Variable encryption scheme for data transfer between medical devices and related data management systems

• US 20050261934A1
• Filed: 07/16/2003
• Published: 11/24/2005
• Est. Priority Date: 03/31/2000
• Status: Active Grant

• Current Assignee: Medtronic Incorporated (Medtronic Plc)
• Original Assignee: Medtronic Incorporated (Medtronic Plc)
• Inventors: Thompson, David L.
• Granted Patent: US 7,027,872 B2
• Time in Patent Office: Days
• US Class Current: 705/2
• CPC Class Codes: A61N 1/37282 characterised by communication with experts in remote locations using a network
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 40/40 for the management of medical equipment or devices, e.g. scheduling maintenance or upgrades
• CPC Class Codes: G16H 40/67 for remote operation
• CPC Class Codes: Y10S 128/903 Radio telemetry

Abstract

The present invention provides for an encryption apparatus, system, and method in which data from an Implantable Medical Device (IMD) and a data center could be transferred based on a differentiated encryption system. The encryption scheme allows for the differentiation, segregation, and classification of data at required or needed levels of security. Before transfer of the data, either from an IMD or any other part of a support network for the IMDs, the encryption device begins to distinguish the data. The variable data is then classified based on various levels of security having distinct encryption protocols. After classification the data is encrypted based on the data'"'"'s level of security. The data is then transmitted. Upon being received the data is then segregated based on whether the data is encrypted. The encrypted data is then de-encrypted and interpreted.

Claims

1-11. -11. (canceled)

12. A network communications system linking an IMD to an information node via a secure medical information exchange network, comprising:

at least one key source in data communication with an IMD interface device and with the information node for transmitting an encryption key to the IMD interface device and a decryption key to an expert-data center,

an encryption engine residing within an IMD interface device for performing data modification information using the encryption key;

data communication means between the IMD Interface and the medical information exchange network;

and a decryption engine residing within the information node having means to decrypt the encrypted sensitive information using the decryption key.

13. The network communications system of claim 12, wherein the information node is a clinician computer.

14. The network communications system of claim 12, wherein the information node is a remote expert system server.

15. The network communication system of claim 12, wherein the encryption engine is adapted to recognize non-real time data for encryption.

21. The system of claim 12 or 16, wherein the IMD interface Is In communication with an IMD implanted in a patient

16. A network communications system for transmitting IMD instruction information from an information node to an IMD via a secure medical information exchange network, comprising:

at least one key source in data communication with an IMD interface device and with the Information node for transmitting a decryption key to the IMD interface device and a encryption key to the information node;

data communication means between the IMD interface and the medical information exchange network;

an encryption engine residing within the Information node having means for performing data modification of IMD Instruction information; and

a decryption engine residing within an IMD interface device for performing data integrity confirmation.

17. The network communications system of claim 16, wherein the at least on key source comprises hard coded into the IMD, the IMD interface, and a stored key source residing on the information node, respectively.

18. The network communications system of claim 16, wherein data transmitted from the information node comprises native data with an appended data Integrity information.

19. The network communications system of claim 18, wherein the native data comprises IMD instructions.

20. The network communications system of claim 18, wherein the native data comprises IMD software upgrades.

22. A computerized method of securely transferring data, including sensitive Information, between an IMD and a remote information node over a computer network, the method comprising:

generating an encryption key for distribution to an IMD interface device;

generating a decryption key for distribution to the information node;

transferring data from the IMD to the IMD interface device;

encrypting the sensitive information, transmitted form the IMD and residing on the IMD interface device, with the encryption key;

transferring the encrypted sensitive information from the IMD interface device to the remote information node, and

decrypting the encrypted information residing on the remote Information node with the decryption key.

23. The method of claim 22 wherein said data includes one of and a combination of physiological data, cardiac data, neurological data, patient data, therapy data, diagnostic data and device data.

24. The method of claim 23 wherein said data is transferred based on differentiated encryption scheme.