Hardware/software lock for secure linkage between algorithmic decision process and critical system function execution

• US 7,110,814 B2
• Filed: 08/25/2003
• Issued: 09/19/2006
• Est. Priority Date: 03/08/2001
• Status: Expired due to Fees

• Current Assignee: Cardiac Pacemakers Incorporated (Boston Scientific Corporation)
• Original Assignee: Cardiac Pacemakers Incorporated (Boston Scientific Corporation)
• Inventors: Harrington, Tony, Bocek, Joseph M., Buchanan, Bryan
• Primary Examiner(s): Getzow, Scott M.
• Application Number:
  US10/647,838
• Publication Number:
  US 20040044372A1
• Time in Patent Office: 1,121 Days
• Field of Search: 607/5, 607/9, 607/27, 607/28, 607/59
• US Class Current: 607/9
• CPC Class Codes: A61N 1/025 Digital circuitry features of electrotherapy devices, e.g. memory, clocks, processors
• CPC Class Codes: A61N 1/37229 Shape or location of the implanted or external antenna
• CPC Class Codes: A61N 1/3956 Implantable devices for applying electric shocks to the heart, e.g. for cardioversion

Abstract

An improved protection mechanism to protect from unintended execution of critical tasks operates, in one example embodiment, by receiving a request to start a task by a first process. The first process informs a second process of running an algorithm to verify the legitimacy of the received request to determine the need to start the task. The second process stores the information regarding the starting the algorithm by the first process. The first process runs the algorithm to verify the legitimacy of the received request, and conveys an outcome of the verification to the second process. The second process enables the start of the task by the first process based on the outcome of the verification and a checking of the stored information and the first process starts the task.

Claims

1. An implantable medical device to perform a therapy, the device comprising:

a therapy circuit for use to provide the therapy;

a sensing circuit to sense a need and send a request for the therapy; and

a controller coupled to the sensing circuit and the therapy circuit, the controller to receive a request for the therapy, and upon receiving the request, the controller to perform a process, including;

setting a token for use to unlock the therapy;

running an algorithm to insure the legitimacy of providing the therapy, and executing an unlock code to insure an appropriate outcome for the algorithm; and

unlocking the therapy when the token is set and when the outcome for the algorithm is appropriate.

2. The device of claim 1, wherein the therapy includes electrical therapy to a heart.

3. The device of claim 2, wherein the electrical therapy includes pacing therapy.

4. The device of claim 2, wherein the electrical therapy includes high energy electrical therapy.

5. The device of claim 1, wherein:

running an algorithm to insure the legitimacy of providing the therapy, and executing an unlock code to insure an appropriate outcome for the algorithm;

writing a first message to a first memory address before running the algorithm;

running the algorithm to insure the appropriateness of providing the therapy; and

writing a second message to a second memory address after running the algorithm; and

unlocking the therapy when the token is set and when the outcome for the algorithm is appropriate includes unlocking the critical therapy when the first and second messages indicate the outcome for the algorithm is appropriate.

6. The device of claim 1, wherein setting a token includes writing to one or more memory locations.

7. The device of claim 1, wherein running an algorithm includes running an error checking routine.

8. The device of claim 1, wherein the appropriate outcome for the algorithm includes an indication that the critical therapy is appropriate and an indication that the algorithm was run in its entirety.

9. An implantable medical device in communication with electrical activity of a heart, the device comprising:

at least one electrode adapted to sense electrical signals related to the electrical activity and adapted to deliver electrical therapy to the heart;

a sensing circuit coupled to the at least one electrode to provide electronic signals representative of the electrical activity;

a therapy circuit coupled to the at least one electrode to deliver the electrical therapy; and

a controller coupled to the sensing circuit and therapy circuit, the controller to perform a process, including;

receiving a request for the therapy based on the electronic signals representative of the electrical activity of the heart;

setting a token for use to unlock the therapy;

verifying the legitimacy of the request for the therapy process, including running an algorithm to insure the appropriateness of providing the therapy, and executing an unlock code to insure a satisfactory outcome for the algorithm; and

unlocking the therapy when the outcome of the algorithm is satisfactory and the token is set to indicate the therapy is appropriate.

10. The device of claim 9, wherein:

running an algorithm to insure the appropriateness of providing the critical therapy, and executing an unlock code to insure a satisfactory outcome for the algorithm includes;

writing a first message to a first memory address before running the algorithm;

running the algorithm to insure the appropriateness of providing the critical therapy; and

writing a second message to a second memory address after running the algorithm; and

unlocking the critical therapy when the token is set and when the outcome for the algorithm is satisfactory includes unlocking the critical therapy when the first and second messages indicate the outcome for the algorithm is satisfactory.

11. The device of claim 10, wherein:

the device further includes memory;

writing a first message includes writing a first value to a first memory location; and

writing a second message includes writing a second value to a second memory location.

12. The device of claim 11, wherein the first and second memory locations include hardware registers.

13. The device of claim 9, wherein setting a token includes writing to one or more memory locations.

14. The device of claim 9, wherein the electrical therapy includes pacing therapy.

15. The device of claim 9, wherein the electrical therapy includes high energy electrical therapy.

16. The device of claim 9, wherein running an algorithm includes running an error checking routine.

17. A method, comprising:

receiving a request for a therapy;

setting a token for use to unlock the therapy;

to verify the legitimacy of the request for the therapy process, running an algorithm to ensure the appropriateness of providing the therapy, and executing an unlock code to insure that running the algorithm results in a satisfactory outcome; and

unlocking the therapy when the token is set and running the algorithm results in a satisfactory outcome.

18. The method of claim 17, wherein unlocking the therapy when the token is set and running the algorithm results in a satisfactory outcome includes unlocking the therapy when the token is set and running the algorithm results in an indication that the therapy is appropriate and an indication that the algorithm was run in its entirety.

19. The method of claim 17, wherein running an algorithm includes executing an error-checking routine.

20. The method of claim 17, further comprising rejecting the request for therapy when the token and the first and second messages do not indicate that the therapy is appropriate and that the algorithm was run in its entirety.

21. The method of claim 17, wherein the therapy includes electrical therapy from an implantable medical device.

22. A method, comprising:

receiving a request for a therapy;

setting a token for use to unlock the therapy;

writing a first message prior to running the algorithm;

running the algorithm to ensure the appropriateness of providing the therapy

writing a second message to indicate an outcome resulting from running the algorithm; and

unlocking the therapy when the token and the first and second messages indicate that the therapy is appropriate and that the algorithm was run in its entirety.

23. The method of claim 22, wherein unlocking the therapy when the token and the first and second messages indicate that the therapy is appropriate and that the algorithm was run in its entirety includes unlocking the therapy when the token and the first and second messages result in an indication that the therapy is appropriate and an indication that the algorithm was run in its entirety.

24. The method of claim 22, wherein running an algorithm includes executing an error-checking routine.

25. The method of claim 22, further comprising rejecting the request for therapy when the token and the first and second messages do not indicate that the therapy is appropriate and that the algorithm was run in its entirety.

26. The method of claim 22, wherein the therapy includes electrical therapy from an implantable medical device.