Medical image transfer system
A transfer module, such as a single board computer having wireless communication capabilities, may be attached to an image guided surgery (“IGS”) navigation system. Images, video, and data stored on the IGS navigation system may be moved to and stored on the transfer module in an encrypted format. The transfer module may connect to a secure network or other secure wireless communication and transfer encrypted IGS medical procedure data to a physician device, a hospital system device, or other device. After validation, the physician device or other device may decrypt and display the data. The transfer module may be useful for IGS navigation systems having no preexisting wireless capabilities; and for those having wireless capabilities that are less secure than those provided by the modified IGS navigation system. The transfer module may also wirelessly transmit IGS medical procedure data to a cloud storage system for subsequent access by end users.
1. A data transfer system comprising:
(a) a transfer module comprising a storage device, a wireless communication device, and a data interface, the data interface being configured to couple with and receive data from an image guided surgery navigation system, the wireless communication device being configured to connect to a wireless network via a Wi-Fi or cellular signal;
(b) a cloud storage system, the cloud storage system being in communication with the transfer module over the wireless network via a Wi-Fi or cellular signal; and
(c) a user device comprising a display and a user interface; the transfer module being configured to:
(i) provide a web server that the user device may communicate with over the wireless network, and
(ii) connect to the wireless network using a static address, the wireless network consisting of peers that are either transfer modules such as the transfer module or user devices such as the user device,
(iii) receive a set of medical procedure data from the image guided surgery navigation system,
(iv) encrypt the set of medical procedure data as a set of encrypted medical procedure data using a current key, store the encrypted medical procedure data on the storage device, and delete the set of medical procedure data, and
(v) provide the set of encrypted medical procedure data to the cloud storage system;
the cloud storage system being configured to:
(i) receive a medical procedure data request from the user device, and
(ii) provide the set of encrypted medical procedure data to the user device; and
the user device being configured to:
(i) receive the set of encrypted medical procedure data from the cloud storage system,
(ii) decrypt the set of encrypted medical procedure data,
(iii) display at least some of the decrypted medical procedure data to a user of the user device,
(iv) store a device key and a device key version,
(v) authenticate the user of the user device,
(vi) validate the user device based upon the device key and the current key,
(vii) when the user device is not validated, prompt the user for a new key and set it as the device key, then delete any information on the user device associated with a previous device key, and
(viii) when the user device is validated, decrypt the set of encrypted medical procedure data using the device key.
2. The data transfer system of claim 1 , the user device being further configured to:
(i) receive a set of authentication data from the user,
(ii) provide the authentication data to the cloud storage system, and
(iii) authenticate the user based upon an authentication response from the cloud storage system.
3. The data transfer system of claim 1 , the user device being further configured to:
(i) store a local validation database comprising a unique hardware identifier, a file description, an encrypted file description, and a key version, the file description and the encrypted file description both describing the same file, and the encrypted file description being created from the file description using the device key,
(ii) receive a module identifier and a module key version from the cloud storage system, and
(iii) validate the user device when the local validation database contains a record whose key version matches the module key version and whose module identifier matches the unique hardware identifier.
4. The data transfer system of claim 1 , the user device being further configured to:
(i) receive a module key version from the cloud storage system, and
(ii) validate the user device when the module key version matches the device key version.
5. The data transfer system of claim 1 , the user device being further configured to:
(i) store a local validation database comprising a file description and an encrypted file description, the file description and the encrypted file description both describing a file stored on the cloud storage system, and the encrypted file description being created from the file description using the device key,
(ii) request a file portion associated with the encrypted file description from the cloud storage system,
(iii) decrypt the file portion using the device key to create a decrypted file portion, and
(iv) validate the user device where the decrypted file portion matches the file description.
6. The data transfer system of claim 1 , the user device being further configured to:
(i) select a set of encrypted file names from the set of encrypted medical procedure data,
(ii) where the user is authenticated, and the user device is validated, decrypt the set of encrypted file names to create a set of file names and display the set of file names via the display, and
(iii) receive a selection from the user identifying one or more of the set of file names.
7. The data transfer system of claim 6 , the user device being further configured to:
(i) decrypt a set of files from the set of encrypted medical procedure data based upon the selection to create a set of decrypted files and display the set of decrypted files via the display, and
(ii) when the set of decrypted files are no longer being displayed via the display, delete the set of decrypted files.
8. The data transfer system of claim 6 , the user device being further configured to:
(i) decrypt a set of files from the set of encrypted medical procedure data based upon the selection to create a set of decrypted files and transmit the set of decrypted files to a secure destination associated with the user, and
(ii) after transmitting the set of decrypted files, delete the set of decrypted files.
9. The data transfer system of claim 1 , the wireless communication device being selected from the group consisting of a Wi-Fi transceiver, a Bluetooth transceiver, and a cellular data transceiver, the data interface being selected from the group consisting of a USB connection and an ethemet connection, and the transfer module being a single board computer.
10. The data transfer system of claim 1 , the transfer module being further configured to:
(i) receive a configuration data set, the configuration data set comprising a previous key, a new key, and a new key version,
(ii) confirm that the current key is different from the new key,
(iii) decrypt the set of encrypted medical procedure data using the previous key to create a second set of medical procedure data, and delete the set of encrypted medical procedure data,
(iv) encrypt the second set of medical procedure data using the new key to create a second set of encrypted medical procedure data, and delete the second set of medical procedure data,
(v) provide the second set of encrypted medical procedure data to the cloud storage system; and
(vi) update a local configuration to make the device key version equal to the new key version and make the current key equal to the new key.
