Cloud-based medical analytics for security and authentication trends and reactive measures

A method of a cloud based security system of a medical data network for improving security and authentication of the medical data network, the medical data network further comprising a plurality of medical hubs each communicatively coupled to the cloud based security system and at least one surgical instrument, the method comprising:

• identifying, by the cloud based security system, a first security threat by a first medical instrument communicatively coupled to a first medical hub located at a first medical facility;
• determining, by the cloud based security system, that a second security threat is present at a second medical hub located at a second medical facility, based on at least one common characteristic between the first medical instrument and a second medical instrument communicatively coupled to the second medical hub;
• providing, by the cloud based security system, an alert to the second medical facility about the second security threat;
• analyzing alert data associated with the first medical facility, in response to identifying the first security threat;
• determining an irregularity with the alert data associated with the first medical facility compared to alert data associated with other medical facilities;
• and
• determining a revised security procedure for the first medical facility in response to the determined irregularity.

A non-transitory computer readable medium comprising instructions that, when executed by a processor of a cloud based security system of a medical data network, cause the processor to perform operations comprising:

• identifying a first security threat by a first medical instrument communicatively coupled to a first medical hub located at a first medical facility;
• determining that a second security threat is present at a second medical hub located at a second medical facility, based on at least one common characteristic between the first medical instrument and a second medical instrument communicatively coupled to the second medical hub;
• providing an alert to the second medical facility about the second security threat;
• analyzing alert data associated with the first medical facility, in response to identifying the first security threat;
• determining an irregularity with the alert data associated with the first medical facility compared to alert data associated with other medical facilities;
• and
• determining a revised security procedure for the first medical facility in response to the determined irregularity.