JP2006285441A - Medical apparatus and security management program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reproduce the use status of application software immediately before a power source is previously turned off as quickly as possible when power is supplied while further appropriately protecting personal information in a medical apparatus such as X ray CT or MRI. <P>SOLUTION: This medical apparatus 1 is provided with a session status storing part 8 for storing session status information showing session before a previous end, a system status storage part 11 for storing application status information showing the type of an application started before the previous end and a session control part 6 for controlling a session in the next start to be the designated session based on the session status information and the application status information. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a medical device and a security management program capable of starting a system with personal information protected.

  2. Description of the Related Art Conventionally, in medical apparatuses such as an ultrasonic diagnostic apparatus, an X-ray CT (computed tomography) apparatus, and an MRI (magnetic resonance imaging), a system startup process is performed prior to the start of an examination, and an OS (Operating System) or application Software is activated. When the application software is used for inspection and the inspection is terminated, the OS and application software are terminated by the system termination process.

  The medical device is in a state that can be used for the examination by starting the system in this way, but from the viewpoint of ensuring patient safety and effective use of the device, when trying to start using the medical device, The user is required to be able to use the medical device application software as quickly as possible.

  Therefore, in recent years, when the medical device is turned off and terminated, the usage status of the application software immediately before termination of the medical device is saved without closing the OS and application software, and saved when the medical device is turned on. There has been proposed a technique for resuming work from the use state of application software immediately before the end of the medical device.

  On the other hand, in the medical device, in order to perform security management of information stored in the medical device, a log-on process is performed during the start-up process of the medical device, while a log-out process is performed during the end process of the medical device. Done. In addition, when there is no key operation for a certain time, or when the operation is interrupted by a certain key operation, the display device is locked. When resuming the work, it is necessary to release the screen lock.

Further, various security management techniques using the screen lock have been proposed. For example, when multiple systems such as medical devices are connected to a network, if a user logs on to another system without logging out while logged on to a certain system, the security of the system that logged on first is protected. May not be fully planned. Therefore, in a certain system, it is determined whether a user who is logged on to the system is logged on to another system at the same time. A technique for locking the screen of the display device in the side system has been devised (see, for example, Patent Document 1).
JP 2002-342284 A

  As described above, the usage state of the application software immediately before the end of the medical device is saved, and when the power of the medical device is turned on, the operation is resumed from the saved usage state of the application software immediately before the end of the medical device. Depending on the technology, the usage state of the application software at the time of the previous inspection immediately before turning off the power can be reproduced in a shorter time.

  However, in the case of using the conventional security management technology in which the user starts using the application software by logging on or unlocking the screen, it is accompanied by authentication work such as password entry. When personal information such as a patient's name, date of birth, and address is displayed on the display device, there is a risk that personal information may be leaked.

  Therefore, it is important to develop a security management technique that can appropriately manage the security of personal information while saving the usage state of the application software immediately before the end of the medical device so that the work can be resumed in a shorter time.

  The present invention has been made to cope with such a conventional situation, and it is possible to reproduce the usage state of the application software immediately before turning off the power as much as possible at the time of power-on while protecting personal information more appropriately. An object is to provide a medical device and a security management program.

  In order to achieve the above-described object, the medical device according to the present invention includes a session state storage unit that stores session state information indicating a session before the previous end, and starts before the previous end, as described in claim 1 A system state storage unit that stores application state information indicating the type of the application being executed, and a session that controls the session at the next startup to be a specified session based on the session state information and the application state information And a control unit.

  Moreover, in order to achieve the above-described object, the medical device according to the present invention includes a session state storage unit that stores session state information indicating a session before the previous end, and a previous state before the previous end. A system state storage unit that stores application state information indicating the type of application running and the display state of personal information, and a session at the next start-up is designated based on the session state information and the application state information It has a session control part which controls to become a session.

  In order to achieve the above-mentioned object, the security management program according to the present invention saves session state information indicating a session before the previous termination of the medical device, as described in claim 9. A storage unit, a system state storage unit that stores application state information indicating a type of an application that has been activated before the previous end of the medical device, and the next medical device based on the session state information and the application state information It is characterized by functioning as a session control unit that controls a session at the time of activation to be a designated session.

  In order to achieve the above object, a security management program according to the present invention stores a session state information indicating a session before the previous termination of the medical device, as described in claim 10. Based on a state storage unit, a system state storage unit that stores application state information indicating the type of application activated before the previous end of the medical device and a display state of personal information, and the session state information and the application state information And functioning as a session control unit for controlling the session at the next startup of the medical apparatus to be a designated session.

  In the medical device and the security management program according to the present invention, it is possible to reproduce the usage state of the application software immediately before turning off the power as much as possible when the power is turned on, while protecting personal information more appropriately.

  Embodiments of a medical device and a security management program according to the present invention will be described with reference to the accompanying drawings.

  FIG. 1 is a functional block diagram showing a first embodiment of a medical apparatus according to the present invention.

  The medical device 1 includes an input device 2, a display device 3, and an application execution unit 4, and a security management system 5 is mounted. As the medical apparatus 1, in addition to an image diagnostic apparatus such as an ultrasonic diagnostic apparatus, an X-ray CT apparatus, and an MRI, a hospital information system (HIS), a radiation information system (RIS), a medical image storage A medical information system such as a communication system (PACS: picture archiving and communication system) can be used, and components for providing functions according to the type of the medical device 1 are provided, but are omitted here.

