Classifications

• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/60—Protecting data
  • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
  • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
  • G06F21/6245—Protecting personal data, e.g. for financial or medical purposes
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
  • G06F21/31—User authentication
  • G06F21/42—User authentication using separate channels for security data
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
  • G06F21/31—User authentication
  • G06F21/42—User authentication using separate channels for security data
  • G06F21/43—User authentication using separate channels for security data wireless channels
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
  • G06F21/44—Program or device authentication
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/60—Protecting data
  • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
  • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
  • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
  • G06F21/73—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information by creating or determining hardware identification, e.g. serial numbers
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/60—Protecting data
  • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules

Definitions

• the invention relates to a removable medium with a serial interface, a non-volatile storage medium and a memory controller which controls the data transmission between the serial interface and the non-volatile storage medium.
• the invention relates to a medical device, comprising a device identification feature and a serial interface for exchanging data with a removable medium.
• the invention further relates to a method for operating a removable data carrier with a serial interface, a non-volatile storage medium and a memory controller that controls the data transmission between the serial interface and the non-volatile storage medium.
• the invention relates to a medical system comprising a removable medium and a medical device.
• Removable media such as USB memory sticks, are common
• a removable disk with a serial interface, a nonvolatile storage medium and a memory controller which controls the data transmission between the serial interface and the nonvolatile storage medium wherein the removable data carrier is formed by the fact that a receiving unit and a particular provided in the memory controller write protection unit are provided, wherein the receiving unit for receiving a Device of identification of a connectable to the removable device medical device is set, and the write protection unit is adapted to compare the device identification feature with a predetermined internal criterion, and if the device identification feature meets this criterion to allow a read and write access to the non-volatile storage medium, and if the device identification feature Criterion not satisfied to grant read access to the non-volatile storage medium refill ink.
• the removable medium is a mass storage device whose nonvolatile storage medium is a flash memory, for example an EEPROM.
• the removable media is adapted to detect a device identification feature in a case where it is unable to handle this case as if the device identification feature does not meet the criterion.
• the removable data carrier With the removable data carrier according to the invention, a data export from a medical device to any computer system is possible.
• data import and export is only possible between those medical devices that have been authenticated by their device identification feature from the removable media for this type of data access.
• the removable storage device thus classifies the medical devices as trustworthy on the basis of their device identification features and allows unimpeded data exchange between the devices that are so qualified.
• a device identification feature for example, a predetermined and stored in the medical device code, a serial number, a specific hardware equipment, information regarding the manufacturer of the medical device, such as an open or encrypted manufacturer identification number or a manufacturer code, a type or version number of the device, the hardware and / or software equipment etc. are used.
• the device identification feature can be composed of several characteristic data. The device identification feature is used to identify the medical device. It is less important to uniquely identify a medical device as such than to assign it to a class of trusted medical devices between which an unrestricted exchange of data should be possible.
• the device identification feature is compared with an existing predetermined by the removable disk predetermined criterion. It can be made a one-to-one comparison, so that the removable disk, for example, communicates only with a specific device in full access (read and write mode).
• the removable medium will determine a set of medical devices based on the comparison with the predetermined criterion, with each device of that group being allowed full access. For example, devices from a certain serial number, from a certain year of manufacture or devices of a certain manufacturer can each have a full access, i. a read and write permission to which removable media will be granted.
• the removable data carrier is further developed in that the receiving unit for receiving the device identification feature is set up via a wireless data connection.
• the receiving unit comprises an RFID transponder.
• the receiving unit comprises a Bluetooth and / or NFC (New Field Communication) transponder.
• the identification of the medical device via a wireless data connection is advantageous because this process can take place before the data carrier is connected to the relevant medical device via the serial interface. Thus, there is no further delay in the subsequent connection setup between removable media and the medical device.
• the removable medium it is possible for the removable medium to emit, for example, an optical or acoustic signal, which indicates to the user that a data connection with the relevant device is possible in full access or only in read mode. The user is thus enabled to decide how to proceed before the actual data connection is established.
• the removable data carrier is further developed in that the receiving unit is set up to receive data via an optical data connection, and in particular comprises a photodiode.
• the removable data carrier is advantageously further developed in that the receiving unit is mechanically coded and adapted to interact with a complementary mechanically coded transmitting unit on the medical device which can be connected to the removable data carrier.
• the receiving unit used that is to say for example the photodiode or the mechanically coded receiving unit, is preferably provided in the immediate vicinity of the serial interface on the removable data carrier.
• the receiving unit interacts with the corresponding transmitting unit of the medical device at the moment in which the changing data carrier is also connected to the serial interface of the medical device.
• the requirements for the authentication and the subsequent data transfer are advantageously made with a handle, which simplifies the handling of the removable disk.
• the removable disk is designed according to a further embodiment as a USB memory stick, wherein as a serial interface, a USB interface is provided.
