JP2008097187A - Remote access system, terminal for maintenance, and medical apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a remote access system for performing remote access to medical apparatus without preventing any normal inspection operation. <P>SOLUTION: This remote access system is configured to apply for the permission of remote access to medical apparatus, and to receive and display the permit of the remote access to the medical apparatus on a terminal for maintenance, to receive the remote access permission application transmitted from the terminal for maintenance, to manage the received remote access permission application, to decide whether or not the processing state of the device is accessible, to display the received remote access application, and to carry out remote access application examination for approval/rejection to the application on the medical apparatus. Furthermore, this remote access system is configured to prepare the permit showing approval to the remote access application, and to transmit the prepared permit to the terminal for maintenance, and to give the permission of the remote access. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

The present invention relates to network security of medical devices, and in particular, a remote access system when a maintenance terminal remotely accesses a medical device via a network, a maintenance terminal for performing remote access, and a medical device for which remote access is performed. Regarding equipment.

A medical device is a device used for diagnosis of a living body such as an X-ray diagnostic device, an X-ray CT device, or an MRI device, and the failure of the device may have a serious effect on the lifesaving of a patient. In addition, medical devices are sometimes used urgently and are required to be always usable.
For this reason, periodic maintenance and repairs as necessary are indispensable in order to prevent medical equipment from malfunctioning.

Therefore, in order to perform maintenance remotely, a conventional remote access system connects a plurality of medical devices to each other, transfers data, a remote maintenance computer located on the same site as the medical devices, and medical devices. It consists of a support center computer located in a support center that is different from the remote site. The medical device and remote maintenance computer are connected via a LAN, and the remote site computer is connected to the remote site via a public line or dedicated line. It is configured to connect to a support computer in the support center.

In such a conventional remote maintenance system, an operator in the support center causes the maintenance computer to start maintenance at any time or periodically. Then, the maintenance computer makes a self-diagnosis request to the medical device through the maintenance network. The log file generated by the self-diagnosis is returned to the maintenance computer via the maintenance network. Thereafter, the maintenance computer transmits the log file as an email attachment to the support center server via an external line (see, for example, Patent Document 1).

During remote access, authentication using a user ID and password, incoming call authentication from the incoming phone number, IP packet filtering to ensure security on the LAN side, caller ID notification yesterday, recognize the other party and call back Commonly known security measures such as automatic callbacks are implemented.
Japanese Patent Laid-Open No. 2003-50718

However, in the remote access system described in Patent Document 1, when a request from the support center computer is generated to the remote maintenance computer, the remote maintenance computer immediately responds and diagnoses. For this reason, there has been a problem that a sudden process occurs in the medical device or a window that impedes normal examination work is displayed.

SUMMARY OF THE INVENTION An object of the present invention is to provide a remote access system that can perform remote access to medical devices without interfering with normal examination work.

In order to achieve the above object, a remote access system of the present invention comprises a remote access means for requesting permission for remote access to a medical device on a maintenance terminal, and a remote access for receiving a permit for remote access to the medical device. On the license receiving means, the remote access permit display means for displaying the received remote access permit, and the medical device,
Remote access application accepting means for receiving the remote access permission application transmitted from the maintenance terminal, remote access application managing means for managing the received remote access permission application, apparatus status managing means for managing the processing status of the apparatus, Remote access application review means for displaying received remote access applications and approving / rejecting applications; remote access permit sending means for creating a permit indicating approval for remote access applications and sending the created permit Remote access application processing means for instructing remote access permission transmission means to permit remote access.

Provided is a remote access system capable of performing remote access to medical equipment without interfering with normal inspection work.

Hereinafter, an embodiment of a remote access system according to the present invention will be described with reference to FIGS.

  The first embodiment will be described with reference to FIGS.

FIG. 1 is a diagram showing a network configuration of a medical institution where medical equipment is installed and a network configuration of a maintenance service company that performs remote access. In FIG. 1, the network of a medical institution is composed of a plurality of network segments, and a public network 6 (
Internet). The medical device 4 is connected to the network segment 5 of the department that owns the medical device 4, and includes an imager 1 that prints a film, an image management system PACS2 that stores and manages captured images, and interpretation of captured images. The interpretation terminals 3 to be performed are connected to each other via a network to form the same network segment 5.
The network segment 5 is also provided with a dial-up router and TA / DSU for remote access via a public telephone line network or ISDN line network.

The maintenance service company in FIG. 1 is also composed of a plurality of network segments, and is connected to the public network 6 (Internet). In addition, the network segment 8 of a department having a maintenance terminal that performs remote access is connected to the dial-up router TA in order to perform remote access via a public telephone line network or ISDN line network. / DSU is installed. Note that remote access can also be performed by constructing a VPN that realizes a virtual dedicated network line on the public network 6 and via the VPN.

