PERSONAL SECURITY MANAGER FOR UBIQUITOUS PATIENT MONITORING

• US 20110145894A1
• Filed: 06/10/2009
• Published: 06/16/2011
• Est. Priority Date: 06/18/2008
• Status: Active Grant

• Current Assignee: Koninklijke Philips N.V.
• Original Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Inventors: Baldus, Heribert, Garcia Morchon, Oscar, Huebner, Axel Guenther
• Granted Patent: US 9,094,383 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: A61B 5/0022 Monitoring a patient using a global network, e.g. telephone networks, internet
• CPC Class Codes: A61B 5/0024 for multiple sensor units attached to the patient, e.g. using a body or personal area network
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 40/40 for the management of medical equipment or devices, e.g. scheduling maintenance or upgrades
• CPC Class Codes: G16H 40/63 for local operation
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices

Abstract

The present invention relates to a system and corresponding method for a secure end-to-end patient healthcare system which includes wireless medical sensors adapted to be attached to a patient'"'"'s body and in communication with each other forming a body sensor network within a wireless medical sensor network including one or more body sensor networks; λ-secure keying means incorporated into each wireless medical sensor for enabling secure communications between the wireless medical sensors, and a personal security manager within the body sensor network and in communication with the wireless medical sensors within the body sensor network, the personal security manager providing secure communications with backend services and providing security relationships within the body sensor network by means of the λ-secure keying means, wherein the λ-secure keying means are such that a coalition of no more than λ compromised wireless medical sensors conceals a pairwise key between any two non-compromised wireless medical sensors and provides protection against node compromise until λ+1 wireless medical sensors have been compromised.

Claims

1. A secure end-to-end patient healthcare system, comprising:

one or more wireless medical sensors adapted to be attached to a patient'"'"'s body and in communication with each other forming a body sensor network within a wireless medical sensor network including one or more body sensor networks;

λ

-secure keying means incorporated into each of said wireless medical sensors for enabling secure communications between said wireless medical sensors, and

a personal security manager within the body sensor network and in communication with said one or more wireless medical sensors within said body sensor network, said personal security manager providing secure communications with backend services and providing security relationships within said body sensor network by means of said λ

-secure keying means,

wherein said λ

-secure keying means are such that a coalition of no more than λ

compromised wireless medical sensors conceals a pairwise key between any two non-compromised wireless medical sensors and provides protection against node compromise until λ

+1 wireless medical sensors have been compromised.

2. The secure end-to-end patient healthcare system of claim 1, wherein said wireless medical sensors and said personal security manager are adapted to communicate by means of body coupled communications.

3. The secure end-to-end patient healthcare system of claim 1, further comprising a healthcare card plugged into the personal security manager, wherein the healthcare card includes identification information and security information for secure communication with the backend healthcare services, wherein the personal security manager includes a certificate issued by a local trust center, and wherein the system is adapted to execute a security protocol for auditing and/or access control and/or privacy protection, and/or mutual authentication of the personal security manager with the healthcare card.

4. The secure end-to-end patient healthcare system of claim 2,

wherein information from the body sensor network is linked to the patient'"'"'s identity,

wherein said patient healthcare card (HCC) and said personal security manager (PSM) form an extended personal security manager (PSMx) for connecting a number of wireless medical sensor network security domains to a pervasive healthcare system, said extended personal security manager being adapted for:

storing said certificate issued by said local trust center,

storing said λ

-secure keying means for establishing an end-to-end security communication issued by centralized healthcare services, and

implementing said security protocol to enable mutual authentication of said extended personal security manager and said healthcare card, end-to-end security and/or auditing, and/or management of context access control and privacy policies.

5. The secure end-to-end patient healthcare system of claim 4, wherein said extended personal security manager is adapted for authenticating the personal security manager of the patient and patient'"'"'s healthcare card when the patient joins the medical sensor network.

6. The secure end-to-end patient healthcare system of claim 4, wherein said personal security manager comprises a smart card reader adapted to receive said healthcare card, and wherein said healthcare card includes individual identification information and/or medical information and/or security material and/or security policies.

7. The secure end-to-end patient healthcare system of claim 6, wherein said personal security manager includes a user'"'"'s name, identifier, security material, medical record or access control policies for different medical sensor networks.

8. The secure end-to-end patient healthcare system of claim 6, wherein said extended personal security manager includes identification of a global user, patient area network, and individual electronic healthcare information (EHI), the electronic healthcare information (EHI) coming from said patient area network.

9. The secure end-to-end patient healthcare system of claim 4, wherein security information stored on the healthcare care is provided for identifying and authenticating the user and acting as a bridge between the patient'"'"'s body sensor network and centralized or backend healthcare services.

10. The secure end-to-end patient healthcare system of claim 4, wherein said extended personal security manager is a mobile phone with an additional smart card slot for the healthcare card.

11. The secure end-to-end patient healthcare system of claim 4, further comprising an autonomous secure domain formed by the wireless medical sensor associated with a body sensor network, wherein said extended personal security manager is the body sensor network'"'"'s trust center and is adapted for controlling the secure association or revocation of the body sensor network'"'"'s members.

12. The secure end-to-end patient healthcare system of claim 11, wherein said extended personal security manager and said wireless medical sensors are adapted for securely storing exchanged information and actions carried out in the body sensor network on the patient'"'"'s healthcare card even if connectivity to the medical sensor network trust center is lost.

13. A method for secure end-to-end patient healthcare communication in an end-to-end patient healthcare system as claimed in claim 1, comprising the steps of:

storing a certificate issued by a local medical sensor network trust center on the personal security manager;

storing security means on the personal security manager to establish an end-to-end security communication between wireless medical sensors and centralized healthcare services; and

implementing a security protocol to enable mutual authentication of the personal security manager and a healthcare card, end-to-end security, auditing, and/or management of context access control and privacy policies.

14. A personal security manager for a secure end-to-end patient healthcare system, wherein the personal security manager is within a body sensor network and in communication with one or more wireless medical sensors within said body sensor network, said personal security manager providing secure communications with backend services and providing security relationships within said body sensor network by means of said λ

-secure keying means,

wherein said one or more wireless medical sensors are adapted to be attached to a patient'"'"'s body and in communication with each other to form said body sensor network within a wireless medical sensor network including one or more body sensor networks;

λ

-secure keying means incorporated into each of said wireless medical sensors for enabling secure communications between said wireless medical sensors, and

wherein said λ

-secure keying means are such that a coalition of no more than λ

compromised wireless medical sensors conceals a pairwise key between any two non-compromised wireless medical sensors and provides protection against node compromise until λ

+1 wireless medical sensors have been compromised.