Systems, methods and analyzers for establishing a secure wireless network in point of care testing

• US 8,549,600 B2
• Filed: 08/30/2011
• Issued: 10/01/2013
• Est. Priority Date: 03/11/2011
• Status: Active Grant

• Current Assignee: Abbott Point Of Care Incorporated (Abbott Laboratories Incorporated)
• Original Assignee: Abbott Point Of Care Incorporated (Abbott Laboratories Incorporated)
• Inventors: Shedrinsky, Felix
• Primary Examiner(s): CHEN, SHIN HON
• Application Number:
  US13/220,971
• Publication Number:
  US 20120233679A1
• Time in Patent Office: 763 Days
• Field of Search: None
• US Class Current: 726/7
• CPC Class Codes: A61B 5/002 Monitoring the patient using a local or closed circuit, e.g. in a room or building A61B5/0017 takes precedence
• CPC Class Codes: A61B 5/0022 Monitoring a patient using a global network, e.g. telephone networks, internet
• CPC Class Codes: A61B 5/145 Measuring characteristics of blood in vivo, e.g. gas concentration, pH value; Measuring characteristics of body fluids or tissues, e.g. interstitial fluid, cerebral tissuemeasuring of blood pressure or blood flow A61B5/02; non-radiation detecting or locating of foreign bodies in blood A61B5/06
• CPC Class Codes: G16H 40/20 for the management or administration of healthcare resources or facilities, e.g. managing hospital staff or surgery rooms
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A system and method for initiating and maintaining a secure wireless communication between a wireless analyzer and a target network (e.g., a hospital network connected to a LIS and/or HIS). The present disclosure provides novel processes and systems for securely networking a wireless analyzer with a Wi-Fi network without the need for an operator or user to engage in manual initiation steps on, or through, the wireless analyzer.

Claims

1. A system for establishing a wireless network in point of care testing, the system comprising:

a wireless analyzer configured to authorize wireless access to said wireless analyzer, and read a patient health parameter;

a computing device configured to obtain said wireless access with said wireless analyzer using a wireless network identifier, and communicate access credentials to said wireless analyzer via said wireless access; and

a primary wireless network configured to communicate with said wireless analyzer, authenticate a secure connection with said wireless analyzer using said access credentials, and receive said patient health parameter via said secure connection,

wherein the wireless analyzer comprises a wireless access point (WAP) module configured to authorize the computing device to obtain the wireless access to the wireless analyzer.

2. The system of claim 1, wherein:

said wireless analyzer is configured to act as a dynamic host configuration protocol (DHCP) server; and

said computing device is further configured to receive input from said wireless analyzer comprising network IP parameters to obtain said wireless access with said wireless analyzer.

3. The system of claim 1, wherein:

said wireless analyzer is further configured such that said wireless analyzer does not broadcast said wireless network identifier; and

said computing device is further configured to receive input comprising the wireless network identifier.

4. The system of claim 1, wherein:

said wireless analyzer is further configured to broadcast said wireless network identifier; and

said computing device is further configured to search for said broadcasted wireless network identifier.

5. The system of claim 4, wherein:

said wireless analyzer comprises an antenna; and

the WAP module is further configured to broadcast said wireless network identifier.

6. The system of claim 5, wherein:

said wireless analyzer further comprises a host processor, random access memory (RAM), and read only memory (ROM); and

said host processor is configured to control said WAP module.

7. The system of claim 6, wherein:

said host processor is further configured to activate said WAP module based on user settings or instructions; and

said broadcasted wireless network identifier is a service set identifier (SSID) that identifies said wireless analyzer.

8. The system of claim 7, wherein said user settings or instructions include at least one of the following settings or instructions:

said wireless analyzer authorizing said wireless access from any computing device;

said wireless analyzer authorizing said wireless access from one or more specified computing devices according to a specified password; and

said wireless analyzer automatically authorizing said wireless access from one or more specified computing devices.

9. The system of claim 1, wherein:

said wireless network identifier is a service set identifier (SSID) that identifies said wireless analyzer; and

said SSID is a known SSID or said SSID is comprised from a unique name.

