System and method for providing secure communication of sensitive information

• US 8,331,563 B2
• Filed: 10/20/2008
• Issued: 12/11/2012
• Est. Priority Date: 03/15/2004
• Status: Active Grant

• Current Assignee: Cardiac Pacemakers Incorporated (Boston Scientific Corporation)
• Original Assignee: Cardiac Pacemakers Incorporated (Boston Scientific Corporation)
• Inventors: Healy, Scott J., Von Arx, Jeffrey A.
• Primary Examiner(s): Lipman, Jacob
• Application Number:
  US12/254,755
• Publication Number:
  US 20090043362A1
• Time in Patent Office: 1,513 Days
• Field of Search: 380/255
• US Class Current: 380/255
• CPC Class Codes: A61N 1/37247 User interfaces, e.g. input or presentation means
• CPC Class Codes: A61N 1/37252 Details of algorithms or data aspects of communication system, e.g. handshaking, transmitting specific data or segmenting data
• CPC Class Codes: A61N 1/37254 Pacemaker or defibrillator security, e.g. to prevent or inhibit programming alterations by hackers or unauthorised individuals
• CPC Class Codes: A61N 1/3727 characterised by the modulation technique
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

A system and method for providing secure communication of sensitive information is provided. A crypto key unique to an implantable medical device is dynamically generated on a programmer. Sensitive information for the implantable medical device is encrypted using the crypto key. A telemetry connection of at least one of a short range and a long range is established between the implantable medical device and the programmer. The encrypted sensitive information is transmitted to the implantable medical device via the telemetry connection. The crypto key is transmitted to the implantable medical device via the telemetry connection at short range.

Claims

1. A system for providing secure communication of sensitive information, comprising:

an implantable medical device configured to store sensitive information and a crypto key unique to the implantable medical device; and

a programmer, comprising;

an encryption module configured to dynamically generate the crypto key and to encrypt the sensitive information for the implantable medical device using the crypto key;

a communication module configured to establish a telemetry connection at one of a short range and a long range with the implantable medical device;

a data transmission module configured to transmit the encrypted sensitive information to the implantable medical device via the telemetry connection;

a key transmission module configured to transmit the crypto key to the implantable medical device via the telemetry connection at short range.

2. A system according to claim 1, wherein the programmer further comprises:

a data retrieval module configured to retrieve the encrypted sensitive information from the implantable medical device via the telemetry connection;

a key retrieval module configured to retrieve the crypto key from the implantable medical device via the telemetry connection at short range; and

a decryption module configured to decrypt the encrypted sensitive information using the crypto key.

3. A system according to claim 1, further comprising:

an authorization module configured to authenticate access to the implantable medical device using the programmer.

4. A system according to claim 1, wherein the programmer further comprises:

a search module configured to conduct a search for a pre-programmed crypto key on the implantable medical device; and

a key module configured to generate the crypto key when the search returns no pre-programmed crypto key.

5. A system according to claim 1, wherein the short range telemetry connection comprises inductive telemetry and the long range telemetry connection comprises radio frequency telemetry.

6. A system according to claim 1, wherein the crypto key comprises an encryption key in accordance with the Advanced Encryption Standard.

7. A method for providing secure communication of sensitive information, comprising:

on a programmer, dynamically generating a crypto key unique to an implantable medical device and encrypting sensitive information for the implantable medical device using the crypto key;

establishing between the implantable medical device and the programmer, a telemetry connection at one of a short range and a long range;

transmitting the encrypted sensitive information to the implantable medical device via the telemetry connection; and

transmitting the crypto key to the implantable medical device via the telemetry connection at short range.

8. A method according to claim 7, further comprising:

performing by the programmer,

retrieving the encrypted sensitive information from the implantable medical device via the telemetry connection;

retrieving the crypto key from the implantable medical device via the telemetry connection at short range; and

decrypting the encrypted sensitive information using the crypto key.

9. A method according to claim 7, further comprising:

authenticating access to the implantable medical device using the programmer.

10. A method according to claim 7, further comprising:

performing by the programmer,

conducting a search for a pre-programmed crypto key on the implantable medical device; and

generating the crypto key on the programmer when the search returns no pre-programmed crypto key.

11. A method according to claim 7, wherein the short range telemetry connection comprises inductive telemetry and the long range telemetry connection comprises radio frequency telemetry.

12. A method according to claim 7, wherein the crypto key comprises an encryption key in accordance with the Advanced Encryption Standard.