Sensor with signature of data relating to sensor

• US 8,818,474 B2
• Filed: 05/25/2012
• Issued: 08/26/2014
• Est. Priority Date: 09/28/1999
• Status: Expired due to Fees

• Current Assignee: Covidien LP (Medtronic Plc)
• Original Assignee: Covidien LP (Medtronic Plc)
• Inventors: Berson, Thomas A., Olson, Bryan, Fein, Michael E., Mannheimer, Paul D., Porges, Charles E., Schloemer, David
• Primary Examiner(s): WINAKUR, ERIC FRANK
• Application Number:
  US13/481,664
• Publication Number:
  US 20120237022A1
• Time in Patent Office: 823 Days
• Field of Search: 600/300, 600/310, 600/322, 600/323, 600/324, 600/331, 713/176, 713/187, 713/189, 380/28, 726/30
• US Class Current: 600/323
• CPC Class Codes: A61B 2562/08 Sensors provided with means for identification, e.g. barcodes or memory chips
• CPC Class Codes: A61B 2562/085 combined with means for recording calibration data
• CPC Class Codes: A61B 5/14551 for measuring blood gases
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A sensor has codes useful for a monitor which can be authenticated as accurate. The sensor produces a signal corresponding to a measured physiological characteristic and provides codes which can be assured of being accurate and authentic when used by a monitor. A memory associated with the sensor stores both data relating to the sensor and a digital signature. The digital signature authenticates the quality of the code by ensuring it was generated by an entity having predetermined quality controls, and ensure the code is accurate.

Claims

1. A method, comprising:

sorting data related to a pulse oximeter sensor into first data to be signed, second data to be masked, and third data to be clear data using one or more processors;

producing a digest with the one or more processors, wherein the digest is produced as an output of a hash function applied to at least one of the first data, the second data, and the third data;

signing the digest and the first data along with formatting data to produce a digital signature with the one or more processors;

masking the second data to produce masked data; and

storing the digital signature, the masked data, and the third data in a memory associated with the pulse oximeter sensor to facilitate controlling cooperation of the pulse oximeter sensor with a pulse oximeter monitor.

2. The method of claim 1, comprising combining the digital signature, the masked data, and the third data into combined data with the one or more processors prior to storing the combined data in the memory.

3. The method of claim 1, comprising testing the sensor to determine measured parameters of the pulse oximeter sensor to be included in the data related to the pulse oximeter sensor.

4. The method of claim 3, wherein the measured parameters include a light emitter wavelength of the pulse oximeter sensor.

5. The method of claim 1, comprising producing the digest with the one or more processors as an output of the hash function applied to at least two of the first data, the second data, and the third data.

6. The method of claim 1, comprising signing the digest and the first data using a Rabin-Williams digital signature algorithm.

7. A method comprising:

retrieving data from a memory associated with a pulse oximeter sensor to facilitate controlling cooperation of the pulse oximeter sensor with a pulse oximeter monitor, wherein the data comprises a digital signature, masked data, and unmasked data, and wherein the digital signature comprises a digest and signed data;

decrypting the digest and the signed data from the digital signature;

creating a secondary digest from the first data obtained from the signed data, second data obtained from the masked data, and unmasked data;

comparing the digest and the secondary digest to determine whether errors have been introduced; and

blocking operation of the oximeter monitor with the pulse oximeter sensor when comparison of the digest and the secondary digest indicates errors have been introduced.

8. A pulse oximeter apparatus, comprising:

an input configured to receive data from a pulse oximeter sensor memory, the data including a digital signature, masked data, and clear data;

a processor of the pulse oximeter apparatus configured to;

decrypt the digital signature to obtain a first set of data and a digest using a cryptographic transform and a public key;

determine a symmetric key for the masked data using the digest;

decrypt the masked data with the symmetric key to obtain a second set of data;

create a secondary digest from at least one of the first set of data, the second set of data, and the clear data using a hash function; and

compare the secondary digest to the digest and authenticate the pulse oximeter sensor or provide an indication of defectiveness based on whether the secondary digest and the digest sufficiently match.

9. The pulse oximeter apparatus of claim 8, wherein the processor of the pulse oximeter apparatus is configured to create the secondary digest from at least two of the first set of data, the second set of data, and the clear data using the hash function.

10. The pulse oximeter apparatus of claim 8, comprising an adapter configured to communicatively couple with a pulse oximeter monitor.

11. The pulse oximeter apparatus of claim 8, wherein the processor of the pulse oximeter apparatus is configured to create the secondary digest from at least two of the first set of data, the second set of data, and the clear data using the hash function.

12. The pulse oximeter apparatus of claim 8, wherein the processor is configured to retrieve the public key from a monitor memory.

13. A method, comprising:

producing a digest from at least first data with one or more processors;

signing the digest and the first data along with formatting data to produce a digital signature with the one or more processors;

masking second data to produce masked data with the one or more processors; and

storing the digital signature, and the masked data in a memory associated with a pulse oximeter sensor.

14. The method of claim 13, comprising producing the digest as an output of a hash function applied to the first data and the second data.

15. The method of claim 13, comprising producing the digest as an output of a hash function applied to the first data, the second data, and third data, wherein the third data is clear data.

16. A method, comprising:

retrieving data with a pulse oximeter apparatus processor from a memory associated with a pulse oximeter sensor, wherein the data comprises a digital signature and masked data, and wherein the digital signature comprises a digest and signed data;

decrypting the digital signature with a pulse oximeter apparatus processor to obtain first data from the signed data and the digest using a cryptographic transform and a public key;

determining, with the pulse oximeter apparatus processor, a symmetric key for the masked data using the digest;

decrypting, with the pulse oximeter apparatus processor, the masked data with the symmetric key to obtain second data;

creating, with the pulse oximeter apparatus processor, a secondary digest from at least the first data using a hash function; and

comparing, with the pulse oximeter apparatus processor, the secondary digest to the digest and authenticating the pulse oximeter sensor or providing an indication of defectiveness based on whether the secondary digest and the digest sufficiently match.

17. The method of claim 16, wherein creating, with the pulse oximeter apparatus processor, the secondary digest from at least the first data includes creating the secondary data using the second data and/or third data in addition to the first data, wherein the third data is clear data.