METHOD FOR SECURE COMMUNICATION BETWEEN DEVICES

• US 20120266221A1
• Filed: 10/19/2010
• Published: 10/18/2012
• Est. Priority Date: 10/20/2009
• Status: Abandoned Application

• Current Assignee: ETH Zurich, Inria Institut National de Recherche EN Informatique et EN Automatique
• Original Assignee: Inria Institut National de Recherche EN Informatique et EN Automatique
• Inventors: Castelluccia, Claude, Rasmussen, Kasper Bonne, Capkun, Srdjan
• Application Number:
  US13/502,269
• Publication Number:
  US 20120266221A1
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: A61N 1/37254 Pacemaker or defibrillator security, e.g. to prevent or inhibit programming alterations by hackers or unauthorised individuals
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/125 Protection against power exhaustion attacks
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 64/003 locating network equipment

Abstract

A method for communicating between a first device and a second device, includes the steps of the first and second device communicating by exchanging messages that are based on signals that are transmitted through a first communication channel and/or through a second communication channel, wherein the first and second communication channel have different signal propagation velocities; at least one of the first and second device computing the distance to the other device based on communication signal delays caused by the signal propagation velocities; wherein the method includes the further steps of controlling access of the second device to the first device depending on the computed distance.

Claims

1. A method for communicating between a first device, in particular an implantable medical device, and a second device, in particular a reader for reading data from the first device and for controlling the first device, the method comprising the steps of:

a first and second device communicating by exchanging messages that are based on signals that are transmitted through a first communication channel and/or through a second communication channel, wherein the first and second communication channel have different signal propagation velocities;

at least one of the first and second device computing the distance to the other device based on communication signal delays caused by signal propagation velocities; and

controlling access of the second device to the first device depending on the computed distance.

2. The method of claim 1, comprising the further step of:

the first and second device, by exchanging the messages, establish a shared secret key.

3. The method of claim 2, comprising the further steps of:

given a shared secret key, the first and second device each picking a random nonce;

the first and second device sharing, by exchanging messages over the two communication channels, their nonces, wherein the message exchange includes a measurement of the distance based on the communication signal delays;

the second device sending, to the first device, a command and a message authentication code (MAC) based on the command, the two nonces and the secret key known to the second device;

the first device verifying the integrity of the command by computing the MAC from the received command and from the two nonces and the secret key known to the first device, and comparing this MAC with the MAC received from the second device.

4. The method of claim 1, wherein the first device is an implantable medical device (IMD) and the second device is a reader device for reading data from the IMD and optionally also setting parameters in the IMD or otherwise controlling the IMD.

5. The method of claim 1, wherein one of the communication channels is based on RF communication, and the other one on ultrasound.

6. The method of claim 1, comprising the further step of:

the first device computing the distance to the second device based on communication signal delays caused by the difference in signal propagation speeds; and

the first device performing energy-intensive operations only after it has established that the distance to the second device is less than a predetermined distance.

7. The method of claim 1, comprising the further steps of:

the second device computing the distance to the first device based on communication signal delays caused by the difference in signal propagation speeds; and

the second device aborting communication and/or generating an alert message if the distance exceeds a predetermined value.

8. The method of claim 1, wherein the step of the first device computing the distance to the second device comprises the steps of:

triggered by an initialization signal received from the second device, the first device sending a challenge message to the second device;

the second device computing, from the challenge message and further information, a response message, and sending the response message to the first device;

the first device computing, from the time delay between sending the challenge message and the response message, the distance to the second device;

the first device sending further challenge messages only if the distance does not exceed a predetermined limit.

9. The method of claim 8, wherein the challenge message is a bit or a bit sequence from a nonce known only to the first device.

10. The method of claim 8, wherein the steps of sending challenge messages and receiving response messages in the first device are powered by RF energy that the first device receives from the second device.

11. The method of claim 1, wherein the step of controlling access of the second device to the first device, in addition to the distance, takes into account credential information.

12. The method of claim 11, wherein the credential information is a pre-shared key known to the first and the second device, or the credential information is a cryptographic certificate, and the credential information is stored on a storage device that is separable from the second device.

13. The method of claim 1, comprising the further steps of:

the first device, being an IMD, monitoring a health condition of an implant carrier;

the first device, if the health condition indicates an emergency, removing the requirements for access control and allowing access without credentials and/or without proximity verification.

14. The method of claim 1, wherein the first device comprises two or more levels of access, and the method comprises the further step of:

the first device controlling access to the different levels of access depending on the value of the computed distance.

15. A device, in particular an implantable medical device, configured to communicate with a further device, in particular with a reader for reading data from the device and optionally for controlling the device, the device comprising:

a first transceiver for sending and receiving messages through a first communication channel;

a second transceiver for sending and/or receiving messages through a second communication channel;

wherein the first and second communication channel have different signal propagation velocities;

the device being configured to

exchange messages through the first communication channel and/or through the second communication channel;

to compute the distance to the further device based on communication signal delays caused by the difference in signal propagation velocities; and

depending on the computed distance, to accept data from the further device and optionally also to control access to the device.

16. The device of claim 15, wherein an analogue circuit for capturing and processing signals received by the second transceiver comprises countermeasures against electromagnetic influences.