CAE Air1, Руководство пользователя, Страница: 32 / 158

©2020 CAE 905K710052 v.1.1 25
Safety
Cybersecurity
CAE Air1 incorporates features intended to reduce cybersecurity risks. This section describes the
most important of those features and explain what should be done by users to strengthen the
security of the device.
• The system disables the Ethernet network port when booting up the unit. A passcode is
required to activate and the use the Ethernet service port. This can only be done in
Maintenance mode, while the ventilator is not in use. The system also prevents
unauthorized USB device to connect to the USB port. The Ethernet and USB ports are
located inside of the enclosure and are not directly accessible.
• A passcode is required to access the Maintenance page. A default passcode has been set
at the factory. See the Care and Maintenance section of this user guide for information on
accessing the Settings screen.
• The web service application used for firmware and software update is configured to use
HTTPS protocol using TLS 1.2 and a CAE certificate configured to expire every 18 months.
Certificates will be updated through a routine software update.
• CAE Air1 software incorporates third-party or open source software. The complete list can
be found in Appendix E of this guide. CAE maintains a cybersecurity watch on software
vulnerabilities. CAE will advise users about issues that could impact the security of the
device and provide guidance on how to address them including instructions on how to
install software updates.
• Instructions for updating the CAE Air1 software are found in the Care and Maintenance
section in this user guide. The system permits the update of the ventilator software and
firmware only with CAE digitally signed packages.
• The CAE Air1 offers a Self Test function as part of its routine start-up procedure which
performs an integrity check of the software components.
• Cybersecurity log entries can be found in the Maintenance Log and in the System Log files.
These logs should be regularly reviewed to detect unauthorized access to the ventilator
maintenance functions when comparing with the planned maintenance schedule of the
ventilator.
• The system offers the ability to extract the system logs which are presented in four distinct
log facilities: alarms, maintenance, system and platform logs. This export is available from
the web application also used for the system update. These logs can be then collected and
analyzed manually or by importing them into the security information and event
management solution.
See Appendix E - Third-Party Software and Hardware for a list of software, hardware and firmware
components used in the CAE Air1 ventilator.