Selective Data Shielding in Medical Device Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Medical devices used infrequently in emergency situations often have self-test failures that go unrecognized, and existing data transmission methods send all recorded data, even if only a subset is needed, leading to inefficiencies and potential misuse of sensitive patient information.

Innovation Solution

A system with a selective shielding component on medical devices that gathers information, shields device or patient identifiers with an electronic key, and transmits selectively shielded data through a network, allowing only authorized servers with access to the key to generate reports on device readiness, performance, and clinical events.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of information

If all recorded data is transmitted to allow complete access for reporting and analysis, then data completeness and reporting capability are improved, but data security and privacy protection deteriorate

Engineering Contradiction:
Improvedata completenessVSAvoiddata security risk
Core Design Contradiction:
Loss of informationVSObject-affected harmful factors

Solution Approach 1:

The patent segments data into two categories: shielded data (device identifiers, patient identifiers) and unshielded data (device performance metrics, clinical event data). The selective shielding component applies encryption keys to specific data portions, allowing differential access where servers can analyze unshielded data without accessing sensitive shielded data. This resolves the contradiction by enabling complete data transmission for reporting while protecting sensitive information through selective encryption.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements local quality by applying different security properties to different portions of the same data set. The selective shielding component identifies and shields only specific fields (device ID, patient ID) while leaving other fields (performance metrics, event data) unshielded. This allows servers to access and analyze the necessary data for reporting while maintaining security for sensitive identifiers, resolving the contradiction between data completeness and security.

Inventive Principle:
Principle #3Local quality

2Object-affected harmful factors

If device identifiers are shielded with encryption to protect privacy, then data security is improved, but data accessibility for authorized reporting deteriorates

Engineering Contradiction:
Improveprivacy protectionVSAvoiddata accessibility
Core Design Contradiction:
Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The patent segments identifiers from other data elements and applies selective shielding only to identifier fields. The shielded device identifier and shielded patient identifier are encrypted separately from performance data and clinical event data. This allows authorized servers to access unshielded data for reporting while maintaining privacy protection for identifiers, resolving the contradiction between privacy and accessibility.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The selective shielding component acts as an intermediary that processes data before transmission. It applies encryption keys to shielded portions while leaving unshielded portions accessible. This intermediary function enables both privacy protection (through encryption) and authorized accessibility (through selective decryption or key management), resolving the contradiction between privacy and ease of operation.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Object-affected harmful factors

If selective data shielding is implemented to protect sensitive information, then data security is improved, but system complexity increases

Engineering Contradiction:
Improvesensitive information protectionVSAvoidencryption system complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent extracts the shielding functionality into a separate selective shielding component that operates independently from the core medical device functions. This component identifies which data portions require shielding and applies encryption keys selectively. By taking out the complexity into a dedicated module, the core device remains simple while achieving sensitive information protection, resolving the contradiction between security and complexity.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The selective shielding component performs automatic identification and shielding of sensitive data portions without requiring manual configuration or complex external systems. The component self-manages the encryption process by identifying device identifiers and patient identifiers and applying appropriate shielding. This self-service approach minimizes system complexity while achieving sensitive information protection.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS10665341B2Customer—or patient-based selective data encryption in medical device management
Publication Date: 2020.05.26 ZOLL MEDICAL CORPORATION
  • US10665341B2 patent drawing
  • US10665341B2 patent drawing
  • US10665341B2 patent drawing

AI summary

A system for remotely managing a medical device includes a selective shielding component, configured to (a) shield with an electronic key any portion of device information that identifies the medical device individually while maintaining unshielded with the electronic key an association between such any portion and a rest of the device information and/or (b) shield with an electronic key any portion of device information that identifies the patient individually while maintaining unshielded with the electronic key an association between such any portion and a rest of the device information, and record the selectively shielded device information; a first communication component configured to facilitate transmitting the selectively shielded device information through a network; and a server device communicatively coupled to the network and configured to use the selectively shielded device information to generate reports about the device information, and the clinical event information, but wherein the server device lacks access to the electronic key.