PREVENTING DISRUPTIVE COMPUTER EVENTS DURING MEDICAL PROCEDURES

• US 20110022191A1
• Filed: 07/23/2009
• Published: 01/27/2011
• Est. Priority Date: 07/23/2009
• Status: Active Grant

• Current Assignee: Biosense Webster Incorporated (Johnson & Johnson)
• Original Assignee: Biosense Webster Incorporated (Johnson & Johnson)
• Inventors: Amit, Mati, Schwartz, Yitzhack
• Granted Patent: US 8,606,377 B2
• Time in Patent Office: Days
• US Class Current: 700/21
• CPC Class Codes: G06F 9/485 Task life-cycle, e.g. stopping, restarting, resuming execution G06F9/4881 takes precedence
• CPC Class Codes: G06F 9/542 Event management; Broadcasting; Multicasting; Notifications

Abstract

A computer-implemented system for process control has two operating modes: normal mode and active procedure mode, with automatic transition between them. In normal mode, the operating system, firewall and anti-virus are fully operational. When entering a time-critical phase of a process, a process control application signals the operating system and utilities, whereupon transition to active procedure mode automatically occurs, in which access by the system services and by other applications to the resources of the computer is selectively limited in favor of the process control application. Upon completion of the procedure, the system automatically returns to normal mode.

Claims

1. A method of preventing disruptive computer events in a computing system, comprising:

executing a process for controlling an external device, the process having a time-noncritical phase and a time-critical phase;

controlling the process using a process control application executing on a computing device managed by an operating system by intercommunicating signals between the computing device and the external device;

during the time-noncritical phase, operating the computing device in a plurality of operating modes including a first mode in which system services and applications other than the process control application are allowed access to resources of the computing device under control of the operating system and a second mode;

making a determination that the process has entered the time-critical phase; and

responsively to the determination, automatically transitioning the computing device from the first mode to the second mode in which the access by the system services and by other applications to the resources of the computing device is selectively limited in favor of the process control application.

2. The method according to claim 1, wherein the operating system has a plurality of system functions that have respective behaviors in the plurality of operating modes.

3. The method according to claim 2, wherein the plurality of operating modes further comprises a third mode for remotely controlling the computing device, and a fourth mode for performing remote maintenance on the computing device.

4. The method according to claim 1, wherein the computing device further comprises a file system having storage objects residing therein, and wherein automatically transitioning the computing device comprises selectively disallowing updates of the storage objects in the file system.

5. The method according to claim 4, wherein the storage objects comprise a registry having system keys for use by the operating system, application keys for use by the other applications, and data keys, and wherein selectively disabling updates of the storage objects comprises locking the system keys and the application keys of the registry to prevent updates therein while avoiding locking the data keys of the registry.

6. The method according to claim 4, wherein portions of the storage objects in the file system are classified as system objects for access thereof by the operating system, application objects for access thereof by the other applications, and data objects, the storage objects further comprising device drivers, and wherein at least a portion of the storage objects have sharing attributes that determine sharability with other computing devices, wherein selectively disabling updates of the storage objects comprises:

locking the system objects and application objects of the file system to prevent updates thereof while avoiding locking the data objects of the file system;

preventing updating of the device drivers; and

preventing modification of the sharing attributes of the storage objects.

7. The method according to claim 1, wherein the computing device is linked to a data network via sockets, the method further comprising allowing only a predefined network-privileged set of the other applications to establish a new connection via the data network.

8. The method according to claim 7, wherein allowing only a predefined network-privileged set of the other applications to establish a new connection comprises preventing an opening of the sockets.

9. The method according to claim 1, wherein a security application group comprises at least one of a firewall, an antivirus program, and an antispyware program, the firewall having a current configuration further comprising limiting collective usage of hardware resources of the computing device by the security application group to a predefined security group maximum.

10. The method according to claim 9, wherein automatically transitioning the computing device further comprises disabling scheduled scans and updates of the antivirus program.

11. The method according to claim 9, wherein automatically transitioning the computing device further comprises blocking updates of a configuration of the computing device and disabling the antispyware program.

12. The method according to claim 11, wherein user directives are entered via a user management interface, a control panel applet, and a time management interface, and wherein blocking updates of the configuration of the computing device comprises:

storing the current configuration of the firewall and thereafter preventing modifications thereof;

disabling scheduled activations of the antivirus program;

preventing access to the user management interface;

preventing access to the time management interface; and

preventing access to the control panel applet.