• a removable medium preferably has a housing in which the nonvolatile storage medium, the memory controller, the write protection unit and the receiving unit are all arranged together.
• Such a removable disk is compact and robust and therefore particularly suitable for use in a medical environment.
• the object according to the invention is also achieved by a medical device comprising a device identification feature and a serial interface for exchanging data with a removable data carrier, wherein the medical device is further developed in that it comprises a transmitting unit which is adapted to attach the device identification feature to the removable data carrier transferred to.
• the medical device is advantageously set up for secure data communication with a removable data carrier in accordance with one or more of the aforementioned embodiments.
• the aspects mentioned for the removable medium therefore also apply to the medical device in an analogous manner.
• the medical device is further developed in that the transmitting unit is adapted to send the device identification feature via a wireless data connection to the removable disk.
• the transmitting unit comprises an RFID tag in which the device identification feature is stored in the form of a code characterizing the medical device.
• the medical device is designed such that the transmitting unit comprises a light emitter, in particular an IR light emitting diode.
• the transmitting unit is mechanically coded and is set up to interact with a mechanically coded receiving unit of the removable data carrier that can be connected to the medical device.
• the object according to the invention is also achieved by a method for operating a removable data carrier with a serial interface, a nonvolatile storage medium and a memory controller which controls the data transmission between the serial interface and the nonvolatile storage medium, the method being developed by a write protection unit and a write protection unit Receiving unit are provided and the method comprises the following steps:
• the method according to the invention is advantageously developed further in that the device identification feature is received via a wireless data connection, the device identification feature being received in particular by an RFID transponder and / or by a receiving unit, in particular a photodiode, configured for an optical data connection.
• the method is further developed in that the device identifier is received by mechanical action on a mechanically coded receiving unit by a complementary mechanically coded transmitting unit.
• the method of operating a removable disk has the same or similar advantages as already mentioned with respect to the removable disk.
• a medical system comprising a removable data carrier according to one or more embodiments of the invention and a medical device according to one or more of said embodiments.
• FIG. 1 to 3 each show a medical system with a removable medium and a medical device, each in a schematic representation and according to various embodiments of the invention
• FIG. 4 shows a schematic flowchart of a method for operating a removable data carrier, according to an embodiment of the invention
• 5a shows a schematically illustrated communication scheme in a medical system, comprising a removable medium according to the prior art
• FIG. 5b shows a schematically illustrated communication scheme in a medical system, comprising a removable data carrier according to an embodiment of the invention.
• FIG. 1 shows a schematic representation of a medical system 2, comprising a removable medium 4 and a medical device 6.
• the removable medium 4 comprises a serial interface 9, in particular a USB interface, which is located inside the USB Plug 8 is provided.
• the removable medium 4 comprises a non-volatile storage medium 10, for example a flash memory, such as an EEPROM.
• a memory controller 12 which controls the data transmission between the serial interface 9 and the non-volatile storage medium 10.
• the non-volatile storage medium 10, the memory controller 12 and the serial interface 9 are interconnected by suitable data lines. This is schematically indicated in FIG. 1 by lines.
• the USB connector 8 in particular a standard USB connector, represents the physical interface of the removable data carrier 4 to a host computer, in particular a medical device 6.
• the medical device 6 For the data communication with the removable data carrier 4, the medical device 6 comprises a corresponding USB - Connection 14.
• the medical device 6 is, for example, a video management control unit which is used in a medical environment, in particular an intensive care environment, such as an operating room or room.
• the medical device 6 can be any other medical device, for example a therapeutic or diagnostic device which serves to generate image data which can be interrogated via an internal serial interface 9 connected to the USB port 14.
• the medical device 6 comprises the additional components necessary for this purpose, which are not shown in FIG. 1.
• the above explanations also apply to the following embodiments.
• the removable data carrier 4 likewise comprises further components, not shown in FIG. 1, which have been omitted for reasons of simplification only.
• the removable data carrier 4 comprises an oscillator, an LED indicating the operating state and a printed circuit board, which in particular accommodates the nonvolatile storage medium, the memory controller and the other named electronic components.
• the removable data carrier 4 comprises a receiving unit 16 which is set up to receive a device identification feature of the medical device 6 which can be connected to the removable data carrier 4.
• the receiving unit 16 is in particular configured to receive data via a wireless data link 19.
• the receiving unit 16 is an RFID transponder 18.
• the receiving unit 16 of the removable data carrier 4 communicates with a transmitting unit 20 of the medical device 6 via the wireless data connection 19. In the exemplary embodiment shown, it is at the transmitting unit 20 of the medical device 6 to an RFID tag 22nd
• the RFID tag 22 includes a device identification feature in the form of a code characterizing the medical device 6. This is preferably stored in the RFID tag 22.
• the code identifying the medical device 6 may be, for example, a serial number, a type designation, a manufacturer's name, a manufacturer identification number, a manufacturer code, a hardware or software configuration, a version number, etc.
• the removable data carrier 4 is enabled to match this device identification feature, for example a manufacturer's designation or a serial number, with a predetermined internal criterion.
• the removable disk 4 comprises a write-protect unit 13.
• the write protection unit 13 can be implemented in both hardware and software. Preferably, the write protection unit 13 is implemented as part of the memory controller 12.
• the write protection unit 13 determines whether or not the requested device identification feature of the medical device 6 fulfills the internal criterion of the removable data carrier 4. In other words, the removable disk 4 determines whether the medical device 6 is qualified or not. For qualified medical devices 6, the removable disk 4 grants full access (i.e., read and write access) to the nonvolatile memory 10, while unqualified devices 6 are granted only read access to the nonvolatile data memory 10.
• the internal criterion is an unambiguous criterion.
• the data carrier 4 may be designed to communicate only with medical devices 6 of a particular manufacturer or with medical devices 6 of a particular series.
