantageously, the medical device is set up to issue a warning during a remote access, in particular on a display of the medical device, and to block local access to operating parameters of the medical device.

Local or direct access in the context of the present description means access to the medical device in which a person accesses the medical device directly at the medical device. This access can be done for example via controls such as a keyboard or a touch-sensitive display. But it can also be other types of operation, such as a voice control or the like, are used.

Advantageously, in this way it is possible to inform a person in the vicinity of the medical device that a remote access to the device is taking place. Blocking direct access prevents complications in setting operating parameters while providing remote access and local access to operating parameters.

Preferably, not only the local access to the operating parameters but also the local access to all functions of the medical device during a remote access is blocked. This prevents operating parameters from changing while a person is using the medical device, as this may distract the person.

According to the invention, the medical device is further configured to terminate remote access when a completion input is made to the medical device. It is preferably pointed out with a warning that a person can terminate the remote access by the completion input.

A completion input can be made for example via controls or a touch-sensitive display on the medical device. This allows a person who is at the location of the medical device to access the medical device at any time, for example, when the medical device is needed. The completion input can always be performed, a blockage of all functions of the medical device does not affect the completion input. By terminating the Remote access does not compromise patient safety because remote access accesses only non-critical operating parameters.

In an advantageous embodiment, the completion input may also be associated with the input of a password or similar authentication measure. This will prevent unauthorized persons from accessing the medical device. Remote access can be used as an additional safeguard in this case.

According to the invention, the medical device is operable in an idle state, wherein the medical device is adapted to check, prior to allowing remote access, whether the medical device is operating in the idle state, allowing remote access when the medical device is operated in the idle state and Remote access is disabled if the medical device is not operating in idle mode.

The idle state is a state that the medical device assumes when it is not in service for its medical functionality. In this case, access to the non-critical operating parameters can take place without disrupting medical personnel at work or endangering patient safety. On the other hand, if the medical device is not in the idle state, that is, if it is being used, remote access to the operating parameters is prohibited so as not to disturb the medical staff at work.

The medical device is advantageously set up to output a message on the medical device, in particular on a display of the medical device, upon blocking of the remote access and to suspend the blocking of remote access to non-critical operating parameters by actuating a confirmation input on the medical device.

Such a confirmation input can take place, for example, via operating elements or a touch-sensitive display on the medical device. An operator who is currently using the medical device may decide whether to permit or inhibit remote access. The operator may make this decision, for example, depending on whether it would interfere with remote access at work.

Advantageously, the operator has two input options, whereby the remote access can either be allowed or denied. If none of these entries are pressed, the remote access will be rejected so as not to jeopardize patient safety in case of doubt.

The object is also achieved by a medical data communication system comprising at least one medical device according to one or more of the aforementioned embodiments and an external data processing unit.

In such a medical data communication system, it is possible to control the operating parameters of all medical devices included in the medical data communication system via the external data processing unit.

Advantageously, the medical data communication system comprises at least two medical devices and a single external data processing unit, wherein the single external data processing unit is adapted to establish a data connection with the control units of all medical devices of the medical data communication system and to establish a remote access to the operating parameters of all medical devices.

According to this embodiment, it is possible to centrally control the operating parameters of the medical devices of a device, for example a hospital, for example from a single workstation. Such a data communication system is particularly advantageous in large hospitals, where centralized control of the operating parameters of medical devices by a single external computing device saves a great deal of work and time.

• - Etablieren einer Datenverbindung zwischen einer Steuereinheit des medizinischen Geräts und einer externen Datenverarbeitungseinheit über eine externe Schnittstelle des medizinischen Geräts,
• - Empfangen einer Anfrage betreffend einen Fernzugriff auf wenigstens einen Betriebsparameter des medizinischen Geräts von der externen Datenverarbeitungseinheit an der Steuereinheit über die Datenverbindung,
• - Abgleich des angefragten Betriebsparameters mit Datensätzen, die auf einem Datenspeicher des medizinischen Geräts gespeichert sind, wobei die Datensätze jeweils eine Klassifikation eines der Betriebsparameter des medizinischen Geräts als kritisch oder unkritisch in Bezug auf die Patientensicherheit umfassen,
• - Zulassen eines Fernzugriffs ausschließlich auf die Betriebsparameter des medizinischen Geräts, die als unkritisch klassifiziert sind, wobei der Fernzugriff beendet wird, wenn eine Beendigungseingabe am medizinischen Gerät erfolgt und wobei nach dem Senden der Anfrage betreffend einen Fernzugriff überprüft wird, ob das medizinische Gerät in einem Leerlaufzustand betrieben wird, wobei ein Fernzugriff zugelassen wird, wenn das medizinische Gerät im Leerlaufzustand betrieben wird und ein Fernzugriff gesperrt wird, wenn das medizinische Gerät nicht im Leerlaufzustand betrieben wird.