2 shows that either the medical device 4 forming the network segment 5 of the medical institution of FIG. 1 or the maintenance terminal 7 connected to the network segment 8 of the maintenance service company is connected to the public network 6 (Internet). FIG. 2 is a diagram illustrating a state in which the remote access system is connected to the remote access system according to the first embodiment.

First, on the maintenance terminal 7 side, remote access application means 11 for applying for permission for remote access to the medical device 4 and remote access permit reception for receiving a remote access permit for the medical device 4 from the medical device 4 side. Means 12 and remote access permit display means 13 for displaying the remote access permit received from the medical device 4 side and prompting the medical device 4 to start remote access are provided.

Further, on the medical device 4 side, a remote access application accepting unit 14 that receives a remote access permission application transmitted from the maintenance terminal 7 side, and a remote access application managing unit 15 that holds the received remote access permission application. And have. Furthermore, device state management means 1 for managing the processing state of the medical device 4 such as the current state of the medical device 4
6. Remote access application review means 17 that displays received remote access applications, approves / rejects applications, and creates a permit indicating approval for remote access applications, and transmits the created permit Certificate transmitting means 18.

Further, when a new remote access application is detected by making an inquiry to the remote access application management means 15, a predetermined state (for example, an examination state is checked while inquiring the processing state of the medical device 4 to the apparatus state management means 16. If it is not performed), a request for review is made through the remote access application management means 15, and the remote access permission transmitting means 18 is granted permission for remote access along with the examination result from the remote access application review means 17. Remote access application processing means 19 for instructing is arranged.

Next, the operation of the first embodiment will be described with reference to FIGS. FIG. 3 is a flowchart showing the flow of remote access application according to the first embodiment.

In the remote access application means 11, the person who performs the maintenance service applies to the medical device 4 for permission of remote access on the maintenance terminal 7 side (step S 1). An example of the remote access application screen at this time is shown in FIG. In FIG. 4, a target device to be remotely accessed is selected in the form of the connection destination 60 by the input or selection button 62, and the user ID of the user to be remotely accessed is entered in the form of the user ID 61. Further, a remote access request command (for example, “REQUEST”) and user I are displayed in the form of user ID 61.
D is connected with a field delimiter (for example, “:”), a transmission message composed of a terminal character (for example, a line feed character) is created, and when input is completed, the application button 63 is pressed to determine the IP address in advance. Sent to the specified port number. When stopping the application for remote access, the close button 64 is pressed to close the remote access application screen. At this time, the desired remote access date and time and the scheduled work start time may be transmitted together.

The input of the target device to the connection destination 60 may be an identification name (hereinafter referred to as a host name) on the network of the medical device 4 or an IP address. When a host name is input here, the IP address is acquired from a correspondence table of host names and IP addresses registered in advance, and the IP address is acquired from the host name using DNS.
P address can be acquired. Further, the user ID 61 form may be selected from the user IDs input in the past.

The message transmission from the remote access application means 11 to the remote access application acceptance means 14 in FIG. 2 is performed by a single protocol by socket communication on TCP / IP. In that case, RPC (Remote Procedure Call) or SOAP (Sim
ple Object Access Protocol), IIOP (Internet)
t Inter-ORB Protocol), RMI (Remote Method)
A standardized communication protocol such as Innovation) may be used. In addition, the encrypted data may be exchanged by SSL / TLS to ensure the safety of data flowing on the network.

Next, in (Step S2), the remote access application accepting means 14 sends the medical device 4
Waiting for reception of the remote access permission application message from the maintenance terminal 7 at the port number determined in advance above, and receiving the remote access permission application message, the received message is passed to the remote access application management means 15. The remote access application accepting unit 14 is basically paired with the remote access application unit 11 and must use the same communication protocol.

Next, in (Step S3), the remote access application management means 15 stores the remote access permission application message passed from the remote access application accepting means 14, and in response to a request from the remote access application processing means 19, Manage permission application messages. The remote access application management unit 15 may be realized by using a commercially available message management system, or may store and manage each message as a file.

Further, the remote access application management means 15 performs registration, update, search / acquisition, and deletion of the remote access permission application message, and displays management information such as registration date / time, status, message size, and source IP address as a remote access permission application message. To manage. Further, the message is managed by a FIFO (First-In First-Out) method. That is, the remote access permission application message registered first is basically taken out first.

Further, the remote access application processing means 19 confirms the presence / absence of a remote access permission application message at regular intervals, for example, every 10 minutes via the remote access application management means 15. Alternatively, when a new remote access permission message is applied, the remote access application processing means 19 may confirm the remote access permission application message via the remote access application management means 15.

