Ultrasound imaging system having computer virus protection

• US 7,263,616 B1
• Filed: 09/22/2000
• Issued: 08/28/2007
• Est. Priority Date: 09/22/2000
• Status: Expired due to Fees

• Current Assignee: GE Medical Systems Global Technology Company LLC (GE Healthcare Technologies, Inc.)
• Original Assignee: GE Medical Systems Global Technology Company LLC (GE Healthcare Technologies, Inc.)
• Inventors: Brackett, Charles Cameron
• Primary Examiner(s): HENEGHAN, MATTHEW E
• Application Number:
  US09/667,742
• Time in Patent Office: 2,531 Days
• Field of Search: 713/188, 713/200, 713/201, 600/437, 726/24, 726/28
• US Class Current: 713/188
• CPC Class Codes: G06F 21/562 Static detection
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities

Abstract

An ultrasound imaging system is provided with virus protection. Each file that enters the system (via the hard disk or the networking port) is scanned to detect the presence of any virus in the file. Before each file is written to the hard disk of the scanner, the Checksum and Size of the file are verified, along with other virus-identifying attributes, to determine if the file is infected with a virus or if the file itself is a virus. If there is a discrepancy in either the Checksum or Size, then a dialogue box appears, warning the system operator that the file being installed may contain a virus. In order to provide additional protection for the ultrasound scanner, all processes starting to run on the scanner are monitored. Each time a new process is started on the scanner, virus protection monitoring software will suspend the process and search for encrypted data identifying the starting process in a Registry table. If the starting process is listed in the table, then the starting process is un-suspended without the user ever knowing what happened. If the virus protection monitor does not find a match in the table, then a dialogue box appears on the screen, warning the system operator that the application may be a virus.

Claims

1. An ultrasound imaging system comprising:

an image acquisition subsystem for acquiring frames of image data;

system memory storing said acquired frames of image data and operating instructions;

a display subsystem for displaying images derived from said acquired frames of image data;

a display processor for controlling said display subsystem to display frames of image data;

a hard disk storing frames of image data, said operating instructions and a registry file containing encrypted data representing a list of all processes that are approved by the system manufacturer or service provider to run on the imaging system;

an operating system that copies said operating instructions from said hard disk to said system memory when the imaging system is powered up; and

a host computer programmed to control said image acquisition subsystem and said display subsystem in accordance with operating instructions transferred from said hard disk to said system memory, and further programmed with first and second computer virus protection features, said first computer virus protection feature comprising means for detecting a file having an attribute of a computer virus before said file is installed on said hard disk, and said second computer virus protection feature comprising means for monitoring an application program to be executed by said operating system but not yet copied from said hard disk to said system memory, said monitoring means comprising means for decrypting said encrypted data in said registry file and means for searching said decrypted data for an entry matching the identifier received from said operating system identifying a starting process of said application program to be executed by said operating system.

2. The ultrasound imaging system as recited in claim 1, wherein said attribute is a checksum of said file.

3. The ultrasound imaging system as recited in claim 1, wherein said attribute is a size of said file.

4. The ultrasound imaging system as recited in claim 1, wherein said host computer is further programmed with:

means for actuating display of a graphical user interface by said display subsystem in response to detection of said file having an attribute of a computer virus, said graphical user interface comprising a virus alert and a virtual actuator; and

means for instructing said operating system to install said file in response to selection of said virtual actuator.

5. The ultrasound imaging system as recited in claim 4, further comprising a log of virus detection events, wherein said host computer is further programmed with means for logging an entry in said log in response to selection of said virtual actuator.

6. The ultrasound imaging system as recited in claim 1, wherein said host computer is further programmed with means for actuating display of a first graphical user interface by said display subsystem in response to detection that said starting process is not registered, said first graphical user interface comprising a virus alert and a virtual actuator.

7. The ultrasound imaging system as recited in claim 6, wherein said host computer is further programmed with means for instructing said operating system to kill said starting process in response to selection of said virtual actuator on said first graphical user interface.

8. The ultrasound imaging system as recited in claim 7, further comprising a log of virus detection events, wherein said host computer is further programmed with means for logging an entry in said log in response to selection of said virtual actuator on said first graphical user interface.

9. The ultrasound imaging system as recited in claim 7, wherein said host computer is further programmed with means for instructing said operating system to remove said application program from said hard disk in response to selection of said virtual actuator on said first graphical user interface.

10. The ultrasound imaging system as recited in claim 6, wherein said host computer is further programmed with:

means for actuating display of a second graphical user interface by said display subsystem in response to selection of said virtual actuator on said first graphical user interface, said second graphical user interface comprising a request for confirmation and a virtual actuator; and

means for adding information to said registry file for registering said application program in response to selection of said virtual actuator on said second graphical user interface.

11. The ultrasound imaging system as recited in claim 10, further comprising an encrypter arranged to encrypt information sent from said host computer to said registry file on said hard disk.

12. An ultrasound imaging system comprising:

an image acquisition subsystem for acquiring frames of image data;

system memory storing said acquired frames of image data and operating instructions;

a display subsystem for displaying images derived from said acquired frames of image data;

a display processor for controlling said display subsystem to display frames of image data;

a hard disk storing frames of image data, said operating instructions and a registry file containing encrypted data representing a list of all processes that are approved by the system manufacturer or service provider to run on the imaging system;

an operating system that copies said operating instructions from said hard disk to said system memory when the imaging system is powered up; and

a host computer programmed to control said image acquisition subsystem and said display subsystem in accordance with operating instructions transferred from said hard disk to said system memory, and further programmed with means for monitoring an application program to be executed by said operating system but not yet copied from said hard disk to said system memory, said monitoring means comprising means for decrypting said encrypted data in said registry file and means for searching said decrypted data for an entry matching the identifier received from said operating system identifying a starting process of said application program to be executed by said operating system.

13. The ultrasound imaging system as recited in claim 12, wherein said host computer is further programmed with means for actuating display of a first graphical user interface by said display subsystem in response to detection that said starting process is not registered, said first graphical user interface comprising a virus alert and a virtual actuator.

14. The ultrasound imaging system as recited in claim 13, wherein said host computer is further programmed with means for instructing said operating system to kill said starting process in response to selection of said virtual actuator on said first graphical user interface.

15. The ultrasound imaging system as recited in claim 14, further comprising a log of virus detection events, wherein said host computer is further programmed with means for logging an entry in said log in response to selection of said virtual actuator on said first graphical user interface.

16. The ultrasound imaging system as recited in claim 14, wherein said host computer is further programmed with means for instructing said operating system to remove said application program from said hard disk in response to selection of said virtual actuator on said first graphical user interface.

17. The ultrasound imaging system as recited in claim 13, wherein said host computer is further programmed with:

means for actuating display of a second graphical user interface by said display subsystem in response to selection of said virtual actuator on said first graphical user interface, said second graphical user interface comprising a request for confirmation and a virtual actuator; and

means for adding information to said registry file for registering said application program in response to selection of said virtual actuator on said second graphical user interface.

18. The ultrasound imaging system as recited in claim 17, further comprising an encrypter arranged to encrypt information sent from said host computer to said registry file on said hard disk.