# US 9,680,705 B2 · Competency based device access

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 9,680,705 B2
- Document ID: US9680705B2
- Status: Granted
- Kind: B2
- Application number: 14/583,284
- Filed: 2014-12-26
- Published: 2016-06-30
- Granted: 2017-06-13
- Earliest claimed: 2014-12-26
- Assignees: Halogen Software Inc.
- Applicants: Halogen Software Inc.
- Inventors: Richard Surendrakumar
- Web page: https://patentgrep.com/patent/US9680705B2

## CPC

- H04L 41/0816: the condition being an adaptation, e.g. in response to network events
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint}
- H04L 63/10: {for controlling access to devices or network resources}
- H04L 63/105: {Multiple levels of security}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A system and method are provided to enable competency based device access. The ability for a user to use a particular device may require demonstration of a skill or competency. Access control can be provided for a device to limit user access and to configure the device based upon the user competencies to utilize or perform functions on the device. The competency of the user can be defined in a competency checklist used to determine the skill or certifications of a user maintained by a resource management system.

## Claims

### Claim 1

A method of device access control for a medical device, the method comprising:
receiving at a management system user credentials and a device identifier associated with a technician user of the device through a network;
determining user competencies associated with the credentials for the technician user stored in a database of the management system, the user competencies being indicative of the technician user's experience with or training for certain functions of the medical device;
determining configuration parameters for the medical device at the management system using the determined user competencies, the configuration parameters mapping to one or more functions of the device to restrict or permit device functionality based on the user competencies; and
sending a device configuration from the management system based upon the determined device configuration parameters to the medical device for configuring the user interface of the medical device based upon associated user competencies, wherein the medical device is configured to enable or disable the one or more functions and associated operations of the medical device presented through the user interface of the medical device to the technician user such that the technician user is permitted to operate the medical device in certain modes based upon the determined user competencies.

### Claim 2 (depends on 1)

The method of claim 1 wherein the user competencies are from a competency checklist defining one or more competencies required by the technician user of the medical device, wherein the functions of the medical device are enabled when required competencies are met.

### Claim 3 (depends on 1)

The method of claim 1 wherein access to the medical device is disabled until competencies associated with the technician user are determined.

### Claim 4 (depends on 1)

The method of claim 1 wherein the configuration parameters define an access level on the medical device, wherein the access level defines features available to the technician user on the medical device.

### Claim 5 (depends on 4)

The method of claim 4 wherein the configuration parameters define one or more user interface elements defined within the user interface of the medical device.

### Claim 6 (depends on 1)

The method of claim 1 wherein user competencies are determined based upon usage data collected from previous usage of the medical device.

### Claim 7 (depends on 1)

The method of claim 1 wherein the device configuration parameters are determined using one or more rules mapping a device competency to a function of the medical device.

### Claim 8 (depends on 1)

The method of claim 1 wherein the device configuration parameters are determined using one or more rules mapping a device function to an access level.

### Claim 9 (depends on 1)

The method of claim 1 wherein competency assessment checklists are stored in a resource management system providing a personnel database, the personnel database defining competencies for the technician user.

### Claim 10

A system for device access control comprising:
a medical device comprising:
a network interface coupled to a communication network;
a memory;
a user interface; and
a processor coupled to the memory, the processor executing instructions from the memory for sending through the communication network a received user identifier from a technician user and a device identifier, the medical device providing functions having associated access control restrictions associated therewith wherein the user interface is configured based on the associated access control restrictions;
a server comprising:
a network interface coupled to a communication network;
a memory; and
a processor coupled to the memory, the processor executing instructions from the memory for receiving the user identifier and the device identifier from the medical device coupled to the network, the processor determining one or more parameters for configuring the medical device providing the user identifier to enable or disable functions through the associated user interface of the medical device that are presented to the technician user of the device based on the associated access control restrictions, the parameters determined based upon competencies determined for the associated technician user stored in the server, the competencies being indicative of the technician user's experience with or training for certain functions of the medical device, the competencies defining a level of skill determined for the technician user by a competency checklist, wherein access to the medical device by the technician user is disabled until competencies associated with the technician user are determined and the parameters are provided to the medical device to thereby restrict or permit device functionality based on the competencies such that the technician user is permitted to operate the medical device in certain modes.

### Claim 11 (depends on 10)

The system of claim 10 wherein the competencies are determined from the competency checklist defining one or more competencies required by the technician user of the medical device, wherein the determined user competencies are mapped to one or more functions of the medical device, the functions of the device are enabled when required competencies are met.

### Claim 12 (depends on 10)

The system of claim 10 wherein the configuration parameters define an access level on the medical device, wherein the access level defines features available to the technician user on the medical device.

### Claim 13 (depends on 10)

The system of claim 10 wherein the configuration parameters define one or more user interface elements presented on the medical device to the user.

### Claim 14 (depends on 10)

The system of claim 10 wherein the device provides usage data to the server, the usage data used to determine competencies from the technician user.

### Claim 15 (depends on 10)

The system of claim 10 wherein observational data is received from a computing device, the observational data updating the competency checklist.

### Claim 16 (depends on 10)

The system of claim 10 wherein the device configuration parameters are determined using one or more rules mapping a device competency to a function of the medical device.

### Claim 17 (depends on 10)

The system of claim 10 wherein the device configuration parameters are determined using one or more rules mapping a device competency to an access level.

### Claim 18 (depends on 10)

The system of claim 10 wherein competency assessment checklists are stored in a resource management system providing a personnel database, the personnel database defining competencies for the technician user.

### Claim 19

A method of medical device access control, the method comprising:
receiving in a user interface of a device user credentials and a device identifier associated with a technician user of the medical device;
sending the user credentials and device identifier to a server coupled to a network;
receiving a response from the server identifying a permission level associated with the technician user, the permission level determined by one or more competencies demonstrated by the technician user and stored in the server required to operate the medical device, the one or more competencies being indicative of the technician user's experience with or training for certain functions of the medical device; and
configuring a user interface of the medical device based upon the received permission level to enable or disable access to one or more functions associated operations of the medical device that are presented to the technician user through the user interface mapped to the one or more demonstrated competencies for the user to restrict or permit device functionality based on the one or more competencies such that the technician user is permitted to operate the medical device in certain modes.