  The medical device 1 is configured such that a session transitions when a user ID or password is input from the input device 2 and a certain condition is determined.

  FIG. 2 is a session state transition diagram in the medical apparatus 1 shown in FIG.

  As illustrated in FIG. 2, the medical device 1 can take three sessions of a non-logon (Wait For Logon) state, a logon (Active) state, and a lock screen (Lock Screen) state waiting for a logon instruction. When the logon instruction is received from the input device 2 in the unlogged state or when a certain condition is satisfied, the medical device 1 transitions to the logon state and receives a screen lock instruction in the logon state. When a certain condition is satisfied, the medical device 1 transitions to the lock screen state. In addition, when an unlock instruction for canceling the screen lock is received in the lock screen state or when a certain condition is satisfied, the medical device 1 is in a logon state, and a log-off instruction is issued in the logon state or the lock screen state. When received from the input device 2 or when certain conditions are satisfied, the medical device 1 transitions to an unlogged state.

  In the unlogged state, a logon screen for receiving a logon instruction is displayed on the display device 3, and in the lock screen state, a screen lock screen is displayed on the display device 3. In the logon state, a desired application can be activated and used.

  An unlock instruction and a logon instruction can be given when authentication is successful by inputting information such as a user ID and a password via the screen lock screen or the logon screen. That is, by providing a lock screen state or a non-logon state in which personal information is protected, the use of the medical device 1 by a malicious user is prevented. In particular, the screen lock locks the screen while maintaining the current use state when the logged-on user temporarily leaves the medical apparatus 1 and unlocks it with user authentication. Thus, the work can be resumed.

  The application execution unit 4 displays the required information on the display device 3 in accordance with the operation of the input device 2, and executes a function for executing various applications such as an examination application and a patient information registration application, and the execution status of the application. 5 is notified.

  Here, each application is activated according to the state of the medical device 1 and is set as an operation target while transiting.

  FIG. 3 is a state transition diagram illustrating an example of an application state in the medical device 1 illustrated in FIG. 1.

  As illustrated in FIG. 3, the medical device 1 takes, for example, an activated state, a patient registration state, an image capturing state, an image observation state, and a filing state, and transitions between the states. Then, an application corresponding to each state is activated and executed, and a screen corresponding to the application is displayed on the display device 3.

  FIG. 4 is a diagram illustrating an example of a screen displayed on the display device 3 when the medical device 1 illustrated in FIG. 1 is in an activated state, and FIG. 5 is a diagram illustrating the medical device 1 illustrated in FIG. It is a figure which shows an example of the screen displayed on the display apparatus 3 in a certain case.

  As shown in FIG. 4, when the medical device 1 is in an activated state, for example, a business content selection button or an end button of the medical device 1 is displayed. As shown in FIG. 5, when the medical apparatus 1 is in a patient registration state, a patient registration application is used to display a column for inputting or referring to attribute information such as a patient's name and age. . Thus, depending on the execution state of the application, personal information such as the patient's name may or may not be displayed on the display device 3.

  The security management system 5 can be constructed by, for example, reading a security management program into a computer, but all or part of the security management system 5 may be constructed by a circuit. The security management system 5 stores the session state and application software use state immediately before the medical device 1 is turned off, and protects personal information when the medical device 1 is turned on and activated. However, it has a function to start the system in a state where the usage state of the saved application software is reproduced as much as possible. For this purpose, the security management system 5 includes a session control unit 6, a logon processing unit 7, a session state storage unit 8, a system control unit 9, a setting storage unit 10, a system state storage unit 11, and a setting change unit 12.

  The session control unit 6 has a function of controlling the session state in the medical device 1. Specifically, the session control unit 6 satisfies a predetermined condition based on information input from the input device 2 or a predetermined condition, for example, no operation of the input device 2 for a certain period of time. In such a case, a function for changing the session and a function for causing the display device 3 to display a logon screen and a screen lock screen to be displayed in each session are provided. The session control unit 6 is configured to notify the logon processing unit 7 of the session after the transition when the session is transitioned.

  The logon processing unit 7 has a function of creating logon state information (also referred to as session state information) for indicating the current session based on the notification from the session control unit 6 and writing it in the session state storage unit 8. . For this reason, the logon state information is information indicating which of the unlogged state, the logon state, and the lock screen state the current session is. Logon status information can be flag information or text information, for example.

  The session state storage unit 8 has a function of storing logon state information received from the logon processing unit 7. The session state storage unit 8 can be configured by an information recording medium such as a memory or an HDD (Hard Disk Drive).

  The system control unit 9 gives an instruction to the application execution unit 4 according to information from the input device 2 to start and execute various applications, perform state transition and termination, and when the application state transitions, or the application Or when the medical apparatus 1 is terminated, receives a notification from the application execution unit 4 and creates application state information for indicating the latest application execution state, and writes the created application state information in the system state storage unit 11 And have.

  The system state storage unit 11 has a function of storing application state information received from the system control unit 9. The system state storage unit 11 can be configured by an information recording medium such as a memory or an HDD.

  The application status information can include personal information display status information indicating whether or not the personal information is displayed on the display device 3 in addition to the type of the activated application.

  Further, the application state information can be created in association with all the applications. For example, in order to reproduce the information indicating whether or not each application was started before the state transition of a certain application or immediately before the end of the medical device 1, the execution state of the application that was started when the application was started Necessary unique information can be created for each application. Also, personal information display state information can be created for each application.

