Selective Data Shielding in Medical Device Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Medical devices configured for infrequent use, such as automated external defibrillators, often have self-test failures go unrecognized due to storing results in local memory, and they typically transmit all recorded data, allowing unauthorized access to unnecessary information.
Innovation Solution
A system with a selective shielding component on medical devices that shields device information with an electronic key, allowing only necessary data to be transmitted, while maintaining associations, and uses a server to generate reports without access to the encryption key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If all recorded data is transmitted to allow direct recipients to view complete information, then data completeness is improved, but data security and privacy protection deteriorate
Solution Approach 1:
The patent segments data into different types (device information, patient information, clinical event information) and applies different encryption levels and access controls to each segment. This allows complete data transmission while restricting access to only authorized recipients based on their role and need-to-know basis.
Solution Approach 2:
The patent implements selective encryption where different portions of the data are encrypted with different keys based on their sensitivity and recipient requirements. Device information may be encrypted with one key while patient information requires another key, allowing each recipient to access only the data appropriate for their function.
2Reliability
If device information is stored in local memory for self-test monitoring, then device functionality is maintained, but recognition of self-test failures deteriorates
Solution Approach 1:
The patent introduces a server as an intermediary between the medical device and the monitoring system. The device transmits self-test results to the server, which then processes and flags failed tests. This allows the device to maintain local functionality while ensuring centralized monitoring and recognition of failures.
Solution Approach 2:
The patent implements a feedback loop where self-test results are transmitted to the server, which then provides notifications or alerts when tests fail. This feedback mechanism ensures that failures are recognized and addressed, improving overall system reliability while maintaining device functionality.
3Object-affected harmful factors
If selective encryption is implemented to protect sensitive information, then data security is improved, but system complexity increases
Solution Approach 1:
The patent implements automatic key management where the system self-generates encryption keys, automatically encrypts data with appropriate keys, and manages key distribution without requiring manual intervention. This reduces the operational complexity of key management while maintaining strong security.
Solution Approach 2:
The patent creates a universal encryption framework that handles multiple types of data (device information, patient information, clinical events) and multiple recipients with different access levels using a standardized set of encryption protocols and key management procedures. This multi-functional approach simplifies the overall system architecture.
Data Source
AI summary
A system for remotely managing a medical device includes a selective shielding component, configured to (a) shield with an electronic key any portion of device information that identifies the medical device individually while maintaining unshielded with the electronic key an association between such any portion and a rest of the device information and/or (b) shield with an electronic key any portion of device information that identifies the patient individually while maintaining unshielded with the electronic key an association between such any portion and a rest of the device information, and record the selectively shielded device information; a first communication component configured to facilitate transmitting the selectively shielded device information through a network; and a server device communicatively coupled to the network and configured to use the selectively shielded device information to generate reports about the device information, and the clinical event information, but wherein the server device lacks access to the electronic key.