Furthermore, the object is achieved by a method for establishing a remote access to operating parameters of at least one medical device with the following method steps:

• Establishing a data connection between a control unit of the medical device and an external data processing unit via an external interface of the medical device,
• Receiving a request for remote access to at least one operating parameter of the medical device from the external data processing unit at the control unit via the data connection,
• Matching the requested operating parameter with data records stored on a data storage of the medical device, wherein the data records each include a classification of one of the operating parameters of the medical device as critical or non-critical in terms of patient safety,
• - Allow remote access exclusively to the operating parameters of the medical Devices classified as non-critical, the remote access being terminated when a completion entry is made to the medical device, and after transmitting the remote access request, checking to see if the medical device is operating in an idle state allowing remote access, when the medical device is operating in an idle state and remote access is disabled when the medical device is not operating in an idle state.

By this method, it is possible to remotely control the operating parameters of a medical device while limiting remote access to the operating parameters that are not critical to patient safety. The classification of the operating parameters as critical or uncritical is made prior to the performance of the method, in particular by medical personnel or expertly advised personnel in this regard.

During a remote access, the medical device advantageously issues a warning, in particular on a display of the medical device, and blocks direct access to operating parameters of the medical device. According to the invention, the remote access is terminated when a completion input is made to the medical device.

According to the invention, after sending a request for remote access, it is checked whether the medical device is operating in an idle mode, allowing remote access when the medical device is operated in idle mode and remote access is disabled when the medical device is not idle becomes.

It is particularly advantageous if a user of the external data processing unit is shown whether the medical device is in idle mode. In this way, the user of the external data processing unit can preferably perform remote access when the medical device in question is currently in idle mode. Disruption of a user of the medical device, for example of the medical staff, is avoided and the useful life of the medical device is optimized.

Furthermore, in the case of a blocking of the remote access, a message is displayed on the medical device, in particular on a display of the medical device, whereby the blocking of the remote access to uncritical operating parameters is canceled by actuating a confirmation input on the medical device.

The method according to the invention also has the same advantages that have already been explained with reference to the medical device according to the invention.

Furthermore, the object is achieved by a computer program with program code means which are adapted to cause a medical device to carry out a method according to the invention. This computer program is, for example, installed on the control unit of the medical device.

Further features of the invention will become apparent from the description of embodiments according to the invention together with the claims and the accompanying drawings. Embodiments of the invention may satisfy individual features or a combination of several features.

• 1 ein medizinisches Datenkommunikationssystem, umfassend zwei medizinische Geräte und eine externe Datenverarbeitungseinheit in einer schematischen Darstellung,
• 2 die auf dem Datenspeicher gespeicherten Datensätze in einer schematischen Darstellung und
• 3 ein Flussdiagramm eines Verfahrens zum Etablieren eines Fernzugriffs auf Betriebsparameter wenigstens eines medizinischen Geräts.

The invention will be described below without limiting the general inventive idea by means of embodiments with reference to the drawings, reference being expressly made to the drawings with respect to all in the text unspecified details of the invention. Show it:

• 1 a medical data communication system comprising two medical devices and an external data processing unit in a schematic representation,
• 2 the data stored on the data store records in a schematic representation and
• 3 a flowchart of a method for establishing a remote access to operating parameters of at least one medical device.

In the drawings, the same or similar elements and / or parts are provided with the same reference numerals, so that apart from a new idea each.

1 schematically shows an embodiment of a medical data communication system according to the invention 1 comprising a first medical device 10 , a second medical device 20 and an external data processing unit 30 ,

The first medical device 10 includes an external interface 11 , a control unit 12 , an ad 13 and a data store 14 , Via the external interface 11 can the control unit 12 a data connection 16 with the external data processing unit 30 produce. The external data processing unit 30 has a suitable interface, not shown. The control unit 12 may also be on the data store 14 stored data. The ad 13 is at the in 1 illustrated medical device 10 exemplified as a touch-sensitive display, so that on the display 13 not just information, but the medical device 10 can also be controlled locally.

The second medical device 20 is analogous to the first medical device 10 constructed, but as an example, additional controls 25 , For example, buttons are provided. The ad 23 therefore, it does not have to be designed as a touch-sensitive display in order to give a user local access to the medical device 20 to grant.

The medical devices 10 and 20 do not need to be in the same room. Frequently the medical devices become 10 and 20 are located in different rooms of a hospital, which are spatially far apart. For example, the first medical device 10 in a patient room and the second medical device 20 be placed in an operating room. At the medical devices 10 . 20 For example, these are endoscopes, video processors, medical imaging equipment, or the like.

