Crowd-based recommendations of a version of firmware for medical devices

• US 10,658,079 B1
• Filed: 08/18/2019
• Issued: 05/19/2020
• Est. Priority Date: 08/18/2019
• Status: Active Grant

• Current Assignee: Claroty Ltd.
• Original Assignee: Medigate Tech Ltd.
• Inventors: Avraham, Oran, Berkovitz, Gili, Rubin, Yaakov
• Primary Examiner(s): Chavis, John Q
• Application Number:
  US16/543,564
• Time in Patent Office: 275 Days
• Field of Search: 717170
• CPC Class Codes: G16H 40/20 for the management or administration of healthcare resources or facilities, e.g. managing hospital staff or surgery rooms
• CPC Class Codes: G16H 40/40 for the management of medical equipment or devices, e.g. scheduling maintenance or upgrades
• CPC Class Codes: G16H 40/63 for local operation
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

This disclosure describes a system, a method, and a computer program that enable recommendation of a version of firmware for medical devices. In one embodiment, a computer receives packets transmitted over communication networks of medical facilities, where the packets include data related to medical device activity. The computer performs deep packet inspection (DPI) of the packets, and extracts, from results of the DPI, versions of firmware installed on the medical devices. The computer calculates, based on the versions of firmware, extents to which different versions of firmware were installed on the medical devices, and identifies a latest version of firmware, from among the different versions, whose extent of installation reaches a predetermined threshold. The computer can then make a recommendation to update firmware installed on one or more medical devices at a certain medical facility to the latest version.

Claims

1. A system configured to recommend a version of firmware for medical devices, comprising:

a computer configured to;

receive packets transmitted over communication networks of medical facilities, wherein the packets comprise data related to medical device activity;

perform deep packet inspection (DPI) of the packets;

extract, from results of the DPI, versions of firmware installed on the medical devices;

calculate, based on the versions of firmware, extents to which different versions of firmware were installed on the medical devices;

identify a latest version of firmware, from among the different versions, whose extent of installation reaches a predetermined threshold; and

recommend an update to firmware installed on one or more medical devices at a certain medical facility to said latest version.

2. The system of claim 1, wherein each communication network comprises a networking device that has a mirror port that is configured to duplicate the packets, which are transmitted over the communication network;

and wherein the computer is connected to the mirror port and is configured to receive the packets via the mirror port.

3. The system of claim 1, wherein the computer is further configured to:

calculate, based on information extracted from the results of the DPI, a value indicative of a rate of errors of medical devices with the latest version of firmware installed thereon; and

recommend the update responsive to the rate of errors being below a certain threshold.

4. The system of claim 1, wherein the predetermined threshold corresponds to at least one of the following:

a minimal number of the medical devices having the latest version of the firmware installed thereon, and a minimal proportion of the medical devices having the latest version of the firmware installed thereon.

5. The system of claim 1, wherein the predetermined threshold corresponds to at least one of the following:

a minimal number of facilities from among the medical facilities having medical devices with the latest version of the firmware installed thereon, and a minimal proportion of the medical facilities having medical devices with the latest version of the firmware installed thereon.

6. The system of claim 1, wherein the computer is further configured to:

receive certain packets transmitted over a communication network of the certain medical facility, wherein the certain packets comprise data related to activity of certain medical devices;

perform DPI of the certain packets;

extract, from results of the DPI of the certain packets, certain versions of firmware installed on the certain medical devices; and

select, based on the certain versions of the firmware installed on the certain medical devices, the one or more medical devices;

wherein a version of firmware installed on each of the one or more medical devices is older than the latest version of firmware.

7. The system of claim 1, wherein the computer is further configured to:

receive certain packets transmitted over a communication network of the certain medical facility, wherein the certain packets comprise data related to activity of the one or more medical devices;

perform DPI of the certain packets;

extract, from results of the DPI of the certain packets, certain versions of firmware installed on the one or more medical devices; and

report a duration it took to update the firmware installed on the one or more medical devices at the certain medical facility to the latest version.

8. The system of claim 7, wherein the computer is further configured to calculate, based on results of the DPI of the certain packets, durations the one or more medical devices at the certain medical facility were not available to treat patients due to the updating of the firmware installed on the one or more medical devices.

9. The system of claim 7, wherein the computer is further configured to compare the duration it took to update the firmware installed on the one or more medical devices to durations of firmware updates observed at the medical facilities.