11. The data transfer system of claim 1 , the cloud storage system being configured to:
(i) store a set of email templates, each email template being associated with a user, and each email template being configured to format the set of medical procedure data for transmission to that user,
(ii) receive a template request from the user device, the template request comprising an identifier for the user and a terms acceptance,
(iii) provide an email template of the set of email templates that is associated with the user to the user device, and
(iv) store the terms acceptance, the terms acceptance describing a legal agreement and an indicator of the user's acceptance of that legal agreement.
12. The data transfer system of claim 1 , transfer module being further configured to:
(i) restrict the function of the web server to prevent use of a set of commands, the set of commands comprising POST, PUT, and DELETE,
(ii) generate a self-signed secure sockets layer certificate, the self-signed secure sockets layer certificate having a duration of time, and
(iii) generate a new self-signed secure sockets layer certificate when the duration of time has passed.
13. A method for transferring data from an image guided surgery navigation system comprising the steps:
(a) installing a transfer module on the image guided surgery navigation system, the transfer module comprising a wireless communication device, and a data interface, the data interface being configured to couple with and receive data from an image guided surgery navigation system, the wireless communication device being configured to connect to a wireless network;
(b) receiving a set of medical procedure data from the image guided surgery navigation system at the transfer module;
(c) encrypting the set of medical procedure data as a set of encrypted medical procedure data using a current key, providing the set of encrypted medical procedure data to a cloud storage system, and deleting the set of medical procedure data;
(d) providing the set of encrypted medical procedure data from the cloud storage system to a user device, the user device comprising a display and a user interface;
(e) the user device decrypting the set of encrypted medical procedure data, and displaying at least some of the decrypted medical procedure data to a user of the user device;
(f) storing a device key and a device key version;
(g) authenticating the user of the user device;
(h) validating the user device based upon the device key and the current key;
(i) when the user device is not validated, prompting the user for a new key and setting it as the device key, then deleting any information on the user device associated with a previous device key; and
(j) when the user device is validated, receiving the set of encrypted medical procedure data and decrypting the set of encrypted medical procedure data.
14. The method of claim 13 , further comprising the steps:
(a) receiving a set of authentication data from the user;
(b) providing the authentication data to the cloud storage system;
(c) authenticating the user based upon an authentication response from the cloud storage system;
(d) storing a local validation database on the user device, the local validation database comprising a unique hardware identifier, a file description, an encrypted file description, and a key version, the file description and the encrypted file description both describing the same file, and the encrypted file description being created from the file description using the device key;
(e) receiving a module identifier and a module key version from the cloud storage system; and
(f) validating the user device when the local validation database contains a record whose key version matches the module key version and whose module identifier matches the unique hardware identifier.
15. The method of claim 13 , further comprising the steps:
(a) receiving a configuration data set at the transfer module, the configuration data set comprising a previous key, a new key, and a new key version;
(b) confirming that the current key is different from the new key;
(c) decrypting the set of encrypted medical procedure data using the previous key to create a second set of medical procedure data, and deleting the set of encrypted medical procedure data;
(d) encrypting the second set of medical procedure data using the new key to create a second set of encrypted medical procedure data, and deleting the second set of medical procedure data; and
(e) updating a local configuration of the transfer module to make the device key version equal to the new key version and make the current key equal to the new key.
16. The method of claim 13 , further comprising the steps:
(a) restricting the function of the cloud storage system to prevent use of a set of commands by the user of the user device, the set of commands comprising POST, PUT, and DELETE;
(b) generating a self-signed secure sockets layer certificate, the self-signed secure sockets layer certificate having a duration of time; and
(c) generating a new self-signed secure sockets layer certificate when the duration of time has passed.
17. A data transfer system comprising:
(a) a transfer module comprising a wireless communication device, and a data interface, the data interface being configured to couple with and receive data from an image guided surgery navigation system, the wireless communication device being configured to connect to a wireless network via a Wi-Fi or cellular signal;
(b) a cloud storage system, the cloud storage system being in communication with the transfer module over the wireless network via a Wi-Fi or cellular signal; and
(c) a user device comprising a display and a user interface; the transfer module being configured to:
(i) receive a set of medical procedure data from the image guided surgery navigation system, and
(ii) encrypt the set of medical procedure data as a set of encrypted medical procedure data using a current key, and provide the set of encrypted medical procedure data to the cloud storage system;
the cloud storage system being configured to:
(i) receive a medical procedure data request from the user device,
(ii) provide the set of encrypted medical procedure data to the user device,
(iii) store a set of email templates, each email template being associated with a user, and each email template being configured to format the set of medical procedure data for transmission to that user,
(iv) receive a template request from the user device, the template request comprising an identifier for the user and a terms acceptance,
(v) provide an email template of the set of email templates that is associated with the user to the user device, and
(vi) store the terms acceptance, the terms acceptance describing a legal agreement and an indicator of the user's acceptance of that legal agreement; and
the user device being configured to:
(i) receive the set of encrypted medical procedure data from the cloud storage system,
(ii) decrypt the set of encrypted medical procedure data, and
(iii) display at least some of the decrypted medical procedure data to a user of the user device.
18. The data transfer system of claim 17 , the transfer module being further configured to:
(i) receive a configuration data set, the configuration data set comprising a previous key, a new key, and a new key version,
(ii) in response to receiving the configuration data set:
(a) confirm that the current key is different from the new key,
(b) decrypt the set of encrypted medical procedure data using the previous key to create a second set of medical procedure data, and delete the set of encrypted medical procedure data,
(c) create a second set of encrypted medical procedure data by encrypting the second set of medical procedure data using the new key,
(d) provide the second set of encrypted medical procedure data to the cloud storage system; and
(e) update a local configuration to make the device key version equal to the new key version and make the current key equal to the new key.