  As information indicating whether or not personal information is displayed in the application, for example, the personal information is displayed by creating information indicating whether or not there is a column for displaying personal information on the execution screen of the application. It is possible to determine whether the state is a non-display state. Further, for example, on the execution screen of the application, the personal information is in a display state or a non-display state by creating information indicating whether or not a field (area) for displaying personal information has a value. It can also be judged.

  Then, the criteria for identifying the type of personal information necessary for creating such personal information display state information and the criteria for determining whether the personal information is in a display state or a non-display state are defined as preset information. be able to. Furthermore, in addition to the information that defines the method for creating the personal information display state information, information that defines the execution state of the application when the medical device 1 is activated can be defined as preset information.

  The preset information is stored in the setting storage unit 10. Then, the system control unit 9 refers to the preset information stored in the setting storage unit 10 and determines the personal information according to the specific criteria of the type of personal information and the criteria for determining whether the personal information is in a display state or a non-display state. The information display state information is configured to be created.

  It is also possible to define a session state and an application execution state when the medical apparatus 1 is started next time using preset information. The session state and application execution state when the medical device 1 is activated are stored in the system state storage unit 11 as the session and application state information immediately before termination of the medical device 1 stored in the session state storage unit 8 as logon state information. It can be determined according to the execution state of the application immediately before the medical device 1 is finished.

  The session control unit 6 refers to the preset information stored in the setting storage unit 10, the logon state information stored in the session state storage unit 8, and the application state information stored in the system state storage unit 11. The medical device 1 is configured to be controlled so as to be in a session and application execution state specified when 1 is started.

  The setting changing unit 12 sets a method for creating personal information display state information according to information from the input device 2 and a function for creating preset information for determining an execution state of an application when the medical diagnostic device is activated, and the created preset information. A function of writing in the storage unit 10. For this reason, the setting change unit 12 has a function of displaying elements such as buttons and input fields on the display device 3 by using a GUI (Graphical User Interface) technique.

  Next, the operation of the medical device 1 will be described.

  FIG. 6 is a flowchart showing the flow of activation, termination, and restart in the medical device 1 shown in FIG. 1, and the reference numerals with numerals in S in the figure indicate the steps of the flowchart.

  First, in step S1, the medical device 1 is activated by operating the input device 2. Then, the session control unit 6 controls the session so that the medical device 1 is not logged on, and a logon screen is displayed on the display device 3. Here, the user can input information such as a password and a user ID by operating the input device 2, and can log on through processing such as authentication as necessary. That is, when the authentication is successful, the session control unit 6 changes the medical device 1 to the logon state.

  Next, in step S2, a specific criterion for the type of personal information, a criterion for determining whether the personal information is in a display state or a non-display state, and a session and application execution state when the medical device 1 is activated are instructed. Preset information for defining behavior determination criteria for the startup process is created. For this purpose, image information is given from the setting change unit 12 to the display device 3, and a preset information setting screen is displayed on the display device 3.

  FIG. 7 is a diagram illustrating an example of a preset information setting screen for the determination criteria regarding personal information displayed on the display device 3 of the medical device 1 illustrated in FIG. 1.

  As shown in FIG. 7, information such as name, date of birth, address, patient ID, and gender is listed as information that can identify an individual, and information that should be protected as personal information is arbitrarily selected from these pieces of information. be able to. FIG. 7 is a diagram illustrating an example in which a patient's name, date of birth, and address are set as personal information to be protected.

  In addition, a plurality of criteria for determining whether or not personal information to be protected is displayed on the operation screen of the application are set in advance, and the user can select any one from the set criteria. In FIG. 7, when an application for displaying personal information to be protected is activated, a determination criterion that personal information is displayed is selected.

  In this way, the personal information to be protected is the name, date of birth, and address, and preset information is set so that it is determined that the personal information is displayed when an application that displays the personal information is activated. be able to.

  Similarly, if there is a column that displays personal information in the running application, personal information is displayed when it is determined that personal information is displayed or there is a value in the area that represents personal information. Preset information can also be set so that it is determined that there is.

  FIG. 8 is a diagram illustrating an example of a preset information setting screen displayed on the display device 3 of the medical device 1 illustrated in FIG.

  As shown in FIG. 8, it is possible to define the behavior when the medical device 1 is activated, that is, the execution state of a session and an application. For example, the session at the time of activation can be changed depending on whether or not personal information is displayed on the display device 3 immediately before the previous end of the medical device 1. In FIG. 8, when the personal information is displayed before restarting and personal information is displayed, the personal computer is started in a lock screen state that requires user authentication for unlocking, and the personal information is not displayed. The behavior at startup is defined so as to reproduce and start the application execution state immediately before the previous end of the medical device 1 in the logon state.

  When the session of the medical device 1 immediately before the end of the medical device 1 is displayed on the screen lock screen and is in the lock screen state, or when the logon screen is displayed and the user is not logged on, the lock screen is displayed. It can be defined to start in state and unlogged state.

  In addition, when the session before the restart of the medical device 1 is in a logon state, each application is reproduced in the previous execution state regardless of whether or not personal information is displayed as shown in FIG. You can also define startup behavior to start in a lock screen state that requires user authentication to release.

  On the other hand, every time a session transitions, as shown in step S3, the logon processing unit 7 creates logon state information indicating the session after the transition in accordance with the notification from the session control unit 6. The created logon state information is written in the session state storage unit 8. Thus, the session state storage unit 8 always stores logon state information indicating the latest session.