Next, when a remote access permission application message is detected in (Step S4), the inspection execution state of the apparatus is confirmed via the apparatus state management means 16 in (Step S5). FIG. 5 shows an example of a normal inspection state of a medical device. Referring to FIG. 5, for example, when the examination execution state is “waiting 21”, a remote access permission application is issued to the user on the medical device side via the remote access application examination unit 17. Notify that When the examination execution state transits from the “waiting 21” state to another state during the process, the examination screen displayed on the medical device 4 side is automatically hidden from the remote access application examination unit 17. In addition, the examination screen may be switched to display for the remote access application examination unit 17 when the examination execution state returns to the “standby 21” state again. That is, when there is a request from the remote access application processing means 19 to switch the display / non-display of the examination screen, the examination screen is displayed / hidden on the monitor or the like on the medical device 4 side based on the request.

The device state management means 16 grasps the current state of the medical device 4 and returns the current examination execution state of the medical device 4 in response to an inquiry from the remote access application processing means 19. For example, in FIG. 5, the activation process is performed with power-on as a trigger, and during activation, the state is “20 in activation”, and when all activations are completed, the state transitions to the “standby 21” state. Transition from the “Waiting 21” state to the “Patient Exam 22” state in which the examination is performed,
The state transits to an “in image observation 23” state for observing a photographed image, or transits to an “being finished 24” state based on an instruction from the user.

When the examination is completed, the “patient examination 22” state returns to the “standby 21” state, or the “image observation 23” state returns to the “standby 21” state. “In patient examination 22”
In the state, explanation of the examination contents to the patient, pretreatment necessary for the examination, setting of the patient on the bed, photographing, observation of the patient condition after the examination, and the like are performed. In the “observing image 23” state, processing such as observation of captured images, analysis processing and image processing for those images, storage of these images, transfer to other systems, film creation, and the like are performed. When a medical device 4 malfunctions in the “patient examination 22” state, it is necessary to remotely control the medical device 4 by remote access for patient safety as an emergency response. There is. In this case, it is required to display that a remote access permission application has been received even in the “patient examination 22” state. Therefore, it is possible to display that a remote access permission application has been received regardless of the state of the apparatus, and to allow permission. In addition, a remote access permission application may be displayed by selecting a specific device state, and permission may be issued on the medical device side.

Next, in (Step S6), the remote access application examination means 17 inputs or selects the examination result (approval / rejection) from the user on the medical device 4 side. For example, an examination screen as shown in FIG. 6 is displayed on a monitor or the like on the medical device 4 side. Therefore, the user on the medical device 4 side connects the connection destination 70 and user ID 71 on the maintenance terminal 7 side that has requested remote access.
The reception date and time 72 is confirmed. Then, when approving the remote access, the user approves the remote access by pressing the approval button 73, and when rejecting the remote access, press the reject button 74 to reject the remote access. If the approval / rejection cannot be decided immediately, the application examination can be suspended by pressing the hold button 75. Note that a pending application examination is treated as a rejection if there is no operation for a certain period of time. When the user's examination result is “rejected”, the examination result may not be returned from the remote access permit transmission means 18. At this time, since the examination result is returned only when the maintenance terminal 7 is “permitted”, the examination result of “permitted” can be considered as a signal for starting remote access without being mistaken for “rejected”.

Further, the remote access desired date and time and the scheduled work time may be displayed on the examination screen of FIG. 6, and the user may be able to input and select the remote access permission date and time.

Next, in (Step S7), the remote access permit transmission means 18 in FIG. 6 shows that if the user selects the approval button 73 or the rejection button 74,
Based on the operation, the examination result is returned to the remote access application processing means 19, and the application examination result is transmitted to the maintenance terminal 7 based on the request from the remote access application processing means 19. Specifically, based on the application examination result, a remote access response command (for example, “RESP”
ONSE "), user ID, return source IP address, and examination result (for example," TRUE "/"
FALSE ") with a field delimiter (e.g.,": ") and a terminal character (
For example, a transmission message composed of a line feed character) is created, the transmission source IP address stored in the remote access permission application message management information is extracted, and the transmission source IP address and a predetermined port number are obtained. And send the created permit message. Thereafter, the remote access application management unit 15 is requested to delete the message that has been processed. Thereby, the processing of one remote access permission application message is completed.

If the remote access permission date and time can be entered, a message including the date and time information is created.

Here, the permit message is transmitted by a unique protocol by socket communication on TOP / IP. A standardized communication protocol such as RPC, SOAP, IIOP, or RMI may be used. In addition, the encrypted data may be exchanged by SSL / TLS to ensure the safety of data flowing on the network.

