SYSTEM AND METHOD FOR PROVIDING SECURE COMMUNICATION OF SENSITIVE INFORMATION

• US 20090043362A1
• Filed: 10/20/2008
• Published: 02/12/2009
• Est. Priority Date: 03/15/2004
• Status: Active Grant

• Current Assignee: Cardiac Pacemakers Incorporated (Boston Scientific Corporation)
• Original Assignee: Cardiac Pacemakers Incorporated (Boston Scientific Corporation)
• Inventors: Von Arx, Jefffey A., Healy, Scott J.
• Granted Patent: US 8,331,563 B2
• Time in Patent Office: Days
• US Class Current: 607/60
• CPC Class Codes: A61N 1/37247 User interfaces, e.g. input or presentation means
• CPC Class Codes: A61N 1/37252 Details of algorithms or data aspects of communication system, e.g. handshaking, transmitting specific data or segmenting data
• CPC Class Codes: A61N 1/37254 Pacemaker or defibrillator security, e.g. to prevent or inhibit programming alterations by hackers or unauthorised individuals
• CPC Class Codes: A61N 1/3727 characterised by the modulation technique
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

A system and method for providing secure communication of sensitive information is provided. A crypto key unique to an implantable medical device is dynamically generated on a programmer. Sensitive information for the implantable medical device is encrypted using the crypto key. A telemetry connection of at least one of a short range and a long range is established between the implantable medical device and the programmer. The encrypted sensitive information is transmitted to the implantable medical device via the telemetry connection. The crypto key is transmitted to the implantable medical device via the telemetry connection at short range.

Claims

1. A system for providing secure communication of sensitive information, comprising:

an implantable medical device configured to store sensitive information and a crypto key unique to the implantable medical device; and

a programmer, comprising;

an encryption module configured to dynamically generate the crypto key and to encrypt the sensitive information for the implantable medical device using the crypto key;

a communication module configured to establish a telemetry connection at one of a short range and a long range with the implantable medical device;

a data transmission module configured to transmit the encrypted sensitive information to the implantable medical device via the telemetry connection; and

a key transmission module configured to transmit the crypto key to the implantable medical device via the telemetry connection at short range.

2. A system according to claim 1, wherein the programmer further comprises:

a data retrieval module configured to retrieve the encrypted sensitive information from the implantable medical device via the telemetry connection;

a key retrieval module configured to retrieve the crypto key from the implantable medical device via the telemetry connection at short range; and

a decryption module configured to decrypt the encrypted sensitive information using the crypto key.

3. A system according to claim 1, further comprising:

an authorization module configured to authenticate access to the implantable medical device using the programmer.

4. A system according to claim 1, wherein the programmer further comprises:

a search module configured to conduct a search for a pre-programmed crypto key on the implantable medical device; and

a key module configured to generate the crypto key when the search returns no pre-programmed crypto key.

5. A system according to claim 1, wherein the short range telemetry connection comprises inductive telemetry and the long range telemetry connection comprises radio frequency telemetry.

6. A system according to claim 1, wherein the crypto key comprises an encryption key in accordance with the Advanced Encryption Standard.

7. A method for providing secure communication of sensitive information, comprising:

on a programmer, dynamically generating a crypto key unique to an implantable medical device and encrypting sensitive information for the implantable medical device using the crypto key;

establishing between the implantable medical device and the programmer, a telemetry connection at one of a short range and a long range;

transmitting the encrypted sensitive information to the implantable medical device via the telemetry connection; and

transmitting the crypto key to the implantable medical device via the telemetry connection at short range.

8. A method according to claim 7, further comprising:

performing by the programmer,

retrieving the encrypted sensitive information from the implantable medical device via the telemetry connection;

retrieving the crypto key from the implantable medical device via the telemetry connection at short range; and

decrypting the encrypted sensitive information using the crypto key.

9. A method according to claim 7, further comprising:

authenticating access to the implantable medical device using the programmer.

10. A method according to claim 7, further comprising:

performing by the programmer,

conducting a search for a pre-programmed crypto key on the implantable medical device; and

generating the crypto key on the programmer when the search returns no pre-programmed crypto key.

11. A method according to claim 7, wherein the short range telemetry connection comprises inductive telemetry and the long range telemetry connection comprises radio frequency telemetry.

12. A method according to claim 7, wherein the crypto key comprises an encryption key in accordance with the Advanced Encryption Standard.

13. An implantable medical device for securely communicating sensitive information, comprising:

a storage module configured to maintain a crypto key generated by a programmer and further configured to provide the crypto key to the programmer;

a data receipt module configured to receive the crypto key and sensitive information encrypted by the programmer using the crypto key;

a database configured to store the crypto key and the encrypted sensitive data; and

an authentication module configured to authenticate the programmer by providing access to the crypto key and the encrypted sensitive data.

14. An implantable medical device according to claim 13, wherein the crypto key is provided to the programmer and is transmitted to the implantable medical device via short range telemetry.

15. An implantable medical device according to claim 13, wherein the encrypted sensitive information is transmitted from the programmer to the implantable medical device via at least one of short range telemetry and long range telemetry.

16. An implantable medical device according to claim 15, wherein the short range telemetry comprises inductive telemetry and the long range telemetry comprises radio frequency telemetry.

17. A method for securely communicating sensitive information, comprising:

maintaining a crypto key generated by a programmer on an implantable medical device and providing the crypto key to the programmer;

receiving on the implantable medical device, the crypto key and sensitive information encrypted by the programmer using the crypto key;

storing the crypto key and the encrypted sensitive information; and

authenticating the programmer by providing access to the crypto key and the encrypted sensitive information.

18. A method according to claim 17, wherein the crypto key is provided to the programmer and is transmitted to the implantable medical device via short range telemetry.

19. A method according to claim 17, wherein the encrypted sensitive information is transmitted from the programmer to the implantable medical device via at least one of short range telemetry and long range telemetry.

20. A method according to claim 19, wherein the short range telemetry comprises inductive telemetry and the long range telemetry comprises radio frequency telemetry.