User authentication in medical device systems

• US 6,961,448 B2
• Filed: 12/29/2000
• Issued: 11/01/2005
• Est. Priority Date: 12/30/1999
• Status: Expired due to Fees

• Current Assignee: Medtronic Incorporated (Medtronic Plc)
• Original Assignee: Medtronic Incorporated (Medtronic Plc)
• Inventors: Thompson, David L., Nichols, Timothy J.
• Primary Examiner(s): COUSO, YON JUNG
• Application Number:
  US09/750,739
• Publication Number:
  US 20010031071A1
• Time in Patent Office: 1,768 Days
• Field of Search: 382/115, 382/116, 382/128, 607/30, 607/31, 607/32, 340/5.82, 340/5.83, 340/5.84, 340/5.85, 340/5.52, 340/5.53, 340/5.54, 340/5.8, 340/5.81
• US Class Current: 382/115
• CPC Class Codes: A61B 5/117 Identification of persons methods or arrangements for recognising patterns, e.g. fingerprints, G06F18/00, G06V40/00; identification of persons by analysing their voice or speech G10L17/00
• CPC Class Codes: A61B 5/1171 based on the shapes or appearances of their bodies or parts thereof
• CPC Class Codes: A61N 1/37235 Aspects of the external programmer
• CPC Class Codes: A61N 1/37247 User interfaces, e.g. input or presentation means
• CPC Class Codes: A61N 1/37254 Pacemaker or defibrillator security, e.g. to prevent or inhibit programming alterations by hackers or unauthorised individuals

Abstract

A user authentication system utilizes biometric traits such as fingerprints, vein print, voice print, facial images, iris/retina and similar distinguishing characteristics to allow access to programmers, ETPs, PSAs and similar instruments associated with implantable medical devices (IMDs). The authentication system provides a hierarchical scheme that allows access based on expertise and need basis.

Claims

1. A user recognition system to identify a user and enable access to instruments associated with at least one implanted medical device, the system comprising:

an implanted medical device in a patient;

an instrument in data communications with the implanted medical device;

a memory associated with the implanted medical device storing coded data representative of biometric traits of authorized users to be granted access to the data communications of the instrument;

a sensor unit positioned along the instrument for generating biometric traits of the user; and

an analyzer unit determining whether a potential user is authorized to have access to the data communications of the instrument, wherein, in response to the potential user not being authorized to have access, the analyzer unit determines whether the potential user is requesting access associated with an override function and, in response to the access request being associated with the overdrive function, granting a level of access associated with a predetermined authorization level.

2. The system of claim 1 wherein said implanted medical device includes one of a pacer, a defibrillator, a drug delivery device and a neural implant.

3. The system of claim 1 wherein said instrument includes one of a programmer, a PSA and a home monitor.

4. The system of claim 1 wherein said sensing unit includes at least one of a finger scanner, a camera and a microphone.

5. The system of claim 4 wherein said biometric traits include a finger scan obtained from said finger scanner.

6. The system of claim 4 wherein said biometric traits include one of an iris scan and a retina scan obtained via said camera.

7. The system of claim 4 wherein said biometric traits include a voice print obtained from said microphone.

8. A biometric-based user authentication system for identifying and granting access to at least one user to an implanted medical device in a patient associated with an instrument, the authentication system comprising:

at least one biometric sensor implemented in the instrument;

at least one biometric trait of a user stored as coded data in a memory bank of said biometric sensor; and

means for analyzing and comparing said at least one biometric trait with said coded data to grant or deny access, wherein, in response to a potential user being denied access, the analyzing means determines whether the potential user is requesting access associated with an override function and, in response to the access request being associated with the overdrive function, granting a level of access associated with a predetermined authorization level.

9. The system of claim 8 wherein said at least one biometric sensor includes at least one of a camera, a finger print sensor and a microphone.

10. The system of claim 8 wherein said at least one biometric trait of a user includes, a fingerprint a voice print, an iris print, a retinal print, a facial model, a veinal imprint and a digital signature.

11. The system of claim 8 wherein said means for analyzing and comparing includes a software system implemented in the memory bank of the biometric sensor.

12. The system of claim 8 wherein said biometric traits of a user stored as coded data includes instructions to allow a user with matching biometric traits to have access to a pre-determined set of data and tools of said implanted medical device.

13. A method for a biometric-based identification of a user to provide authorized access to operational hardware, software and patient medical data contained in instruments and implanted medical devices, the method comprising:

accepting at least one biometric trait from a potential user;

comparing said at least one biometric trait to a stored coded data;

granting a qualified access when a match is confirmed between said at least one biometric trait and the stored coded data; and

determining, in response to a match not being confirmed between said at least one biometric trait and the stored coded data, whether the potential user is requesting access associated with an override function and, in response to the access request being associated with the overdrive function, granting a level of access associated with a predetermined authorization level.

14. The method of claim 13 wherein said qualified access includes a hierarchical scheme to enable user-specific access and authorization based on expertise and need.

15. The method of claim 14 wherein said hierarchical scheme includes distinctions of access to various hardware, software tools to perform therapy, diagnostic and monitoring functions designed to provide various levels of authorized access to physicians, nurses, Medtronic technicians, patients and their representatives.