METHOD FOR AUTOMATIC UNLOCKING OR LOCKING A COMPUTER-BASED MEDICAL DEVICE

Description

[0001] The invention relates to a method for automatically unlocking and / or locking a computer-based medical device in a system comprising the computer-based medical device and a mobile terminal.

[0002] Today's computer-aided medical devices, such as analytical instruments routinely used in analytical chemistry, forensics, microbiology, and clinical diagnostics, are capable of performing a wide variety of detection reactions and analyses on a multitude of samples. To automate this wide range of investigations, various automated devices are required for the spatial transfer of measuring cells, reaction vessels, and reagent containers. These include transfer arms with gripping capabilities, conveyor belts, or rotating transport wheels, as well as devices for transferring liquids, such as pipetting devices. The devices comprise a central control unit that, using appropriate software, can largely autonomously plan and execute the steps for the desired analyses.

[0003] Many of the analytical methods used in such automated analyzers are based on optical techniques. Particularly common are measurement systems based on photometric (e.g., turbidimetric, nephelometric, fluorometric, or luminometric) or radiometric principles. These methods enable the qualitative and quantitative detection of analytes in liquid samples without requiring additional separation steps. The determination of clinically relevant parameters, such as the concentration or activity of an analyte, is often performed by taking an aliquot, i.e., a subset, of a patient's body fluid sample from a sample container using a pipette and transferring it to a reaction vessel. The aliquot is then mixed with one or more test reagents in the reaction vessel, also using a pipette.The required reagents are kept in a number of reagent containers, which in turn are stored in a reagent container reserve. Mixing the sample with the required reagent(s) initiates a biochemical reaction that causes a measurable change in an optical property of the reaction mixture.

[0004] The measurement result is then forwarded by the measuring system to a storage unit and evaluated. The analyzer then provides sample-specific measurement values ​​to a user via an output medium, such as a monitor, a printer, or a network connection.

[0005] Computerized medical devices often generate and / or process highly sensitive personal health data, such as medical history, laboratory results from bodily fluids, or genetic information, as well as other personal data such as name, date of birth, gender, or age. Frequently, this data is also linked, resulting in particularly sensitive datasets that require special technical safeguards to reliably prevent unauthorized access or manipulation.

[0006] In medical technology, cybersecurity and data protection are playing an increasingly important role. This is also reflected in increasingly stringent legal requirements, for example in Regulation (EU) 2016 / 679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95 / 46 / EC (General Data Protection Regulation), among other things to strengthen data protection in the handling of patient data.

[0007] In the often hectic daily routine of laboratories, hospitals, and medical practices, it is sometimes observed that employees operating medical devices, for example, to simplify work processes and save time, even forgo basic security measures, such as locking medical device computers with a password during short absences, and disregard relevant work instructions. This can allow unauthorized individuals to easily access sensitive data, and there is also a risk of data manipulation, which can have serious medical consequences for the patients involved. Furthermore, significant legal and financial risks can arise for the individuals and institutions involved if binding standards are not consistently followed.

[0008] Currently, the locking and / or unlocking of computer-based systems in the field of medical devices is done manually by entering the corresponding passwords.

[0009] The object of the invention is therefore to provide tamper-proof methods and means that enable the reliable implementation of increased data protection requirements in the operation of computer-based medical devices and ensure data integrity in everyday use. Prior art document US2017 / 325091A1 teaches a method for establishing a secure and / or encrypted short-range wireless communication channel. The present invention is set out in the independent claims, with some optional features set out in the dependent claims.

[0010] This problem is solved according to the invention by combining technologies with a mobile application for a method and automating the locking and / or unlocking of a computer-based medical device to such an extent that this necessary security measure for data protection is taken for granted by users.

[0011] This has the advantage that increased data protection requirements for the operation of computer-based medical devices can be implemented very reliably, and data integrity is ensured. At the same time, the workflow for operating the medical devices is significantly simplified and accelerated, and the likelihood of unauthorized access to patient data is reduced. Furthermore, according to the invention, it is also possible to access any number of multiple medical devices simultaneously and / or sequentially very quickly, which also simplifies and accelerates the workflow and thus increases efficiency. According to the invention, a special mobile device is preferably not required to run the mobile application; instead, a standard smartphone, etc., can be used, which simplifies implementation and increases acceptance among stakeholders.This enables fast, user-friendly unlocking and / or locking, especially for stationary devices, thereby increasing the usability of the devices and improving security, also because the barrier to actually using locking functions in everyday work is significantly lowered.

