Fingerprint enhanced authentication for medical devices in wireless networks

• US 9,779,226 B2
• Filed: 12/18/2013
• Issued: 10/03/2017
• Est. Priority Date: 12/18/2013
• Status: Active Grant

• Current Assignee: Medtronic Minimed Incorporated (Medtronic Plc)
• Original Assignee: Medtronic Minimed Incorporated (Medtronic Plc)
• Inventors: Wang, Yongbo, Makaveev, Bozhil
• Primary Examiner(s): Gort, Elaine
• Assistant Examiner(s): Hein, Devin
• Application Number:
  US14/132,347
• Publication Number:
  US 20150169857A1
• Time in Patent Office: 1,385 Days
• Field of Search: None
• CPC Class Codes: A61M 2205/276 preventing unwanted use
• CPC Class Codes: A61M 2205/3569 sublocal, e.g. between console and disposable
• CPC Class Codes: A61M 2205/3592 using telemetric means, e.g. radio or optical transmission
• CPC Class Codes: A61M 2205/502 User interfaces, e.g. screens or keyboards
• CPC Class Codes: A61M 2205/505 Touch-screens; Virtual keyboard or keypads; Virtual buttons; Soft keys; Mouse touches
• CPC Class Codes: A61M 2205/507 Head Mounted Displays [HMD]
• CPC Class Codes: A61M 2205/52 with memories providing a history of measured variating parameters of apparatus or patient
• CPC Class Codes: A61M 2205/609 Biometric patient identification means
• CPC Class Codes: A61M 5/14244 adapted to be carried by the patient, e.g. portable on the body
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G16H 20/17 delivered via infusion or injection
• CPC Class Codes: G16H 40/67 for remote operation
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/64 using geofenced areas

Abstract

An infusion system to administer fluid is disclosed. The infusion system includes an infusion pump having a pump processor, a pump memory and a pump radio to enable bi-directional communication. The pump memory stores a plurality of fingerprint tokens and security conditions. The infusion system includes a controller with a processor, a controller memory and a controller radio to transmit and receive communication from the pump radio. The controller includes a fingerprint scanner and a graphical user interface (GUI) and controls to manipulate the GUI. The GUI and fingerprint scanner enable the controller to scan and determine tokens based on scanned fingerprints. Additionally, communication between the infusion pump and the controller establish relative proximity between the infusion pump and the controller such that when the relative proximity exceeds a threshold distance at least one of the plurality of security conditions is automatically matched.

Claims

1. An infusion system to administer fluid, the infusion system comprising:

an infusion pump having a pump processor, a pump memory and a pump radio to enable bi-directional communication, the pump radio further including an attenuator being configurable and the pump memory storing a plurality of user-selectable security modes, each of the plurality of user-selectable security modes configuring the attenuator to receive signals of a predetermined strength, and

a controller having a controller processor, a controller memory, a controller radio to transmit and receive communication from the pump radio, the controller further having a graphical user interface shown on a display, and controls to manipulate the graphical user interface, the controller being paired with the infusion pump during a pairing phase via fingerprint authentication,

wherein after the controller is paired with the infusion pump, and a user selects a security mode, the user-selected security mode is used to configure the attenuator for the bi-directional communication such that both the infusion pump and the controller transmit and expect to receive signals having a signal strength within a specified range for the user-selected security mode, wherein a security check is performed when the infusion pump receives a suspect signal, the suspect signal not matching the predetermined strength associated with the user-selected security mode, wherein the security check further comprises requesting a user to provide a fingerprint, re-calculating tokens associated with the requested fingerprint, sending the re-calculated tokens to the infusion pump, wherein the infusion pump compares the re-calculated token to the fingerprint authentication obtained during the pairing phase, and determining whether the re-calculated token matches the fingerprint authentication obtained during the pairing phase to verify secure communication.

2. The infusion system as described in claim 1, wherein initiation of the security check pauses data transfer between the infusion pump and the suspect signal.

3. The infusion system as described in claim 2, wherein the security check includes a debounce procedure.

4. The infusion system as described in claim 3, wherein authenticity of a device sending the suspect signal is determined by the infusion pump sending a special series of commands.

5. The infusion system as described in claim 4, wherein the special series of commands includes a request for fingerprint authentication from the controller to a device transmitting the suspect signal.

6. The infusion system as described in claim 5, wherein failure of the fingerprint authentication terminates communication between the infusion pump and the suspect signal.

7. The infusion system as described in claim 5, wherein upon passing the security check communications between the infusion pump and the suspect signal is resumed.

8. The infusion system as described in claim 1, wherein prior to pairing the infusion pump and the controller the default security mode for the infusion pump is high.

9. The infusion system as described in claim 1, wherein after pairing the infusion pump and the controller the security mode for the infusion pump is selected by a user, wherein the security mode includes at least one of a high security level, a medium security level or a low security level.

10. The infusion system as described in claim 9, wherein the security mode includes settings that are customizable by the user.

11. The infusion system as described in claim 9, wherein the high security level restricts receiving and transmission of signals from the infusion pump to less than a predetermined distance.

12. The infusion system as described in claim 11, wherein the predetermined distance is six feet.

13. The infusion system as described in claim 9, wherein the medium security level allows receiving and transmitting of signals up to a predetermined distance.

14. The infusion system as described in claim 13, wherein the predetermined distance is 50 feet.

15. The infusion system as described in claim 9, wherein the low security level deactivates the attenuator.

16. The infusion system as described in claim 9, wherein the low security level restricts receiving and transmission of signals to 100 feet.

17. The infusion system as described in claim 9, wherein the high security level provides a maximum restriction while the low security level provides a low restriction of receipt and transmission of signals, and the medium security level falls between the high security level and the low security level.

18. The infusion system as described in claim 3, wherein the debounce procedure is performed on a suspect signal, wherein a single reading of the suspect signal does not forever eliminate communication with a particular device.

19. The infusion system as described in claim 3, wherein the debounce procedure results in normal communication being resumed if the debounce procedure is resolved.

20. The infusion system as described in claim 3, wherein if the debounce procedure results in a persistent suspect signal, special commands to check authenticity are sent to verify authenticity of the suspect signal.