Abstract: A multi-communication path selection and security system for a medical device includes a medical device and a computer. The medical device includes a processor, one or more communication interfaces, and a memory that stores configurable settings, medical device policies and profiles associated with a plurality of communication links. The processor establishes a location variable associated with the medical device and when the location variable exceeds a location proximity threshold, the processor alters one or more settings of the medical device based on the medical device policies. The processor establishes a source location variable associated with the computer or an incoming message from the computer, and when the source location variable exceeds a source proximity threshold, the processor alters the incoming message or the settings of the medical device based on the medical device policies.

Abstract: Techniques for managing encoded communications for medical devices in a clinical environment are provided. Different versions of signal coding libraries are generated for different devices in a communication path. A first signal coding library may be generated using a first signal definition that includes a set of fields. A second signal coding library may be generated using a second signal definition that includes a subset of the fields of the first signal definition, and excludes one or more of the fields of the first signal definition. A message encoded using the first signal coding library may not be completely decodable using the second signal coding library. By selectively deploying the signal coding libraries to different systems, devices, and components in a clinical environment, access to information in message fields can be effectively managed.

Abstract: Techniques for managing secure communication certificates for medical devices in a clinical environment are provided. A short-lived, limited-use token may be uniquely assigned to a medical device. The medical device can self-provision a secret key and corresponding public key based on a unique identifier in the token. The medical device generates a certificate signing request (“CSR”) that includes the public key, and sends the CSR and the token to a verification system that serves as an intermediary between medical devices and a certificate authority. The intermediary may only send the CSR to the certificate authority (“CA”) for a certificate if the intermediary is able to validate the token.

Abstract: A multi-communication path selection and security system for a medical device includes a medical device and a computer. The medical device includes a processor, one or more communication interfaces, and a memory that stores configurable settings, medical device policies and profiles associated with a plurality of communication links. The processor establishes a location variable associated with the medical device and when the location variable exceeds a location proximity threshold, the processor alters one or more settings of the medical device based on the medical device policies. The processor establishes a source location variable associated with the computer or an incoming message from the computer, and when the source location variable exceeds a source proximity threshold, the processor alters the incoming message or the settings of the medical device based on the medical device policies.

Abstract: The present disclosure is directed managing the operation of devices using identity-based cryptography. These techniques may include provisioning a master public key to each system that will communicate with a medical device using device-identifier specific cryptography. A master secret key is provisioned in a trusted processor of the medical device, and the medical device provisions its own device identifier-specific secret key using the master secret key. This setup facilitates several management features, including automatic initial configuration, signed logging, signed backup files, and secure binding of medication containers to the medical device.

Abstract: The present disclosure is directed to managing device authorization through the use of digital signature thresholds. Individual components of a device, or individual devices in a network environment, are associated with separate secret shares from which a digital signature can be derived. The digital signature may be used to authorize performance of a function. A threshold number of such secret shares are used in order to derive the digital signature. Therefore, an authorization process that relies on digital signature verification to determine that a function is authorized will do so if a threshold number of secret shares are available at authorization time.

Abstract: A multi-communication path selection and security system for a medical device includes a medical device and a N computer. The medical device includes a processor, one or more communication interfaces, and a memory that stores configurable settings, medical device policies and profiles associated with a plurality of communication links. The processor establishes a location variable associated with the medical device and when the location variable exceeds a location proximity threshold, the processor alters one or more settings of the medical device based on the medical device policies. The processor establishes a source location variable associated with the computer or an incoming message from the computer, and when the source location variable exceeds a source proximity threshold, the processor alters the incoming message or the settings of the medical device based on the medical device policies.