Efficient procedure for pairing medical devices for wireless communication with limited user interaction

• US 8,861,731 B2
• Filed: 12/22/2010
• Issued: 10/14/2014
• Est. Priority Date: 10/15/2010
• Status: Active Grant

• Current Assignee: Roche Diabetes Care Inc. (Roche Holding AG)
• Original Assignee: Roche Diagnostics Operations Incorporated (Roche Holding AG)
• Inventors: Nierzwick, Mark, Pash, Phillip E., Tenbarge, James Duane
• Primary Examiner(s): Pwu, Jeffrey
• Assistant Examiner(s): Salehi, Helai
• Application Number:
  US12/975,455
• Publication Number:
  US 20120093311A1
• Time in Patent Office: 1,392 Days
• Field of Search: 380/255, 380/270, 380/278, 604/66, 604/151, 604/264, 604/365
• US Class Current: 380/255
• CPC Class Codes: A61B 5/002 Monitoring the patient using a local or closed circuit, e.g. in a room or building A61B5/0017 takes precedence
• CPC Class Codes: A61B 5/0024 for multiple sensor units attached to the patient, e.g. using a body or personal area network
• CPC Class Codes: A61B 5/14532 for measuring glucose, e.g. by tissue impedance measurement
• CPC Class Codes: G16H 20/17 delivered via infusion or injection
• CPC Class Codes: G16H 40/63 for local operation
• CPC Class Codes: G16H 40/67 for remote operation
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

A method for pairing a handheld diabetes managing device with an insulin pump for secure wireless communication with limited user interaction. A pump identification code that uniquely identifies the insulin pump can be displayed on the diabetes managing device and insulin pump. The diabetes managing device can receive an insulin pump selection input that selects the pump identification code corresponding to the insulin pump. The diabetes managing device and insulin pump can generate and display a first verification string and second verification string, respectively. Confirmation inputs corresponding to the first verification string matching the second verification string can be received at both the insulin pump and the diabetes managing device such that a secure bidirectional communication link between the diabetes managing device and the insulin pump is established.

Claims

1. A method for pairing a handheld diabetes managing device with an insulin pump for secure wireless communication with limited user interaction, comprising:

at the insulin pump, outputting a pump identification signal that contains a pump identification code that uniquely identifies the insulin pump;

at the diabetes managing device, receiving the pump identification signal;

at the diabetes managing device, obtaining the pump identification code from the pump identification signal;

at the diabetes managing device, displaying the pump identification code on a diabetes managing device display;

at the insulin pump, displaying the pump identification code on an insulin pump display;

at the diabetes managing device, receiving an insulin pump selection input that selects the pump identification code corresponding to the insulin pump;

at the diabetes managing device, generating a first verification string;

at the insulin pump, generating a second verification string;

at the diabetes managing device, displaying the first verification string on the diabetes managing device display;

at the insulin pump, displaying the second verification string on the insulin pump display;

at the diabetes managing device, receiving from a user a first confirmation input corresponding to the first verification string matching the second verification string, where the first confirmation input is input by the user using a user interface of the diabetes management device;

at the insulin pump, receiving from the user a second confirmation input corresponding to the first verification string matching the second verification string, where the second confirmation input is input by the user using a user interface of the insulin pump; and

establishing a secure bidirectional communication link between the diabetes managing device and the insulin pump based on the receipt of the first confirmation input by the diabetes managing device and the receipt of the second confirmation input by the insulin pump.

2. The method of claim 1, further comprising:

at the diabetes managing device, generating a first encryption key;

at the diabetes managing device, outputting a first encryption signal that contains the first encryption key;

at the insulin pump, receiving the first encryption signal; and

at the insulin pump, obtaining the first encryption key from the first encryption signal,

wherein the first and second verification strings are based on the first encryption key.