Next, in (step S8), the remote access permit receiving means 12 on the maintenance terminal 7 side receives the remote access permit message from the medical device 4 side and passes it to the remote access permit display means 13. Basically, it is paired with the remote access permit transmission means 18 on the medical device 4 side, and the same communication protocol must be used. The remote access permit receiving means 12 waits for reception of a remote access permit message from the medical device 4 at a port number predetermined on the maintenance terminal 7 side. When the remote access permit message is received, the received message is analyzed, the user ID and the examination result are taken out and passed to the remote access permit display means 3.

Next, in (Step S9), the remote access permit display means 13 on the maintenance terminal 7 side displays the information received by the remote access permit reception means 12 on a monitor or the like. FIG.
The example of the screen of the remote access permit display means 13 is shown. In this way, on the window of the remote access permission application screen, a dialog box 80 such as “Application is permitted” is displayed.
Is displayed. If the remote access permission message includes remote access permission date and time information, the information is displayed on the screen of the dialog box 80 in FIG.

As described above, in the first embodiment of the present invention, since the medical device side can know in advance that remote access is to be performed in advance, processing delay or unexpected due to the operation of the remote access tool It is possible to prevent the operation from being interrupted by the window screen display. Specifically, only when the state of the device on the medical device 4 side is “standby 21”, the remote access permission application screen suddenly appears during the operation to notify that a request for remote access has come. It is not displayed and it can be avoided that the operation is disturbed.

The display / non-display of the remote access permission application on the medical device 4 side depends on the state of the device of the medical device 4, but it can be changed to display even in a state other than “standby 21”. Because it is possible, in the case of remote access that requires emergency, a remote access permission application can be made when the device is moving. Therefore, remote access permission can be issued for dealing with problems that occur during medical treatment.

In addition, since remote operation for the medical device 4 is started for the first time when remote access is permitted, the remote access is not erroneously started, and the medical device 4 side can perform medical care with peace of mind.

If the user's remote access permission application examination result is “rejected”, the remote access permit sending means 18 does not return the examination result, so that the result is returned only when “permitted”. Therefore, it is possible to prevent the remote access side user from erroneously recognizing the “rejection” and “permission” examination results.

  A second embodiment will be described with reference to FIGS.

FIG. 8 is a diagram illustrating the configuration of the remote access system according to the second embodiment. Note that the network configuration on the medical institution side according to the second embodiment and the network configuration on the maintenance service company side that performs remote access have been described in the first embodiment, and are omitted here.

The second embodiment is different from the first embodiment in that remote access is detected on the medical device 4 side,
The remote access security audit is performed. In the second embodiment, as shown in FIG. 8, the medical device 4 is provided with a remote access record creating means 34 for creating a remote access record for audit based on the security log 38. Further, the remote access audit means 35 for displaying the created remote access record on a monitor or the like on the medical device 4 side and approving / rejecting the record, and the remote access audit result transmitting means for transmitting the audit result to the maintenance terminal 7 side 36. And remote access audit processing means 37
However, when the medical device 4 detects a new remote access by inquiring to the remote access application management means 15, the apparatus processing status is inquired of the apparatus status management means 16. At the same time or immediately after that, when the medical device 4 is in a predetermined device state, an audit request is made, and the audit result is sent to the remote access audit result sending means 36 based on the audit result from the remote access audit means 35. Remote access audit processing means 37 for instructing the transmission of.

In addition, the remote access audit result receiving means 30 for receiving the remote access audit result from the medical device 4 side and the remote access audit result registration for registering the received remote access audit result in the maintenance terminal 7 or the maintenance service company. Means 31. Furthermore, remote access audit result management means 32 for managing the registered audit results and remote access audit result display means 33 for searching and displaying the managed audit results are arranged.

  Next, the operation of the second embodiment will be described with reference to FIGS.

First, when the maintenance terminal 7 is connected to the medical device 4 for remote access,
User authentication is performed, and the record of the user authentication is recorded in the remote access record creating means 34.
It is recorded in the security log 38 on the medical device 4 side. Specifically, the information is as follows. Remote access type (eg, “Success Audit”), date (eg, “2003 /
09/25 "), time (eg," 13:11:08 "), source (eg," SECU
RITY "), classification (eg," system event "), event (eg," 528 ")
), User (eg “TOSHIBA”), computer (eg “TOSHIBA”)
CT1 ").

For example, if the event is “528”, it indicates that “the user on the maintenance terminal 7 has logged on to the computer”, and whether the logon type is “2: interactive” or “3:
Record whether the network type. Further, in the case of “network type”, the IP address of the access source is recorded. If the event is “538”, it means that “the user log-off processing on the maintenance terminal 7 side has been completed”. Also, when logging on, issue a logon ID,
By storing the logon ID in the security log 38 and viewing the logon ID at the time of logoff, the correspondence relationship between logon and logoff can be called immediately, such as when the user logged on and what work was performed.

