Enhanced security and safety in telerobotic systems

Patent metadata

Field	Value
Publication number	US-9736167-B2
Application number	US-201514857731-A
Country	US
Kind code	B2
Filing date	Sep 17, 2015
Priority date	Jul 6, 2012
Publication date	Aug 15, 2017
Grant date	Aug 15, 2017

Abstract

Methods and systems for securing remotely-operable devices are provided. A security device can receive a plurality of commands to control a remotely-operable device in a remote environment. At least one command in the plurality of commands can include command data that is related to the remotely-operable device. The security device can receive a plurality of responses to the plurality of commands. The security device can process the plurality of commands and the plurality of responses to determine a signature related to an operator that issued the plurality of commands for the remotely-operable device. The security device can determine an identity of the operator based on the signature. The security device can generate an identity report that includes the identity of the operator.

First claim

What is claimed:

1. A method, comprising:
receiving, at a security device, a plurality of commands to control a remotely-operable device in a remote environment, wherein at least one command in the plurality of commands comprises command data related to the remotely-operable device;
receiving a plurality of responses to the plurality of commands at the security device;
processing the plurality of commands and the plurality of responses using the security device to determine a signature related to an operator that issued the plurality of commands to control the remotely-operable device by at least:
determining at least one parameter related to interaction with the remote device based on the plurality of commands and plurality of responses, and
determining the signature based on the at least one parameter;
determining an identity of the operator based on the signature using the security device;
generating an identity report comprising the identity of the operator using the security device;
after generating the identity report, receiving a second plurality of commands;
detecting an anomaly in the second plurality of commands based on the identity of the operator; and
generating an anomaly report indicating the detected anomaly in the second plurality of commands.

2. The method of claim 1 , wherein generating the identity report comprises:
determining whether the identity of the operator corresponds to an authorized operator by at least searching for the identity of the operator in one or more authorized operator records, wherein at least one record of the one or more authorized operator records comprises an identity of an authorized operator of the remotely-operable device; and
after determining that the identity of the operator corresponds to an identity of an authorized operator, generating an identity report indicating that the identity of the operator corresponds to an authorized operator.

3. The method of claim 2 , further comprising:
after determining that the identity of the operator does not corresponds to the identity of an authorized operator, generating an identity report indicating the identity of the operator does not correspond to an authorized operator.

4. The method of claim 1 , wherein the remotely-operable device in the remote environment comprises a surgical robot.

5. The method of claim 4 , wherein the plurality of responses comprise a force-feedback response from the surgical robot.

6. The method of claim 1 , wherein the identity report further comprises identification information about the remotely-operable device.

7. The method of claim 1 , wherein the plurality of commands comprises a first command, wherein the plurality of responses comprises a first response to the first command, and wherein processing the plurality of commands and the plurality of responses to determine the signature comprises:
determining at least one characteristic of the first response; and
determining the signature based on the at least one characteristic of the first response.

8. The method of claim 7 , wherein the at least one characteristic comprises a characteristic related to force feedback.

9. The method of claim 1 , wherein the command data comprises at least one data item selected from the group consisting of: a data item for a location related to the remotely-operable device, a data item for a position related to the remotely-operable device, a data item for an applied force related to the remotely-operable device, and a data item for an torque related to the remotely-operable device.

10. A security device, comprising:
a processor; and
non-transitory tangible computer readable medium configured to store instructions that, when executed by the processor, cause the security device to perform functions comprising:
receiving a plurality of commands to control a remotely-operable device in a remote environment, wherein at least one command in the plurality of commands comprises command data related to the remotely-operable device;
receiving a plurality of responses to the plurality of commands;
processing the plurality of commands and the plurality of responses to determine a signature related to an operator of the remotely-operable device, wherein the operator issued the plurality of commands by at least:
determining at least one parameter related to interaction with the remote device based on the plurality of commands and plurality of responses, and
determining the signature based on the at least one parameter;
determining an identity of the operator based on the signature;
generating an identity report comprising the identity of the operator;
after generating the identity report, receiving a second plurality of commands;
detecting an anomaly in the second plurality of commands based on the identity of the operator; and
generating an anomaly report indicating the detected anomaly in the second plurality of commands.

11. The security device of claim 10 , wherein the remotely-operable device in the remote environment comprises a surgical robot.

12. The security device of claim 10 , wherein processing the plurality of commands to determine the signature comprises determining the signature based on a characteristic of a signal carrying at least one command of the plurality of commands and/or at least one response of the plurality of responses.

13. The security device of claim 10 , wherein the plurality of commands comprises a first command, wherein the plurality of responses comprises a first response to the first command, and wherein processing the plurality of commands to determine the signature further comprises:
determining at least one characteristic of the first response; and
determining the signature based on the at least one characteristic of the first response.

14. The security device of claim 10 , wherein the command data comprises at least one data item selected from the group consisting of: a data item for a location related to the remotely-operable device, a data item for a position related to the remotely-operable device, a data item for an applied force related to the remotely-operable device, and a data item for an torque related to the remotely-operable device.

15. A method, comprising:
recording a first identity at a security device;
receiving, at the security device, a plurality of commands to control a remotely-operable device in a remote environment, wherein at least one command in the plurality of commands comprises command data related to the remotely-operable device;
receiving, at the security device, a plurality of responses to the plurality of commands;
processing the plurality of commands and the plurality of responses using the security device to determine a current signature related to a current operator that issued the plurality of commands to control the remotely-operable device by at least:
determining at least one parameter related to interaction with the remote device based on the plurality of commands and plurality of responses, and
determining the signature based on the at least one parameter;
determining a current identity of the current operator based on the current signature using the security device;
determining whether the first identity is the same as the current identity using the security device; and
after determining that the first identity is not the same as the current identity, the security device performing a first action based on the first identity not being the same as the current identity;
after performing the first action, receiving a second plurality of commands;
detecting an anomaly in the second plurality of comma

Assignees

• Univ Washington Through Its Center For Commercialization

Inventors

• Chizeck Howard Jay
• Bonaci Tamara
• Lendvay Thomas

Classifications

• H04L63/126

  the source of the received data · CPC title

• G06F21/00

  Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity · CPC title

• B25J13/006

  by means of a wireless system for controlling one or several manipulators · CPC title

• H04L63/1425

  Traffic logging, e.g. anomaly detection · CPC title

• G06F21/552

  involving long-term monitoring or reporting · CPC title