Device and procedure for the protection of a medical device and a patient treated with said device, against dangerous influences from a communications network

摘要

Device (9; 34; 37) for interaction with a medical device (10) that is suitable for connection in a communications network (11) comprising at least one unsafe zone (11b) and a safe zone (11a) in the side of the apparatus, so that the device (9) comprises transmission means (12; 44, 45) for transmitting communication packets to and from the medical device (10) by means of the communication network (11), which It comprises monitoring means (13; 42, 43) for monitoring the state of the connection of the apparatus (10) to the network (11) and comprising interrupting means (14; 40, 41) for interrupting the connection between the safe area (11a) and the unsecured area (11b) of the network (11) in the event that, during the monitoring process, a state of the network connection is detected that presents a risk to a patient treated with the device (10) or regarding the correct operation of the device (10), characterized in that the device pr it is a redundant architecture that is configured to achieve a greater security measure, in which the reducing architecture, constituted by at least one working channel configured through the transmission means (12; 44, 45), which is arranged to transmit communication packets, and at least one monitoring channel formed by the monitoring means (13; 42, 43), which is arranged to monitor the correct operation of the working channel, it is constructed in subsystems separated from each other (35, 36; 38, 39), and a model of the function of the transmission means (12; 44, 45) is integrated in the monitoring means (13; 42, 43) and the monitoring means (13; 42, 43) are arranged to verify the correct way of operation of the transmission means (12; 44, 45) on the basis of an evaluation of information from another subsystem and the model.