Passing authentication token to authorize access to rest calls via web sockets
AssigneeICU Medical, Inc.
InventorsBen Xavier, Dennis Krabbe, Lito Patiag
Life of this patent
Estimating the term…
Abstract
Various techniques for facilitating communication with and across a clinical environment and a cloud environment are described. For example, a method for authenticating a network device residing in the clinical environment using a token is described. An authentication proxy in the cloud environment can receive a request from a connectivity adapter in the clinical environment and retrieve a security token from an authentication system in the cloud. The connectivity adapter can use the security token to send signed requests to the authentication system.
Claims20
A method for authenticating a network device residing in a clinical environment using a token, the method comprising:
- processing an authentication request from the network device residing in the clinical environment via a first network connection, wherein the authentication request includes identifying information associated with the clinical environment, and wherein the clinical environment includes one or more infusion pumps in communication with the network device;
- identifying login credentials to be used to authenticate the network device residing in the clinical environment;
- transmitting the login credentials to an authentication system configured to authenticate requests from the network device residing in the clinical environment via a second network connection different from the first network connection;
- receiving a security token from the authentication system, the security token being usable by the network device to transmit requests to the authentication system via the second network connection;
- and
- transmitting the security token to the network device residing in the clinical environment via the first network connection.
A system configured to authenticate a network device residing in a clinical environment using a token, the system comprising:
- one or more processors;
- and
- one or more memories in communication with the one or more processors and storing computer-executable instructions that, when executed by the one or more processors, configure the one or more processors to:
- process an authentication request from the network device residing in the clinical environment via a first network connection, wherein the authentication request includes identifying information associated with the clinical environment, and wherein the clinical environment includes one or more infusion pumps in communication with the network device;
- identify login credentials to be used to authenticate the network device residing in the clinical environment;
- cause the login credentials to be transmitted to an authentication system configured to authenticate requests from the network device residing in the clinical environment via a second network connection different from the first network connection;
- receive a security token from the authentication system, the security token being usable by the network device to transmit requests to the authentication system via the second network connection;
- and
- cause the security token to be transmitted to the network device residing in the clinical environment via the first network connection.
Non-transitory physical computer storage storing computer-executable instructions that, when executed by one or more computing devices, configure the one or more computing devices to:
- process an authentication request from the network device residing in the clinical environment via a first network connection, wherein the authentication request includes identifying information associated with the clinical environment, and wherein the clinical environment includes one or more infusion pumps in communication with the network device;
- identify login credentials to be used to authenticate the network device residing in the clinical environment;
- cause the login credentials to be transmitted to an authentication system configured to authenticate requests from the network device residing in the clinical environment via a second network connection different from the first network connection;
- receive a security token from the authentication system, the security token being usable by the network device to transmit requests to the authentication system via the second network connection;
- and
- cause the security token to be transmitted to the network device residing in the clinical environment via the first network connection.
Dependencies are inferred from the claim text.