Medical equipment, an authentication server and methods for authorizing a user access to an equipment via an equipment user interface

Medical equipment comprising:

• an equipment interface;
• and
• a control arrangement configured to cause an authentication server to:
• store an authority public key (QB) of an authority asymmetric key pair associated with the authentication server that is offline with respect to the medical equipment,
• store an authority public key (QB) of an authority asymmetric key pair associated with the authentication server that is offline with respect to the medical equipment,
• provide, to a user via the equipment interface, an authorization challenge indicative of an equipment public key (QA) of a temporary equipment asymmetric key pair generated in the medical equipment each time the user wants to access the medical equipment,
• receive, from the user via the equipment interface, a response code comprising validity information encrypted using a shared key derivable from an authority private key (dB) of the authority asymmetric key pair and the provided equipment public key (QA), and
• authorize, after determining that the validity information is valid, user access to the medical equipment, wherein the validity information is decrypted using the same shared key but derived in the medical equipment using the stored authority public key (QB) and an equipment private key (dA) of the temporary equipment asymmetric key pair,
• wherein the processor is configured to authorize the user access by additionally authorizing the user access during a certain time period and authorizing different levels of the user access depending on information comprised in the response code.

A system comprising:

• a memory;
• and
• a processor,
• wherein the memory stores instructions that, when executed by the processor, cause the processor to:
• store, by medical equipment that is offline from communication with an authentication server, an authority public key (QB) of an authority asymmetric key pair associated with the authentication server;
• provide, to a user via an equipment interface of the medical equipment, an authorization challenge indicative of an equipment public key (QA) of a temporary equipment asymmetric key pair generated in the medical equipment each time the user wants to access the medical equipment;
• receive, from the user via the equipment interface, a response code comprising validity information encrypted using a shared key derivable from an authority private key (dB) of the authority asymmetric key pair and the provided equipment public key (QA);
• and
• authorize, after determining that the validity information is valid, user access to the medical equipment, wherein the validity information is decrypted using the same shared key but derived in the medical equipment using the stored authority public key (QB) and an equipment private key (dA) of the temporary equipment asymmetric key pair,
• wherein authorizing additionally comprises authorizing the user access during a certain time period and authorizing different levels of the user access depending on information comprised in the response code.

A system comprising:

• an equipment interface for medical equipment, and
• a processor configured to:
• store an authority public key (QB) of an authority asymmetric key pair;
• provide, to a user via the equipment interface, an authorization challenge indicative of an equipment public key (QA) of a temporary equipment asymmetric key pair generated in the medical equipment each time a user wants to access the medical equipment;
• receive, from the user via the equipment interface, a response code comprising validity information encrypted using a shared key derivable from an authority private key (dB) of the authority asymmetric key pair and the provided equipment public key (QA);
• and
• authorize, after determining that the validity information is valid, user access to the medical equipment, wherein the validity information is decrypted using the same shared key but derived in the medical equipment using the stored authority public key (QB) and an equipment private key (dA) of the temporary equipment asymmetric key pair,
• wherein the processor is configured to authorize the user access by additionally authorizing the user access during a certain time period and authorizing different levels of the user access depending on information comprised in the response code.