FINGERPRINT ENHANCED AUTHENTICATION FOR MEDICAL DEVICES IN WIRELESS NETWORKS

• US 20150169857A1
• Filed: 12/18/2013
• Published: 06/18/2015
• Est. Priority Date: 12/18/2013
• Status: Active Grant

• Current Assignee: Medtronic Minimed Incorporated (Medtronic Plc)
• Original Assignee: Medtronic Minimed Incorporated (Medtronic Plc)
• Inventors: Wang, Yongbo, Makaveev, Bozhil
• Granted Patent: US 9,779,226 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: A61M 2205/276 preventing unwanted use
• CPC Class Codes: A61M 2205/3569 sublocal, e.g. between console and disposable
• CPC Class Codes: A61M 2205/3592 using telemetric means, e.g. radio or optical transmission
• CPC Class Codes: A61M 2205/502 User interfaces, e.g. screens or keyboards
• CPC Class Codes: A61M 2205/505 Touch-screens; Virtual keyboard or keypads; Virtual buttons; Soft keys; Mouse touches
• CPC Class Codes: A61M 2205/507 Head Mounted Displays [HMD]
• CPC Class Codes: A61M 2205/52 with memories providing a history of measured variating parameters of apparatus or patient
• CPC Class Codes: A61M 2205/609 Biometric patient identification means
• CPC Class Codes: A61M 5/14244 adapted to be carried by the patient, e.g. portable on the body
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G16H 20/17 delivered via infusion or injection
• CPC Class Codes: G16H 40/67 for remote operation
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/64 using geofenced areas

Abstract

An infusion system to administer fluid is disclosed. The infusion system includes an infusion pump having a pump processor, a pump memory and a pump radio to enable bi-directional communication. The pump memory stores a plurality of fingerprint tokens and security conditions. The infusion system includes a controller with a processor, a controller memory and a controller radio to transmit and receive communication from the pump radio. The controller includes a fingerprint scanner and a graphical user interface (GUI) and controls to manipulate the GUI. The GUI and fingerprint scanner enable the controller to scan and determine tokens based on scanned fingerprints. Additionally, communication between the infusion pump and the controller establish relative proximity between the infusion pump and the controller such that when the relative proximity exceeds a threshold distance at least one of the plurality of security conditions is automatically matched.

Claims

1. An infusion system to administer fluid, the infusion system comprising:

an infusion pump having a pump processor, a pump memory and a pump radio to enable bi-directional communication, the pump memory storing a plurality of fingerprint tokens and security conditions; and

a controller having a controller processor, a controller memory, a controller radio to transmit and receive communication from the pump radio, the controller further having a fingerprint scanner and a graphical user interface, and controls to manipulate the graphical user interface, the graphic user interface and fingerprint scanner enabling the controller to scan and determine tokens associated with any scanned fingerprints, the bi-directional communication between the infusion pump and the controller establishing a relative proximity between the infusion pump and the controller such that when the relative proximity exceeds a pump threshold distance at least one of the plurality of security conditions is automatically matched.

2. An infusion system as described in claim 1, wherein the tokens associated with any scanned fingerprints are stored within the pump memory.

3. An infusion system as described in claim 2, wherein when the relative proximity no longer exceeds the threshold distance a token associated with a stored fingerprint is required to revert the security condition to an original state.

4. An infusion system as described in claim 3, wherein one of the plurality of security conditions disables insulin delivery commands from the controller.

5. An infusion system as described in claim 3, wherein one of the plurality of security conditions locks out commands from the controller after entry of a predetermined number of unsuccessful tokens.

6. A method to secure wireless transmissions between an infusion device and a controller, the method comprising:

scanning a fingerprint;

calculating a token based on the scanned fingerprint;

storing the token in memory of the infusion device;

monitoring a relative distance between the infusion device and the controller;

setting a timeout if the relative distance exceeds a distance threshold;

initiating a first security condition if the relative distance exceeds the distance threshold for the timeout while continuing to monitor the relative distance between the infusion device and the controller; and

requesting the token when the relative distance between the infusion device and the controller is within the distance threshold.

7. A method to secure wireless transmissions between an infusion device and a controller as described in claim 6, further comprising:

initiating a second security condition if the token is not received.

8. A method to secure wireless transmissions between an infusion device and a controller as described in claim 6, further comprising:

revoking the first security condition upon receipt of the token.

9. A method to secure wireless transmissions between an infusion device and a controller as described in claim 7, wherein the second security condition locks out commands from the controller that modify insulin delivery.

10. A method to secure wireless transmission between an infusion device and a controller as described in claim 9, wherein the second security condition further includes initiating an alarm.

11. An infusion system to administer fluid, the infusion system comprising:

an infusion pump having a pump processor, a pump memory and a pump radio to enable bi-directional communication, the pump radio further including an attenuator being configurable and the pump memory storing a plurality of security modes, each of the plurality of security modes configuring the attenuator to receive signals of a predetermined strength, and

a controller having a controller processor, a controller memory, a controller radio to transmit and receive communication from the pump radio, the controller further having a graphical user interface shown on a display, and controls to manipulate the graphical user interface, the controller being paired with the infusion pump via fingerprint authentication,

wherein a security check is performed when the infusion pump receives a suspect signal, the suspect signal not matching the predetermined strength associated with a selected security mode.

12. An infusion system as described in claim 11, wherein initiation of the security check pauses data transfer between the infusion pump and the suspect signal.

13. An infusion system as described in claim 12, wherein the security check includes a debounce procedure.

14. An infusion system as described in claim 13, wherein authenticity of a device sending the suspect signal is determined by the infusion pump sending a special series of commands.

15. An infusion system as described in claim 14, wherein the special series of commands includes a request for fingerprint authentication from the controller to a device transmitting the suspect signal.

16. An infusion system as described in claim 15, wherein failure of the fingerprint authentication terminates communication between the infusion pump and the suspect signal.

17. An infusion system as described in claim 15, wherein upon passing the security check communications between the infusion pump and the suspect signal is resumed.

18. An infusion system as described in claim 11, wherein prior to pairing the infusion pump and the controller the default security mode for the security pump is high.

19. An infusion system as described in claim 11, wherein after pairing the infusion pump and the controller the security mode for the infusion pump is selected by a user.

20. An infusion system as described in claim 19, wherein the security mode includes settings that are customizable by the user.