3. The method of claim 1, further comprising:

at the diabetes managing device, generating a first encryption key;

at the diabetes managing device, outputting a first encryption signal that contains the first encryption key;

at the insulin pump, receiving the first encryption signal;

at the insulin pump, obtaining the first encryption key from the first encryption signal;

at the insulin pump, generating a second encryption key;

at the insulin pump, outputting a second encryption signal that contains the second encryption key, the second encryption signal being encrypted based on the first encryption key;

at the diabetes managing device, receiving the second encryption signal; and

at the diabetes managing device, obtaining the second encryption key from the second encryption signal by decoding the second encryption signal with the first encryption key,

wherein the first and second verification strings are based on the second encryption key.

4. The method of claim 1, further comprising:

at the diabetes managing device, generating a first encryption key;

at the diabetes managing device, outputting a first encryption signal that contains the first encryption key;

at the insulin pump, receiving the first encryption signal;

at the insulin pump, obtaining the first encryption key from the first encryption signal;

at the insulin pump, generating a second encryption key;

at the insulin pump, outputting a second encryption signal that contains the second encryption key, the second encryption signal being encrypted based on the first encryption key;

at the diabetes managing device, receiving the second encryption signal;

at the diabetes managing device, obtaining the second encryption key from the second encryption signal by decoding the second encryption signal with the first encryption key;

at the insulin pump, generating a third encryption key based on the second encryption key; and

at the diabetes managing device, generating the third encryption key based on the second encryption key,

wherein the first and second verification strings are based on the third encryption key.

5. The method of claim 1 wherein receiving the first confirmation input comprises actuating by the user a first switch or a first push button on the diabetes managing device display, and receiving the second confirmation input comprises actuating by the user a second switch or a second push button on the insulin pump display.

6. The method of claim 4, wherein the third encryption key is a Twofish cipher key.

7. The method of claim 4, wherein the first encryption key is an RSA public key.

8. The method of claim 4, wherein the user inputs the first confirmation input into the diabetes managing device and the second confirmation input into the insulin pump.

9. The method of claim 4, wherein establishing the secure bidirectional communication link between the diabetes managing device and the insulin pump comprises:

at a transmitting device, generating a test communication message, the transmitting device being one of the diabetes managing device and the insulin pump;

at the transmitting device, generating an encrypted test communication message by encrypting the test communication message with the third encryption key;

at the transmitting device, outputting the encrypted test communication message;

at a receiving device, receiving the encrypted test communication message, the receiving device being the other one of the diabetes managing device and the insulin pump;

at the receiving device, decoding the encrypted test communication message with the third encryption key to obtain the test communication message;

confirming receipt of the test communication message by the receiving device; and

storing the third encryption key at both the diabetes managing device and the insulin pump.

10. The method of claim 9, wherein confirming receipt of the test communication message by the receiving device comprises:

at the receiving device, generating a test communication received message;

at the receiving device, generating an encrypted test communication received message by encrypting the test communication received message with the third encryption key;

at the receiving device, outputting the encrypted test communication received message;

at the transmitting device, receiving the encrypted test communication received message; and

at the transmitting device, decoding the encrypted test communication received message.

11. The method of claim 10, wherein the third encryption key is a Twofish cipher key.

12. The method of claim 11, wherein the first encryption key is an RSA public key.

13. A method for establishing and utilizing a secure bidirectional communication link between a handheld diabetes managing device with an insulin pump with limited user interaction, comprising:

pairing the diabetes managing device with the insulin pump by;

at the insulin pump, outputting a pump identification signal that contains a pump identification code that uniquely identifies the insulin pump;

at the diabetes managing device, receiving the pump identification signal;

at the diabetes managing device, obtaining the pump identification code from the pump identification signal;

at the diabetes managing device, displaying the pump identification code on a diabetes managing device display;

at the insulin pump, displaying the pump identification code on an insulin pump display;

at the diabetes managing device, receiving an insulin pump selection input that selects the pump identification code corresponding to the insulin pump;