Further, the remote access record creation means 34 periodically checks the security log 38 (for example, once a day), and the security log 38 indicates that “528: the user has logged on to the computer” and logged on. Search for a record whose type is “3: network type”. If a record is found, the logon ID in the event is extracted, the login ID is the same, and the event is “538: User logoff process Look for "completed" records and create remote access records.

Since the security log 38 includes past records, there is a possibility that what has been checked in the past may be listed twice, so the date and time of the record that was checked last time is displayed. Record it, and check it from the record after that date and time.

Further, the remote access application management means 15 is inquired as to whether or not a remote access application is currently received, and the application source IP address, application reception time, application status (under application,
(Approved, rejected) may be acquired and added to the remote access record.

Next, the remote access audit processing unit 37 periodically checks the presence / absence of a new remote access record in the security log 38 via the remote access record creating unit 34, and when a new remote access is detected. Confirms the examination execution state of the medical device 4 via the apparatus state management means 16. As shown in FIG. 5, the device state management means 16 grasps the current state of the medical device 4, and the remote access audit processing means 3
In response to the inquiry from 7, the current examination execution state of the medical device 4 is answered. Medical equipment 4
Since the apparatus state has been described in the first embodiment, a description thereof will be omitted.

Here, when the examination execution state is the “waiting 21” state, the remote access auditing means 35 indicates that the user on the medical device 4 side is performing remote access or that remote access has been performed. Is notified to the user on the medical device 4 side based on the request from the remote access audit processing means 36.

For example, FIG. 9 is an example of a remote access audit result input screen, and the user inputs or selects an audit result as to whether or not the remote access is appropriate on such a screen. At this time, the user on the medical device 4 side confirms the request source 90 and the user ID 91 on the maintenance terminal 7 side performing remote access. Further, the date and time of remote access application (application presence / absence 92, application date and time 93, examination date and time 94) is confirmed, and whether or not remote access has actually been performed (work status 95, start date and time 96, end date and time 97). )
Here, when there is no problem such as an error in the contents, the approval button 98 is pressed to approve the audit contents. If there is a problem, the rejection button 99 is pressed to remote access audit processing means 36.
Is instructed to restart the audit from the beginning. In addition, when a hold is made once, the hold button 100 can be pressed to hide the screen. Further, when the holding period continues for a certain period of time, an instruction may be sent to the remote access audit processing means 36 to perform the audit again from the beginning, as in the case where the reject button 99 is pressed. In FIG. 9, when an input or selection is made by the user, an audit result is returned to the remote access audit processing means 37 based on the operation.

In addition, if the inspection execution state transitions from the “waiting 21” state to another state on the way,
The remote access audit means 35 is automatically switched to hide the remote access audit result input screen, and when the inspection execution state returns to the “waiting 21” state again, the remote access audit means 35 The remote access audit result input screen may be switched to display.

Next, the remote access audit result transmitting means 36 is connected to the remote access audit processing means 37.
The audit result is transmitted to the maintenance terminal 7 based on the request from. Specifically, based on the audit result, the audit result command (for example, “AUDIT”), the remote access user ID, remote access start time (logon date / time) / remote access end time (logoff date / time), Pre-application presence / absence, source IP address, and audit result (for example, “TRUE” / “F
ALSE ") with a field delimiter (for example,": "), and a transmission message composed of a terminal character (for example, a line feed character) is created. For a predetermined destination IP address and port number, Send the created audit result message.

The audit result message is transmitted by a unique protocol by socket communication on TCP / IP. A standardized communication protocol such as RPC, SOAP, IIOP, or RMI may be used. Further, it may be exchanged by encrypted communication by (SSL / TLS) for ensuring the safety of data flowing on the network.

Next, the remote access audit result receiving means 30 of the maintenance terminal 7 receives the audit result message and passes it to the remote access audit result registration means 31.

The remote access audit result receiving means 30 is basically paired with the remote access audit result transmitting means 36 on the medical device 4 side, and must use the same communication protocol. The remote access audit result receiving means 30 is configured as a program that waits for reception of an audit result message from the medical device 4 at a predetermined port number at an arbitrary maintenance terminal 7. When the audit result message is received, the received audit result message is analyzed, the remote access user ID, the remote access start time (logon date and time), the remote access end time (logoff date and time), the prior application presence, the transmission source IP The address and the audit result are taken out and passed to the remote access audit result registration means 31.