  However, the logon processing unit 7 may create logon status information indicating a session only when the medical device 1 is terminated. As described above, when the latest session state is always recorded in the session state storage unit 8 or when the medical device 1 is terminated, the session state is recorded in the session state storage unit 8 only. In this case, the behavior at the time of activation can be defined such that the session state at the time of activation is determined according to the display state of personal information and the preset information, and activation is performed in the session state.

  On the other hand, as another method, when the medical device 1 is terminated, the session state at the time of activation is determined according to the display state of personal information and preset information, and the session state is recorded in the session state storage unit 8. You can also. In this case, the startup behavior can be defined such that the medical device 1 is started in the session state stored in the session state storage unit 8.

  Then, for example, when the end process is started during user logon and the session state at the next activation is determined, and the logoff is to be determined, the fact is stored in the session state storage unit 8. Then, logoff processing is performed at the next startup.

  As another example of determining the session state at the next start-up when the medical device 1 is ended, the session state at the start-up is determined according to the display state and preset information of the personal information when the medical device 1 is ended, It can also be ended after the session state. In this case, the session state at the time of activation is recorded in the session state storage unit 8 at the end. Then, the behavior at the time of activation can be defined so that the medical device 1 is activated in the session state stored in the session state storage unit 8.

  Then, for example, the end process is started during user logon, and when it is determined that the session state at the next activation is to log off, the log off process is performed at the end. Then, after the logoff state is recorded in the session state storage unit 8, the medical device 1 is terminated. For this reason, at the next start-up, the log-off state is started.

  Although there are the above methods, here, a case will be described in which the session state determination at the next activation is performed at the next activation.

  By the way, when the medical device 1 is in the logon state, the user can start and execute the application. That is, the operation screen of the application is displayed on the display device 3 based on the information given from the input device 2 to the application execution unit 4. When the input device 2 is appropriately operated, the execution state of the application is changed, and the execution state of the application after the transition is notified from the application execution unit 4 to the system control unit 9 one by one.

  Each time the execution state of the application transitions, application state information indicating the execution state of the application after the transition is created one by one by the system control unit 9 and written in the system state storage unit 11 as shown in step S4. The application status information includes personal information display status information indicating whether or not the personal information is displayed on the display device 3 in addition to the type of the activated application.

  Note that application state information indicating the execution state of the application immediately before the end of the medical device 1 is created and recorded in the system state storage unit 11 at the end of the medical apparatus 1 instead of or at the time of the application state transition. You may make it do. In any case, the system state storage unit 11 stores application state information at a time immediately before or just before the end of the medical device 1.

  Next, in step S <b> 5, an end instruction for the medical device 1 is input from the input device 2, and the medical device 1 ends under the control of the session control unit 6.

  Next, in step S <b> 6, a start instruction for the medical device 1 is input from the input device 2, and the medical device 1 is restarted under the control of the session control unit 6. At this time, the session control unit 6 refers to the preset information stored in the setting storage unit 10, the logon state information stored in the session state storage unit 8, and the application state information stored in the system state storage unit 11. The medical device 1 is activated so as to be in the execution state of the session and application that have been executed.

  For example, when preset information is set as shown in FIG. 7 and FIG. 8, the session control unit 6 is required to reproduce the execution state of the application that was started when the medical device 1 was terminated last time. By giving information to the application execution unit 4, the execution state of the application is reproduced. However, when it is determined that personal information is displayed, it starts in a lock screen state, and when it is determined that personal information is not displayed, it starts in a logon state.

  For example, when the medical device 1 is an ultrasonic diagnostic device, the medical device 1 is suspended in the previous image display / collection state in which personal information is not displayed, and the ultrasonic diagnostic device is moved to the bedside and turned on. In such a case, the ultrasonic diagnostic apparatus is activated in the logon state (image display / collection state). Further, for example, when the medical device 1 is ended in the patient information input state or the patient list display state last time, since the personal information is displayed, the device is started in the lock screen state. In this case, if the user performs authentication and succeeds in authentication, the patient information input state and the patient list display state can be reproduced again.

  In other words, the medical device 1 as described above is defined in advance in association with the display state of the personal information so that it can be restarted in a session in which the personal information can be protected. For example, when it is determined that the application execution state immediately before the end of the medical device 1 is not the display state of personal information, the application execution state immediately before the end is reproduced and started, while the application execution state immediately before the end is started. Is determined to be in a display state of personal information, the personal information is activated in a locked screen state or an unlogged state.

  Therefore, according to the medical device 1, it is possible to start up the system in the session before restarting while protecting personal information. Thus, the user can start work early while avoiding the risk of leakage of information that can identify an individual. In particular, it is considered effective in the start-up control of an ultrasonic diagnostic apparatus that often ends start-up.

  In addition, since the user can arbitrarily change the conditions for determining whether the personal information is displayed, whether the personal information is being displayed, and the conditions for determining the behavior of the activation process as preset information, the personal information corresponding to the operation status of the medical device 1 Proper protection of the system becomes possible.

  Although the personal information type, criteria for determining whether personal information is being displayed, and the criteria for determining the behavior of the startup process are defined as preset information via the setting screen at any time, the behavior of the startup processing is determined The reference may be set each time the medical device 1 is terminated or restarted.

  FIG. 9 is a functional block diagram showing a second embodiment of the medical apparatus according to the present invention.