The external data processing unit 30 For example, a computer or server can be connected to the medical devices via a wired connection or wireless network 10 . 20 connected is. In the context of the present description, a "wired connection" is understood to be a data connection which is realized, for example, by means of copper cable, coaxial cable, optical fiber cable or the like. Of course, the data communication link can be partially wired and partially realized wirelessly. The external data processing unit 30 For example, it is located in an IT room of a hospital. Is one of the medical devices 10 . 20 in an idle state, so will a user of the external data processing unit 30 this is displayed.

In 2 are exemplary three data sets 41 . 42 . 43 shown schematically on the data storage 14 . 24 can be stored. The number of these data sets is limited to three for reasons of clarity, it is understood that fewer, but in particular significantly more records 41 . 42 . 43 on the data stores 14 . 24 be saved.

Each of the records 41 . 42 . 43 includes identification data of an operating parameter and a classification of this operating parameter. Every record 41 . 42 . 43 thus assigns a classification to an operating parameter.

In the first record 41 For example, data that stores an access password for the medical device is stored 10 . 20 affect. The access password is an operating parameter that is not critical to patient safety, which is why it is in record 41 classified as uncritical. This is indicated by the hook shown. The second record 42 concerns, for example, settings concerning monitoring of bodily functions of a patient. This operating parameter is classified as critical to patient safety, which is represented by an X. In the third record 43 For example, an operating parameter is included that relates to the import and export settings of image, video or patient information data. This operating parameter is also classified as non-critical.

In an alternative embodiment, the records are 41 . 42 . 43 on a data storage, not shown, of the external data processing unit 30 saved.

3 shows a flowchart which illustrates schematically the course of the method according to the invention. The first step 51 involves establishing a data connection 16 . 26 between the control unit 12 . 22 and the external data processing unit 30 via the external interface 11 . 21 , In the next step 52 becomes a request for remote access to at least one operating parameter of the medical device 10 . 20 from the external data processing unit 30 sent and from the control unit 12 . 22 receive.

The control unit 12 . 22 checks in the following step 53 whether the medical device 10 . 20 is operated in the idle state. Will the medical device 10 . 20 operated in the idle state, the method follows the branch in the direction of the step 54 and the control unit 12 . 22 resembles in this step 54 the requested operating parameters with the data records 41 . 42 . 43 starting on the data stores 14 . 24 are stored. Through this comparison, the control unit provides 12 . 22 in step 55 Determines for each requested operating parameter whether it is classified as non-critical.

If a requested operating parameter is classified as non-critical, the method follows the branch in the direction of the step 56 and in this step, remote access to the relevant operating parameter is permitted and direct access is blocked. At the same time, a warning message appears on the display 13 . 23 of the medical device 10 . 20 displayed. This warning indicates that there is a remote access to the medical device 10 . 20 takes place. In addition, it is pointed out in the warning that by entering a completion input the remote access can be ended. This completion input may be, for example, by touching a corresponding button on the touch-sensitive display 13 or by pressing one of the controls 25 be made.

If a completion entry according to step 57 is done, then the remote access in step 61 completed. Because remote access occurs only on non-critical operating parameters, terminating remote access does not jeopardize patient safety.

Is the medical device 10 . 20 at step 53 not in the idle state, the method follows the branch in the direction of the step 58 and in this step, a message appears on the display 13 . 23 of the medical device 10 . 20 displayed. This message informs a person using the device that they are trying to remotely access the operating parameters of the medical device 10 . 20 to establish. As part of this message, two input options are displayed. The person has in step 59 the possibility of allowing direct access by making a confirmation entry or preventing remote access by activating a lock entry. Such input may also be made by touching a corresponding button on the touch-sensitive display 13 or by pressing one of the controls 25 be performed.

If a confirmation input is made, the procedure follows the branch in the direction of the step 54 , If remote access is allowed, the next step will be 54 , ie the comparison of the requested operating parameters with the data records 41 . 42 . 43 , carried out. If, on the other hand, no entry or blocking input is actuated, then the remote access becomes active according to step 60 prevented. After a predetermined period of time, for example 5 minutes, the message disappears and the remote access is also made according to step 60 prevented, unless the confirmation input was previously made.

In an alternative embodiment, in step 58 As part of the message, only one input option appears, showing the person in step 59 gives the possibility to make a confirmation input, so that the procedure is the branch in the direction of the step 54 follows. A lock input is not provided in this embodiment. If the confirmation input is not pressed, the message disappears after the lapse of a predetermined period of time as described above and the remote access is made in accordance with step 60 prevented.

