Virtual machine for processing medical data

Patent metadata

Field	Value
Publication number	US-9009851-B2
Application number	US-201114000296-A
Country	US
Kind code	B2
Filing date	Mar 29, 2011
Priority date	Mar 29, 2011
Publication date	Apr 14, 2015
Grant date	Apr 14, 2015

Abstract

The present invention relates to a virtual machine (VM) for processing digital data, in particular medical data, by executing a digital data processing application program, in particular a medical data processing application program (MeDPAP), the virtual machine (VM) being a simulation of a computer, a) the virtual machine (VM) comprising a volatile memory (ViMStor) configured to comprise a storage space for temporary data (TEMP) for temporarily storing the digital data; b) the virtual machine (VM) being configured to be accessed by any virtual machine user activated on a virtual machine user list, wherein any activated maintenance virtual machine user is denied any permission regarding the storage space for temporary data (TEMP), wherein denying any permissions is performed by logging into the virtual machine (VM) as an administrator and setting corresponding options; c) wherein any administrator has been deactivated on the virtual machine user list, wherein deactivating any administrator has been performed by logging into the virtual machine (VM) as an administrator and setting corresponding options for each administrator in the virtual machine user list; d) wherein the virtual machine (VM) is in a state in which the administrator has been logged off after deactivating the administrator on the virtual machine user list.

First claim

The invention claimed is:

1. A virtual machine which is configured to process medical data by executing a medical data processing application program, the virtual machine being a simulation of a computer,
a) the virtual machine comprising a volatile memory configured to comprise a storage space for temporary data for temporarily storing the digital data;
b) the virtual machine being configured to be accessed by any virtual machine user activated on a virtual machine user list, wherein any activated maintenance virtual machine user is denied any permission regarding the storage space for temporary data, wherein denying any permissions is performed by logging into the virtual machine as an administrator and setting corresponding options;
c) wherein any administrator has been deactivated on the virtual machine user list, wherein deactivating any administrator has been performed by logging into the virtual machine as an administrator and setting corresponding options for each administrator in the virtual machine user list;
d) wherein the virtual machine is in a state in which the administrator has been logged off after deactivating the administrator on the virtual machine user list,
the virtual machine further comprising at least the following components:
a MeDPAP controller which is constituted;
so that it can be addressed by a Uniform Resource Identifier called VM-URI via a wide area network, and
to supports direct interoperable interaction with a client application over the wide area network,
to assign a Uniform Resource Identifier called MeDPAP-URI to the MeDPAP, and
to send the assigned MeDPAP-URI to the client application via the wide area network; and

the MeDPAP which is constituted
to process the digital data,
so that it can be addressed by the client application via the wide area network by using the MeDPAP-URI, and
to support direct interaction with the client application over the wide area network for receiving instructions from the client application to process the digital data

wherein the MeDPAP is constituted
to store a file of the processed digital data called Prodaf in a storage space,
to translate a location of the Prodaf into an individual Unique Resource Identifier called Prodaf-URI, and
to send the Prodaf-URI to the client application via the wide area network;

wherein the MeDPAP controller is constituted
to re-translate the Prodaf-URI received from the client application via the wide area network into the location of the Prodaf,
to read the Prodaf by using the re-translated storage location, and to send the Prodaf to the client application via the wide area network,

wherein the virtual machine is constituted so that a plurality of the MeDPAPs can be executed on the virtual machine; and
wherein the MeDPAP controller is constituted
to respectively assign individual MeDPAP-URIs to the MeDPAPs and to store the respective assignment between the MeDPAP-URIs and MeDPAPs,
to be addressable by a plurality of the client applications via the wide area network by using the VM-URI,
to respectively assign one of the MeDPAP-URIs to one of the MeDPAPs, and
to respectively send the assigned MeDPAP-URIs to the assigned client applications;

wherein the MeDPAP is constituted so that if the plurality of MeDPAPs are executed on the VM, the MeDPAPs can be respectively addressed by one of the plurality of the client applications via the wide area network by using the sent and assigned individual MeDPAP-URI and respectively support direct interaction with the client applications over the wide area network for receiving instructions from the client applications to process the digital data.

2. A virtual machine which is configured to process medical data by executing a medical data processing application program, the virtual machine being a simulation of a computer,
a) the virtual machine comprising a volatile memory configured to comprise a storage space for temporary data for temporarily storing the digital data;
b) the virtual machine being configured to be accessed by any virtual machine user activated on a virtual machine user list, wherein any activated maintenance virtual machine user is denied any permission regarding the storage space for temporary data, wherein denying any permissions is performed by logging into the virtual machine as an administrator and setting corresponding options;
c) wherein any administrator has been deactivated on the virtual machine user list, wherein deactivating any administrator has been performed by logging into the virtual machine as an administrator and setting corresponding options for each administrator in the virtual machine user list;
d) wherein the virtual machine is in a state in which the administrator has been logged off after deactivating the administrator on the virtual machine user list,
wherein the virtual machine is configured to read patient metadata from a patient database and to read medical image data from an image data storage device.

3. A virtual machine which is configured to process medical data by executing a medical data processing application program, the virtual machine being a simulation of a computer,
a) the virtual machine comprising a volatile memory configured to comprise a storage space for temporary data for temporarily storing the digital data;
b) the virtual machine being configured to be accessed by any virtual machine user activated on a virtual machine user list, wherein any activated maintenance virtual machine user is denied any permission regarding the storage space for temporary data, wherein denying any permissions is performed by logging into the virtual machine as an administrator and setting corresponding options;
c) wherein any administrator has been deactivated on the virtual machine user list, wherein deactivating any administrator has been performed by logging into the virtual machine as an administrator and setting corresponding options for each administrator in the virtual machine user list;
d) wherein the virtual machine is in a state in which the administrator has been logged off after deactivating the administrator on the virtual machine user list,
wherein, when execution of the digital data processing application is called, the contents of the storage space for temporary data is determined and wherein preferably, if it is determined that the storage space for temporary data is not empty, the contents of the storage space for temporary data is deleted.

4. An electronic network system comprising:
a cloud computer system on which a virtual machine is running and which cloud computer system is connected to a patient database comprising patient metadata and an image storage device comprising medical image data,
wherein the virtual machine is configured to process medical data by executing a medical data processing application program, the virtual machine being a simulation of a computer,
a) the virtual machine comprising a volatile memory configured to comprise a storage space for temporary data for temporarily storing the digital data;
b) the virtual machine being configured to be accessed by any virtual machine user activated on a virtual machine user list, wherein any activated maintenance virtual machine user is denied any permission regarding the storage space for temporary data, wherein denying any permissions is performed by logging into the virtual machine as an administrator and setting corresponding options;
c) wherein any administrator has been deactivated on the virtual machine user list, wherein deactivating any administrator has been performed by logging into the virtual machine as an administrator and setting corresponding options for each administrator in the virtual machine user list;
d) wherein the virtual machine is in a state in which the administrator has been logged off after dea

Assignees

• Droste Claudia
• Breitschaft Klaus
• Braun Michael
• Wist Henrik
• Brainlab Ag

Inventors

• Droste Claudia
• Breitschaft Klaus
• Braun Michael
• Wist Henrik

Classifications

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F21/55

  Detecting local intrusion or implementing counter-measures · CPC title