13. The method according to claim 12, wherein the configuration of the computing device is responsive to a task management interface, and to keyboard-generated interrupts, wherein blocking updates of the configuration of the computing device further comprises preventing ones of the keyboard-generated interrupts that invoke the task management interface, induce a sleep mode of operation of the computing device, and disconnect power to the computing device from being received by all the other applications except a second predefined set of the other applications.

14. A method of preventing disruptive computer events in a medical computing system, comprising:

applying a medical instrument to a living subject to perform a medical procedure thereon, the medical procedure having a time-noncritical phase and a time-critical phase;

controlling the medical instrument using a medical application executing on a computing device managed by an operating system by intercommunicating signals between the computing device and the medical instrument;

during the time-noncritical phase, operating the computing device in a first mode in which system services and applications other than the medical application are allowed access to resources of the computing device under control of the operating system;

making a determination that the medical procedure has entered the time-critical phase; and

responsively to the determination, automatically transitioning the computing device from the first mode to a second mode in which the access by the system services and by other applications to the resources of the computing device is selectively limited in favor of the medical application.

15. A medical system of preventing disruptive computer events in a medical computing system, comprising:

a medical instrument applicable to a living subject to perform a medical procedure thereon, the medical procedure having a time-noncritical phase and a time-critical phase; and

a computing device managed by an operating system for controlling the medical instrument using a medical application executing on the computing device by intercommunicating signals between the computing device and the medical instrument, the computing device operative during the time-noncritical phase, in a first mode in which system services and applications other than the medical application are allowed access to resources of the computing device under control of the operating system, the computing device cooperative with the medical instrument for making a determination that the medical procedure has entered the time-critical phase, and responsively to the determination, the computing device adapted for automatically transitioning from the first mode to a second mode in which the access by the system services and by other applications to the resources of the computing device is selectively limited in favor of the medical application.

16. The medical system according to claim 15, wherein making a determination comprises sending an indication from the medical application to the operating system.

17. The medical system according to claim 15, wherein the computing device further comprises a file system having storage objects residing therein, and wherein automatically transitioning comprises selectively disallowing updates of the storage objects in the file system.

18. The medical system according to claim 17, wherein the storage objects comprise a registry having system keys for use by the operating system, application keys for use by the other applications, and data keys, and wherein selectively disabling updates of the storage objects comprises locking the system keys and the application keys of the registry to prevent updates therein while avoiding locking the data keys of the registry.

19. The medical system according to claim 17, wherein portions of the storage objects in the file system are classified as system objects for access thereof by the operating system, application objects for access thereof by the other applications, and data objects, the storage objects further comprising device drivers, and wherein at least a portion of the storage objects have sharing attributes that determine sharability with other computing devices, wherein selectively disabling updates of the storage objects comprises:

locking the system objects and application objects of the file system to prevent updates thereof while avoiding locking the data objects of the file system;

preventing updating of the device drivers; and

preventing modification of the sharing attributes of the storage objects.

20. The medical system according to claim 15, wherein the computing device is linked to a data network via sockets, the method further comprising allowing only a predefined network-privileged set of the other applications to establish a new connection via the data network.

21. The medical system according to claim 20, wherein allowing only a predefined network-privileged set of the other applications to establish a new connection comprises preventing an opening of the sockets.

22. The medical system according to claim 15, wherein a security application group comprises at least one of a firewall, an antivirus program, and an antispyware program, the firewall having a current configuration further comprising limiting collective usage of hardware resources of the computing device by the security application group to a predefined security group maximum.

23. The medical system according to claim 22, wherein automatically transitioning further comprises disabling scheduled scans and updates of the antivirus program.

24. The medical system according to claim 22, wherein automatically transitioning further comprises blocking updates of a configuration of the computing device and disabling the antispyware program.

25. The medical system according to claim 24, wherein user directives are entered via a user management interface, a control panel applet, and a time management interface, and wherein blocking updates of the configuration of the computing device comprises:

storing the current configuration of the firewall and thereafter preventing modifications thereof;

disabling scheduled activations of the antivirus program;

preventing access to the user management interface;

preventing access to the time management interface; and

preventing access to the control panel applet.

26. The medical system according to claim 25, wherein the configuration of the computing device is responsive to a task management interface, and to keyboard-generated interrupts, wherein blocking updates of the configuration of the computing device further comprises preventing ones of the keyboard-generated interrupts that invoke the task management interface, induce a sleep mode of operation of the computing device, and disconnect power to the computing device from being received by all the other applications except a second predefined set of the other applications.