Next, the remote access audit result registration unit 31 registers the audit result information acquired by the remote access audit result reception unit 30 in the remote access audit result management unit 32. Since the remote access audit result management means 32 can be operated on a different computer system, the audit result information is registered via the network. When the remote access audit result management means 32 is constructed by a database management system, a data registration statement based on a database operation language such as SQL is created and the created data registration statement is transmitted via the network. Register the audit result with.

The remote access audit result management means 32 and the remote access audit result registration means 3
1 may be arranged on the same computer system. Also, the audit result information may be registered using a unique communication protocol. The remote access audit result management means 32
To manage remote access audit results. It may be managed by a database management system or may be managed as a file.

As shown in the example of the audit result display screen in FIG. 10, the audit result display screen is the connection destination 10 first.
1 and the user ID 102 are displayed, and who accessed where is displayed. continue,
Whether or not the remote access permission application is permitted / rejected is displayed in the application presence / absence 103, the remote access application date / time 104 and the remote access permission / rejection examination date / time 10
5 is displayed. In addition, the work start date and time 107 and the work end date and time 108 are displayed following the audit result 106. The remote access audit result display means 33 inputs a search condition for a device or the like to check the audit result, displays a list of the audit results, and displays the audit result selected in the list.

As described above, in the second embodiment of the present invention, when the remote access is performed on the medical device side, the security log 38 is left, and the remote access audit record is left from the security log so that the remote access is valid. Can be confirmed on the medical device without obstructing the user operation.

Further, by managing the remote access audit record on the maintenance terminal side, the remote access audit record can be confirmed on the maintenance terminal 4 side and the status of remote access to the medical device 4 can be confirmed at any time. Even if unauthorized access to the medical device 4 side is made, it can be found immediately.

In addition, the remote access audit record can be displayed on the maintenance terminal 7 by inputting a search condition of a device or the like for which the audit result is to be checked, and the remote access audit result can be displayed. You can find the results immediately.

In addition, the security log check records the date and time of the last record that was checked last time, and checks from the record after that date and time duplicates what was previously checked in the security log. Can be prevented from being listed.

  A third embodiment will be described with reference to FIGS.

FIG. 11 is a diagram illustrating the configuration of the remote access system according to the third embodiment. Example 3
Since the network configuration on the medical institution side and the network configuration of the maintenance service company that performs remote access have been described in the first embodiment, they are omitted here.

The third embodiment is different from the first and second embodiments in that a security audit report is created by combining the security audit result on the medical device 4 side and the security audit result on the maintenance terminal 7 side. In the third embodiment, as shown in FIG. 11, the user authentication means 40 for recording the user logon / logoff and the user authentication record management means for centrally managing the user authentication results on the maintenance terminal 7 side or in the maintenance service company. 41 is provided. Further, the remote access audit result management means 32 is inquired based on the device identification information, the remote access audit result is obtained, and the user authentication record management means 41 is inquired based on the remote access audit result. An audit report creating means 42 is provided for confirming whether or not the remote access exists and creating the remote access audit result and the user authentication result as an audit report. Furthermore, an audit report display unit 43 that displays the audit report and an audit report transmission unit 44 that transmits the audit report are arranged.

  The operation of the third embodiment will be described with reference to FIGS.

First, the user authentication means 40 authenticates the logged-in user on the maintenance terminal 7 side. At this time, a basic authentication method using an ID / password, an authentication method using biometric information such as a fingerprint, or an authentication method using a physical medium such as an IC card may be used. The user authentication means 40 basically makes an authentication request to the user authentication record management means 41.

Next, the user authentication record management means 41 performs user authentication performed at each maintenance terminal 7 and holds the authentication record. Also, a network domain in which the maintenance terminal 7 participates is provided, all users who use the maintenance terminal 7 are registered in the network domain, and when logging on to the maintenance terminal 7, the network domain is logged on. Thereby, when the user designates the network domain at each maintenance terminal 7 and inputs the user authentication information, the user authentication information is transmitted to the user authentication record management means 41 (domain controller),
Therefore, the identity of the user is confirmed. If the identity is confirmed, the maintenance terminal 7
You can log on to

Next, the audit report creation means 42 performs an audit based on the audit result information managed by the remote access audit record management means 32 and the usage information of the maintenance terminal 7 managed by the user authentication record management means 41. Check whether the remote access described in the result information has been performed, and create a report based on the result. FIG. 12 shows an example of an audit report.

As shown in FIG. 12, the work target device 110 displays the device type, product serial number, and device IP address. Further, the work record 111 displays the work date, work time, user ID, and presence / absence of in-house records. The audit report may be issued every month as shown in FIG. 12, or may be issued every week.