10. The system of claim 1, wherein the computer is further configured to:

receive certain packets transmitted over a communication network of the certain medical facility, wherein the certain packets comprise data related to activity of the one or more medical devices;

perform DPI of the certain packets;

extract, from results of the DPI of the certain packets, certain versions of firmware installed on the one or more medical devices;

identify, based on the certain versions, a beginning of a firmware updating process of medical devices at the certain medical facility; and

alert about lack of updating of firmware of a certain medical device from among the one or more medical devices, responsive to determining that by a certain time since the beginning of the firmware updating process, a version of firmware installed on the certain medical device has not been updated to the latest version.

11. The system of claim 1, wherein the packets are not transmitted in response to a communication sent by the computer.

12. A method for recommending a version of firmware for medical devices, comprising:

capturing packets transmitted over communication networks of medical facilities, wherein the packets comprise data related to activity of medical devices;

performing deep packet inspection (DPI) of the packets;

extracting, from results of the DPI, versions of firmware installed on the medical devices;

calculating, based on the versions of firmware, extents to which different versions of firmware were installed on the medical devices;

identifying a latest version of firmware, from among the different versions, whose extent of installation reaches a predetermined threshold; and

recommending updating firmware installed on one or more medical devices at a certain medical facility to said latest version.

13. The method of claim 12, further comprising:

calculating, based on information extracted from the results of the DPI, a value indicative of a rate of errors of medical devices with the latest version of firmware installed thereon; and

recommending the updating responsive to the rate of errors being below a certain threshold.

14. The method of claim 12, wherein the predetermined threshold corresponds to at least one of the following:

a minimal number of the medical devices having the latest version of the firmware installed thereon, and a minimal proportion of the medical devices having the latest version of the firmware installed thereon.

15. The method of claim 12, wherein the predetermined threshold corresponds to at least one of the following:

a minimal number of facilities from among the medical facilities having medical devices with the latest version of the firmware installed thereon, and a minimal proportion of the medical facilities having medical devices with the latest version of the firmware installed thereon.

16. The method of claim 12, further comprising:

capturing certain packets transmitted over a communication network of the certain medical facility, wherein the certain packets comprise data related to activity of certain medical devices;

performing DPI of the certain packets;

extracting, from results of the DPI of the certain packets, certain versions of firmware installed on the certain medical devices; and

selecting, based on the certain versions of the firmware installed on the certain medical devices, the one or more medical devices, wherein a version of firmware installed on each of the one or more medical devices is older than the latest version of firmware.

17. The method of claim 12, further comprising:

capturing certain packets transmitted over a communication network of the certain medical facility, wherein the certain packets comprise data related to activity of certain medical devices;

performing DPI of the certain packets;

extracting, from results of the DPI of the certain packets, certain versions of firmware installed on the certain medical devices; and

reporting a duration it took to update the firmware installed on the one or more medical devices at the certain medical facility to the latest version.

18. The method of claim 17, further comprising comparing the duration it took to update the firmware installed on the one or more medical devices to durations of firmware updates observed at the medical facilities.

19. The method of claim 12, further comprising:

capturing certain packets transmitted over a communication network of the certain medical facility, wherein the certain packets comprise data related to activity of certain medical devices;

performing DPI of the certain packets;

extracting, from results of the DPI of the certain packets, certain versions of firmware installed on the certain medical devices;

identifying, based on the certain versions, a beginning of a firmware updating process of medical devices at the certain medical facility; and

alerting about lack of updating of firmware of a certain medical device from among the one or more medical devices, responsive to determining that by a certain time since the beginning of the firmware updating process, a version of firmware installed on the certain medical device has not been updated to the latest version.

20. A non-transitory computer-readable medium having instructions stored thereon that, in response to execution by a system including a processor and memory, causes the system to perform operations comprising:

capturing packets transmitted over communication networks of medical facilities, wherein the packets comprise data related to activity of medical devices;

performing deep packet inspection (DPI) of the packets;

extracting, from results of the DPI, versions of firmware installed on the medical devices;

calculating, based on the versions of firmware, extents to which different versions of firmware were installed on the medical devices;

identifying a latest version of firmware, from among the different versions, whose extent of installation reaches a predetermined threshold; and

recommending updating firmware installed on one or more medical devices at a certain medical facility to said latest version.