  In the medical apparatus 1A shown in FIG. 9, the function and configuration of the security management system 5A are different from the medical apparatus 1 shown in FIG. Since other configurations and operations are not substantially different from those of the medical device 1 shown in FIG. 1, the same components are denoted by the same reference numerals and description thereof is omitted.

  The security management system 5A includes a session screen display unit 20, a session control unit 6, an activation control unit 21, an apparatus state management unit 22, an end control unit 23, a setting storage unit 10, and a setting change unit 12.

  The session control unit 6 has a function of controlling the session of the medical device 1A in accordance with instruction information from the input device 2, the activation control unit 21 or the end control unit 23, a function of notifying the session screen display unit 20 of the current session, and a current It has the function of writing the identification information of the logged-on user and the session in the device status management unit 22.

  The session screen display unit 20 provides the display device 3 with image information for displaying an image such as a screen lock screen, a logon screen, and a button for logoff in accordance with the current session notification received from the session control unit 6. It has a function to display.

  Then, by the operations of the session control unit 6 and the session screen display unit 20, the user gives necessary information from the input device 2 while referring to the screen displayed on the display device 3. Can be changed. For example, when the session of the medical device 1 </ b> A is not logged on (Wait For Logon), a logon screen is displayed on the display device 3. Then, authentication information such as a user ID and a password is input from the input device 2 to the logon screen. When the authentication is successful, the user logs on to the medical device 1A, and the session of the medical device 1A enters a logon (Active) state accordingly. .

  Further, when the session of the medical apparatus 1A is in the lock screen (Lock Screen) state, a screen lock screen is displayed on the display device 3. Then, authentication information such as a user ID and a password is input from the input device 2 to the screen lock screen. When the authentication is successful, the device is unlocked and the session of the medical device 1A enters a logon state. Further, when the session of the medical device 1A is in a logon state, for example, a logoff button for instructing logoff is displayed on the display device 3. When the logoff button is pressed by operating the input device 2, the session of the medical device 1A is not yet completed. Logged on.

  The device state management unit 22 has a function of storing the session received from the session control unit 6 and the identification information of the logged-on user.

  The setting storage unit 10 has a function of storing preset information for designating a session when the medical apparatus 1A is turned on, that is, at startup. In the preset information, a session at the next start-up can be specified in association with the end method of the medical apparatus 1A and the session immediately before the end.

  Here, the medical apparatus 1A can be terminated and activated by various methods. For example, the medical apparatus 1A can be configured so that it can be terminated and started in three types of procedures, Shutdown & Boot, Standby & Resume, and System Reset. Termination and activation by each procedure can be performed by designating the procedure from the input device 2 to the activation control unit 21, the termination control unit 23, and the application execution unit 4, and then giving an activation instruction or termination instruction.

  Shutdown & Boot is a process of closing all applications and the OS and turning off the power.

  Standby & Resume is a process of closing the OS and turning off the power after the execution state of the application in the medical device 1A is stored in a recording device such as a memory or a hard disk. For this reason, when the medical apparatus 1A is restarted, the execution state of the application is reproduced. The application execution state is configured to be written and saved from the application execution unit 4 to the device state management unit 22 when the medical device 1A is terminated, and when the application is restarted, the application execution unit 4 causes the device state management unit 22 to be stored. It can be configured to reproduce the execution state of the application by referring to it.

  System Reset is a process for restarting all applications while the OS is running. For this reason, the power supply is also kept on.

  FIG. 10 is a conceptual diagram showing an example of a session that can be designated as preset information at the time of restart in the medical apparatus 1A shown in FIG.

  As illustrated in FIG. 10, the medical device 1A immediately before the end of the session is in any of a non-logon (Wait For Logon) state, a lock screen (Lock Screen) state, and a logon (Active) state. Then, the user can terminate the medical apparatus 1A from any session by any one of Shutdown & Boot, Standby & Resume, and System Reset.

  If the session of the medical device 1A immediately before the end is in the Wait For Logon state, even if the medical device 1A is ended by any of the methods of Shutdown & Boot, Standby & Resume, and System Reset, It starts in Wait For Logon state.

  In addition, when the session of the medical device 1A immediately before the end is in the Lock Screen state, if the medical device 1A is ended by Shutdown & Boot, it is started in the Wait For Logon state at the next start-up, but it is in Standby & Resume or System When the medical device 1A is terminated by Reset, it is possible to select whether to activate in the Wait For Logon state or the Lock Screen state at the next activation.

  Furthermore, when the session of the medical device 1A immediately before the termination is in the Active state, if the medical device 1A is terminated by Shutdown & Boot, it is activated in the Wait For Logon state at the next activation, but it is in Standby & Resume or System Reset When the medical device 1A is terminated by the above, it is possible to select which session to activate in the Wait For Logon state, the Lock Screen state, or the Active state at the next activation.

  Then, the session at the next activation can be defined as preset information in accordance with the session immediately before termination and the termination method.

  The activation control unit 21 has a function of receiving the activation instruction from the input device 2, turning on the power of the medical device 1 </ b> A, and notifying the session control unit 6 that the power is turned on to drive it.

  Upon receiving an end instruction from the input device 2, the end control unit 23 has a function of turning off the power of the medical device 1 </ b> A and notifying the session control unit 6 that the power has been turned off. Further, the end control unit 23 refers to the preset information stored in the setting storage unit 10 and the session stored in the device state management unit 22 and the identification information of the logged-on user, so that the medical device 1A is started next time. It has a function of instructing the session control unit 6 of a session and a logged-on user.