Next, the audit report display unit 43 displays the audit report created by the audit report creation unit 42. Since the report is created in the XML format, the X
When the ML file is displayed, an audit report is displayed according to the style sheet. Also, a time chart of an audit report may be created for each maintenance terminal 7 and user ID to check for duplicate remote access.

Next, when the report type is an e-mail based on the destination address and the report type described in the message, the audit report transmission unit 44 creates the audit report created by the audit report creation unit 42. As an XML attachment file format,
An e-mail addressed to the designated destination address is created and transmitted to the e-mail server using the SMTP protocol. The attached file may be sent after being compressed.
If the report type is FAX, create image data from the XML file,
Send to server. The FAX server is connected to a telephone line and can transmit the image data to a designated telephone number. The FAX server is realized by designating a FAX printing device, setting a transmission destination and a FAX number, and instructing printing.

  Here, FIG. 13 shows the flow of the audit report creation / transmission process.

First, an audit report is basically created periodically for each medical device 4. As shown in FIG. 13, the audit result from the remote access audit result receiving means 30 and the device information (device type, device model, product serial) managed by the maintenance device contract management system 50 and concluded with the maintenance contract. Number), customer information (medical institution name, address, representative name, report type, report destination), maintenance information (installation date and time, device IP address, maintenance contract presence, maintenance contract content, maintenance contract expiration date), etc. The data is sent to the remote access audit result registering means 31 in association with it.

The remote access audit result registration unit 31 has a GUI screen for instructing report creation, and inputs and selects a device type (for example, an X-ray CT device) and a report creation month from the GUI screen. A list of devices that match the type and have a maintenance contract,
Device type, device model, product serial number, report type (Email / F)
AX), destination address (s) and device IP address are acquired, a report creation instruction is created for each medical device 4 and managed by the remote access audit result management means 32. The remote access audit result management means 32 is assumed to be managed by the message management system and can take out the messages in order by the FIFO method. The audit report creating means 42 first extracts the first message managed by the message management system, and the device type, device model, product serial number, IP address, report type described in the message. , Take out the delivery address, create a report, and send the created report. The audit report creating means 42 repeats the creation of reports until all the messages are processed, and waits for a new message when all the reports are created.

The report is created by acquiring an audit result record including the same IP address from the remote access audit result management means 32 using the IP address as a search condition, and based on the IP address of the access source in the next remote access audit record record. Then, the record is acquired from the user authentication record management means 41. Then, the remote access time in the audit result record and the work time (logon time and logoff time) in the user authentication record record are compared, and it is determined whether there is an internal record based on whether the time overlaps. An audit report is created by adding a user ID.

And since one maintenance terminal cannot access multiple medical devices at the same time, create a time chart for each maintenance terminal and user ID, and check that there is no duplicate remote access. You can also check if remote access is done properly. The report is created in the XML format, and a style sheet is added.

Next, when the report type is an e-mail, the audit report transmission means 44 creates an e-mail with the XML file as an attached file format of the e-mail and a destination addressed to the designated destination address. Send to mail server using SMTP protocol. Also,
If the report type is FAX, create image data from the XML file,
Send to server. The FAX server is connected to a telephone line and can transmit the image data to a designated telephone number.

As described above, in the third embodiment of the present invention, it can be confirmed that the remote access is surely performed from the maintenance service company.

In other words, it is possible to identify unauthorized access and incorrect access. By combining the logs on the remote access side and the log on the medical device side, when and who accessed from which time, how long it accessed Therefore, remote access can be performed more safely.

In addition, even if there is an abnormality in remote access, it is possible to quickly identify the cause by associating logs, so that the subsequent countermeasures can be performed quickly.

It is also possible to periodically submit an audit report to the user of the medical device 4 and periodically check the audit log to check for remote access management errors periodically. I can do it.

In addition, it is possible to check whether remote access is properly performed by creating a time chart for each maintenance terminal 7 and user ID and checking that there is no duplicate remote access.

  In addition, this invention is not limited to the above structure, A various change is possible.

The figure which shows the network structure of the medical institution side in which the medical device by this invention is installed, and the network structure of the maintenance service company which performs a remote access. 1 is a diagram showing an overall configuration of a remote access system according to Embodiment 1 of the present invention. The flowchart which shows the flow of the remote access application of Example 1 of this invention. The figure which shows the example of the remote access application screen of this invention. The figure which shows the test | inspection state of the medical device of this invention. The figure which shows the example of the remote access application examination screen of this invention. The figure which shows the example of the remote access permit display screen of this invention. The figure which shows the structure of the remote access system of Example 2 of this invention. The figure which shows the example of the remote access audit screen of this invention. The figure which shows the example of the remote access audit result display screen of this invention. The figure which shows the structure of the remote access system of Example 3 of this invention. The figure which shows the example of the remote access audit report of this invention. The figure which shows the flow of a process of audit report preparation and transmission of this invention.

