Disposable Drug Injector Access Control via Secure Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing medical devices, particularly disposable drug injectors, lack a secure network security management system that complies with international standards like ISO 27001 and ISO 27701, necessitating a solution for controlling and managing these devices effectively while ensuring data privacy and integrity.

Innovation Solution

A network security management system and management server that authenticates and controls disposable drug injectors through a drug injector controller, setting data accessing and device controlling authorities via network communication, using encryption keys and signature information to ensure secure and compliant operation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a network security management system is implemented for disposable drug injectors, then information security and data privacy are improved, but device complexity increases

Engineering Contradiction:

Improveinformation securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

A management server is introduced as an intermediary between disposable drug injectors and the network, centralizing security management functions. The management server handles authentication, authorization, and security policy enforcement, thereby improving information security while preventing the complexity from being distributed across numerous individual devices.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The security management system is segmented into distinct functional modules: authentication module, authorization module, and control module. This segmentation allows each component to perform its specific security function independently, making the overall complex system more manageable and maintainable while ensuring comprehensive security coverage.

Inventive Principle:

Principle #1Segmentation

2Reliability

If authentication and authorization protocols are implemented, then data integrity and access control are improved, but communication overhead increases

Engineering Contradiction:

Improvedata integrityVSAvoidcommunication overhead

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

Authentication and authorization are performed in advance before actual drug injection operations. The controller and management server establish secure credentials and access rights beforehand, so that during critical injection operations, communication is minimized to essential commands only, reducing communication overhead while maintaining data integrity.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If exclusive controller authentication is implemented, then device security is improved, but ease of operation decreases

Engineering Contradiction:

Improvedevice securityVSAvoidcontroller operation

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The authentication system is designed to be self-service oriented, where the management server automatically verifies credentials and grants access rights without requiring manual intervention from operators. The controller automatically establishes secure connections and receives pre-configured authorization tokens, maintaining high security while preserving ease of operation.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS12519785B2Network security management system and management server for controlling disposable drug injector

Publication Date: 2026.01.06 IPV

AI summary

Provided is a network security management system and management server for controlling a disposable drug injector. A method of controlling a disposable drug injector by using a drug injector controller includes searching for a nearby device for connecting to a disposable drug injector, authenticating that a found device is the disposable drug injector that is controllable by the drug injector controller, requesting, from the disposable drug injector, to set a data accessing authority and a device controlling authority, and controlling the disposable drug injector in which the data accessing authority and the device controlling authority are set via network communication.