[0012] The present invention relates in particular to a method for automatically unlocking and / or locking a computer-based medical device in a system, the system comprising the computer-based medical device and a mobile terminal, wherein the mobile terminal comprises a first wireless communication device for wirelessly sending and receiving data and wherein mobile application software can be executed by means of the mobile terminal, wherein the medical device comprises a device computer and wherein the device computer comprises a second wireless communication device for wirelessly sending and receiving data, wherein driver software can be executed on the device computer which can establish a wireless communication connection to the first wireless communication device of the mobile terminal by means of the second communication device of the medical device.wherein the medical device is automatically switched from a locked state to an unlocked state when the first communication device of the mobile device has established a wireless connection with the second communication device of the medical device and the signal strength received by the second communication device of the medical device from the signal of the first communication device of the mobile device exceeds a predetermined first limit and / or the medical device is automatically switched from an unlocked state to a locked state,if the first communication device of the mobile device has established a wireless connection with the second communication device of the medical device and the signal strength received by the communication device of the medical device falls below a predetermined second threshold and / or if the wireless connection is interrupted for longer than a predetermined first time interval.

[0013] The invention is based on the concept that a specially developed mobile application is executed on the user's mobile device, which can advantageously be a smartphone, tablet, and / or smartwatch. The user preferably logs in beforehand with a username and password to a designated authentication server and is connected to the target system, e.g., the device computer, via the mobile application. The device computer has transmitter hardware, preferably for one of the known wireless technologies, such as NFC (Near Field Communication), BLE (Bluetooth Low Energy), and / or Wi-Fi. Dedicated driver software runs in the background on the device computer, which uses the available wireless technology to make the device discoverable for the mobile application.Preferably, a special device identification token is provided, which the mobile application requires to unlock the user. The signal strength is evaluated to determine whether a user is nearby. This ensures that the device is only unlocked when the user is, for example, within a predefined distance. Locking, if necessary, also advantageously follows a corresponding pattern. Preferably, an authentication server is also provided, which is responsible for managing users and devices. The user and the dedicated driver software log in to this instance. The device can then be unlocked via this server.

[0014] In a preferred embodiment of the method according to the invention, the system further comprises an authentication service, wherein a wireless communication connection can be established between the mobile device and the authentication service via the first wireless communication device, and wherein a communication connection can be established between the device computer of the medical device and the authentication service, and wherein the unlocking and / or locking of the medical device is carried out by means of the authentication service, wherein the authentication service preferably comprises an authentication server or is itself an authentication server. This has the advantage that corresponding authentication characteristics, such as usernames and passwords, can be managed centrally via the authentication service. At the same time, a particularly simple and efficient implementation of the method according to the invention is possible.

[0015] Preferably, the mobile device and / or the device computer of the medical device is authenticated by the authentication service.

[0016] Preferably, the mobile device is authenticated via a wireless communication connection between the mobile device and the first wireless communication device to the authentication service. This enables a particularly simple implementation of a method according to the invention.

[0017] Preferably, a user ID is provided, which corresponds to or includes the user's username, or is linked to it. Preferably, the user ID is linked to one of several predefined user profiles, each assigning predefined access rights to the respective user ID. This has the advantage that access rights can be assigned and managed in a differentiated manner, for example, depending on the function of a specific user within a user group. This can further increase security against unauthorized access, as users who do not require certain access rights for their respective tasks and responsibilities will not receive them. This prevents, for example, the accidental access of sensitive patient data by unauthorized users and / or the deletion and / or modification of data.

[0018] Preferably, the authentication of the medical device's computer is carried out via a communication link between the medical device's computer and the authentication service.

