SECURE TELEMETRIC LINK

• US 20110197067A1
• Filed: 04/18/2011
• Published: 08/11/2011
• Est. Priority Date: 08/18/2006
• Status: Active Grant

• Current Assignee: Medtronic Incorporated (Medtronic Plc)
• Original Assignee: Medtronic Incorporated (Medtronic Plc)
• Inventors: Corndorf, Eric D.
• Granted Patent: US 8,190,900 B2
• Time in Patent Office: Days
• US Class Current: 713/172
• CPC Class Codes: A61N 1/37252 Details of algorithms or data aspects of communication system, e.g. handshaking, transmitting specific data or segmenting data
• CPC Class Codes: A61N 1/37254 Pacemaker or defibrillator security, e.g. to prevent or inhibit programming alterations by hackers or unauthorised individuals
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A communications protocol is used to provide data privacy, message integrity, message freshness, and user authentication to telemetric traffic, such as to and from implantable medical devices in a body area network. In certain embodiments, encryption, message integrity, and message freshness are provided through use of token-like nonces and ephemeral session-keys derived from device identification numbers and pseudorandom numbers.

Claims

1. A medical network comprising:

an implantable medical device (IMD) having a first identifier unique to the IMD and a first device key unique to the IMD;

an external device having a second identifier unique to the external device and a second device key unique to the external device; and

a machine-readable storage medium separate from the IMD that stores authentication data associated with the IMD, wherein the authentication data includes at least the first identifier unique to the IMD and the first device key unique to the IMD,

wherein the external device obtains the authentication data associated with the IMD from the machine-readable storage medium, generates a first communication that includes at least the first identifier and the second identifier and is secured with the first device key, and transmits the first communication,

wherein the IMD decrypts the first communication using the first device key to verify the first device key was used to secure the first communication, provides the external device with a network key upon verifying that the first device key was used to secure the first communication,

wherein subsequent communications between the IMD and the external device are secured using the network key.

2. The medical network of claim 1, wherein the authentication data on the machine-readable storage medium is encrypted using at least one of a password key and a biometric key.

3. The medical network of claim 2, wherein the external device obtains the encrypted authentication data, obtains the password key or the biometric key and decrypts the authentication data using the password key or the biometric key.

4. The medical network of claim 1, wherein the external device prompts a patient in which the IMD is implanted for at least one of a password and a biometric identifier, and provides the at least one of the password and the biometric identifier to the machine-readable storage medium to obtain the authentication data.

5. The medical network of claim 1, further comprising a bridge device communicatively coupled to the external device via a wired connection, wherein the bridge device reads the machine-readable storage medium and provides the authentication data to the external device.

6. The medical network of claim 1, wherein the machine-readable storage medium comprises one of a key fob, a smartcard, and barcode identification card.

7. A medical network comprising:

an implantable medical device (IMD) having a first identifier unique to the IMD and a first device key unique to the IMD;

an external device having a second identifier unique to the external device and a second device key unique to the external device; and

a machine-readable storage medium separate from the IMD that stores authentication data associated with the IMD, wherein the authentication data includes at least the first identifier unique to the IMD and the first device key unique to the IMD,

wherein the external device obtains the authentication data associated with the IMD from the machine-readable storage medium, generates a first communication that includes at least the first identifier and the second identifier and is secured with the first device key, and transmits the first communication,

wherein the IMD decrypts the first communication using the first device key to verify the first device key was used to secure the first communication, obtains a network key from the external device after verifying that the first device key was used to secure the first communication,

wherein subsequent communications between the IMD and the external device are secured using the network key.

8. The medical network of claim 7, wherein the authentication data on the machine-readable storage medium is encrypted using at least one of a password key and a biometric key.

9. The medical network of claim 8, wherein the external device obtains the encrypted authentication data, obtains the password key or the biometric key and decrypts the authentication data using the password key or the biometric key.

10. The medical network of claim 7, wherein the external device prompts a patient in which the IMD is implanted for at least one of a password and a biometric identifier, and provides the at least one of the password and the biometric identifier to the machine-readable storage medium to obtain the authentication data.

11. The medical network of claim 7, further comprising a bridge device communicatively coupled to the external device via a wired connection, wherein the bridge device reads the machine-readable storage medium and provides the authentication data to the external device.

12. The medical network of claim 7, wherein the machine-readable storage medium comprises one of a key fob, a smartcard, and barcode identification card.