Notice

Dear Chinese customers

We would like to inform you that Chinese users are only allowed to visit websites that comply with the PIPL(Personal Information Protection Law of the People's Republic of China) effective November 1st.

Please find 三星医疗 on WeChat to meet us.
 ▲ Scan or click the QR code to visit 三星医疗 The personal information of existing Samsunghealthcare.com chinese users will be kept until October 29th and will be safely deleted thereafter.

Sorry for the inconvenience.

Chinese users are only allowed to visit websites which complies with the PIPL (Personal Information Protection Law of the People's Republic of China) effective November 1st.

▲ Scan or click the QR code to visit 三星医疗




The personal information of existing Samsunghealthcare.com chinese users will be kept until October 29th and will be safely deleted thereafter.

Upgrade browser for full Samsung Healthcare experience

It looks like you may be using a web browser that we don’t support.
Make sure you’re using one of these recommended browsers,
or upgrade your browser by clicking the icons, to get the full Samsung Healthcare experience.

chrome
edge
firefox

To check which browser you use

https://whatsmybrowser.org/

Select your country or region to find out what content fits your location.

Continue

What are you looking for?

본문 바로가기

Insight

Learn more about Samsung's advancements and contributions.

Designed holistic
protection
for your
critical assets

: Defense-in-Depth

Healthcare organizations are becoming increasingly susceptible to cyber attacks compromising sensitive
patient information. As medical devices can be an entry point for attackers, cybersecurity is our top
priority in designing, developing, and maintaining products. We are committed to offering a proactive
and optimal safeguard of DR & Ultrasound equipment and invaluable data against intensifying
cyber threats. Samsung’s digital X-ray and ultrasound systems are ready not only for
today but also for the future with industry-lead
ing technical measures in multi-layered security controls.

Click to Layer

Physical OS hardening Network Access Application Data
network
access
ultrasound
application
data

Click to Layer

Physical OS hardening Network Access Application Data
  • Protection case*for critical hardware module in a system from unauthorized access
  • Limited external port only used for file input and output against malicious hacking

* This feature is only for GM85.
* This feature is applicable to ultrasound systems as well

  • Operating system hardening in line with STIGs*
  • Secure Boot checking the integrity of boot S/W to prevent malware loading

* STIGs(Security Technical Implementation Guides) are comprehensive hardening guides published
by the DISA(Defense Information Systems Agency) of the Ut.S. Department of Defense.
* For ultrasound systems, this feature is applicable only to ultrasound models RS85 and the V series (V8, V7, V6).

  • Firewall preventing unintended intrusion through a network
  • WPA2 securing access to wireless communication between system components
  • VPN* supporting protected network communication against external breaches
  • DICOM TLS** for data encryption in transit

* VPN: Virtual Private Network
** TLS: Transport Layer Security
* For ultrasound systems, this feature is applicable to Firewall, WPA2, and DICOM TLS**, excluding VPN*.

  • Strengthened user account management with various password policies and access controls for patient data by account
  • Audit trail recording log of major events related to patient data
  • Service engineer access control using OTP and anonymizing of all patient data

* This feature is applicable to ultrasound systems as well.

  • Anti-malware protecting DR systems from viruses or ransomware
  • Whitelisting* allowing only validated S/W installation and execution for blocking malware
  • Remote software update to keep the latest version of S/W without service requests
  • SDLC** managing all stages in security from program code to final distribution
  • Digital Signature ensuring the integrity of S/W component in a system

* This feature is applied at customer’s request.
** SLDC(Secure-Software Development Life Cycle) is a process for planning, creating, testing, and deploying an information system for creating high-quality software.
* For ultrasound systems, this feature is applicable to Anti-malware, Whitelisting*, and Remote Software Update, excluding SDLC** and Digital Signature.

  • Storage Encryption preventing data leakage from system drives even if storage is physically detached
  • DICOM Tag Encryption protecting sensitive patient data in case of DICOM file theft

* This feature is applicable to ultrasound systems as well.

World-class Management System

Received independent certification
including ISO/IEC27001

Comply with Risk Management Framework (RMF) according to NIST SP 800-53

Government-grade Security

Achieved government agencies including Authority to Operate (ATO) for the U.S. Department of Defense.
*For ultrasound systems, this security is applicable only to ultrasound models RS85 and the V series (V8, V7, V6).

Trusted by Security Experts

Vulnerability monitoring with regular code-based reviews and integrated inspection by Samsung’s security experts

Comply with worldwide standards

To protect customers' personal data, we introduced the Samsung Data Protection Guidelines and consistently implemented necessary training with respect to privacy. We will continue to support our employees to recognize the importance of personal data protection and to apply related policies and regulations to their practices.

Actions for GDPR

General Data Protection Regulation (GDPR) includes tough requirements that harmonize privacy and security laws across the EU. We are committed to providing functional support that enables users to comply with GDPR.

Actions for HIPAA

Health Insurance Portability and Accountability Act (HIPAA) in the U.S. requires detailed privacy rules on how Protected Health Information (PHI) can be used and exposed, we consider this when implementing features in the products. Our objective is to continue to help end users using the device to be compliant with HIPAA acts.

Actions for MDS²

The Manufacturers Disclosure Statement for Medical Device Security (MDS2) provides information about the security implemented in medical devices with 216 questions that cover 23 security capabilities. We provide the disclosure statement for each model in accordance with the standard template and will continue to offer technical and support information with transparency.

List