US 12,443,721 B2
Medical device cybersecurity platform
Manish Jadhav, McMurray, PA (US); and Kenneth Zalevsky, Pittsburgh, PA (US)
Assigned to Vigilant Ops, Inc., Pittsburgh, PA (US)
Appl. No. 17/924,743
Filed by VIGILANT OPS, INC., Pittsburgh, PA (US)
PCT Filed May 11, 2021, PCT No. PCT/US2021/031775
§ 371(c)(1), (2) Date Nov. 11, 2022,
PCT Pub. No. WO2021/231423, PCT Pub. Date Nov. 18, 2021.
Claims priority of provisional application 63/022,938, filed on May 11, 2020.
Prior Publication US 2023/0244791 A1, Aug. 3, 2023
Int. Cl. G06F 21/57 (2013.01); G06F 8/65 (2018.01); G16H 40/40 (2018.01)
CPC G06F 21/577 (2013.01) [G06F 8/65 (2013.01); G16H 40/40 (2018.01); G06F 2221/034 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system for the management of cybersecurity risks for medical devices, the system comprising:
a processor; and
a non-transitory, processor-readable storage medium, wherein the non-transitory, processor-readable storage medium comprises one or more programming instructions that, when executed, cause the processor to:
receive data associated with a medical device;
evaluate, based on the data, an identity of the medical device;
generate, based on the identification, a cybersecurity bill of materials associated with the medical device, wherein the cybersecurity bill of materials comprises a software bill of materials detailing a software component of the medical device, wherein the software bill of materials comprises a build status comprising a build environment of the software component and a current status comprising applied updates to the software component;
standardize the cybersecurity bill of materials based on a common platform enumeration database;
evaluate, using a vulnerability database, the cybersecurity bill of materials to identify one or more potential vulnerabilities;
provide notification of the one or more potential vulnerabilities to at least one user;
determine, using a manufacturer's database, whether the medical device is up-to-date; and
responsive to determining that the device is not up-to-date, receive a patch from the manufacturer's database to update the medical device.