Secure communication by user selectable communication range

• US 9,143,941 B2
• Filed: 12/18/2013
• Issued: 09/22/2015
• Est. Priority Date: 12/18/2013
• Status: Active Grant

• Current Assignee: Medtronic Minimed Incorporated (Medtronic Plc)
• Original Assignee: Medtronic Minimed Incorporated (Medtronic Plc)
• Inventors: Wang, Yongbo, Quiroga, Gustavo
• Primary Examiner(s): SHEHNI, GHAZAL B
• Application Number:
  US14/132,396
• Publication Number:
  US 20150172921A1
• Time in Patent Office: 643 Days
• Field of Search: 726 3- 10
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data

Abstract

An infusion system to administer fluid is disclosed. The infusion system to administer fluid includes an infusion pump having a pump processor, a pump memory and a pump radio to enable bi-directional communication. The pump radio further includes a configurable attenuator and the pump memory stores a plurality of security modes that configure the attenuator to receive signals of a predetermined strength. The infusion system further includes a controller with a controller processor, a controller memory, and a controller radio to transmit and receive communication from the pump radio. The controller further having a graphical user interface shown on a display, and controls to manipulate the graphical user interface. The controller further being paired with the infusion pump based on pairing data, wherein a security check is performed when the infusion pump receives a suspect signal, the suspect signal not matching the predetermined strength associated with a selected security mode.

Claims

1. An infusion system to administer fluid, the infusion system comprising:

an infusion pump having a pump processor, a pump memory and a pump radio to enable bi-directional communication, the pump radio further including an attenuator being configurable and the pump memory storing a plurality of security modes, each of the plurality of security modes configuring the attenuator to receive signals of a predetermined strength, and

a controller having a controller processor, a controller memory, a controller radio to transmit and receive communication from the pump radio, the controller further having a graphical user interface shown on a display, and controls to manipulate the graphical user interface, the controller being paired with the infusion pump based on pairing data,

wherein a security check is performed when the infusion pump receives a suspect signal, the suspect signal not matching the predetermined strength associated with a selected security mode.

2. The infusion system as described in claim 1, wherein initiation of the security check pauses data transfer between the infusion pump and a device transmitting the suspect signal.

3. The infusion system as described in claim 2, wherein the security check includes a debounce procedure.

4. The infusion system as described in claim 3, wherein authenticity of a device sending the suspect signal is determined by the infusion pump sending a special series of commands.

5. The infusion system as described in claim 4, wherein the special series of commands includes a request for the pairing data.

6. The infusion system as described in claim 5, wherein failure to receive the pairing data terminates communication between the infusion pump and the device transmitting the suspect signal.

7. The infusion system as described in claim 5, wherein upon passing the security check communications between the infusion pump and the suspect signal is resumed.

8. The infusion system as described in claim 1, wherein prior to pairing the infusion pump and the controller the default security mode for the security pump is high.

9. The infusion system as described in claim 1, wherein after pairing the infusion pump and the controller the security mode for the infusion pump is selected by a user.

10. The infusion system as described in claim 9, wherein the security mode includes settings that are customizable by the user.

11. A method to secure wireless transmissions between an infusion device and a controller, the method comprising:

pairing the infusion device and the controller with a default security setting;

prompting the setting of a security mode for on-going communication between the infusion device and the controller;

initiating normal communication between the infusion device and the controller, and

initiating a security check if a suspect signal is detected, a suspect signal being a signal that does not match signal strength anticipated by the security mode

wherein the setting of the security mode automatically adjusts a digital attenuator defined to attenuate signals transmitted and received by the infusion device.

12. The method to secure wireless transmissions between the infusion device and the controller as described in claim 11, wherein the default security setting is for high security.

13. The method to secure wireless transmissions between the infusion device and the controller as described in claim 12, wherein the high security setting attenuates reception and transmission of signals from the infusion device to less than six feet.

14. The method to secure wireless transmissions between the infusion device and the controller as described in claim 11, further comprising:

pausing normal communication between the infusion device and the controller, and initiating a debounce procedure to determine if the mismatch is persistent.

15. The method to secure wireless transmissions between the infusion device and the controller as described in claim 14, further comprising:

determining the authenticity of the suspect signal by sending a series of commands;

receiving verification of authenticity of the suspect signal and resuming normal communication or determining the suspect signal is from an untrusted source, terminating further communication, and alerting the user that secure communication between the infusion device and controller has been compromised.

16. The method to secure wireless transmissions between the infusion device and the controller as described in claim 15, wherein determining authenticity of the suspect signal uses verification of previously exchanged out of band pairing information.

17. The method to secure wireless transmissions between the infusion device and the controller as described in claim 14 where the debounce procedure changes depending on the security mode.

18. The method to secure wireless transmissions between the infusion device and the controller as described in claim 11 wherein the security mode is user customized.

19. The method to secure wireless transmissions between the infusion device and the controller as described in claim 18 wherein customization of the security mode modifies attenuation levels.