10. The system of claim 9, wherein said unique name comprises:

(i) a MAC address of said wireless analyzer, (ii) a serial number of said wireless analyzer, or (iii) a combination thereof.

11. The system of claim 1, wherein:

said wireless network identifier is a service set identifier (SSID) that identifies said wireless analyzer; and

said SSID is dynamically generated.

12. The system of claim 1, wherein said wireless access comprises a secure network between said wireless analyzer and said computing device, said secure network comprising:

a secure socket layer (SSL) connection, a transport layer security (TLS) connection, an SSL/TLS connection, a pre-shared key (PSK) connection, a WiFi Protected Access (WPA) connection, a WPA1 connection, a WPA2 connection, a WPA-Enterprise (WPA-802.1x) connection, any other cryptographic or encryption protocol connection, or any combination thereof.

13. The system of claim 12, wherein said wireless analyzer comprises a unique certificate or requests said unique certificate from said computing device, wherein said unique certificate is used in establishing said secure network.

14. The system of claim 1, wherein said computing device communicates said access credentials with said wireless analyzer via said wireless access using simple network management protocol (SNMP).

15. The system of claim 1, wherein said wireless analyzer may repeatedly access said primary wireless network without requiring further communication with said computing device.

16. The system of claim 1, wherein said secure connection comprises an SSL connection, a TLS connection, an SSL/TLS connection, or combinations thereof.

17. The system of claim 1, wherein:

said primary wireless network comprises a hospital wireless network; and

said hospital wireless network comprises a connection with a laboratory information system or hospital information system.

18. The system of claim 1, wherein said wireless analyzer is further configured to perform a function via said primary wireless network, the function comprising:

(i) communicating location of said wireless analyzer;

(ii) receiving and displaying a custom message;

(iii) communicating and installing software updates;

(iv) communicating print requests with a printer in communication with said primary wireless network;

(v) communicating battery level of said wireless analyzer;

(vi) communicating dynamic display information with another computing device in communication with said primary wireless network;

(vii) synchronizing time with said another computing device in communication with primary wireless network;

(viii) providing network access to another wireless analyzer;

or (ix) combinations thereof.

19. The system of claim 1, wherein said wireless analyzer is further configured to communicate patient test results with said primary wireless network, the patient test results comprising:

(i) said patient health parameter, (ii) time of test, (iii) date of test, (iv) patient identification, (v) user identification, or (vi) combinations thereof.

20. The system of claim 1, wherein said wireless analyzer is further configured to communicate information with said primary wireless network, the information comprising:

(i) an instrument calibration coefficient;

(ii) an instrument self-validation test result;

(iii) an instrument self-testing result;

or (iv) combinations thereof.

21. The system of claim 1, wherein said wireless analyzer is further configured to receive data communicated from said primary wireless network, the data comprising:

(i) software upgrade;

(ii) an instrument calibration coefficient;

(iii) an instrument self-validation protocol;

(iv) an instrument self-testing protocol;

or (v) a combinations thereof.

22. A method of connecting a wireless analyzer to a primary wireless network, the method comprising the steps of:

receiving at said wireless analyzer a request for wireless access to said wireless analyzer from at least one computing device, wherein said wireless analyzer is configured to read a patient health parameter, and said at least one computing device is configured to receive a wireless network identifier identifying said wireless analyzer as a wireless access point (WAP) to send said request for said wireless access;

authorizing said wireless access to said wireless analyzer;

receiving at said wireless analyzer access credentials for said primary wireless network from said at least one computing device;

terminating said wireless access with said at least one computing device; and

authenticating a secure connection between said wireless analyzer and said primary wireless network using said access credentials.

23. The method of claim 22, wherein a server assigns said wireless network identifier to said at least one computing device.

24. The method of claim 22, wherein said wireless analyzer performs a routing function for said at least one computing device once said wireless access is authorized.

25. The method of claim 22, further comprising:

broadcasting said wireless network identifier using said wireless analyzer; and

sending said patient health parameter from said wireless analyzer to said primary wireless network using said secure connection.