• the write protection unit 13 defines the criterion such that a minimum requirement must be met in order to grant a read and write access. For example, a minimal hardware or software Equipment, version number, device number, year of construction, etc. to be fulfilled.
• the device identification feature also fulfills the specified internal criterion if one or more of the queried criteria, for example a manufacturer description and / or meet a serial number, greater than a predetermined value and / or a predetermined minimum. Even a minimum fulfilled safety standard of the medical device 6 can be used as a device identification feature.
• the write-protect unit 13 grants the medical device 6 read and write access to the nonvolatile storage medium 10. In all other cases, i. if the device identification feature does not meet the predetermined internal criterion or no device identification feature can be determined, the write protect unit 13 provides read only access to the nonvolatile storage medium 10. This is the case, for example, when any computer system is connected to the serial interface 9 of the removable drive 4.
• Fig. 2 shows another schematically illustrated medical system 2 according to another embodiment.
• the removable data carrier 4 is inserted with its USB plug 8 into the USB port 14 of the medical device 6.
• the serial interface 9 in particular therefore the USB interface of the removable data carrier 4, connected to the corresponding serial interface 9 of the medical device 6, for example, the USB connector 8 in the USB plug 14 of the medical device 6 inserted.
• the removable data carrier 4 receives a device identification feature from the connected medical device 6 at its receiving unit 16.
• the device identification feature is transmitted from the medical device 6 to the removable data carrier 4 with the aid of an optical data connection.
• the removable disk 4 comprises a photodiode 24. This receives the signals of a light emitter, in particular an infrared light-emitting diode 26, which is integrated as a transmitting unit 20 in the medical device 6.
• the write protection unit 13 of the removable data carrier 4 compares the received device identification feature with an internal criterion. Subsequently, a read / write access to the nonvolatile storage medium 10 is established, provided that the device identification feature of the medical device 6 fulfills the criterion. If this is not the case, access to the non-volatile memory limited to a read-only access.
• the infrared light emitting diode 26 and the photodiode 24 of the medical device 6 or of the removable data carrier 4 are arranged opposite one another. This applies if the removable data carrier 4 is connected to the medical device 6 (as shown schematically in FIG. 2).
• the transmitting unit 20 and the receiving unit 16 of the medical device 6 of the removable data carrier 4 face each other when the USB plug 8 of the removable data carrier 4 is plugged into the USB port 14 of the medical device 6.
• the transmitting unit 20 and the receiving unit 16 are integrated directly into a specially shaped USB plug 6 or USB port 14.
• Fig. 3 shows a further medical system 2 in a schematic representation.
• the removable storage 4 and the medical device 6 described in detail in connection with FIGS. 1 and 2 are equipped in the illustrated embodiment with a transmitting or receiving unit 20, 16, which is mechanically coded.
• the transmitting unit 20 and the receiving unit 16 are in particular mechanically coded complementary and act similar to a key-lock principle together.
• the removable disk 4 is provided with a pin 28 or pin of a certain length. see. This interacts with another pin 30 or pin, which is located in a medical device 6. Assign both pins 28, 30 a suitable length, so in other words complement each other to a predetermined length, a not shown in Fig. 3, within the removable disk 4 existing position sensor 34, for example, a micro-switch is activated, indicating the switch position, the medical device 6 is a qualified medical device 6. If the two pins 28, 30 are not matched to one another lengthwise, no release takes place.
• the pin 28 provided on the removable data carrier 4 is provided with a characteristic shape on its tip facing the medical device 6.
• a preferably complementary counter-mold which is located on the further pin 30, which is connected to the medical device 6, adjusts the appropriate length of the two pins 28, 30, so that again the position sensor 34 is activated.
• the mechanically coded shape of the pin 28 does not match the counter-shape of the further pin 30, it will enter the recess 32 in the medical device 6 too deeply or not deeply enough, and the position sensor 34 will not be activated.
• the existing on the removable disk 4 pin 28 forms in this sense, a mechanical receiving unit 16, as well as the existing on the medical device 6 further pin 30 in this sense forms a mechanical transmitting unit 20. Only when the pin 28 with plugged removable disk 4 in the correct Position is determined by the memory controller 12 in the existing write protection unit 13 a full access (read and write access) granted on the non-volatile storage medium 10.
• FIG. 4 shows a schematic flow diagram of a method for operating a removable data carrier 4.
• the process starts in step S1.
• the serial interface 9 of the removable data carrier 4 is connected to the serial interface 9 of the medical device 6 (step S2).
• the removable medium 4 then receives a device identification feature from the connected medical device 6 at the receiving unit 16 (step S3).
• the steps S2 and S3 need not be performed in the order shown in FIG. It is also possible according to a further embodiment that the device identification feature is received before the serial interfaces 9 of the removable data carrier 4 and the medical device 6 are connected to one another. This case is particularly possible when the device identification feature is transmitted over a wireless data link 19.
• the device identification feature is compared with a predetermined internal criterion (step S4). If this comparison is successful, a write and read access to the nonvolatile storage medium 10 of the removable data carrier 4 is established (step S5). In all other cases, that is, if the device identification feature does not meet the predetermined criteria or no device identification feature can be determined, access to the nonvolatile storage medium 10 is restricted to read access (step S6). The method finally ends in step S7.
• Fig. 5a shows schematically the communication of a removable disk 4 according to the prior art with any Computer system 36 on the one hand and with a medical device in a medical system 2 on the other.
• the double arrow shown in FIG. 5a between the removable data carrier 4 and the computer system 36 indicates full access to the removable data carrier 4, ie read and write access to its non-volatile storage medium 10.
• the removable data carrier 4 communicates with the medical device 6 in full access.
• in particular malware can reach the medical device 6 from the computer system 36.
• any computer system 36 to removable media 4 is limited to read access.
• no data transmission is possible.
• a qualified medical device 6 which has qualified on the basis of its device identification feature, which fulfills the predetermined internal criterion of the removable data carrier 4, a full access (read and write access) indicated by a double arrow is possible.

