Medical devices with intelligent accessories

• US 10,839,068 B2
• Filed: 03/12/2018
• Issued: 11/17/2020
• Est. Priority Date: 10/24/2014
• Status: Active Grant

• Current Assignee: Physio-Control Incorporated (Stryker Corporation)
• Original Assignee: Physio-Control Incorporated (Stryker Corporation)
• Inventors: Bielstein, Matthew L.
• Primary Examiner(s): Dietrich, Joseph M
• Application Number:
  US15/918,888
• Publication Number:
  US 20180203993A1
• Time in Patent Office: 981 Days
• CPC Class Codes: A61N 1/37235 Aspects of the external programmer
• CPC Class Codes: A61N 1/3925 Monitoring; Protecting
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs

Abstract

A medical device and associated systems with host devices and one or more accessories are disclosed that are capable of authenticating the host device with intelligent one of more of the intelligent accessories. Each of the host device and the one or more accessories can share a secret or other unique code. The authentication occurs without transmission of the secret or unique code between the host device and the one or more accessories.

Claims

1. A medical device, comprising:

an authenticator memory configured to store a shared authentication secret; and

a dedicated authenticator processor configured to;

receive a message authentication code (MAC) from an accessory, the MAC being based on a seed value;

generate a hash value based on the seed value and the shared authentication secret;

perform an authentication of the MAC by comparing the hash value with the MAC;

if the performed authentication results in a match between the hash value and the MAC, generate an accessory authorization output; and

if the performed authentication results in no match between the hash value and the MAC, generate an accessory rejection output.

2. The medical device of claim 1, wherein the dedicated authenticator processor is further configured to generate the seed value and to cause the seed value to be transmitted from the medical device to the accessory.

3. The medical device of claim 2, wherein the dedicated authenticator processor further includes a random number generator (RNG) configured to generate the seed value.

4. The medical device of claim 1, wherein the accessory authorization output includes a determination of whether the accessory is expired.

5. The medical device of claim 1, wherein the accessory authorization output includes a determination of whether the accessory is an authentic accessory predetermined to be approved for use with the medical device.

6. The medical device of claim 1, wherein the accessory authorization output includes a determination of whether one or both of the medical device or the accessory is configured to operate according to a pre-processed functionality.

7. The medical device of claim 1, wherein the accessory rejection output includes an instruction to disable one or more operations of one or both of the medical device or the accessory.

8. The medical device of claim 1, wherein the dedicated authenticator processor is further configured to output one or both of the accessory authorization output and the accessory rejection output to the medical device or an external device.

9. The medical device of claim 1, wherein the dedicated authenticator processor is further configured to output one or both of the accessory authorization output and the accessory rejection output to a display electrically coupled to or integrated with the medical device.

10. The medical device of claim 1, wherein the MAC is generated by the accessory using a hashing algorithm that generates the MAC based on the seed value and a secret securely stored in the accessory.

11. The medical device of claim 1, further comprising a communication module, the dedicated authenticator processor being further configured to generate an instruction to transmit either the accessory authorization output or the accessory rejection output to an external computing device via the communication module.

12. The medical device of claim 1, wherein the accessory is disposable.

13. The medical device of claim 1, wherein the dedicated authenticator processor is electrically coupled to a cloud-based server, and the dedicated authenticator processor is further configured to perform the authentication of the MAC by transmitting the received MAC from the accessory to the cloud-based server and receiving from the cloud-based server a response indicating whether the performed authentication results in a match between the MAC and the hash value of the shared authentication secret.

14. The medical device of claim 1, wherein the medical device further includes a device processor configured to perform normal device operations of the medical device, the device processor being configured to operate separately from the dedicated authenticator processor.

15. The medical device of claim 1, wherein the MAC that the dedicated authenticator processor receives from the accessory is based on the seed value and an accessory secret stored securely in the accessory, and the MAC does not include the accessory secret.

16. The medical device of claim 1, wherein the dedicated authenticator processor is further configured to receive an update to the shared authentication secret, the update being stored in the authenticator memory.

17. A medical device system having a medical device configured to one or both of treat or monitor a patient, comprising:

an accessory having;

an accessory memory configured to;

securely store one or more accessory secrets, the secure storage of the one or more accessory secrets configured to prevent the one or more accessory secrets from being read or retrieved from the accessory without authentication by a component of the medical device; and

store a shared hashing algorithm;

a secure connector; and

a medical device having;

an authenticator memory configured to;

store one or more shared authentication secrets, each of the shared authentication secrets being associated with an accessory for the medical device; and

store the shared hashing algorithm;

a dedicated authenticator processor configured to;

through the secure connector, receive a message authentication code (MAC) from the accessory, the MAC being based on a seed;

perform an authentication of the MAC by running the seed and the one or more shared authentication secrets through the shared hashing algorithm; and

generate an output that includes authentication results based on the performed authentication of the MAC; and

generate instructions from the output that includes an operational control of one or both of the medical device and the accessory.

18. The medical device system of claim 17, wherein the secure connector includes one or more wired interfaces.

19. The medical device system of claim 17, wherein the secure connector includes a wireless interface.

20. The medical device system of claim 17, wherein the accessory is self-powered.

21. The medical device system of claim 17, wherein the output includes an accessory authorization with a determination of whether the accessory is expired.

22. The medical device system of claim 17, wherein the output includes an accessory authorization with a determination of whether the accessory is an authentic accessory pre-determined to be approved for use with the medical device.

23. The medical device system of claim 17, wherein the output includes an accessory authorization to operate one or both of the medical device or the accessory according to pre-processed functionality.

24. The medical device system of claim 17, wherein the output includes an instruction to disable one or more operations of one or both of the medical device or the accessory.

25. The medical device system of claim 17, wherein the accessory is disposable.