[0019] Preferably, the mobile device comprises a smartphone or a portable computer, preferably a tablet computer. Preferably, the mobile device can also be a smartwatch or include a smartwatch. This has the advantage that widely available devices can be used as the mobile device, which are often already carried by the operators of the medical devices for other reasons, such as telephone accessibility or internet access. This makes it particularly easy and cost-effective to implement the methods according to the invention. It also increases user acceptance, as no additional devices are required.

[0020] Advantageously, a combination of several mobile devices, such as mobile phones and smartwatches, can also be used. A further advantage is that such combinations can be configured at any time and directly adapted to customer needs.

[0021] Preferably, the automatic unlocking and / or locking of the computerized medical device via a designated mobile device occurs only within a predetermined time period. This predetermined period is preferably, for example, a work shift or 8, 12, or 24 hours. This has the advantage that the user can log in once with their access data at the beginning of their work shift and then use the automatic unlocking / locking function for the entire shift. After the work shift ends, the automatic unlocking / locking function is automatically deactivated. This increases the security of the system and prevents misuse, for example, by unauthorized or misplaced mobile devices.

[0022] Preferably, the medical device is fixed in a stationary location and not directly portable like a mobile smartphone, which a user can always carry directly on their body or in their clothing.

[0023] Preferably, the medical device comprises an automated analyzer, preferably an in-vitro analyzer for medical samples, preferably for blood. Most preferably, the medical device is an automated analyzer, preferably an in-vitro analyzer for medical samples, preferably for blood. This enables the reliable implementation of enhanced data protection requirements, even in areas such as medical laboratories.

[0024] Preferably, the medical device includes a point-of-care system. Point-of-care systems are, for example, systems for medical testing at or near the point of care for a patient. The testing thus takes place at the point of patient care and preferably simultaneously with the patient's care, for example, in an examination room in a doctor's office, a hospital, a birthing center, or, for example, during emergency care at the scene of an accident or in an ambulance or rescue helicopter during patient transport. Alternatively, the patient can also be treated using a point-of-care system in the patient's home or at any other location where the patient is at the time of treatment.Point-of-care systems can therefore be used, particularly outside of specialized medical laboratories or central laboratories, in close proximity to the patient, and tests can be performed in real time during or in close temporal proximity to other examinations or therapies. The point-of-care system is preferably stationary and not directly portable like a mobile smartphone, which a user can always carry with them on their person or in their clothing.

[0025] Preferably, the medical device includes an intensive care system. Intensive care systems are used, for example, in intensive care medicine, such as in hospital intensive care units or in specially equipped vehicles or aircraft for patient transport. Preferably, the intensive care system is a syringe pump and / or infusion pump.

[0026] Preferably, the medical device comprises a medical imaging system. Preferably, the imaging in a medical imaging system is performed, for example, using X-rays (e.g., X-rays, fluoroscopy, computed tomography), radionuclides (e.g., scintigraphy, positron emission tomography, single-photon emission computed tomography), ultrasound (e.g., sonography, color Doppler), nuclear magnetic resonance (e.g., magnetic resonance imaging), infrared radiation (e.g., diagnostic thermography), impedance (e.g., electrical impedance tomography) and / or visible light (e.g., endoscopy, optical tomography, video raster stereography).

[0027] Preferably, the first limit value corresponds to, or is assigned to, a first distance between the mobile device and the medical device, wherein the first distance is preferably less than 10 meters, and particularly preferably less than 5 meters. Preferably, the first limit value and / or the first distance depends on the size of the medical device. Preferably, the first limit value is smaller the larger the medical device is. Similarly, the first distance preferably depends on the size of the medical device, with the distance preferably being greater the larger the medical device is. For example, for smaller point-of-care devices that can be held in the hand or are placed at the patient's bedside, the first distance is preferably comparatively small and is, for example, only a few meters or even less than one meter.In large automated production lines and large high-throughput analyzers in a central laboratory, the initial distance is typically relatively large, for example, 10 meters or more. This allows the respective limit values ​​and distances to be selected to meet the requirements of the specific medical devices and their operation.

[0028] Preferably, the second limit value corresponds to or is assigned to a second distance between the mobile device and the medical device, wherein the second distance is preferably less than 10 meters, and particularly preferably less than 5 meters.