Will at step 55 If a requested operating parameter is not classified as uncritical, then the remote access to this operating parameter according to step 60 prevented.

If remote access attempts to gain access to critical and non-critical operating parameters at the same time, only remote access to non-critical operating parameters is permitted and access to all other operating parameters is prevented.

All mentioned features, including the drawings alone to be taken as well as individual features that are disclosed in combination with other features are considered alone and in combination as essential to the invention. Embodiments of the invention may be accomplished by individual features or a combination of several features. In the context of the invention, features which are identified by "particular" or "preferably" are to be understood as optional features.

LIST OF REFERENCE NUMBERS

1

medical data communication system

10

medical device

11

external interface

12

control unit

13

display

14

data storage

16

Data Connection

20

medical device

21

external interface

22

control unit

23

display

24

data storage

25

controls

26

Data Connection

30

external data processing unit

41-43

record

51-61

step

Claims (9)

Medical device (10, 20) having a control unit (12, 22) which is set up to establish a data connection (16, 26) with an external data processing unit (30) via an external interface (11, 21), the control unit ( 12, 22) is further arranged to request a remote access of the external Data processing unit (30) to receive operating parameters of the medical device (10, 20) via the data link (16, 26), wherein on a data memory (14, 24) of the medical device (10, 20) records (41, 42, 43) each having a classification of one of the operating parameters of the medical device (10, 20) as critical or noncritical with respect to patient safety, wherein the control unit (12, 22) is further configured to communicate the requested operating parameters with the data sets (41 , 42, 43) and to permit remote access exclusively to operating parameters classified as non-critical, characterized in that the medical device (10, 20) is adapted to terminate remote access when a completion entry is made to the medical device and the medical device ( 10, 20) is operable in an idle state, wherein the medical device (10, 20) is adapted to do so before admission remote access to check whether the medical device (10, 20) is operating in the idle state, allowing remote access when the medical device (10, 20) is operated in the idle state and a remote access is disabled when the medical device (10) 10, 20) is not operated in the idle state. Medical device (10, 20) after Claim 1 characterized in that the medical device (10, 20) is adapted to issue a warning during a remote access, in particular on a display (13, 23) of the medical device (10, 20), and provide local access to operating parameters of the medical device Device (10, 20) to lock. Medical device (10, 20) after Claim 1 , characterized in that the medical device (10, 20) is adapted, upon blocking the remote access, a message on the medical device (10, 20), in particular on a display (13, 23) of the medical device (10, 20) to output and suspend the blocking of remote access to non-critical operating parameters by actuating a confirmation input on the medical device (10, 20). Medical data communication system (1) comprising at least one medical device (10, 20) according to one of Claims 1 to 3 and an external data processing unit (30). Medical data communication system (1) according to Claim 4 characterized in that the medical data communication system (1) comprises at least two medical devices (10, 20), wherein a single external data processing unit (30) is arranged to connect a data link (16, 26) to the control units (12, 22) of all medical devices (10, 20) of the medical data communication system (1) and to establish a remote access to the operating parameters of all medical devices (10, 20). A method for establishing a remote access to operating parameters of at least one medical device (10, 20) with the following method steps: Establishing a data connection between a control unit of the medical device and an external data processing unit via an external interface of the medical device; Receiving a request for remote access to at least one operating parameter of the medical device (10, 20) from the external data processing unit (30) at the control unit (12, 22) via the data link (16, 26), - Matching of the requested operating parameter with data sets (41, 42, 43) stored on a data memory (14, 24) of the medical device (10, 20), wherein the data sets (41, 42, 43) each have a classification of one of Include operating parameters of the medical device (10, 20) as critical or noncritical with respect to patient safety, Allowing remote access exclusively to the operating parameters of the medical device (10, 20) classified as non-critical, the remote access being terminated when a completion input is made to the medical device (10, 20), after sending the request concerning a Remote access is checked whether the medical device (10, 20) is operated in an idle state, wherein a remote access is permitted when the medical device (10, 20) is operated in the idle state and a remote access is disabled when the medical device (10 , 20) is not operated in the idle state. Method according to Claim 6 , characterized in that during a remote access the medical device (10, 20) issues a warning, in particular on a display (13, 23) of the medical device (10, 20) indicates, and a direct access to operating parameters of the medical device (10 , 20) locks. Method according to Claim 6 characterized in that upon a blocking of the remote access, a message is displayed on the medical device (10, 20), in particular on a display (13, 23) of the medical device (10, 20), wherein by actuating a confirmation input on the medical device (10, 20) the blocking of the remote access to non-critical operating parameters is canceled. Computer program with program code means adapted to a medical device (10, 20) to induce a procedure according to one of Claims 6 to 8th perform.

Images