Interface proxy device for cyber security

Abstract

A system for providing cyber protection to medical devices in a medical environment is presented. The system comprises a medical device comprising software services, a backend server to maintain and provide software updates to medical devices, and an interface proxy box connected to the medical device and in communication with the backend server. The interface proxy box determines the software services resident on the medical device. The interface proxy box installs the software services determined to be resident on the medical device on the interface proxy box and configures the installed software services to match the software services resident on the medical device. The interface proxy box communicates periodically with the backend server and receives and applies security updates to thesoftware services installed and configured on the interface proxy box. The medical device utilizes the updated software services on the interface proxy box.

Description

technical field [0001] The present disclosure relates generally to cybersecurity for medical devices, and more particularly to deploying rapid cybersecurity updates for medical devices. Background technique [0002] Medical devices often face stringent and ongoing requirements regarding the cybersecurity of the device. For example, the U.S. Food and Drug Administration (FDA) is currently drafting a recommendation stating that any cyber vulnerabilities discovered should be addressed within 30 days of discovery and repaired without interfering with the performance of medical devices. As medical devices tend to acquire more and more network interfaces and an increasing number of off-the-shelf software (OTSS) components, responding in a timely manner can be a huge challenge as all of these can introduce vulnerabilities to medical devices. [0003] Currently, if a vulnerability such as, for example, WannaCry is discovered, each business unit of the company, as well as the compan...

AI Technical Summary

Problems solved by technology

However, prior art does not address the issue of quickly patching to address issues such as time-to-fix requirements from the FDA

According to the concept proposed by the prior art, the "secure box" will either need to be customized for each specific product, or contain too many services that are not necessarily required by a specific product, thereby reducing the security of the underlying device in question

Images