Method for authenticating an instrument for processing a biological sample or reagent and system comprising an instrument for processing a biological sample or reagent

• US 10,439,824 B2
• Filed: 08/28/2017
• Issued: 10/08/2019
• Est. Priority Date: 09/01/2016
• Status: Active Grant

• Current Assignee: Roche Diagnostics Operations Incorporated (Roche Holding AG)
• Original Assignee: Roche Diagnostics Operations Incorporated (Roche Holding AG)
• Inventors: Knafel, Andrzej, Weingartner, Thomas
• Primary Examiner(s): Lagor, Alexander
• Application Number:
  US15/687,567
• Publication Number:
  US 20180062857A1
• Time in Patent Office: 771 Days
• Field of Search: None
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A method for authenticating an instrument for processing a biological sample or reagent is disclosed. The method comprises generating a PIN code by the instrument, entering the PIN code and identification data associated with the instrument in a database of an electronic device, verifying the PIN code and identification data at the electronic device, transmitting an authentication certificate to the instrument if the PIN code and identification data correspond to target data stored in the database, installing the authentication certificate on the instrument, whereby the instrument is registered with the electronic device, and using the authentication certificate for an encrypted communication between the instrument and the electronic device. Further, a system is disclosed which comprises an instrument for processing a biological sample or reagent and an electronic device. The system is configured to carry out each step of the method.

Claims

1. A computer implemented method for authenticating an instrument for processing a biological sample or reagent, the computer implemented method comprising:

generating a Personal Identification Number (PIN) code by the instrument;

registering the PIN code and identification data associated with the instrument in a database of an electronic device;

verifying the PIN code and identification data at the electronic device by

generating a certificate signing request by the instrument,

encrypting the certificate signing request,

sending the encrypted certificate signing request to a certificate authority connected to the electronic device,

signing the certificate signing request by the certificate authority after decrypting the certificate signing request,

generating the authentication certificate,

encrypting the authentication certificate with itself and a previous authentication certificate of the instrument;

transmitting the encrypted authentication certificate to the instrument if the PIN code and identification data correspond to target data stored in the database;

decrypting the authentication certificate by the instrument;

installing the authentication certificate on the instrument, wherein the instrument is registered with the electronic device; and

using the authentication certificate for an encrypted communication between the instrument and the electronic device.

2. The computer implemented method according to claim 1, further comprising;

decrypting the certificate signing request by the electronic device; and

sending the certificate signing request decrypted by the electronic device to the certificate authority.

3. The computer implemented method according to claim 1, wherein installing the authentication certificate on the instrument includes replacing the previous authentication certificate of the instrument.

4. The computer implemented method according to claim 1, further comprising;

encrypting the certificate signing request with at least the previous authentication certificate.

5. The computer implemented method according to claim 1, wherein the PIN code and identification data are entered by an input device separate from the instrument and the electronic device.

6. The computer implemented method according to claim 5, wherein the input device is connected to the electronic device by an online connection.

7. The computer implemented method according to claim 5, wherein the input device is a portal of the electronic device.

8. The computer implemented method according to claim 1, further comprising;

connecting the instrument to the electronic device by an online connection; and

transmitting the authentication certificate to the instrument via the online connection.

9. The computer implemented method according to claim 1, further comprising;

displaying the generated PIN on a display of the instrument.

10. The computer implemented method according to claim 1, wherein the identification data include a model and/or serial number of the instrument.

11. A system, the system comprising:

an instrument for processing a biological sample or reagent; and

an electronic device, wherein the system is configured to carry out the method according to claim 1.

12. The system according to claim 11, wherein the instrument is configured to generate a PIN code, wherein the electronic device comprises a database, wherein the PIN code and identification data associated with the instrument are enterable in the database, wherein the electronic device is configured to verify the PIN code and identification data and to transmit an authentication certificate to the instrument if the PIN code and identification data correspond to target data stored in the database, wherein the authentication certificate is configured to be installed on the instrument, and wherein the authentication certificate is configured to be used for encrypted communication between the instrument and the electronic device.