SYSTEMS, DEVICES, AND METHODS FOR AUTHENTICATION IN AN ANALYTE MONITORING ENVIRONMENT

• US 20170093869A1
• Filed: 12/02/2016
• Published: 03/30/2017
• Est. Priority Date: 12/27/2013
• Status: Active Grant

• Current Assignee: Abbott Diabetes Care Incorporated (Abbott Laboratories)
• Original Assignee: Abbott Diabetes Care Incorporated (Abbott Laboratories)
• Inventors: Love, Michael R., Sloan, Mark, Berman, Glenn, Crouther, Nathan, Porat, Gil
• Granted Patent: US 10,110,603 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: A61B 2560/0266 for monitoring or limiting apparatus function
• CPC Class Codes: A61B 5/0004 characterised by the type of physiological signal transmitted
• CPC Class Codes: A61B 5/002 Monitoring the patient using a local or closed circuit, e.g. in a room or building A61B5/0017 takes precedence
• CPC Class Codes: A61B 5/1451 for interstitial fluid
• CPC Class Codes: A61B 5/14532 for measuring glucose, e.g. by tissue impedance measurement
• CPC Class Codes: A61B 5/14865 invasive, e.g. introduced into the body by a catheter or needle or using implanted sensors
• CPC Class Codes: A61B 5/1495 Calibrating or testing of in-vivo probes
• CPC Class Codes: A61B 5/7221 Determining signal validity, reliability or quality A61B5/7207 and A61B5/7217 take precedence
• CPC Class Codes: A61B 5/742 using visual displays A61B5/339 takes precedence
• CPC Class Codes: A61B 5/7495 using a reader or scanner device, e.g. barcode scanner
• CPC Class Codes: G06F 7/58 Random or pseudo-random number generators
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Systems, devices, and methods are provided that allow the authentication of devices within analyte monitoring systems. The analyte monitoring systems can be in vivo systems and can include a sensor control device with a sensor and accompanying circuitry, as well as a reader device for communicating with the sensor control device. The analyte monitoring systems can interface with a trusted computer system located at a remote site. Numerous techniques of authentication are disclosed that can enable the detection of counterfeit components, such as a counterfeit sensor control device.

Claims

1. A method of authentication in an in vivo analyte monitoring system, comprising:

receiving a private key by a reader device, wherein the private key is supplied by a sensor control device or a package for the sensor control device, and wherein the sensor control device comprises a sensor and analyte monitoring circuitry and the sensor is adapted to be inserted into the body of a user;

authenticating the private key using a public key stored within the reader device; and

if the private key is authenticated, reading sensed analyte data from the sensor control device by the reader device.

2. The method of claim 1, wherein receiving the private key by the reader device comprises:

receiving the private key from the sensor control device over the local wireless communication path; and

scanning a barcode on a package for the sensor control device with an optical scanner of the reader device, wherein the barcode is representative of the private key.

3. The method of claim 1, wherein receiving the private key by the reader device comprises:

receiving the private key from the sensor control device over the local wireless communication path; and

scanning a package for the sensor control device with a near field communication (NFC) device, wherein the package comprises an element adapted to provide information representative of the private key in response to an NFC scan.

4. The method of claim 1, wherein the private key is printed on the package for the sensor control device and, wherein the method further comprises reading, by a human, the private key from the package, and wherein the private key is input manually into the reader device.

5. The method of claim 1, further comprising sending an identification request from the reader device over the local wireless communication path to the sensor control device, wherein the sensor control device sends the identifier to the reader device in response to receipt of the identification request.

6. The method of claim 1, wherein the reader device communicates with the sensor control device over the local wireless communication path using:

a near field communication (NFC) protocol;

a radio frequency identification (RFID) protocol;

a Bluetooth protocol;

or a Bluetooth Low Energy protocol.

7. The method of claim 1, wherein the reader device is a smart phone, a tablet, a smart glass, or a smart glasses.

8. The method of claim 1, further comprising, if the reader device determines that the private key is authentic and if the sensor has been inserted into the body of the user, then:

reading, with the reader device, information indicative of an analyte level of the user from the sensor control device; and

displaying the analyte level on a display of the reader device.

9. The method of claim 8, further comprising:

if the reader device determines that the private key is not authentic, then terminating operation of the reader device with the sensor control device.

10. A method of authentication in an in vivo analyte monitoring system, comprising:

digitally signing data with a private key, wherein the private key has a corresponding public key;

storing the digitally signed data in the memory of a sensor control device, wherein the sensor control device comprises a sensor and analyte monitoring circuitry, and wherein the sensor is configured to be inserted into the body of a user; and

storing the corresponding public key in the memory of a reader device, wherein the reader device is capable of receiving the digitally signed data from the sensor control device and wherein the reader device is programmed to verify that the digitally signed data is authentic using the public key.

11. The method of claim 10, further comprising:

determining at least one calibration parameter for the sensor, wherein the data that is digitally signed with the private key is the at least one calibration parameter, and wherein the at least one calibration parameter is determined separately for each one of a plurality of sensor control devices.

12. The method of claim 11, further comprising:

storing the at least one calibration parameter, in addition to the digitally signed data, in the memory of the sensor control device.

13. The method of claim 11, wherein the reader device is capable of receiving the at least one calibration parameter from the sensor control device,

wherein the reader device is programmed to compare the received at least one calibration parameter with the at least one calibration parameter that was digitally signed,

wherein the reader device is programmed to operate normally with the sensor control device if the received at least one calibration parameter matches the at least one calibration parameter that was digitally signed, and

wherein the reader device is programmed to cease operation with the sensor control device if the received at least one calibration parameter does not match the at least one calibration parameter that was digitally signed.

14. The method of claim 10, further comprising encrypting the digitally signed data prior to storing the digitally signed data in the memory of the sensor control device.

15. The method of claim 10, further comprising:

receiving an identifier from the reader device, the identifier having been sent to the reader device by the sensor control device;

determining, by reference to the registration database, whether the identifier is or is not authentic; and

sending an authentication result to the reader device, wherein the authentication result indicates whether the identifier is or is not authentic.

16. The method of claim 15, wherein the identifier is determined to be authentic if it is not associated, in the registration database, with a used sensor control device or a counterfeit sensor control device.

17. The method of claim 15, further comprising:

updating, if the identifier is determined to be authentic, the registration database to reflect that the identifier is now associated with a used sensor control device.

18. The method of claim 17, further comprising:

downloading at least a portion of the registration database to the reader device.

19. The method of claim 15, wherein the identifier comprises a serial number of the sensor control device.

20. The method of claim 19, wherein the identifier further comprises a random number.