Landscapes

• Engineering & Computer Science (AREA)
• Theoretical Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Hardware Design (AREA)
• Physics & Mathematics (AREA)
• Software Systems (AREA)
• General Engineering & Computer Science (AREA)
• General Physics & Mathematics (AREA)
• Bioethics (AREA)
• Health & Medical Sciences (AREA)
• General Health & Medical Sciences (AREA)
• Databases & Information Systems (AREA)
• Mathematical Physics (AREA)
• Medical Informatics (AREA)
• Computer Networks & Wireless Communication (AREA)
• Medical Treatment And Welfare Office Work (AREA)
• Measuring And Recording Apparatus For Diagnosis (AREA)
• Eye Examination Apparatus (AREA)
• Storage Device Security (AREA)

Priority Applications (3)

Applications Claiming Priority (2)

Related Child Applications (2)

Publications (1)

Family

ID=52345212

Family Applications (1)

Country Status (5)

Families Citing this family (4)

Citations (3)

Family Cites Families (60)

• 2014
  • 2014-01-14 DE DE102014200533.7A patent/DE102014200533A1/de active Pending
• 2015
  • 2015-01-06 WO PCT/EP2015/000009 patent/WO2015106954A1/de not_active Ceased
  • 2015-01-06 JP JP2016546781A patent/JP6411521B2/ja active Active
  • 2015-01-06 CN CN201580004350.8A patent/CN105900106A/zh active Pending
• 2016
  • 2016-07-14 US US15/209,963 patent/US10354087B2/en active Active

Patent Citations (3)

Also Published As

Similar Documents

Legal Events