Intrusion resistant implantable medical device

• US 20090276011A1
• Filed: 04/30/2008
• Published: 11/05/2009
• Est. Priority Date: 04/30/2008
• Status: Active Grant

• Current Assignee: Gearbox LLC (Intellectual Ventures LLC)
• Original Assignee: Searete LLC (Intellectual Ventures LLC)
• Inventors: Ishikawa, Muriel Y., Smith, Michael A., Wood, Lowell L. JR., Hyde, Roderick A., Leuthardt, Eric C.
• Granted Patent: US 9,682,241 B2
• Time in Patent Office: Days
• US Class Current: 607/60
• CPC Class Codes: A61N 1/37 Monitoring; Protecting
• CPC Class Codes: A61N 1/37247 User interfaces, e.g. input or presentation means
• CPC Class Codes: A61N 1/37252 Details of algorithms or data aspects of communication system, e.g. handshaking, transmitting specific data or segmenting data
• CPC Class Codes: A61N 1/37254 Pacemaker or defibrillator security, e.g. to prevent or inhibit programming alterations by hackers or unauthorised individuals
• CPC Class Codes: A61N 1/37258 Alerting the patient
• CPC Class Codes: G16H 40/63 for local operation

Abstract

Provided embodiments include a device, apparatus, system, computer program product, and method. A medical apparatus is provided. At least a portion of which is configured for implantation in an animal. The medical apparatus includes a communication module configured to receive communications originating external to the animal. The medical apparatus also includes a threat assessment module configured to ascertain a threat characteristic of a communication received by the communication module. The medical apparatus further includes a threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication.

Claims

1. A medical apparatus at least a portion of which is configured for implantation in an animal, the medical apparatus comprising:

a communication module configured to receive communications originating external to the animal;

a threat assessment module configured to ascertain a threat characteristic of a communication received by the communication module; and

a threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication.

2. The medical apparatus of claim 1, wherein the medical apparatus further includes:

a patient module configured to engage a physiological aspect of the animal.

3. The medical apparatus of claim 2, wherein the patient module configured to engage a physiological aspect of the animal includes:

a patient module configured to at least one of interact, relate, act, affect, effect, sense, or couple with a physiological aspect of the animal.

4. The medical apparatus of claim 2, wherein the patient module configured to engage a physiological aspect of the animal includes:

a patient module configured to provide a therapeutic benefit to the animal.

5. The medical apparatus of claim 2, wherein the patient module configured to engage a physiological aspect of the animal includes:

a patient module configured to sense a physiological aspect of the animal.

6. The medical apparatus of claim 2, wherein the patient module configured to engage a physiological aspect of the animal includes:

a patient module configured to engage at least a portion of a brain of the animal.

7. The medical apparatus of claim 2, wherein the patient module configured to engage a physiological aspect of the animal includes:

a neural modulator module configured to engage at least a portion of a nervous system of the animal.

8. The medical apparatus of claim 2, wherein the patient module configured to engage a physiological aspect of the animal includes:

a patient module configured to acquire data indicative of a physiological aspect of the animal.

9. The medical apparatus of claim 2, wherein the patient module configured to engage a physiological aspect of the animal includes:

a control module configured to manage the patient module.

10. The medical apparatus of claim 2, wherein the patient module configured to engage a physiological aspect of the animal includes:

a patient module configured to engage a physiological aspect of the animal and to monitor its own functioning.

11. The medical apparatus of claim 2, wherein the patient module configured to engage a physiological aspect of the animal includes:

a patient module configured to engage a physiological aspect of the animal during an implementation of the threat mitigation measure responsive to the ascertained threat characteristic of the received communication.

12. The medical apparatus of claim 1, wherein the communication module configured to receive communications originating external to the animal includes:

a communication module configured to send and/or receive data having a relevance to the animal.

13. The medical apparatus of claim 1, wherein the communication module configured to receive communications originating external to the animal includes:

a communication module configured to receive communications originating external to the animal and configured to communicate with another medical apparatus configured for association with the animal.

14. The medical apparatus of claim 1, wherein the communication module configured to receive communications originating external to the animal includes:

a communication module configured to receive communications originating external to the animal and to receive a communication useful in updating at least one of the threat assessment module or the threat mitigation module.

15. The medical apparatus of claim 1, wherein the threat assessment module configured to ascertain a threat characteristic of a communication received by the communication module includes:

a threat assessment module configured to ascertain a susceptibly of the medical device to a threat characteristic of a communication received by the communication module.

16. The medical apparatus of claim 1, wherein the threat assessment module configured to ascertain a threat characteristic of a communication received by the communication module includes:

a threat assessment module configured to ascertain a threat characteristic of at least one of a fake communication, a spoofed communication, or a jamming communication received by the communication module.

17. The medical apparatus of claim 1, wherein the threat assessment module configured to ascertain a threat characteristic of a communication received by the communication module includes:

a threat assessment module configured to ascertain a threat characteristic of a communication received by the communication module and to initiate a notification to another apparatus of the ascertained threat characteristic.

