Medical system with improved security during an interaction of a medical measuring system with a ventilator or anesthesia device via a data network

Patent metadata

Field	Value
Publication number	US-10926048-B2
Application number	US-201815927306-A
Country	US
Kind code	B2
Filing date	Mar 21, 2018
Priority date	Mar 23, 2017
Publication date	Feb 23, 2021
Grant date	Feb 23, 2021

Abstract

With the interaction of a medical measuring system ( 3 ) with a ventilator or anesthesia device ( 5 ) via a data network ( 60 ), data transmission security and mutual authentication between the medical measuring system ( 3 ) and the ventilator or anesthesia device ( 5 ) is improved in a medical system ( 1 ) by the use of asymmetric encryption pairs. A classification of the measuring systems ( 3 ) is possible on the basis of an identification/authentication provided by the asymmetric encryption pairs. The classification may be used to adapt a ventilation by the ventilator or anesthesia device ( 5 ) in respect to different defined measuring systems ( 3 ), for example, measuring systems ( 3 ) for detecting an oxygen saturation (SpO 2 ).

First claim

What is claimed is:

1. A medical system for providing and exchanging data, the medical system comprising:
a data network with a transmission channel;
a measuring system comprising:
a sensor module interface configured to detect at least one sensor signal provided by a sensor module, wherein a physiological parameter of a living being is indicated by the at least one sensor signal;
a measuring system memory;
a measuring system data output unit configured to generate at least one measuring system data set based on the at least one sensor signal; and
a measuring system data processing unit configured to sign a measuring system data item derived from the at least one measuring system data set with a private key of a measuring system asymmetric encryption pair, which private key is assigned to the measuring system and is provided by the measuring system memory, wherein the measuring system data output unit is configured to provide the signed measuring system data item to the transmission channel; and

a ventilator or anesthesia device comprising:
a ventilator/anesthesia device data-receiving unit configured to receive the signed measuring system data item from the transmission channel;
a ventilator/anesthesia device memory, wherein a public key of the measuring system asymmetric encryption pair is stored in the ventilator/anesthesia device memory and is assigned to the measuring system;
a ventilator/anesthesia device processing unit, wherein the ventilator/anesthesia device data-receiving unit or the ventilator/anesthesia device processing unit is configured to extract a measuring system signature element from the received measuring system data item and the ventilator/anesthesia device processing unit is further configured to check, based on the public key of the measuring system asymmetric encryption pair stored in ventilator/anesthesia device memory and further based on the at least one measuring system data set extracted from the measuring system data item and the measuring system signature element, whether the measuring system signature element corresponds to the public key wherein the ventilator/anesthesia device processing unit is further configured to check, based on the measuring system signature element and based on additional classification data provided by the ventilator/anesthesia device memory, whether the sensor module belongs to a certain sensor module or to a certain class of measuring systems; and
a control unit is configured to control or influence a ventilation based on at the at least one sensor signal, contained in the at least one measuring system data set, as a function of a checking result of checking (i) at least one setting value, or (ii) an operating parameter, or (iii) both at least one setting value and an operating parameter, of the ventilator or anesthesia device, wherein the control unit is configured, as a function of the checking result, (i) to adapt an alarm organization, or (ii) to adapt executing an alarm organization, or (iii) both to adapt an alarm organization and to adapt executing the alarm organization, during the operation of the ventilator or anesthesia device, wherein the control unit is configured, as a function of the checking result, to adapt physiological alarm threshold values during the control of the ventilation during the operation of the ventilator or anesthesia device based on the at least one sensor signal.

2. A medical system in accordance with claim 1 , wherein:
the interface or the measuring system data processing unit are configured to determine a quality level based on the sensor signal and to provide the quality level in the at least one measuring system data set; and
the control unit is configured, as a function of the checking result or based on the quality level provided in the at least one measuring system data set or as a function of both the checking result and based on the quality level provided in the at least one measuring system data set, to control or influence the at least one setting value or the operating parameter of the ventilator or anesthesia device used for carrying out the ventilation or to control or influence both the at least one setting value and the operating parameter of the ventilator or anesthesia device used for carrying out the ventilation.

3. A medical system in accordance with claim 1 , wherein:
the ventilator or anesthesia device further comprises a ventilator/anesthesia device data output unit provided in or at the ventilator or anesthesia device;
the ventilator/anesthesia device processing unit is configured to generate at least one ventilator/anesthesia device data set based on at least one information signal provided by the ventilator or anesthesia device;
a type of the ventilator or anesthesia device or a state of the ventilator or anesthesia device or a current mode of operation of the ventilator or anesthesia device or any combination of a type of the ventilator or anesthesia device, a state of the ventilator or anesthesia device, and a current mode of operation of the ventilator or anesthesia device is indicated by the at least one information signal;
the ventilator/anesthesia device processing unit is configured to sign a ventilator/anesthesia device data item derived from the at least one ventilator/anesthesia device data set with a private key of a ventilator/anesthesia device asymmetric encryption pair, which private key is provided by the ventilator/anesthesia device memory;
the ventilator/anesthesia device data output unit is configured to provide the signed ventilator/anesthesia device data item to the transmission channel;
the measuring system further comprises a measuring system data-receiving unit configured to receive the at least one signed ventilator/anesthesia device data item of the ventilator or anesthesia device in or at the measuring system;
the measuring system data-receiving unit or the measuring system data processing unit is configured to extract a signature element from the at least one ventilator/anesthesia device data item received;
the measuring system data processing unit is further configured to check based on a public key of the ventilator/anesthesia device asymmetric encryption pair, which public key is assigned to the ventilator or anesthesia device, and further based on the at least one ventilator/anesthesia device data set extracted from the ventilator/anesthesia device data item and based on the ventilator/anesthesia device signature element, whether the ventilator/anesthesia device signature element is configured corresponding to the public key;
the measuring system data processing unit is configured to check, based on the ventilator/anesthesia device signature element and based on identification data provided by the measuring system memory, whether the ventilator or anesthesia device is identical to a certain ventilator or anesthesia device;
the measuring system data processing unit or the interface is configured to provide a another checking result of the checking; and
the measuring system data processing unit or the interface is configured, as a function of the another checking result, to:
adapt a signal detection of the sensor signal during the generation of at least one measuring system data set; or
adapt a signal processing of the sensor signal during the generation of at least one measuring system data set; or
adapt both a signal detection and a signal processing of the sensor signal during the generation of at least one measuring system data set; or
adapt alarm threshold values during execution of an alarm organization; or
adapt alarm threshold values during execution of the alarm organization during the operation of the sensor module; or
adapt alarm threshold values during execution of an alarm organization and adapt alarm threshold values during execution of the alarm organization during the

Assignees

• Draegerwerk Ag & Co Kgaa
• Draeger Werk Ag & Co Kgaa

Inventors

• Von Blumenthal Tilman

Classifications

• A61M16/0051 Primary

  with alarm devices · CPC title

• A61M16/01

  specially adapted for anaesthetising {(A61M16/104, A61M16/18 take precedence)} · CPC title

• H04L2209/88

  Medical equipments · CPC title

• G06F21/445

  by mutual authentication, e.g. between devices or programs · CPC title

• G16H20/40

  relating to mechanical, radiation or invasive therapies, e.g. surgery, laser therapy, dialysis or acupuncture · CPC title