Implantable device and programmer system which permits multiple programmers

• US 6,308,099 B1
• Filed: 11/13/1998
• Issued: 10/23/2001
• Est. Priority Date: 11/13/1998
• Status: Expired due to Term

• Current Assignee: Intermedics Incorporated
• Original Assignee: Intermedics Incorporated
• Inventors: Rottenberg, William B., Thome, Bryan J., Fox, James K.
• Primary Examiner(s): Evanisko, George R.
• Application Number:
  US09/191,808
• Time in Patent Office: 1,075 Days
• Field of Search: 607/30, 607/31, 607/59
• US Class Current: 607/31
• CPC Class Codes: A61N 1/37 Monitoring; Protecting
• CPC Class Codes: A61N 1/37252 Details of algorithms or data aspects of communication system, e.g. handshaking, transmitting specific data or segmenting data
• CPC Class Codes: A61N 1/37254 Pacemaker or defibrillator security, e.g. to prevent or inhibit programming alterations by hackers or unauthorised individuals

Abstract

A multiprogrammer system for monitoring and optimizing implantable device performance. In one embodiment, the system includes at least two programming devices and an implantable device. Each of the programming devices may be used to perform inquiry and programming operations on the implantable device. In an inquiry operation, the programming device retrieves some or all of the configuration parameters from the implantable device. In a programming operation, the programming device provides one or more modified parameters to the implantable device. As part of the programming operation, the programming device is configured to verify that it is aware of the implantable device'"'"'s current parameters before sending the modified parameters. In other words, the current programming device verifies that the implantable device'"'"'s parameters have not been altered by another programming device since the current programming device'"'"'s last interaction with the implantable device. If the parameters have been altered, the current programming device aborts the programming operation and notifies the operator. In alternate embodiments, the verification may be performed by the implantable device, i.e. the implantable device may verify that the programming device is aware of the current device parameters before the implantable device accepts the modified parameters.

Claims

1. A method, comprising:

electronically transferring verification data between an implantable device and a programming device;

comparing the transferred verification data with stored data; and

verifying configuration parameters of the implantable device are current configuration parameters from the comparison of the transferred verification data with the stored data,

wherein the verification data includes a programming device identification number and the stored data includes an identification number that identifies a programming device that has made a most-recent inquiry of the implantable device, and wherein comparing includes;

transmitting the programming device identification number from the programming device to the implantable device; and

the implantable device comparing the programming device identification number to the stored identification number.

2. The method of claim 1, further comprising:

sending a status message from the implantable device to the programming device, wherein the status message includes a confirmation when the programming device identification number and the stored identification number match and the updated parameters are successfully received, and wherein the status message includes a denial when the programming device identification number and the stored identification number do not match.

3. The method of claim 1, wherein verifying configuration parameters includes verifying configuration parameters that control a therapy provided by the implantable device.

4. The method of claim 1, including communicating updated parameters from the programming device to the implantable device when the configuration parameters are verified as current configuration parameters.

5. The method of claim 4, wherein communicating updated parameters includes sending a request by the programming device to the implantable device to transmit configuration parameters;

receiving the configuration parameters;

starting a timer in the implantable device after the configuration parameters are received;

determining whether the timer has expired;

transmitting a denial from the implantable device to the programming device when the timer has expired; and

transmitting the updated parameters from the programming device to the implantable device when the timer has not expired.

6. A method, comprising:

electronically transferring verification data between an implantable device and a programming device;

comparing the transferred verification data with stored data; and

verifying configuration parameters of the implantable device are current configuration parameters from the comparison of the transferred verification data with the stored data,

wherein the verification data includes a programming device identification number and the stored data includes a stored identification number that identifies a programming device that has made a most recent inquiry of the implantable device, and wherein comparing includes;

the implantable device transmitting the stored identification number to the programming device; and

the programming device comparing the stored identification number to the programming device'"'"'s own programming device identification number.

7. The method of claim 6, further comprising:

aborting the communication of updated parameters from the programming device to the implantable device when the stored identification number and the programming device identification number do not match.

8. The method of claim 6, wherein communicating updated parameters includes sending a request by the programming device to the implantable device to transmit configuration parameters;

receiving the configuration parameters;

starting a timer in the programming device after the configuration parameters are received;

determining whether the timer has expired;

transmitting a denial from the programming device to the implantable device when the timer has expired; and

transmitting the updated parameters from the programming device to the implantable device when the timer has not expired.

9. The method of claim 6, wherein verifying configuration parameters includes verifying configuration parameters that control a therapy provided by the implantable device.

10. A programming device for an implantable device, wherein the implantable device has configuration parameters, and wherein the programming device comprises:

a user interface;

a memory including stored data;

a communications circuit configurable to communicate with the implantable device; and

a microprocessor coupled to the memory and the user interface, and further coupled to the communications circuit adapted to retrieve at least one configuration parameter from the implantable device and send a configuration parameter to the implantable device;

wherein the communication circuit is configured to electronically transfer verification data between the implantable device and the programming device, and the microprocessor compares the transferred verification data with the stored data, and verifies configuration parameters of the implantable device are current configuration parameters from the comparison of the transferred verification data with the stored data;

wherein the microprocessor is adapted to retrieve a stored programming device identification number from the implantable device and to compare the stored programming device identification number to an identification number of the programming device of the implantable device to determine whether the retrieved configuration parameters are current, and wherein the microprocessor determines whether the programming device has made a most-recent inquiry of the implantable device.

11. The programming device of claim 10, wherein the microprocessor aborts the communication of updated parameters from the programming device to the implantable device when the identification number and the stored programming device identification number do not match.

12. The programming device of claim 10, wherein the microprocessor sends a request to the implantable device to transmit configuration parameters, the microprocessor receives the configuration parameters and starts a timer after the configuration parameters are received, wherein the microprocessor determines when the timer has expired and transmits a denial to the implantable device when the timer has expired and transmits the updated parameters to the implantable device when the timer has not expired.

13. The programming device of claim 10, wherein the configuration parameters of the implantable device are programmable parameters that control the therapy provided to a patient.

14. The programming device of claim 10, wherein the microprocessor includes means for aborting the communication of updated parameters from the programming device to the implantable device when the identification number and the stored programming device identification number do not match.

15. The programming device of claim 10, wherein the microprocessor includes:

means for sending a request to the implantable device to transmit configuration parameters;

means for receiving the configuration parameters;

means for starting a timer after the configuration parameters are received;

means for determining when the timer has expired; and

means for transmitting a denial to the implantable device when the timer has expired and transmits the updated parameters to the implantable device when the timer has not expired.

16. The programming device of claim 10, wherein the microprocessor includes:

means for retrieving a stored time from the implantable device; and

means for comparing the stored time to a last inquiry time of the programming device,

whereby the microprocessor determines whether the programming device has made a most-recent inquiry of the implantable device to verify that the retrieved configuration parameters are current.

17. The programming device of claim 10, wherein the microprocessor includes:

means for

receiving a most-recent programming time from the implantable device; and

means for comparing the most-recent programming time to a stored programming time provided by the implantable device during a last inquiry by the microprocessor,

whereby the microprocessor verifies that the retrieved configuration parameters are current configuration parameters.

18. The programming device of claim 10, wherein the microprocessor includes:

means for

retrieving the current configuration parameters from the implantable device; and

means for comparing the current configuration parameters to the previously retrieved configuration parameters,

whereby the programming device verifies that the retrieved configuration parameters are current.