System and method for providing secure exchange of sensitive information with an implantable medical device

• US 7,475,245 B1
• Filed: 03/15/2004
• Issued: 01/06/2009
• Est. Priority Date: 03/15/2004
• Status: Active Grant

• Current Assignee: Cardiac Pacemakers Incorporated (Boston Scientific Corporation)
• Original Assignee: Cardiac Pacemakers Incorporated (Boston Scientific Corporation)
• Inventors: Von Arx, Jeffrey A., Healy, Scott J.
• Primary Examiner(s): Nalven; Andrew L
• Application Number:
  US10/801,150
• Time in Patent Office: 1,758 Days
• Field of Search: 713/168, 607/59
• US Class Current: 713/168
• CPC Class Codes: A61N 1/37247 User interfaces, e.g. input or presentation means
• CPC Class Codes: A61N 1/37252 Details of algorithms or data aspects of communication system, e.g. handshaking, transmitting specific data or segmenting data
• CPC Class Codes: A61N 1/37254 Pacemaker or defibrillator security, e.g. to prevent or inhibit programming alterations by hackers or unauthorised individuals
• CPC Class Codes: A61N 1/3727 characterised by the modulation technique
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

A system and method for providing secure exchange of sensitive information with an implantable medical device is presented. A crypto key uniquely associated with an implantable medical device is defined to encrypt sensitive information during a data exchange session. The crypto key is securely obtained over a secure connection from a secure key repository securely maintaining the crypto key. The sensitive information is encrypted using the crypto key and the sensitive information is stored as encrypted data onto the implantable medical device.

Claims

1. A system for providing secure exchange of sensitive information with an implantable medical device, comprising:

a crypto key uniquely associated with an implantable medical device to encrypt sensitive information during a data exchange session; and

an external source, comprising;

a key module configured to securely obtain the crypto key over a secure connection from a secure key repository securely maintaining the crypto key and further configured to encrypt the sensitive information using the crypto key;

a long range transmission module configured to transmit the encrypted sensitive information to the implantable medical device via a long range interface and further configured to store the encrypted sensitive information onto the implantable medical device; and

a short range transmission module configured to further transmit a copy of at least a part of the sensitive information to the implantable medical device via a secure short range interface and further configured to store the copy as unencrypted data onto the implantable medical device.

2. A system according to claim 1, wherein the short range interface logically defines a secured area around the implantable medical device within which to securely obtain the crypto and the long range interface logically defines a non-secured area extending beyond the secured area within which to exchange the encrypted sensitive information.

3. A system according to claim 1, wherein the encrypted sensitive information is retrieved from the implantable medical device over a non-secure connection and the encrypted sensitive information is decrypted using the crypto key.

4. A system according to claim 3, wherein the crypto key is securely retrieved over a secure connection from the secure key repository prior to decrypting the encrypted sensitive information.

5. A system according to claim 3, wherein the encrypted sensitive information is retrieved through long range telemetry.

6. A system according to claim 5, wherein the long range telemetry comprises radio frequency telemetry.

7. A system according to claim 1, wherein the unencrypted data is securely retrieved from the implantable medical device over a secure connection.

8. A system according to claim 1, wherein the crypto key is securely retrieved from the secure key repository through a programmer.

9. A system according to claim 1, wherein the crypto key is maintained on the implantable medical device, and the crypto key is retrieved through short range telemetry.

10. A system according to claim 9, wherein the short range telemetry comprises inductive telemetry.

11. A system according to claim 1, wherein the external source comprises at least one of a programmer and a repeater.

12. A system according to claim 1, wherein the crypto key comprises an encryption key in accordance with the Advanced Encryption Standard.

13. A method for providing secure exchange of sensitive information with an implantable medical device, comprising:

defining a crypto key uniquely associated with an implantable medical device to encrypt sensitive information during a data exchange session;

securely obtaining the crypto key over a secure connection from a secure key repository securely maintaining the crypto key;

encrypting the sensitive information using the crypto key, transmitting the encrypted sensitive information to the implantable medical device via a long range interface, and storing the encrypted sensitive information onto the implantable medical device; and

further transmitting a copy of at least a part of the sensitive information to the implantable medical device via a secure short range interface and storing the copy as unencrypted data onto the implantable medical device.

14. A method according to claim 13, further comprising:

logically defining a secured area around the implantable medical device within which to securely obtain the crypto key; and

logically defining a non-secured area extending beyond the secured area within which to exchange the encrypted sensitive information.

15. A method according to claim 13, further comprising:

retrieving the encrypted sensitive information from the implantable medical device over a non-secure connection; and

decrypting the encrypted sensitive information using the crypto key.

16. A method according to claim 15, further comprising:

securely retrieving the crypto key over a secure connection from the secure key repository prior to decrypting the encrypted sensitive information.

17. A method according to claim 15, further comprising:

retrieving the encrypted sensitive information through long range telemetry.

18. A method according to claim 17, wherein the long range telemetry comprises radio frequency telemetry.

19. A method according to claim 13, further comprising:

securely retrieving the unencrypted data from the implantable medical device over a secure connection.

20. A method according to claim 13, wherein the crypto key is securely retrieved from the secure key repository through a programmer.

21. A method according to claim 13, further comprising:

maintaining the crypto key on the implantable medical device; and

retrieving the crypto key through short range telemetry.

22. A method according to claim 21, wherein the short range telemetry comprises inductive telemetry.

23. A method according to claim 13, wherein the external source comprises at least one of a programmer and a repeater.

24. A method according to claim 13, wherein the crypto key comprises an encryption key in accordance with the Advanced Encryption Standard.

25. An apparatus for securely transacting a data exchange session with an implantable medical device, comprising:

means for defining a crypto key uniquely associated with an implantable medical device to encrypt sensitive information during a data exchange session;

means for securely obtaining the crypto key over a secure connection from a secure key repository securely maintaining the crypto key;

means for encrypting the sensitive information using the crypto key, means for transmitting the encrypted sensitive information to the implantable medical device via a long range interface, and means for storing the encrypted sensitive information onto the implantable medical device; and

means for further transmitting a copy of at least a part of the sensitive information to the implantable medical device via a secure short range interface and means for storing the copy as unencrypted data onto the implantable medical device.

26. An implantable medical device for securely maintaining sensitive information, comprising:

a receiver to receive sensitive information via a long range interface and a copy of at least a part of the sensitive information via a short range interface;

a memory to store the sensitive information encrypted using a crypto key uniquely associated and to further store the copy as unencrypted data; and

a secure interface to provide access to the stored sensitive information exclusively over a secure connection.

27. An method for securely maintaining sensitive information on an implantable medical device, comprising:

receiving sensitive information via a long range interface and a copy of at least a part of the sensitive information via a short range interface;

storing the sensitive information encrypted using a crypto key uniquely associated with an implantable medical device and further storing the copy as unencrypted data; and

providing access to the stored sensitive information exclusively over a secure connection.

28. An apparatus for securely maintaining sensitive information on an implantable medical device, comprising:

means for receiving sensitive information via a long range interface and a copy of at least a part of the sensitive information via a short range interface;

means for storing the sensitive information encrypted using a crypto key uniquely associated with an implantable medical device and the copy as unencrypted data; and

means for providing access to the stored sensitive information exclusively over a secure connection.