Security management system, medical device and method for managing security

• US 8,074,273 B2
• Filed: 11/18/2005
• Issued: 12/06/2011
• Est. Priority Date: 11/19/2004
• Status: Active Grant

• Current Assignee: Toshiba Medical Systems Corporation (Canon Inc.)
• Original Assignee: Toshiba Medical Systems Corporation (Canon Inc.), Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Oowaki, Naoki, Teshima, Fumiaki
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): KANAAN, SIMON P
• Application Number:
  US11/281,587
• Publication Number:
  US 20060136998A1
• Time in Patent Office: 2,209 Days
• Field of Search: 726 1- 5, 726 16- 21
• US Class Current: 726/17
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data

Abstract

A security management system, comprising: an authentication unit for authenticating an operator of an operating terminal in order to determine whether the operator is permitted to log in or release a lock; a current operator information inquiry unit for inquiring for login status information and current operator information; an authority information inquiry unit for inquiring for authority information regarding the operator and that regarding the current operator; a lock unit for detecting an event, where a predetermined lock condition is satisfied, in the login status to allow the operating terminal to change to a lock status, and for allowing the operating terminal to change to an operable status in response to a login instruction or an instruction for a release; and a lock control unit for transmitting the instruction for a release to the lock unit when a predetermined condition is satisfied.

Claims

1. A security management system having an operating terminal that includes an input device, and shifts the operating terminal from one status of a logout status, a screen lock status, and an operable status to another status, the system comprising:

an authentication unit configured to authenticate an operator using the operating terminal on the basis of operator information input by the operator which identifies operators and includes an operator identifier and a password, to shift the operating terminal from the logout status to the operable status by a login, and to shift the operating terminal from the screen lock status to the operable status by releasing a screen lock on the basis of the operator information input by the operator;

a screen lock unit configured to perform the screen lock on the basis of an obtained event where a predetermined screen lock condition is satisfied, and to shift the operating terminal from the operable status to the screen lock status, wherein the screen lock restricts access to functionality of the operating terminal;

an emergency recognition unit configured to recognize emergency information input at the input device by the operator; and

a forcing unit configured to forcibly release the screen lock without the authentication of the operator, and to shift the operating terminal from the screen lock status to the operable status when the emergency information input by the operator is recognized by the emergency recognition unit,

wherein the operator may control a plurality of functions of a medical device connected to the operating terminal when the operating terminal is in the operable status.

2. The security management system according to claim 1, wherein the emergency recognition unit determines whether an input at the input device by the operator is the emergency information without transmitting a signal to an external device.

3. A security management system having an operating terminal that includes an input device, and shifts the operating terminal from one status of a logout status, a screen lock status, a totally-operable status, and a partly-operable status to another status, the system comprising:

a screen lock unit configured to perform a screen lock of the operating terminal on the basis of an obtained event where a predetermined screen lock condition is satisfied, and to shift the operating terminal from the operable status to the screen lock status, wherein the screen lock restricts access to functionality of the operating terminal;

an emergency recognition unit configured to recognize emergency information input at the input device by an operator;

a forcing unit configured to forcibly release a part of the screen lock in order to shift from the screen lock status to the partly-operable status when the emergency information input by the operator is recognized by the emergency recognition unit,

wherein the operator may control a plurality of functions of a medical device connected to the operating terminal when the operating terminal is in the partly-operable status.

4. A security management system having an operating terminal that includes an input device, and shifts the operating terminal from one status of a logout status, a screen lock status, a totally-operable status, and a partly-operable status to another status, the system comprising:

a screen lock unit configured to perform a screen lock of the operating terminal on the basis of an obtained event where a predetermined screen lock condition is satisfied, and to shift the operating terminal from the operable status to the screen lock status, wherein the screen lock restricts access to functionality of the operating terminal;

an authentication unit configured to authenticate an operator using the operating terminal on the basis of operator information input by the operator which identifies operators and includes an operator identifier and a password, and to shift the operating terminal from the screen lock status to the totally-operable status;

an emergency recognition unit configured to recognize emergency information input at the input device by the operator; and

a forcing unit configured to forcibly release a part of the screen lock without the authenticate of the operator, and to shift the operating terminal from the screen lock status to the partly-operable status when receiving the emergency information input by the operator from the emergency recognition unit,

wherein the operator may control a plurality of functions of a medical device connected to the operating terminal when the operating terminal is in the partly-operable status.