  The setting changing unit 12 gives information for creating preset information to the display device 3 for display, while the function for creating preset information based on the information from the input device 2 and the created preset information for the setting storage unit 10 has a function of writing and saving or updating.

  Next, the operation of the medical device 1A will be described.

  FIG. 11 is a flowchart showing the flow of activation, termination and restart in the medical apparatus 1A shown in FIG. 9, and the reference numerals with numerals in the figure indicate the steps of the flowchart.

  First, in step S10, a power-on instruction is given from the input device 2 to the activation control unit 21, and the medical device 1A is activated. The activation control unit 21 notifies the session control unit 6 that power has been turned on. Then, the session control unit 6 causes the medical device 1A to transition to the unlogged state, and notifies the session screen display unit 20 that the medical device 1A has entered the unlogged state. The session screen display unit 20 gives image information for displaying the logon screen to the display device 3 for display.

  Further, when the user inputs authentication information such as a user ID and a password by operating the input device 2 and the authentication is successful, the session control unit 6 shifts the medical device 1A to the logon state. The session control unit 6 notifies the session screen display unit 20 that the medical device 1A has entered the logon state, and the session screen display unit 20 causes the display device 3 to display a screen on which the application can be used. For this reason, the user can appropriately change the session of the medical apparatus 1A such as activating a screen lock while using the application.

  Next, in step S <b> 11, the setting changing unit 12 creates preset information according to the operation of the input device 2, and writes and stores it in the setting storage unit 10. That is, the user can designate a session when the power of the medical apparatus 1A is turned on next time according to the session and the end method when the medical apparatus 1A is ended by creating preset information.

  On the other hand, in step S12, every time the session changes, the session control unit 6 writes and records the current session and the identification information of the logged-on user in the device state management unit 22 one by one. However, when an instruction to terminate the medical device 1A is given, the current session and the identification information of the logged-on user may be written and recorded in the device state management unit 22.

  FIG. 12 is a diagram illustrating an example of the current session and the identification information of the logged-on user recorded in the device state management unit 22 of the medical device 1A illustrated in FIG.

  As shown in FIG. 12, identification information of the current session and the logged-on user is recorded in the apparatus state management unit 22. That is, for example, when the current session is in the logon state, the session state is recorded as the logon state, and the logon user ID is recorded as taro. When the current session is not logged on, the session status is not logged on, and there is no logon user ID, so it is recorded as N / A (Not Applicable).

  In step S <b> 13, when an end instruction for the medical device 1 </ b> A is given from the input device 2, the end control unit 23 refers to the preset information recorded in the setting storage unit 10 and is recorded in the device state management unit 22. The session and logon user at the next start-up of the medical apparatus 1A are determined based on the identification information of the current session and the logged-on user. Note that the termination and activation of the medical device 1 </ b> A here include a case where only the application is reactivated by System Reset.

  Then, the termination control unit 23 notifies the session control unit 6 whether the determined session at the next startup is in the Wait For Logon state, the Lock Screen state, or the Active state. For example, when the session immediately before termination is in the Active state, and the session at the next activation is set to the Lock Screen state as preset information, the termination control unit 23 sets the session to the Lock Screen state at the next activation. To the session control unit 6.

  Next, in step S14, when a termination method that involves turning off the power is designated, the termination control unit 23 turns off the power.

  Next, when the power is off in step S15, the activation control unit 21 turns on the power according to the activation instruction from the input device 2, and notifies the session control unit 6 that the power is turned on. When only the application is restarted by System Reset, the start control unit 21 notifies the session control unit 6 that the application is restarted without switching the power on and off.

  For this reason, in step S13, the session control unit 6 controls the medical device 1A so as to be a session instructed from the end control unit 23 when the medical device 1A ended last time. At this time, the logon user is the logon user who was logged on at the previous end. For example, when the session at the previous end of the medical device 1A is in the Lock Screen state and the logged-on user is taro, the session control unit 6 starts the Lock Screen state with the logged-on user as taro.

  As a result, when the user restarts the medical device 1A in a desired session and wants to reproduce the execution state of the application, the personal information is protected as a Lock Screen state while reproducing the execution state of the application by System Reset. You can also.

  That is, the medical device 1A as described above is configured so that a session at the next start-up can be designated according to the session immediately before the end.

  Therefore, according to the medical device 1A, when personal information is displayed on the operation screen of the application at the end, the session at the next start-up is set to the Lock Screen state, and the personal information is protected in a shorter time. The application can be restarted or the execution state of the application can be reproduced. Conversely, when personal information is not displayed on the operation screen of the application at the end, it can be restarted in the logon state, and the operation can be resumed by reproducing the execution state of the application faster.

  The session designation at the next activation may be set by the user every time the medical device 1A is terminated, or may be selected every time the medical device 1A is activated. Also, the session control unit 6 is instructed to restart the session, the preset information recorded in the setting storage unit 10 when the activation control unit 21 is restarted, and the current session recorded in the device state management unit 22 It may be performed by referring to the identification information of the logged-on user, or the session control unit 6 stores the preset information recorded in the setting storage unit 10 and the current session recorded in the device state management unit 22. You may make it determine the session at the time of restart by referring the identification information of the user who is logging on.

  FIG. 13 is a functional block diagram showing a third embodiment of the medical apparatus according to the present invention.

  The medical device 1B shown in FIG. 13 is different from the medical device 1A shown in FIG. 9 in the configuration in which the update notification unit 30 and the device state update unit 31 are added to the security management system 5B and the detailed functions of each component. Since other configurations and operations are not substantially different from the medical device 1A shown in FIG. 9, the same components are denoted by the same reference numerals and description thereof is omitted.

