Authorization Entity for Secure Remote Medical System Maintenance

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing systems that process access-protected data face security risks during maintenance due to the need for on-site presence of both a service technician and an authorized employee, leading to potential unauthorized access and manual, error-prone evaluation of actions requiring authorization.

Innovation Solution

A remote maintenance system where a monitoring system, connected via a data link to the system being serviced, ensures exclusive authorization for accessing protected data through automated or manual determination of actions needing authorization, with synchronization of screen displays and processes, and optional use of an online protocol or identification units to enhance security and supervision.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If remote maintenance is implemented, then maintenance efficiency and accessibility are improved, but security risks increase due to potential unauthorized access to protected data

Engineering Contradiction:

Improvemaintenance efficiencyVSAvoidsecurity

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent introduces an authorization entity as an intermediary between the monitoring system and the access-protected data. This intermediary automatically evaluates whether maintenance actions require authorization and enforces access control, thereby enabling remote maintenance while maintaining security through automated mediation rather than manual oversight.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The authorization entity operates autonomously to evaluate and authorize maintenance actions without requiring continuous human intervention. The system automatically determines whether actions need authorization based on predefined criteria, enabling the security mechanism to serve itself and eliminating the need for constant employee supervision.

Inventive Principle:

Principle #25Self-service

2Reliability

If manual monitoring by authorized employees is used, then security control is improved, but operational complexity and time consumption increase

Engineering Contradiction:

Improvesecurity controlVSAvoidtime consumption

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The authorization entity autonomously evaluates maintenance actions and determines authorization requirements without human intervention. The system automatically compares actions against predefined criteria and executes authorization decisions, eliminating the time-consuming manual monitoring process while maintaining security control.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces the mechanical process of manual employee monitoring with an automated information processing system. The authorization entity uses computational methods to evaluate actions and make authorization decisions, substituting human cognitive processes with automated algorithms that operate faster and without fatigue.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Speed

If automated authorization determination is implemented, then processing speed is improved, but system complexity increases

Engineering Contradiction:

Improveprocessing speedVSAvoidsystem complexity

Core Design Contradiction:

SpeedVSDevice complexity

Solution Approach 1:

The patent divides the authorization system into distinct functional modules within the authorization entity, including action reception units, evaluation units, and authorization decision units. This segmentation allows the complex authorization process to be broken down into manageable, independent components that can be processed sequentially, improving speed while organizing complexity into structured units.

Inventive Principle:

Principle #1Segmentation

4Reliability

If on-site presence of authorized employee is required, then security oversight is improved, but accessibility and remote maintenance capability deteriorate

Engineering Contradiction:

Improvesecurity oversightVSAvoidremote maintenance capability

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The authorization entity serves as an automated intermediary that replaces the need for physical presence of authorized employees. It receives maintenance actions, evaluates them against security criteria, and provides authorization decisions remotely, thereby maintaining security oversight while enabling remote maintenance operations without geographical constraints.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the physical presence requirement with an automated electronic authorization system. The authorization entity processes maintenance requests through computational evaluation rather than requiring physical co-location of employee and technician, substituting mechanical oversight with automated information processing that operates independently of geographical location.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS7555782B2Arrangement and method for limiting access to access-protected data in a system during remote servicing thereof

Publication Date: 2009.06.30 SIEMENS HEALTHINEERS AG

AI summary

In an arrangement allowing remote maintenance of a computer-controlled system to be serviced, in particular a medical system, the maintenance occurs via a spatially independent monitoring system in communication with the system to be serviced. The system to be serviced is, among other things, designed for the processing of access-protected data such as, for example, patient data. Access to the access-protected data by the monitoring ensues exclusively via an authorization unit associated with the system to be serviced.