at the diabetes managing device, generating a first encryption key;

at the diabetes managing device, outputting a first encryption signal that contains the first encryption key;

at the insulin pump, receiving the first encryption signal;

at the insulin pump, obtaining the first encryption key from the first encryption signal;

at the insulin pump, generating a second encryption key;

at the insulin pump, outputting a second encryption signal that contains the second encryption key, the second encryption signal being encrypted based on the first encryption key;

at the diabetes managing device, receiving the second encryption signal;

at the diabetes managing device, obtaining the second encryption key from the second encryption signal by decoding the second encryption signal with the first encryption key;

at the insulin pump, generating a third encryption key based on the second encryption key;

at the diabetes managing device, generating the third encryption key based on the second encryption key;

at the diabetes managing device, generating a first verification string based on the third encryption key;

at the insulin pump, generating a second verification string based on the third encryption key;

at the diabetes managing device, displaying the first verification string on the diabetes managing device display;

at the insulin pump, displaying the second verification string on the insulin pump display;

at the diabetes managing device, receiving a first confirmation input corresponding to the first verification string matching the second verification string;

at the insulin pump, receiving a second confirmation input corresponding to the first verification string matching the second verification string; and

establishing a secure bidirectional communication link between the diabetes managing device and the insulin pump based on the receipt of the first confirmation input by the diabetes managing device and the receipt of the second confirmation input by the insulin pump; and

communicating a communication message between the diabetes managing device and the insulin pump by;

generating the communication message at a transmitting device, the transmitting device being one of the diabetes managing device and the insulin pump;

generating an encrypted communication message at the transmitting device by encrypting the communication message with the third encryption key;

outputting the encrypted communication message by the transmitting device;

receiving the encrypted communication message at a receiving device, the receiving device being the other one of the diabetes managing device and the insulin pump; and

decoding the encrypted communication message at the receiving device with the third encryption key to obtain the communication message.

14. The method of claim 13, further comprising authenticating the encrypted communication message at the receiving device by:

at the transmitting device, generating a first message authentication code based on the communication message and the third encryption key, the first message authentication code being included in the encrypted communication message;

at the receiving device, decoding the encrypted communication message with the third encryption key to obtain the communication message and the first message authentication code;

at the receiving device, generating a second message authentication code based on the communication message and the third encryption key;

at the receiving device, comparing the first message authentication code and the second authentication code; and

if the first message authentication code and the second authentication code are identical, accepting the encrypted communication message as authentic.

15. The method of claim 13, wherein a user inputs the first confirmation input into the diabetes managing device and the second confirmation input into the insulin pump.

16. The method of claim 13, wherein establishing the secure bidirectional communication link between the diabetes managing device and the insulin pump comprises:

at the transmitting device, generating a test communication message;

at the transmitting device, generating an encrypted test communication message by encrypting the test communication message with the third encryption key;

at the transmitting device, outputting the encrypted test communication message;

at the receiving device, receiving the encrypted test communication message;

at the receiving device, decoding the encrypted test communication message to obtain the test communication message;

confirming receipt of the test communication message by the receiving device; and

storing the third encryption key at both the diabetes managing device and the insulin pump.

17. The method of claim 14, wherein the third encryption key is a Twofish cipher key.

18. The method of claim 16, wherein confirming receipt of the test communication message by the receiving device comprises:

at the receiving device, generating a test communication received message;

at the receiving device, generating an encrypted test communication received message by encrypting the test communication received message with the third encryption key;

at the receiving device, outputting the encrypted test communication received message;

at the transmitting device, receiving the encrypted test communication received message; and

at the transmitting device, decoding the encrypted test communication received message with the third encryption key.

19. The method of claim 17, wherein the first encryption key is an RSA public key.

20. The method of claim 18, wherein the third encryption key is a Twofish cipher key.

21. The method of claim 20, wherein the first encryption key is an RSA public key.