An infusion pump having secure network access, comprising: a network interface circuit configured to provide communications over a network, the network interface circuit configured to provide a communication port; and a processing circuit configured to: open a communication port on the network interface circuit to establish a communication session; transmit an infusion pump data message to a server computer over the network during the communication session using the communication port which was opened; after the infusion pump data message is transmitted to the server, transmit to the server computer a request for a command message from the server computer during the communication session using the communication port which was opened; receive a command from the server computer over the network with the communication port which was opened; determine whether the command is on a predetermined list of commands, the predetermined list of commands being a subset of functions the infusion pump is configured to perform and not having an impact on safety of the infusion pump; process the command if the command is on the predetermined list of commands; and close the communication port on the network interface circuit. a network interface circuit configured to provide communications over a network, the network interface circuit configured to provide a communication port; and a processing circuit configured to: open a communication port on the network interface circuit to establish a communication session; transmit an infusion pump data message to a server computer over the network during the communication session using the communication port which was opened; after the infusion pump data message is transmitted to the server, transmit to the server computer a request for a command message from the server computer during the communication session using the communication port which was opened; receive a command from the server computer over the network with the communication port which was opened; determine whether the command is on a predetermined list of commands, the predetermined list of commands being a subset of functions the infusion pump is configured to perform and not having an impact on safety of the infusion pump; process the command if the command is on the predetermined list of commands; and close the communication port on the network interface circuit. open a communication port on the network interface circuit to establish a communication session; transmit an infusion pump data message to a server computer over the network during the communication session using the communication port which was opened; after the infusion pump data message is transmitted to the server, transmit to the server computer a request for a command message from the server computer during the communication session using the communication port which was opened; receive a command from the server computer over the network with the communication port which was opened; determine whether the command is on a predetermined list of commands, the predetermined list of commands being a subset of functions the infusion pump is configured to perform and not having an impact on safety of the infusion pump; process the command if the command is on the predetermined list of commands; and close the communication port on the network interface circuit.