  In addition to the session screen display unit 20, the session control unit 6, the activation control unit 21, the device state management unit 22, the termination control unit 23, the setting storage unit 10, and the setting change unit 12, the security management system 5B includes an update notification unit 30 and a device state update unit 31 are provided.

  The device state update unit 31 is the fact that the application is started or ended when receiving a notification from the application execution unit 4 that the application has been started or ended and a notification that the personal information has been input or displayed. And a function of writing the fact that personal information is input or displayed in the apparatus state management unit 22.

  The update notification unit 30 has a function of making a notification request to the effect that the personal information to the device status update unit 31 is input or displayed in the application execution unit 4 when a predetermined event occurs.

  Next, the operation of the medical device 1B will be described.

  Note that the procedure is the same as that of the medical device 1A except for the recording of the activation and termination of the application, the recording of the fact that personal information is input or displayed, and the flow of session determination when the medical device 1B is terminated and restarted. Is omitted.

  FIG. 14 is a sequence diagram showing a flow when recording the activation and termination of an application and the fact that personal information is input or displayed in the medical apparatus 1B shown in FIG.

  In S20, when an application activation request is given from the input device 2 to the application execution unit 4, a notification that the application is activated is given from the application execution unit 4 to the device status update unit 31 as shown in S21. Then, in S22, the device state update unit 31 writes the fact that the application is activated in the device state management unit 22.

  Furthermore, when the application is activated, personal information is input or displayed depending on the type of application. In that case, the fact that the personal information is input or displayed is recorded in the apparatus state management unit 22.

  That is, when personal information is given from the input device 2 to the application execution unit 4 in S23, a notification that the personal information is being inputted is given from the application execution unit 4 to the device state update unit 31 as shown in S24. . Then, in S25, the device state update unit 31 writes in the device state management unit 22 the fact that personal information is being input in the active application.

  In S26, when a display request for personal information is given from the input device 2 to the application execution unit 4, a notification that the personal information is being displayed from the application execution unit 4 as shown in S27. Given to. Then, in S <b> 28, the device state update unit 31 writes the fact that personal information is being displayed in the active application in the device state management unit 22.

  Furthermore, when an application termination request is given from the input device 2 to the application execution unit 4 in S29, a notification that the application is terminated is given from the application execution unit 4 to the device status update unit 31 as shown in S30. . Then, in S <b> 31, the device state update unit 31 writes the fact that the application is terminated in the device state management unit 22.

  As described above, when an event occurs in which information is input from the input device 2 to the application execution unit 4, a necessary notification can be given from the application execution unit 4 to the device state update unit 31. However, when other events occur, the application execution unit 4 may be configured to give a required notification to the device state update unit 31.

  For example, when the session of the medical device 1B is changed, when the medical device 1B is activated or terminated, the application execution unit 4 can periodically receive a required notification to the device state update unit 31. In that case, the update notification unit 30 can detect whether or not each of the above events has occurred, and when the update notification unit 30 detects each event, the application execution unit 4 can start or end the application, A notification request to the input / display device state update unit 31 is given.

  As a result, the apparatus state management unit 22 starts the session state, the logged-on user ID, the activated application, whether or not the activated application has a function of displaying personal information. If the application has a function of displaying personal information, apparatus status information indicating whether or not the application is displaying personal information is stored.

  When the user ends and restarts the medical apparatus 1B, the user restarts the session at the time of restart depending on whether the execution state of the application and personal information are input or displayed as well as the session immediately before the end. Can be specified.

  FIG. 15 is a sequence diagram illustrating a flow of session determination when the medical apparatus 1B illustrated in FIG. 13 is terminated and restarted.

  First, when setting information of preset information is given from the input device 2 to the setting changing unit 12 in S40, the setting changing unit 12 creates preset information, and in S41, the preset information is stored in the setting storage unit 10 from the setting changing unit 12. Is written and saved.

  Here, as in the case of the medical device 1 shown in FIG. 1, it is possible to create preset information that defines a restart session depending on whether the application execution state and personal information are input or displayed. it can. The preset information can be set every time at an arbitrary timing such as when the medical apparatus 1B is activated or terminated.

  Next, when a termination request for the medical device 1B is given from the input device 2 to the termination control unit 23 in S42, the termination control unit 23 determines that the previous medical device 1B stored in the device state management unit 22 is in S43. Refer to the device status information at the end. In S <b> 44, the end control unit 23 refers to the preset information stored in the setting storage unit 10.

  Next, in S <b> 45, the end control unit 23 performs the next time based on the device state information at the previous end of the medical device 1 </ b> B stored in the device state management unit 22 according to the preset information stored in the setting storage unit 10. Determine the session at startup.

  Next, in S46, the termination control unit 23 instructs the session control unit 6 to determine the session at the next startup.

  As a result, when the medical device 1B is restarted, the session control unit 6 controls the medical device 1B so as to become the instructed session, as in the case of the medical device 1A shown in FIG.

  That is, the medical device 1B as described above stores the execution state of the application and the presence / absence of display of personal information in addition to the functions of the medical device 1A shown in FIG. Can be determined in accordance with the execution state of and the presence or absence of display of personal information.

