TWC TTP: Small: Security, Privacy, and Trust for Systems of Coordinating Medical Devices

为了降低当前医疗实践中的成本并改善结果，我们需要集成的可互操作医疗系统来提供机器辅助护理，交互检测和改进的警报准确性，仅举几例。该项目正在开发理论和实践，以确保下一代医疗设备的安全性，允许安全的协调和组合，小到当地医生的办公室，大到多校区医院。连接的设备是“医疗协调平台”的一部分，其允许执行“临床工作流程”，例如一旦输液泵停止输送药物，则使血压袖带自动获取阅读，或者真实的时间确定处方药物是否被患者的过去健康史禁忌。这种制造商和集成商不可知的通信难以引导和安全地执行，但是需要安全性，因为联网的不安全系统从根本上来说是不安全的。此外，医学比许多其他领域更复杂：安全和服务质量属性必须保持甚至许多不同的人可以物理访问设备和通信基础设施的环境。如果不能完全信任单个组件，我们必须在高度动态、对抗性和生命关键型系统中提供强大的资源隔离、患者隐私保护和实时信任推理。我们的目标是通过为现有开放医疗应用平台提供可重用的安全、隐私和日志组件，支持不同的硬件功能、法律法规和机构本地政策，以及用于关于系统和各个设备的预部署和运行时可信度推理的软件。

To lower costs and improve outcomes in current medical practice we need integrated interoperable medical systems to provide machine-assisted care, interaction detection, and improved alarm accuracy, to name just a few uses. This project is developing both the theory and practice to ensure the safety of next-generation medical devices by allowing secure coordination and composition, in facilities as small as a local doctor's office or as large as a multi-campus hospital. Connected devices are part of a "medical coordination platform," which allows execution of "clinical workflows," such as having a blood pressure cuff automatically take a reading once an infusion pump stops delivering medication, or determining in real time whether prescribed medications are contraindicated by a patient's past health history.Such manufacturer- and integrator-agnostic communication is difficult to bootstrap and perform securely, but security is required, since networked insecure systems are fundamentally unsafe. Furthermore, medicine is more complex than many other domains: security and quality of service properties must hold even environments where many different people have physical access to devices and communication infrastructure. Without fully trusting individual components, we must provide strong resource isolation, patient privacy protection, and real-time trust reasoning in highly-dynamic, adversarial, and life-critical systems.We aim for speedy transition to practice by providing reusable security, privacy, and logging components for existing open medical application platforms, supporting varying hardware capabilities, laws, regulations, and facility-local policies, as well as software for pre-deployment and run-time trustworthiness reasoning about the system and individual devices.