[0029] Preferably, the signal strength received by the second communication device of the medical device from the signal of the first communication device of the mobile device is assigned a corresponding distance between the mobile device and the medical device.

[0030] Preferably, the allocation between the first and second limit values ​​and the first and second distances between the mobile device and the medical device is made according to the following estimation for the distance: Abstand = 10 EXP Signalstärke − RSSI / 10 N , where EXP(X) represents 10 to the power of X, signal strength represents the respective measured signal strength, RSSI represents Received Signal Strength Indicator, and N represents a constant to effectively account for environmental influences, where N typically takes values ​​from 2 to 4, preferably the value 2.

[0031] Preferably, the first limit value is -60 dB to -70 dB, particularly preferably -60 dB. The latter value corresponds, for example, to a first distance of approximately one meter according to the above estimate for the distance.

[0032] The measured signal strength depends not only on the distance but also on the transmission power (broadcasting power value). At maximum transmission power (+4 dBm), the RSSI value ranges from approximately -26 (at a distance of a few centimeters) to approximately -100 (at a distance of approximately 40 to 50 meters).

[0033] Preferably, the first time interval is less than 3 minutes, and particularly preferably less than 1 minute. This has the advantage that an automatic block occurs if the corresponding time duration is exceeded. At the same time, however, it allows for the absence of a block in the event of very short interruptions of the connection due to, for example, momentary interference signals, thus making operation more robust and less susceptible to interference.

[0034] Preferably, the first limit value is lower than the second limit value. This has the advantage that the system is less susceptible to interference and unintentional, rapidly successive locking or unlocking operations are avoided.

[0035] Preferably, the blocking includes disabling the graphical user interface of an electronic display device of the medical device and / or disabling the user interface of the medical device for command input. This has the advantage that the displayed data, especially sensitive patient data, cannot be viewed or manipulated unsupervised by unauthorized third parties.

[0036] Preferably, unlocking includes enabling the graphical user interface of an electronic display device of the medical device and / or enabling the input of commands from the medical device's user interface. This has the advantage that the display device or user interface is immediately available to the user without further measures, such as entering a password, thus avoiding waiting times and accelerating the overall workflow.

[0037] Another advantageous solution according to the invention involves pairing one or more mobile devices, allowing them to be paired and permanently configured once, in a manner similar to the so-called "keyless go technology" known from the automotive industry. Advantageously, according to the invention, the mobile device can also be a special transponder, such as those installed in corresponding car keys. However, according to the invention, such special requirements for additional hardware are advantageously not necessary.

[0038] A further object of the invention is a medical device comprising a device computer, wherein the device computer includes a first wireless communication device for wirelessly sending and receiving data, wherein driver software is executable on the device computer which can establish a wireless communication connection to a first wireless communication device of a mobile device by means of the second communication device of the medical device, wherein the mobile device includes the first wireless communication device for wirelessly sending and receiving data and wherein mobile application software is executable by means of the mobile device, wherein the device computer is configured such that the medical device is automatically switched from a locked state to an unlocked state.if the first communication device of the mobile device has established a wireless connection with the second communication device of the medical device and the signal strength received by the second communication device of the medical device from the first communication device of the mobile device exceeds a predetermined first threshold, and / or the medical device is automatically switched from an unlocked state to a locked state, if the first communication device of the mobile device has established a wireless connection with the second communication device of the medical device and the signal strength received by the communication device of the medical device from the first communication device of the mobile device falls below a predetermined second threshold, and / or if the wireless connection is interrupted for longer than a predetermined first time interval.

[0039] The medical device preferably comprises an automated analyzer, preferably an in-vitro analyzer for medical samples, preferably for blood. Particularly preferably, the medical device is an automated analyzer, preferably an in-vitro analyzer for medical samples, preferably for blood.

[0040] The medical device preferably comprises a point-of-care system and / or an intensive care system and / or a medical imaging system. The intensive care system preferably consists of a syringe pump and / or an infusion pump.

[0041] Another object of the invention is the use of a method according to the invention in a system comprising a computer-aided medical device and a mobile terminal.

[0042] The medical device may preferably be a diagnostic system for imaging procedures or in-vitro diagnostic devices.