5. A medical device having an operating terminal that includes an input device and a display device, and shifts the operating terminal from one status of a logout status, a screen lock status, a totally-operable status, and a partly-operable status to another status, the device comprising:

a screen lock unit configured to perform a screen lock of the operating terminal on the basis of an obtained event where a predetermined screen lock condition is satisfied, and to shift the operating terminal from the operable status to the screen lock status, wherein the screen lock restricts access to functionality of the operating terminal;

an emergency recognition unit configured to recognize emergency information input at the input device by an operator;

a forcing unit configured to forcibly release a part of the screen lock, which does not display information previously indicated as being protected private information, and to shift from the screen lock status to the partly-operable status when the emergency information input by the operator is recognized by the emergency recognition unit,

wherein the operator may control a first plurality of functions of the medical device when the operating terminal is in thepartly-operable status.

6. The medical device according to claim 5, wherein the operator may control a second plurality of functions of the medical device when the operating terminal is in the totally-operable status, the first plurality of functions being fewer than the second plurality of functions.

7. A medical device having an operating terminal that includes an input device and a display device, and shifts the operating terminal from one status of a logout status, a screen lock status, a totally-operable status, and a partly-operable status to another status, the device comprising:

a screen lock unit configured to perform a screen lock of the operating terminal on the basis of an obtained event where a predetermined screen lock condition is satisfied, and to shift the operating terminal from the operable status to the screen lock status, wherein the screen lock restricts access to functionality of the operating terminal;

an authentication unit configured to authenticate an operator using the operating terminal on the basis of operator information input by the operator which identifies operators and includes an operator identifier and a password, and to shift the operating terminal from the screen lock status to the totally-operable status on the basis of the operator information input by the operator;

an emergency recognition unit configured to recognize emergency information input at the input device by the operator; and

a forcing unit configured to forcibly release a part of the screen lock without the authentication of the operator, and to shift the operating terminal from the screen lock status to the partly-operable status when receiving the emergency information input by the operator from the emergency recognition unit;

wherein the operator may control a plurality of functions of the medical device when the operating terminal is in the partly-operable status.

8. A medical device having an operating terminal that includes an input device and a display device, and shifts the operating terminal from one status of a logout status, a screen lock status, and an operable status to another status, the device comprising:

an authentication unit configured to authenticate an operator of the operating terminal on the basis of operator information input by the operator which identifies operators and includes an operator identifier and a password, to shift the operating terminal from the logout status to the operable status by a login, and to shift the operating terminal from the screen lock status to the operable status by releasing a screen lock on the basis of the operator information input by the operator;

a screen lock unit configured to perform the screen lock on the basis of an obtained event where a predetermined screen lock condition is satisfied, and to shift the operating terminal from the operable status to the screen lock status, wherein the screen lock restricts access to functionality of the operating terminal;

an emergency recognition unit configured to recognize emergency information input at the input device by the operator; and

a forcing unit configured to forcibly release the screen lock without the authentication of the operator, and to shift the operating terminal from the screen lock status to the operable status when the emergency information input by the operator is recognized by the emergency recognition unit,

wherein the operator may control a plurality of functions of the medical device when the operating terminal is in the operable status.

9. The medical device according to claim 8, further comprising:

an emergency-operator authentication information acquisition unit configured to obtain emergency-operator authentication information which is necessary for an emergency authentication,

wherein the forcing unit forcibly releases the screen lock when the emergency authentication is received by the emergency-operator authentication information acquisition unit.

