Communications hub for use in life critical network

• US 9,313,192 B2
• Filed: 07/28/2014
• Issued: 04/12/2016
• Est. Priority Date: 03/04/2009
• Status: Active Grant

• Current Assignee: Cardiac Pacemakers Incorporated (Boston Scientific Corporation)
• Original Assignee: Cardiac Pacemakers Incorporated (Boston Scientific Corporation)
• Inventors: Sievert, Jim, Bailey, Eric P., Mass, William R.
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US14/341,992
• Publication Number:
  US 20140337922A1
• Time in Patent Office: 624 Days
• US Class Current: 1/1
• CPC Class Codes: A61N 1/37282 characterised by communication with experts in remote locations using a network
• CPC Class Codes: G16H 40/67 for remote operation
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 69/18 Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

Secured communications between patient portable communicators (PPC) and a central authority (CA) via an unsecured network are implemented using software implemented by a communications device. The communications device provides for detecting, using a multiplicity of disparate communication protocols, presence of entities requesting a network connection and determining whether or not each of the entities is a PPC, establishing, only for the entities determined to be PPCs, a connection to the CA via the unsecured network using the disparate communication protocols, authenticating only the PPCs to the CA, and facilitating communication of PPC data between the PPCs and the CA via the communications device and the unsecured network upon successful PPC authentication. The PPC data comprises at least some patient implantable medical device data acquired by the PPCs.

Claims

1. A communications device for effecting secured communications between a plurality of communicators and a central authority (CA), each of the plurality of communicators configured to effect connectivity with a patient sensor, the communications device comprising:

a logical network port configured to facilitate communications over an unsecured network;

a plurality of logical local ports provided at the housing and configured to implement a plurality of disparate communication protocols for effecting connectivity with the plurality of communicators;

a processor coupled to the logical network port and the plurality of logical local ports; and

memory provided at the housing and coupled to the processor, the memory storing program instructions which, when executed by the processor, cause the processor to

prevent non-communicator entities from establishing a connection to the CA over the unsecured network via the communications device, initiate interrogation of each communicator in response to the communicator coming into proximity with the communications device and transfer communicator data to the CA over the unsecured network, at least a portion of the communicator data comprising patient sensor data.

2. The device of claim 1, wherein the program instructions which, when executed by the processor, cause the processor to detect presence of entities that come into proximity with the communications device, determine whether or not the entities requesting a network connection via the device are communicators, and authenticate only communicators to the CA to establish a secured connection between each communicator and the CA.

3. The device of claim 2, wherein the program instructions, when executed by the processor, provides a connection mapping and authentication to the CA only for entities that are determined by the processor to be communicators.

4. The device of claim 1, wherein the plurality of logical local ports comprises a plurality of wireless access ports.

5. The device of claim 4, wherein the plurality of logical local ports comprises at least one wired access port.

6. The device of claim 1, wherein the program instructions, when executed by the processor, cause the processor to transmit a request to each communicator to interrogate their respective sensors.

7. The device of claim 1, wherein the device defines a hub, a switch, or a router.

8. The device of claim 7, wherein the memory of the hub, switch, or router stores the program instructions and general Internet access software comprising program instructions which, when executed by the processor, cause the processor to facilitate communication between non-communicator entities and the Internet via the logical local ports, the logical network port, and the unsecured network.

9. The device of claim 1, wherein the device defines a general purpose communications device that is transformed to function as a special purpose communications device upon receiving and storing the program instructions in the memory.

10. The device of claim 1, wherein the device defines or is integral to a medical device programmer.

11. The device of claim 10, wherein the program instructions, when executed by the processor, cause the processor to automatically interrogate communicators in response to the communicators coming into proximity with the programmer, request the communicators to interrogate their respective sensors, transfer data from the communicators to the memory of the programmer, authenticate the programmer with the CA, and transfer the communicator data from the memory of the programmer to the CA via the logical local ports, the logical network port, and the unsecured network upon successful programmer authentication.

12. The device of claim 10, wherein the data transferred from the communicators to the memory of the programmer are encrypted or secured in a manner that prevents the programmer from deciphering some or all of the communicator data.

13. The device of claim 10, wherein the program instructions, when executed by the processor, cause the processor to generate a unique session ID code for each communicator with which the programmer communicates, transmit the session ID code to each respective communicator, append the session ID code to communicator data prior to encrypting or securing the communicator data by each respective communicator, authenticate the programmer to the CA via the unsecured network, transmit the secured communicator data to the CA upon successful programmer authentication, and receive, from the CA, unencrypted communicator data in a format that allows for displaying or printing by the programmer.

14. The device of claim 1, wherein the memory further stores general Internet access software comprising program instructions which, when executed by the processor, cause the processor to facilitate communication between non-communicator entities and the Internet via the logical local ports, the logical network port, and the unsecured network.

15. A method for effecting secured communications between a plurality of communicators and a central authority (CA) using a communications device via an unsecured network, each of the plurality of communicators configured to effect connectivity with a patient sensor, the method comprising:

automatically interrogating communicators using a plurality of disparate communications protocols of the communications device, wherein interrogating the communicators is in response to the communicators coming into proximity with the communications device;

establishing a connection with the CA via the unsecured network with a logical network port of the communications device;

authenticating the communications device with the CA;

transferring data from the communicator to the CA via the logical local ports, the logical network port, and the unsecured network upon authentication, wherein at least a portion of the data comprises sensor data; and

preventing non-communicator entities from establishing a network connection to the CA over the unsecured network via the communications device.

16. The method of claim 15, further comprising detecting, using the plurality of disparate communication protocols implemented by the communications device, the presence of each of a plurality of entities requesting a network connection;

determining whether or not each of the entities is a communicator; and

authenticating only the communicators to the CA via the communications device and the unsecured network.

17. The method of claim 15, wherein the communications device defines a hub, a switch, or a router.

18. The method of claim 15, wherein the communications device defines an implantable medical device programmer, and the method further comprises:

generating, by the programmer when interrogating each of the communicators, a unique session ID code and appending the session ID code to the sensor data prior to encrypting or securing the communicator data; and

receiving, from the CA, unencrypted communicator data in a format that allows for displaying or printing by the programmer.

19. The method of claim 15, further comprising requesting each of the communicators interrogate their respective sensors.

20. A non-transitory computer-readable medium having instructions stored thereon which are executable by a data processing arrangement disposed in a communications device configured to be coupled to an unsecured network, wherein the instructions, when executed, causes the communications device to perform the steps comprising:

detecting the presence of each of a plurality communicators and at least one non-communicator entity that come into proximity with the communications device;

interrogating the communicators with a plurality of disparate communication protocols;

facilitating communication of communicator data between the communicators and the CA via the communications device and an unsecured network, the communicator data comprising sensor data acquired from sensors by respective communicators; and

preventing the non-communicator entity from establishing a connection to the CA over the unsecured network via the communications device.