[0043] Exemplary embodiments of the invention are explained in more detail with reference to the drawings. These show: FIG 1 a schematic representation of a computerized medical device, FIG 2 a schematic representation of a system comprising a computerized medical device, an authentication service and a mobile terminal, FIG 3 a flowchart of a device coupling procedure, and FIG 4 a flowchart of a procedure for unlocking a device computer of a computerized medical device.

[0044] Identical parts are marked with the same reference symbols in all figures.

[0045] FIG 1Figure 1 shows a schematic representation of a computer-aided medical device with some of its components. The computer-aided medical device is an automatic analyzer 1. Only the most important components are shown in a highly simplified manner to illustrate the basic function of the automatic analyzer 1, without depicting the individual parts of each component in detail.

[0046] The automatic analyzer 1 is designed to perform a wide variety of analyses of blood or other bodily fluids fully automatically, without requiring any user intervention. User input is limited to maintenance, repairs, and refilling, such as when cuvettes or reagents need to be replenished.

[0047] The sample containers are fed to the automated analyzer 1 on a slide (not shown) in a feed rail 2. Information regarding the analyses to be performed for each sample can be transmitted, for example, by means of barcodes affixed to the sample containers, which are read by the automated analyzer 1. Aliquots are taken from the sample containers in a pipetting device 4 using a pipetting needle (not shown).

[0048] The aliquots are also transferred to cuvettes (not shown) in which the actual analyses are carried out using various measuring instruments 6, such as photometers, etc. The cuvettes are taken from a supply of cuvettes 8. Additionally, further reagents, depending on the analysis to be performed, can be added to the respective cuvette from a supply of reagent containers 10 using another pipetting needle (not shown).

[0049] The transport of the cuvettes within the automatic analyzer 1 is carried out by means of transport devices (not shown in detail here), such as transfer arms, which are movable in various spatial directions and have a gripping device for capturing the cuvettes. The entire process is controlled by a central control unit, such as a computer 14 connected via a data line 12, and supported by a multitude of other electronic circuits and microprocessors (not shown in detail) within the automatic analyzer 1 and its components. Advantageously, the computer 14 also includes non-volatile memory in the form of a hard drive, a USB stick, or similar storage medium.

[0050] FIG 2Figure 1 shows a schematic representation of a system 20 comprising a computerized medical device, which is an automatic analyzer 1 and includes a computer 14, an authentication service configured as an authentication server 21, and a mobile device 22, which is a smartphone, tablet computer, or smartwatch. The mobile device 22 is configured and designed to be operated by a user, e.g., a trained laboratory technician. System 20 includes the following components: A specially developed mobile application is to be executed on the user's mobile device. The user must first log in to a designated authentication server with a username and password. Furthermore, the user must first establish a connection with the target system, i.e., the device computer, via the mobile application.The device computer has transmitter hardware for one or more wireless technologies, such as NFC (Near Field Communication), BLE (Bluetooth Low Energy), or Wi-Fi. Dedicated driver software runs in the background on the device computer, using the available wireless technology to make the device visible to the mobile application. This generates a special device identification token, which the mobile application needs to unlock the user. The signal strength is evaluated to determine if a user is nearby. This ensures that the device computer is only unlocked when the user is within a predefined distance. Locking also occurs according to a specific pattern. An authentication server is responsible for managing users and devices. Both the user and the dedicated driver software log in to this server.Furthermore, unlocking a device computer is performed via this server. In . Figure 2 The corresponding data connections between the individual components of the system are schematically represented by arrows. The data connection between the mobile device and the automatic analyzer 1 is wireless.

[0051] FIG 3This shows a flowchart of a device pairing procedure. To ensure that the user has authorized access to the medical device, such as the automatic Analyzer 1, a diagnostic imaging system, or other in-vitro diagnostic device, the user must first connect to the system using the pairing methods shown below. This process must be performed once per device computer and user. In the next step, the dedicated driver software uses the transmitter hardware to register the device. During this process, the device identification token is announced. The user can use the mobile application to detect systems in the vicinity. If it is an already paired system, the user can use the token shown in the diagram to identify the system. Figure 4 Use the procedure shown to log into the system in order to unlock the device computer.