  For this reason, according to the medical device 1B, in addition to the same effect as the medical device 1A shown in FIG. 9, the session at the next start-up is determined in more detail according to the execution state of the application and the presence / absence of display of personal information. Therefore, it is possible to resume the work in a shorter time by reproducing the execution state of the application at the end of the previous time while protecting the personal information.

  In the medical device 1B, instead of using the update notification unit 30, the end control unit 23 refers to the device state information stored in the device state management unit 22 and executes the state of the application that is running immediately before the end. In addition, the application execution unit 4 may be configured to receive notification of whether or not personal information is displayed. In this case, the device state management unit 22 does not store the execution state and the presence / absence of display of personal information for the application that is running immediately before the end. Then, the end control unit 23 refers to the preset information stored in the setting storage unit 10, determines a session at the next activation, and instructs the session control unit 6.

  In addition, some functions and components of the medical devices 1, 1 </ b> A, and 1 </ b> B in the above embodiments may be omitted, or components in different embodiments may be combined with each other.

The functional block diagram which shows 1st Embodiment of the medical device which concerns on this invention. The session state transition diagram in the medical device shown in FIG. The state transition diagram which shows an example of the state of the application in the medical device shown in FIG. The figure which shows an example of the screen displayed on a display apparatus when the medical device shown in FIG. 1 is a starting state. The figure which shows an example of the screen displayed on a display apparatus when the medical apparatus shown in FIG. 1 is a patient registration state. The flowchart which shows the flow of starting, completion | finish, and restarting in the medical device shown in FIG. The figure which shows the example of a preset information setting screen about the judgment criteria regarding personal information displayed on the display apparatus of the medical device shown in FIG. The figure which shows the example of a preset information setting screen about the criterion in the behavior of a starting process displayed on the display apparatus of the medical device shown in FIG. The functional block diagram which shows 2nd Embodiment of the medical device which concerns on this invention. The conceptual diagram which shows an example of the session which can be designated at the time of restart as preset information in the medical device shown in FIG. The flowchart which shows the flow of starting, completion | finish, and restarting in the medical device shown in FIG. The figure which shows an example of the identification information of the current session recorded on the apparatus state management part 22 of the medical device shown in FIG. 9, and the user who is logged on. The functional block diagram which shows 3rd Embodiment of the medical device which concerns on this invention. The sequence diagram which shows the flow at the time of performing the recording of the fact which has input or displayed personal information in the medical device shown in FIG. FIG. 14 is a sequence diagram showing a flow of determining a session when the medical apparatus shown in FIG. 13 is terminated and restarted.

Explanation of symbols

1, 1A, 1B Medical device 2 Input device 3 Display device 4 Application execution unit 5 Security management system 6 Session control unit 7 Logon processing unit 8 Session state storage unit 9 System control unit 10 Setting storage unit 11 System state storage unit 12 Setting change Unit 20 Session screen display unit 21 Start control unit 22 Device state management unit 23 End control unit 30 Update notification unit 31 Device state update unit

Claims (10)

A session state storage unit for storing session state information indicating a session before the previous end;
A system state storage unit that stores application state information indicating the type of application running before the previous termination;
A session control unit for controlling the session at the next startup based on the session state information and the application state information to be a designated session;
A medical device comprising: A session state storage unit for storing session state information indicating a session before the previous end;
A system state storage unit that stores application state information indicating the type of application running before the previous end and the display state of personal information;
A session control unit for controlling the session at the next startup based on the session state information and the application state information to be a designated session;
A medical device comprising: The session control unit is configured to make the session in a state in which the personal information is protected at the next activation when it is determined from the application state information that the personal information is displayed. The medical device according to claim 1 or 2. The system state storage unit stores unique information necessary to reproduce the execution state of the application before the previous termination at the next startup,
When it is determined that personal information is displayed from the application state information, the session control unit sets the session at the next start-up to a state in which the personal information is protected, while the personal information is displayed. 3. The medical apparatus according to claim 1, wherein the medical device is configured so that the execution state of the application can be reproduced at the next start-up when it is determined that there is not. A setting change unit is provided for setting the changeable preset information that defines at least one of the type of the personal information, the determination condition of whether or not the personal information is displayed, and the determination condition of the session at the next activation,
5. The medical device according to claim 3, wherein the session control unit is configured to determine at least one of a session at the next startup and an execution state of the application according to the preset information. The session control unit is configured to refer to the application state information and determine whether the personal information is displayed based on whether the application having a function of displaying the personal information is activated. The medical device according to claim 3, wherein The session control unit refers to the application status information and determines whether or not the personal information is displayed depending on whether or not there is a column for displaying the personal information in the application that was started at the previous end. The medical device according to claim 3 or 4, wherein the medical device is configured to make a determination. The session control unit refers to the application status information, and whether or not the personal information is displayed depending on whether or not there is a value in an area for displaying the personal information in the application that was started at the previous end. The medical device according to claim 3 or 4, wherein the medical device is configured to determine whether or not. Computer
A session state storage unit for storing session state information indicating a session before the previous end of the medical device;
A system state storage unit that stores application state information indicating a type of an application that has been started before the previous end of the medical device; and at the next start of the medical device based on the session state information and the application state information Session control unit that controls the session to be the specified session,
Security management program characterized by functioning as Computer
A session state storage unit for storing session state information indicating a session before the previous end of the medical device;
A system state storage unit for storing application state information indicating a type of application activated before the previous end of the medical device and a display state of personal information, and the next time based on the session state information and the application state information A session control unit for controlling the session at the time of starting the medical device to be a designated session;
Security management program characterized by functioning as

Images