Interesse

Bringing peace of mind to your hospital and patients

Cybersecurity in healthcare poses a unique challenge different from other business sectors as highly sensitive patient information may become direct targets. To address this emerging need for cybersecurity, Samsung provides a solution to support our customers by offering the tools to protect against cyberthreats that may compromise invaluable patient data and ultimately degrade the quality of care. Samsung’s Cybersecurity Solution strives to abide by the CIA triad (Confidentiality, Integrity, and Availability) and takes a comprehensive approach to providing impeccable protection with the following pillars: Intrusion prevention, Access control, and Data protection

Intrusion Prevention

Tools for protecting against cyber threats from external attacks

Security tools (Anti-virus & Firewall)

Security tools are required to effectively reduce security threats. Typical security tools include Anti-Virus and Firewall which protects medical devices from viruses or ransomware. Samsung specifies these security measures for all products which are included in the checklist and manages them.

Secured operating system

Various medical equipment such as ultrasound, X-ray and CT operate on operation systems (OS) such as Windows and Linux. OS provides usability and high development convenience, but their various functions can cause unexpected security accidents. To minimize these security threats, Samsung blocks OS services, shared resources, and user accounts that are not used upon release.

Access Control

Strengthened surveillance for tracking the access of patient information

Account management

Medical devices contain highly sensitive patient information and thus must be handled by authorized personnel only. Samsung medical devices provide user management functions (login/logout system) as well as password settings, account locking, and other functions for strengthening user authentication.

Audit trail

Samsung medical devices use an enhanced audit trail to detect and track these security threats. The audit trail records major security logs such as user login info, creation and modification of patient information, external data transmission of key information, and remote service operations.

Data protection

Encryption functions for safeguarding data whether at-rest or in-transit

Data encryption

Samsung medical devices are always ready for predictable data hacking. Unfortunately, accidental data loss may occur as no security system is perfect. To prevent these accidents, Samsung medical devices store all patient information in an encrypted form. Disk encryption is primarily used to encrypt the entire storage, while the data stored in the database is also encrypted.

Transmission security

Additionally, in order to prevent data extractions during transmissions via networks, DICOM TLS (Transport Layer Security) is implemented to encrypt electronic protected health information, thereby ensuring transmission security.