[0052] The in FIG 3The flowchart shown depicts the three components: a mobile device 22, an authentication server 21, and an automatic analysis device 1, comprising a computer 14, also referred to as the device computer. A mobile application 30 runs on the mobile device 22. The authentication server 21 provides a corresponding web application 31. Dedicated driver software 32 runs on the device computer (computer 14). The device computer logs on to the web application 31 of the authentication server 21, and the authentication server 21 provides the device computer with a device identification token 34. The mobile device 22 also logs on to the web application 31 using the mobile application 30 (login 35), and the web application 31 provides the mobile device 22 with a session token 36.The mobile application 30 sends a pairing request 37 to the web application 31, which then causes a QR code 44 to be displayed on an electronic display device (monitor 43) of the device computer (show QR code 38). The web application sends a request to the mobile application 30 to scan the QR code using the mobile device 22 (scan QR code 40). A user then scans the QR code 44 displayed on the monitor 43 using the mobile device 22. The mobile application 30 transmits the scanned QR code 44 (scanned QR code 41) to the web application 31, which in turn provides a device identification token 42 to the mobile application 30. The device pairing is thus completed 45.

[0053] FIG 4This diagram shows a flowchart of the procedure for unlocking the device computer of a computerized medical device. Once the device computer is unlocked, the dedicated driver software and the mobile application send the connection status to the login server at a predefined interval of a few minutes (e.g., 3 minutes). This includes determining and reporting the signal strength from both sides. Based on this information, the login server can determine whether the user is still in close proximity to the system or further away. The distance can vary depending on the device type, for example, from a few meters for a smaller point-of-care device to 10 meters or more for a modular laboratory analysis system or a laboratory automation line. This data is then used to decide whether to lock the device computer or leave it unlocked.

[0054] The in FIG 4The flowchart shown depicts the three components: a mobile device 22, an authentication server 21, and an automatic analysis device 1, comprising a computer 14, also referred to as the device computer. A mobile application 30 runs on the mobile device 22. The authentication server 21 provides a corresponding web application 31. Dedicated driver software 32 runs on the device computer (computer 14). Using the driver software, the device computer sends a request for device advertising (Device Advertising 50) via a wireless data connection to the mobile application 30 of the mobile device 22. The mobile application 30 searches for devices (Search for Devices 51). The mobile application 30 sends a request to the web application 31 to check if the device has been paired (Has the device been paired? 52). Since the device is already paired, the web application sends a corresponding message to the mobile application 30 (Device is paired 53).The mobile application 30 then connects to the device computer's transmitting hardware via a wireless data connection (Connect to transmitting hardware 54).

[0055] The mobile application 30 sends a request to unlock the device to the web application 31 (Unlock device 55). Using the web application 31, the user logs in to the device computer and unlocks the device computer or the automatic analysis device 1 (Log in and unlock as user 56). The web application 31 then transmits to the mobile application that the device computer or the automatic analysis device 1 has been unlocked (Device computer unlocked 57). At predefined time intervals 58, 60, the mobile application 30 and the device computer each send their current connection status to the web application 31 (Send connection status 59, 61). REFERENCE MARK LIST

[0056] 1 Automatic analyzer 2 Feed rail 4 Pipetting device 6 Measuring device 8 Cuvette supply 10 Reagent container supply 12 Data line 14 Computer 20 System 21 Authentication server 22 Mobile device 30 Mobile application 31 Web application 32 Driver software 33 Device registration 34 Device identification token 35 Registration 36 Session token 37 Pairing request 38 Show QR code 40 Scan QR code 41 Scanned QR code 42 Device identification token 43 Monitor 44 QR code 45 Device pairing complete 50 Device advertising 51 Search for devices 52 Was the device paired? 53 Device is paired 54 Connect to transmitting hardware 55 Unlock device 56 Log in and unlock with user 57 Device computer unlocked 60 58 Time interval 59 Send connection status 60 Time interval 61 Send connection status