26. The method of claim 25, wherein said wireless analyzer may repeatedly access said primary access network without requiring further communication with said at least one computing device.

27. The method of claim 26, wherein:

said secure connection comprises an secure socket layer (SSL) connection, a transport layer security (TLS) connection, an SSL/TLS connection, or combinations thereof; and

said wireless network identifier is a service set identifier (SSID) that identifies said wireless analyzer.

28. The method of claim 27, wherein:

said primary wireless network comprises a hospital wireless network; and

said hospital wireless network comprises a connection with a laboratory information system or hospital information system.

29. A wireless analyzer enabled for secure communication with a primary wireless network, the wireless analyzer comprising:

a display;

an input device;

a sensing apparatus for detecting a patient health parameter;

an antenna;

a wireless access point (WAP) module configured to establish a wireless connection with said wireless analyzer from a computing device using a wireless network identifier, and obtain at least one access credential for said primary wireless network from said computing device; and

a host processor configured to authenticate a secure wireless connection with said primary wireless network using said at least one access credential.

30. The wireless analyzer of claim 29, wherein:

the WAP module is further configured to broadcast said wireless network identifier; and

the host processor is further configured to send said patient health parameter from said wireless analyzer to said primary wireless network using said secure wireless connection.

31. The wireless analyzer of claim 29, wherein:

said host processor is further configured to activate said WAP module based on user settings or instructions; and

said wireless network identifier is a service set identifier (SSID) that identifies said wireless analyzer.

32. The wireless analyzer of claim 31, wherein said user settings include at least one of the following settings or instructions:

said wireless analyzer authorizing said wireless connection from any computing device;

said wireless analyzer authorizing said wireless connection from one or more specified computing devices according to a specified password; and

said wireless analyzer automatically authorizing said wireless connection from one or more specified computing devices.

33. The wireless analyzer of claim 29, wherein:

said wireless network identifier is a service set identifier (SSID) that identifies said wireless analyzer; and

said SSID is a known SSID or said SSID is comprised from a unique name.

34. The wireless analyzer of claim 33, wherein said unique name comprises:

(i) a MAC address of said wireless analyzer, (ii) a serial number of said wireless analyzer, or (iii) combinations thereof.

35. The wireless analyzer of claim 34, wherein said wireless connection comprises a secure network between said wireless analyzer and said computing device, said secure network comprising:

a secure socket layer (SSL) connection, a transport layer security (TLS) connection, an SSL/TLS connection, a pre-shared key (PSK) connection, a WiFi Protected Access (WPA) connection, a WPA1 connection, a WPA2 connection, a WPA-Enterprise (WPA-802.1x) connection, any other cryptographic or encryption protocol connection, or any combination thereof.

36. The wireless analyzer of claim 35, wherein said wireless analyzer further comprises a unique certificate or requests said unique certificate from said computing device, wherein said unique certificate is used in establishing said secure network.

37. The wireless analyzer of claim 36, wherein said computing device communicates said access credentials with said wireless analyzer via said wireless connection using simple network management protocol (SNMP).

38. A computer program product comprising a non-transitory computer usable storage medium having readable program code embodied in the storage medium, the computer program product includes at least one component operable to:

receive at a wireless analyzer a request for wireless access to said wireless analyzer from at least one computing device, wherein said wireless analyzer is configured to read a patient health parameter, and said at least one computing device is configured to use a wireless network identifier identifying said wireless analyzer as a wireless access point (WAP) to send said request for said wireless access;

authorize said wireless access to said wireless analyzer;

receive at said wireless analyzer access credentials for a primary wireless network from said at least one computing device;

terminate said wireless access with said at least one computing device; and

authenticate a secure connection between said wireless analyzer and said primary wireless network using said access credentials.

39. The computer program product of claim 38, wherein the at least one component is further operable to:

broadcast said wireless network identifier using said wireless analyzer; and

send said patient health parameter from said wireless analyzer to said primary wireless network using said secure connection.