10. The medical device according to claim 9, further comprising:

an emergency operator information recording unit configured to record the emergency operator authentication information,

wherein the forcing unit writes the emergency operator authentication information into the emergency operator information recording unit when the emergency authentication is received by the emergency-operator authentication information acquisition unit.

11. A method, implemented on a security management system, for managing the security of a medical device having an operating terminal that includes an input device and a display device, and shifts the operating terminal from one status of a logout status, a screen lock status, a totally-operable status, and a partly-operable status to another status, the method comprising:

performing a screen lock of the operating terminal on the basis of an obtained event where a predetermined screen lock condition is satisfied, and shifting the operating terminal from the operable status to the screen lock status, wherein the screen lock restricts access to functionality of the operating terminal;

authenticating an operator of the operating terminal on the basis of operator information input by the operator which identifies operators and includes an operator identifier and a password, and shifting the operating terminal from the screen lock status to the totally-operable status on the basis of the operator information input by the operator;

recognizing, at an emergency recognition unit, emergency information input at the input device by the operator; and

forcibly releasing a part of the screen lock without the authenticate of the operator, and shifting the operating terminal from the screen lock status to the partly-operable status when receiving the emergency information input by the operator at the emergency recognition step,

wherein the operator may control a plurality of functions of the medical device when the operating terminal is in the partly-operable status.

12. A security management system having an operating terminal that includes an input device and a display device, and shifts the operating terminal from one status of a logout status, a screen lock status, and an operable status to another status, the system comprising:

a first authentication unit configured to authenticate a first operator of a plurality of operators using the security management system having the operating terminal on the basis of first operator information input by the first operator which identifies the first operator and includes a first operator identifier and a first password, and to shift the operating terminal from the logout status to the operable status by a login;

a screen lock unit configured to perform the screen lock on the basis of an obtained event where a predetermined screen lock condition is satisfied, and to shift from the operable status to the screen lock status, wherein the screen lock restricts access to functionality of the operating terminal;

a second authentication unit configured to authenticate a second operator of the plurality of operators using the operating terminal different from the first operator on the basis of second operator information input by the second operator which identifies the second operator and includes a second operator identifier and a second password, and to shift the operating terminal from the screen lock status to the operable status on the basis of the second operator information input by the second operator;

an emergency recognition unit configured to recognize emergency information input at the input device by one of the plurality of operators; and

a forcing unit configured to forcibly release the screen lock without the authentication of the one of the plurality of operators, and to shift the operating terminal from the screen lock status to the operable status when the emergency information input by one of the plurality of operators is recognized by the emergency recognition unit,

wherein the operator may control a plurality of functions of a medical device connected to the operating terminal when the operating terminal is in the operable status.

13. A medical device having an operating terminal that includes an input device and a display device, and shifts the operating terminal from one status of a logout status, a screen lock status, and an operable status to another status, the device comprising:

a first authentication unit configured to authenticate a first operator of a plurality of operators of the medical device having the operating terminal on the basis of first operator information input by the first operator which identifies the first operator and includes a first operator identifier and a first password, and to shift the operating terminal from the logout status to the operable status by a login;

a screen lock unit configured to perform the screen lock on the basis of an obtained event where a predetermined screen lock condition is satisfied, and to shift from the operable status to the screen lock status, wherein the screen lock restricts access to functionality of the operating terminal;

a second authentication unit configured to authenticate a second operator of the plurality of operators using the operating terminal different from the first operator on the basis of second operator information input by the second operator which identifies the second operator and includes a second operator identifier and a second password, and to shift the operating terminal from the screen lock status to the operable status on the basis of the second operator information input by the second operator;

an emergency recognition unit configured to recognize emergency information input at the input device by one of the plurality of operators; and

a forcing unit configured to forcibly release the screen lock without the authentication of the one of the plurality of operators, and to shift the operating terminal from the screen lock status to the operable status when the emergency information input by one of the plurality of operators is recognized by the emergency recognition unit,

wherein the operator may control a plurality of functions of the medical device when the operating terminal is in the operable status.