Explanation of symbols

11 Remote access application means 12 Remote access permit reception means 13 Remote access permit display means 14 Remote access application acceptance means 15 Remote access application management means 16 Device state management means 17 Remote access application examination means 18 Remote access permit transmission means 19 Remote access application processing means 30 Remote access audit result receiving means 31 Remote access audit result registration means 32 Remote access audit result management means 33 Remote access audit result display means 34 Remote access record creation means 35 Remote access audit means 36 Remote access audit result transmission Means 37 remote access audit processing means 40 user authentication means 41 user authentication record management means 42 audit report creation means 43 audit report display means 44 audit report Port transmission means

Claims (14)

A remote access means for requesting permission for remote access to the medical device to the maintenance terminal side;
A remote access permit receiving means for receiving a permit for remote access to the medical device;
A remote access permit display means for displaying the received remote access permit;
On the medical device, remote access application accepting means for receiving the remote access permission application transmitted from the maintenance terminal;
Remote access application management means for managing received remote access permission applications;
Device state management means for managing the processing state of the device;
Remote access application review means that displays received remote access applications and approves / rejects the application,
A remote access permit sending means for creating a permit representing approval or rejection of the remote access application and sending the created permit to the maintenance terminal;
Remote access application processing means for instructing remote access permit transmission means to permit remote access, and a remote access system. Remote access audit result receiving means for receiving the remote access audit result on the maintenance terminal side or in the maintenance service company;
A remote access audit result registration means for registering the received remote access audit result;
Remote access audit result management means for managing registered audit results;
Remote access audit result display means for searching and displaying managed audit results;
A remote access record creation means for creating a remote access record for auditing based on the security log on the medical device;
Remote access audit means to display the created remote access record and approve / reject the record,
Remote access audit result transmission means for transmitting the audit result to the maintenance terminal;
The remote access system according to claim 1, further comprising: a remote access audit processing unit that instructs the remote access audit result transmission unit to transmit the audit result. User authentication means for recording user logon / logoff on the maintenance terminal side or in the maintenance service company,
User authentication record management means for centrally managing user authentication results;
An audit report creation means for creating a remote access audit result and a user authentication result as an audit report;
An audit report display means for displaying the audit report;
The remote access system according to claim 1, further comprising: an audit report transmission unit that transmits the audit report. 2. The remote access system according to claim 1, wherein the remote access permit transmitting means transmits to the maintenance terminal only when the permit created for the remote access application is approved. 3. The remote access system according to claim 2, wherein the remote access record creating means records the date and time of a record checked in the past, and checks from the record after that date and time. 4. The remote access system according to claim 3, wherein the audit report creating means creates the audit report in an XML format. A remote access means for applying for remote access permission for the medical device;
A remote access permit receiving means for receiving a permit for remote access to the medical device from the medical device side;
Remote access permit display means for displaying the received remote access permit;
A maintenance terminal characterized by comprising: A remote access application acceptance means for receiving a remote access permission application transmitted from the maintenance terminal;
Remote access application management means for managing received remote access permission applications;
Device state management means for managing the processing state of the device;
Remote access application review means that displays received remote access applications and approves / rejects the application,
A remote access permit sending means for creating a permit representing approval or rejection of the remote access application and sending the created permit to the maintenance terminal;
A medical device comprising: a remote access application processing means for instructing remote access permission transmission means to permit remote access. Remote access audit result receiving means for receiving remote access audit results from the medical device side;
A remote access audit result registration means for registering the received remote access audit result;
Remote access audit result management means for managing registered audit results;
A maintenance terminal comprising: a remote access audit result display means for searching and displaying a managed audit result. Remote access record creation means for creating a remote access record for audit based on the security log;
Remote access audit means to display the created remote access record and approve / reject the record,
Remote access audit result transmission means for transmitting the audit result to the maintenance terminal;
A medical device comprising: a remote access audit processing unit that instructs the remote access audit result transmission unit to transmit an audit result. User authentication means for recording user logon / logoff;
User authentication record management means for centrally managing user authentication results;
A remote access audit result received from the medical device, and an audit report creating means for creating the user authentication result as an audit report;
An audit report display means for displaying the audit report;
A maintenance terminal comprising: an audit report transmitting means for transmitting the audit report. 9. The medical device according to claim 8, wherein the remote access permit transmission means transmits to the maintenance terminal only when the permit created for the remote access application is approved. 11. The medical device according to claim 10, wherein the remote access record creating means records the date and time of a record checked in the past, and checks from the record after that date and time. The maintenance terminal according to claim 11, wherein the audit report creating means creates the audit report in an XML format.

Images