18. The medical apparatus of claim 1, wherein the threat assessment module configured to ascertain a threat characteristic of a communication received by the communication module includes:

a threat assessment module configured to ascertain a presence of a threat characteristic of a communication received by the communication module and to ascertain a cessation of the ascertained threat characteristic.

19. The medical apparatus of claim 1, wherein the threat assessment module configured to ascertain a threat characteristic of a communication received by the communication module includes:

a threat assessment module configured to be updatable in vivo and configured to ascertain a threat characteristic of a communication received by the communication module.

20. The medical apparatus of claim 1, wherein the threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication includes:

a threat mitigation module configured to implement a selected mitigation measure responsive to the ascertained threat characteristic of the received communication.

21. The medical apparatus of claim 1, wherein the threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication includes:

a threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication and selected in response to a selection algorithm.

22. The medical apparatus of claim 1, wherein the threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication includes:

a threat mitigation module configured to implement a mitigation measure selected based on to a lookup table.

23. The medical apparatus of claim 1, wherein the threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication includes:

a threat mitigation module configured to implement a mitigation measure selected according to a function dependent on at least one of a nature of the ascertained threat characteristic of the received communication, a remaining capability of a patient module of the medical apparatus to engage a physiological aspect of the animal, or a remaining life of a power source providing operational power to the medical apparatus.

24. The medical apparatus of claim 1, wherein the threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication includes:

a threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication, the mitigation measure including at least one of an encryption, an encryption change, a disinformation measure, a change of communication frequency, a change of a schedule of communication, formatting a communication, a communication polarization, a handshake, tunneling, signature, authentication, or verification.

25. The medical apparatus of claim 1, wherein the threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication includes:

a threat mitigation module configured to be updatable in vivo and configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication.

26. The medical apparatus of claim 1, wherein the threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication includes:

a threat mitigation module configured to implement a mitigation measure, the mitigation measure responsive to the ascertained threat characteristic of the received communication and meeting a minimum safety standard for the animal.

27. The medical apparatus of claim 26, wherein the threat mitigation module configured to implement a mitigation measure includes:

a threat mitigation module configured to implement a mitigation measure in at least one of the patient module or the communication module, the mitigation measure responsive to the ascertained threat characteristic of the received communication and meeting a minimum safety standard for the animal.

28. The medical apparatus of claim 26, wherein the threat mitigation module configured to implement a mitigation measure includes:

a threat mitigation module configured to implement a mitigation measure, the mitigation measure responsive to the ascertained threat characteristic of the received communication and predicted to meet a minimum safety standard for the animal.

29. The medical apparatus of claim 26, wherein the threat mitigation module configured to implement a mitigation measure includes:

a threat mitigation module configured to implement a mitigation measure, the mitigation measure responsive to the ascertained threat characteristic of the received communication and selected to provide a least adverse effect on the animal from among two countermeasures.

30. The medical apparatus of claim 26, wherein the threat mitigation module configured to implement a mitigation includes:

a threat mitigation module configured to implement a mitigation measure, the mitigation measure responsive to the ascertained threat characteristic of the received communication and predicted by a lookup table as unlikely to have an at least substantial adverse impact on the animal.

31. The medical apparatus of claim 26, wherein the threat mitigation module configured to implement a mitigation includes:

a threat mitigation module configured to implement a mitigation measure, the mitigation measure responsive to the ascertained threat characteristic of the received communication and predicted by a lookup table stored in the implanted medical apparatus as unlikely to have an at least substantial adverse impact on the animal.

32. The medical apparatus of claim 1, wherein the threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication includes:

a threat mitigation module configured to implement a mitigation measure, the mitigation measure responsive to the ascertained threat characteristic of the received communication and unlikely to have an at least substantially serious impact on the animal.

33. The medical apparatus of claim 1, wherein the threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication includes:

a threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication and to initiate a notification to another apparatus of the implemented mitigation measure.

34. The medical apparatus of claim 1, wherein the threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication includes:

a threat mitigation module configured to reverse the implementation of the mitigation measure.

35. The medical apparatus of claim 1, wherein the threat mitigation module configured to implement a mitigation measure responsive to the ascertained threat characteristic of the received communication includes:

a threat mitigation module configured to reverse the implementation of the a mitigation measure and to initiate a notification to another apparatus of the reversing of the implementation of the mitigation measure.

36. The medical apparatus of claim 1, further comprising:

a biocompatible housing adapted to be implanted in a mammalian patient.

37. The medical apparatus of claim 1, further comprising:

a power source providing operational power to at least a portion of the medical apparatus.

38. The medical apparatus of claim 1, further comprising:

a backdoor module configured to respond to a command received from a trusted or a verified third party without regard to the implemented mitigation measure responsive to the ascertained threat characteristic of the received communication.