Variable encryption scheme for data transfer between medical devices and related data management systems

• US 6,622,050 B2
• Filed: 03/30/2001
• Issued: 09/16/2003
• Est. Priority Date: 03/31/2000
• Status: Active Grant

• Current Assignee: Medtronic Incorporated (Medtronic Plc)
• Original Assignee: Medtronic Incorporated (Medtronic Plc)
• Inventors: Thompson, David L.
• Primary Examiner(s): Schaetzle, Kennedy
• Assistant Examiner(s): DROESCH, KRISTEN L
• Application Number:
  US09/821,518
• Publication Number:
  US 20010027331A1
• Time in Patent Office: 900 Days
• Field of Search: 128/903-904, 607/30-32, 607/59-60, 380/30-34, 380/44-47, 380/59, 380/255, 380/270, 380/277-286
• US Class Current: 607/60
• CPC Class Codes: A61N 1/37282 characterised by communication with experts in remote locations using a network
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 40/40 for the management of medical equipment or devices, e.g. scheduling maintenance or upgrades
• CPC Class Codes: G16H 40/67 for remote operation
• CPC Class Codes: Y10S 128/903 Radio telemetry

Abstract

The present invention provides for an encryption apparatus, system, and method in which data from an Implantable Medical Device (IMD) and a data center could be transferred based on a differentiated encryption system. The encryption scheme allows for the differentiation, segregation, and classification of data at required or needed levels of security. Before transfer of the data, either from an IMD or any other part of a support network for the IMDs, the encryption device begins to distinguish the data. The variable data is then classified based on various levels of security having distinct encryption protocols. After classification the data is encrypted based on the data'"'"'s level of security. The data is then transmitted. Upon being received the data is then segregated based on whether the data is encrypted. The encrypted data is then de-encrypted and interpreted.

Claims

1. An apparatus for variably encrypting and transferring medical data comprising:

a classifier having means for receiving an input of medical data from a medical device or a data management system, assigning a classification based upon what the medical data represents, and outputting the classified medical data to a segregator;

a segregator having means for separating medical data into discrete data payloads according to the classification assigned the medical information by the classifier and outputting the segregated medical data to an encryptor;

an encryptor having means for variably encrypting segregated medical data based upon a level of security assigned to a particular payload of medical data and transmitting the variably encrypted data over a data communications media.

2. The apparatus of claim 1, wherein the means for variably encrypting and transferring of medical data can be implemented on various networks including the Internet and the World Wide Web.

3. The apparatus of claim 1, wherein the medical data comprises real-time data from patient monitoring equipment.

4. The apparatus of claim 3, wherein the patient monitoring equipment comprises an implantable medical device.

5. The apparatus of claim 1, wherein the means for assigning a classification based upon what the medical data represents assigns to real-time data from patient monitoring equipment a classification that will not be encrypted.

6. A computerized method of transferring encrypted data between and among medical data management systems comprising:

recognizing data to be transmitted by a device;

determining a level of encryption dependent upon the nature of information to be transmitted by the device;

encrypting the data using a first secure key length for sensitive data;

encrypting the data using a second key length for remaining data; and

transmitting the data over a data communications media.

7. The method of claim 6 further comprising the steps of processing, using a secure key, a checksum of safety-critical data prior to transmitting the safety-critical data, and also comprising the step of transmitting the checksum after the step of transmitting the data over the data communications network.

8. The method of claim 7, further comprising the step of authenticating the integrity and source of the safety-critical data using the checksum.

9. The method of claim 6 wherein the data communications media over which data is transmitted is a data communications network.

10. The method of claim 9, wherein the data communications network is a public network.

11. The method of claim 10, wherein the public network is the Internet.