Claims

1. Method for automatically unlocking an automatic in-vitro analyser for medical samples in a system (20), the system (20) comprising the in-vitro analyser and a mobile terminal (22), wherein the mobile terminal (22) comprises a first wireless communication device for wirelessly transmitting and receiving data and wherein the mobile terminal (22) can be used to execute mobile application software, wherein the in-vitro analyser comprises a device computer and wherein the device computer comprises a second wireless communication device for wirelessly transmitting and receiving data, wherein the device computer can execute driver software (32) that can use the second communication device of the in-vitro analyser to set up a wireless communication connection to the first communication device of the mobile terminal (22), wherein the in-vitro analyser is automatically transferred from a locked state to an unlocked state if the first communication device of the mobile terminal (22) has set up a wireless connection to the second communication device of the in-vitro analyser and the signal strength, as received by the second communication device of the in-vitro analyser, of the signal of the first communication device of the mobile terminal (22) is above a predetermined first limit value, wherein the unlocking comprises the enabling of a graphical user interface of an electronic display device of the in-vitro analyser and the enabling of a user interface of the in-vitro analyser for the input of commands.

2. Method according to Claim 1, wherein the in-vitro analyser is automatically transferred from an unlocked state to a locked state if the first communication device of the mobile terminal has set up a wireless connection to the second communication device of the in-vitro analyser and the signal strength, as received by the communication device of the in-vitro analyser, of the signal of the first communication device of the mobile terminal (22) is below a predetermined second limit value and / or if the wireless connection is interrupted for longer than a predetermined first time interval, wherein the locking comprises the blocking of a graphical user interface of an electronic display device of the in-vitro analyser and the blocking of a user interface of the in-vitro analyser for the input of commands.

3. Method according to either of Claims 1 and 2, wherein the system (20) further comprises an authentication service, wherein a wireless communication connection can be set up from the mobile terminal (22) with the first communication device to the authentication service and wherein a communication connection can be set up between the device computer of the in-vitro analyser and the authentication service and wherein the in-vitro analyser is unlocked and / or locked by means of the authentication service.

4. Method according to Claim 3, wherein the mobile terminal (22) and / or the device computer of the in-vitro analyser is / are authenticated by the authentication service.

5. Method according to Claim 4, wherein the mobile terminal (22) is authenticated via a wireless communication connection from the mobile terminal (22) with the first communication device to the authentication service.

6. Method according to Claim 4, wherein the device computer of the in-vitro analyser is authenticated via a communication connection from the device computer of the in-vitro analyser to the authentication service.

7. Method according to one of the preceding claims, wherein the mobile terminal (22) comprises a smartphone or a portable computer, preferably a tablet computer, or the mobile terminal (22) is a smartphone or a portable computer.

8. Method according to one of the preceding claims, wherein the first limit value is associated with or corresponds to a first distance between the mobile terminal (22) and the in-vitro analyser.

9. Method according to one of Claims 2 to 8, wherein the second limit value is associated with or corresponds to a second distance between the mobile terminal (22) and the in-vitro analyser.

10. Method according to one of Claims 2 to 9, wherein the first time interval is less than 3 minutes.

11. Method according to one of Claims 2 to 10, wherein the first limit value is smaller than the second limit value.

12. Automatic in-vitro analyser for medical samples comprising a device computer, wherein the device computer comprises a first wireless communication device for wirelessly transmitting and receiving data, wherein the device computer can execute driver software (32) that can use a second communication device of the in-vitro analyser to set up a wireless communication connection to a first wireless communication device of a mobile terminal (22), wherein the mobile terminal (22) comprises a first wireless communication device for wirelessly transmitting and receiving data and wherein the mobile terminal (22) can be used to execute mobile application software, wherein the device computer is configured such that the in-vitro analyser is automatically transferred from a locked state to an unlocked state if the first communication device of the mobile terminal (22) has set up a wireless connection to the second communication device of the in-vitro analyser and the signal strength, as received by the second communication device of the in-vitro analyser, of the signal of the first communication device of the mobile terminal (22) is above a predetermined first limit value, wherein the unlocking comprises the enabling of a graphical user interface of an electronic display device of the in-vitro analyser and the enabling of a user interface of the in-vitro analyser for the input of commands.

13. Use of a method according to one of Claims 1 to 11 in a system, the system comprising an automatic in-vitro analyser for medical samples and a mobile terminal (22).