SECURE AUTHORIZATION IN AN IMPLANTABLE MEDICAL DEVICE SYSTEM

• US 20170223540A1
• Filed: 05/18/2016
• Published: 08/03/2017
• Est. Priority Date: 01/28/2016
• Status: Active Grant

• Current Assignee: Cochlear Limited
• Original Assignee: Victor Rodrigues
• Inventors: Battiwalla, Xerxes, Rodrigues, Victor, Aufflick, Mark, Leslie, Ben
• Granted Patent: US 10,306,472 B2
• Time in Patent Office: Days
• CPC Class Codes: G16H 40/67 for remote operation
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security

Abstract

Embodiments presented herein are generally directed to techniques for enabling a user of a mobile electronic device to wirelessly control one or more functions of an implantable medical device system. The techniques presented herein establish a secure (encrypted) communication channel between the implantable medical device system and a central system associated with the manufacturer of the implantable medical device system and use the secure communication channel to authorize a user to wirelessly control one or more functions of the implantable medical device system via the mobile electronic device.

Claims

1. A method, comprising:

establishing, via an intermediary mobile electronic device, an indirect secure communication channel between an implantable medical device system and a central system; and

using the indirect secure communication channel to authorize a user to wirelessly control one or more functions of the implantable medical device system via the mobile electronic device.

2. The method of claim 1, wherein the intermediary mobile electronic device is unable to decrypt any communication transferred between the implantable medical device system and the central system on the indirect secure communication channel.

3. The method of claim 1, wherein the implantable medical device system communicates with the intermediary mobile electronic device via a short-range wireless communication channel, and wherein the central system communicates with the intermediary mobile electronic device via one or more network links.

4. The method of claim 1, wherein establishing the indirect secure communication channel between the implantable medical device system and the central system comprises:

using a pre-existing encryption key that is known to both the implantable medical device system and the central system to negotiate, between the implantable medical device system and the central system, a secondary encryption key for use in encrypting communications sent on the indirect secure communication channel between the implantable medical device system and the central system.

5. The method of claim 4, further comprising:

sending identification information from the implantable medical device system to the central system via the intermediary mobile electronic device, wherein the identity information includes a serial number of a component of the implantable medical device system and implantable medical device system nonce data;

using the implantable medical device system nonce data to generate an encrypted verification message that includes nonce data specific to the central system; and

sending the encrypted verification message to the implantable medical device system via the intermediary mobile electronic device.

6. The method of claim 5, wherein using the implantable medical device system nonce data to generate an encrypted verification message that includes nonce data specific to the central system comprises:

encrypting the data implantable medical device system nonce data using the pre-existing encryption key;

randomly generating the nonce data specific to the central system;

encrypting the nonce data specific to the central system using the pre-existing encryption key; and

sending the encrypted data implantable medical device system nonce data and the encrypted cloud nonce data to the implantable medical device system via the intermediary mobile electronic device in the encrypted verification message.

7. The method of claim 5, further comprising:

at the implantable medical device system, decrypting the nonce data specific to the central system using the pre-existing encryption key;

generating the secondary encryption key based on the nonce data specific to the central system;

encrypting the secondary encryption key using the pre-existing encryption key; and

sending the encrypted secondary encryption key to the central system via the intermediary mobile electronic device.

8. The method of claim 7, further comprising:

at the central system, decrypting the secondary encryption key using the pre-existing encryption key to extract the secondary encryption key; and

configuring the central system to use the secondary encryption key for future communications with the implantable medical device system

9. The method of claim 8, further comprising:

generating a response message indicating that the secondary encryption key has been accepted for future use by the central system;

encrypting the response message using the secondary encryption key; and

sending the encrypted response message to the implantable medical device system via the intermediary mobile electronic device.

10. A system, comprising:

an implantable medical device system;

a central system; and

an intermediary mobile electronic device,

wherein the implantable medical device system is configured to establish an indirect secure communication channel with the central system via the intermediary mobile electronic device, and wherein the indirect secure communication channel is useable authorize a user to wirelessly control one or more functions of the implantable medical device system via the mobile electronic device.

