Intelligent accessories for medical devices

• US 9,916,436 B2
• Filed: 10/24/2014
• Issued: 03/13/2018
• Est. Priority Date: 10/24/2014
• Status: Active Grant

• Current Assignee: Physio-Control Incorporated (Stryker Corporation)
• Original Assignee: Physio-Control Incorporated (Stryker Corporation)
• Inventors: Bielstein, Matthew L.
• Primary Examiner(s): DIETRICH, JOSEPH M
• Application Number:
  US14/523,727
• Publication Number:
  US 20160117496A1
• Time in Patent Office: 1,236 Days
• CPC Class Codes: A61N 1/37235 Aspects of the external programmer
• CPC Class Codes: A61N 1/3925 Monitoring; Protecting
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs

Abstract

An accessory for a host medical device that is capable of authenticating itself to the host medical device. The accessory includes an onboard facility for authenticating the accessory to the host medical device. Various embodiments of the accessory enable it to validate itself to the host medical device without the host medical device reading any stored information from the accessory.

Claims

1. An accessory for a medical device, comprising:

a connector configured for operative communication with the medical device;

a memory configured to store a secret value associated with the accessory, wherein the accessory is configured to prevent the secret value from being retrieved or read from the accessory; and

a processing component capable of communicating, using the connector, to perform a secure authentication of the accessory when the accessory is attached to the medical device, the secure authentication comprising at least a transmission over the connector of a message authentication code (MAC) wherein the MAC is based on, but does not include, the secret value stored in the memory of the accessory, the secure authentication being a challenge and response authentication.

2. The accessory recited in claim 1, wherein the challenge and response authentication is based on a hashing algorithm.

3. The accessory recited in claim 1, wherein the processing component is further configured to receive a seed value over the connector and to perform a hashing function based on, at least, the secret value in combination with the seed value.

4. The accessory recited in claim 3, wherein the seed value is a pseudo random number.

5. The accessory recited in claim 4, wherein the pseudo random number comprises a non-repeating pseudo random number.

6. The accessory recited in claim 1, wherein the secret value comprises information relating to at least one characteristic of the accessory.

7. The accessory recited in claim 6, wherein the at least one characteristic comprises a manufacturing date of the accessory.

8. The accessory recited in claim 6, wherein the at least one characteristic comprises a use-by-date for the accessory.

9. The accessory recited in claim 6, wherein the at least one characteristic comprises a lot number of the accessory.

10. The accessory recited in claim 6, wherein the at least one characteristic comprises a feature set of the accessory.

11. The accessory recited in claim 1, wherein the processing component comprises a microprocessor operative to perform computing operations independent of the medical device.

12. The accessory recited in claim 1, further comprising an address decoder operative to map an input address value into a virtual address space, at least a subset of addresses in the virtual address space corresponding to data confirming the validity of the accessory.

13. The accessory recited in claim 6, wherein the at least one characteristic comprises a date indicative of the expiration date of the accessory.

14. The accessory recited in claim 1, wherein the connector is configured for either wired communication, wireless communication, or both wired and wireless communication.

15. The accessory recited in claim 1, wherein the secure authentication is performed without a user of the medical device knowing the secret value and MAC.

16. The accessory recited in claim 1, wherein the accessory, when connected to the medical device via the connector, is configured to interoperate with the medical device to perform a medical function on a patient.

17. The accessory recited in claim 16, wherein the medical function comprises sensing a physiological parameter of the patient.

18. The accessory recited in claim 16, wherein the medical function comprises providing a medical treatment to the patient.

19. An accessory for a medical device, comprising:

means for storing a shared secret that is associated with the accessory, wherein the accessory is configured to prevent the shared secret from being retrieved or read from the accessory;

means for receiving a request to authenticate the accessory to the medical device, the authentication being based on the shared secret, the shared secret corresponding to information that verifies the accessory may be used with the medical device; and

means for transmitting to the medical device a message authentication code (MAC) based on the shared secret without transmitting any stored information from the accessory to the medical device.

20. The accessory recited in claim 19, wherein the authentication comprises a challenge and response procedure.

21. The accessory recited in claim 19, wherein the information that verifies the accessory may be used with the medical device comprises an expiration date for the accessory.

22. The accessory recited in claim 19, wherein the shared secret corresponds to a manufacturer of accessories authorized to operate with the medical device.

23. The accessory recited in claim 19, further comprising means for receiving from the medical device an address value corresponding to a virtual address space;

and means for transmitting a response indicative of whether the address value falls within a valid range of virtual addresses for the accessory.

24. The accessory recited in claim 19, further comprising, means for reducing the functionality of the accessory if the message authentication code does not correspond to an authorized accessory.

28. The accessory recited in claim 19, further comprising means for inter-operating with the medical device if the message authentication code confirms that the accessory is authorized to operate with the medical device.

25. An accessory fora medical device, comprising:

a first connector configured for operative communication with the medical device;

a second connector, coupled to the first connector, configured for operative communication with one or more replaceable electrodes; and

a component capable of communicating with the medical device, using the first connector, to perform a secure authentication of the accessory when the accessory is attached to the medical device, the authentication comprising at least a transmission over the connector of a message authentication code (MAC) wherein the MAC is based on, but does not include, information available at the accessory, the authentication being a challenge and response authentication, wherein the accessory is configured to prevent the information available at the accessory from being retrieved or read from the accessory.

26. The accessory recited in claim 25, where the accessory is further configured to provide information used by the medical device to determine whether the one or more replaceable electrodes are in condition for use.

27. The accessory recited in claim 25, wherein the accessory is further configured to provide information used by the medical device to determine if the one or more replaceable electrodes is expired.