11. The system of claim 10, wherein the intermediary mobile electronic device is unable to decrypt any communication transferred between the implantable medical device system and the central system on the indirect secure communication channel.

12. The system of claim 10, wherein the implantable medical device system is configured to communicate with the intermediary mobile electronic device via a short-range wireless communication channel, and wherein the central system is configured to communicate with the intermediary mobile electronic device via one or more network links.

13. The system of claim 10, wherein to establish the indirect secure communication channel between the implantable medical device system and the central system, the implantable medical device system is configured to:

use a pre-existing encryption key that is known to both the implantable medical device system and the central system to negotiate a secondary encryption key for use in encrypting communications sent on the indirect secure communication channel between the implantable medical device system and the central system.

14. The system of claim 13, wherein the implantable medical device system is further configured to send identification information to the central system via the intermediary mobile electronic device, wherein the identity information includes a serial number of a component of the implantable medical device system and implantable medical device system nonce data, and wherein the central system is configured to:

use the implantable medical device system nonce data to generate an encrypted verification message that includes nonce data specific to the central system; and

send the encrypted verification message to the implantable medical device system via the intermediary mobile electronic device.

15. The system of claim 14, wherein to use the implantable medical device system nonce data to generate the encrypted verification message that includes nonce data specific to the central system, the central system is configured to:

encrypt the data implantable medical device system nonce data using the pre-existing encryption key;

randomly generate the nonce data specific to the central system;

encrypt the nonce data specific to the central system using the pre-existing encryption key; and

combine the encrypted data implantable medical device system nonce data with the encrypted cloud nonce data to form the encrypted verification message.

16. The system of claim 14, wherein the implantable medical device system is configured to:

decrypt the nonce data specific to the central system using the pre-existing encryption key;

generate the secondary encryption key based on the nonce data specific to the central system;

encrypt the secondary encryption key using the pre-existing encryption key; and

send the encrypted secondary encryption key to the central system via the intermediary mobile electronic device.

17. The system of claim 16, wherein the central system is configured to:

decrypt the secondary encryption key using the pre-existing encryption key to extract the secondary encryption key; and

use the secondary encryption key for future communications with the implantable medical device system

18. The system of claim 17, wherein the central system is configured to:

generate a response message indicating that the secondary encryption key has been accepted for future use by the central system;

encrypt the response message using the secondary encryption key; and

send the encrypted response message to the implantable medical device system via the intermediary mobile electronic device.

19. An implantable medical device system, comprising:

a memory;

a short-range wireless communication transceiver; and

one or more processors configured to;

establish, via an intermediary mobile electronic device, an indirect secure communication channel with a central system, and

use the indirect secure communication channel to authorize a user to wirelessly control one or more functions of the implantable medical device system via the mobile electronic device.

20. The implantable medical device system of claim 19, wherein to establish the indirect secure communication channel with the central system, the one or more processors are configured to:

use a pre-existing encryption key that is known to both the implantable medical device system and the central system to negotiate a secondary encryption key for use in encrypting communications sent on the indirect secure communication channel between the implantable medical device system and the central system.

21. The implantable medical device system of claim 20, wherein the one or more processors are further configured to:

send identification information to the central system via the intermediary mobile electronic device, wherein the identity information includes a serial number of a component of the implantable medical device system and implantable medical device system nonce data useable by the central system to generate an encrypted verification message that includes nonce data specific to the central system.

22. The implantable medical device system of claim 21, wherein the one or more processors are configured to:

receive an encrypted message that includes the nonce data specific to the central system;

decrypt the message to obtain the nonce data specific to the central system using the pre-existing encryption key;

generate the secondary encryption key based on the nonce data specific to the central system;

encrypt the secondary encryption key using the pre-existing encryption key; and

send the encrypted secondary encryption key to the central system via the intermediary mobile electronic device.