Method and apparatus for remotely programming implantable medical devices

• US 20060189854A1
• Filed: 03/06/2006
• Published: 08/24/2006
• Est. Priority Date: 12/17/1999
• Status: Abandoned Application

• Current Assignee: Medtronic Incorporated (Medtronic Plc)
• Original Assignee: Medtronic Incorporated (Medtronic Plc)
• Inventors: Webb, James D., Nelson, Chester G.
• Application Number:
  US11/369,107
• Publication Number:
  US 20060189854A1
• Time in Patent Office: Days
• US Class Current: 600/300
• CPC Class Codes: A61B 5/0006 ECG or EEG signals
• CPC Class Codes: A61B 5/0031 Implanted circuitry
• CPC Class Codes: A61B 5/24 Detecting, measuring or recording bioelectric or biomagnetic signals of the body or parts thereof
• CPC Class Codes: A61M 2205/3523 using telemetric means
• CPC Class Codes: A61M 2205/3553 remote, e.g. between patient's home and doctor's office
• CPC Class Codes: A61M 5/14276 specially adapted for implantation
• CPC Class Codes: A61M 5/172 electrical or electronic A61M5/16804, A61M5/16831 take precedence
• CPC Class Codes: A61N 1/37211 Means for communicating with stimulators
• CPC Class Codes: A61N 1/37247 User interfaces, e.g. input or presentation means
• CPC Class Codes: A61N 1/37254 Pacemaker or defibrillator security, e.g. to prevent or inhibit programming alterations by hackers or unauthorised individuals
• CPC Class Codes: A61N 1/37264 Changing the program; Upgrading firmware
• CPC Class Codes: A61N 1/37282 characterised by communication with experts in remote locations using a network
• CPC Class Codes: G16H 40/40 for the management of medical equipment or devices, e.g. scheduling maintenance or upgrades
• CPC Class Codes: G16H 40/63 for local operation
• CPC Class Codes: G16H 40/67 for remote operation
• CPC Class Codes: G16H 50/20 for computer-aided diagnosis, e.g. based on medical expert systems

Abstract

The present invention provides a method and apparatus for remotely programming implantable medical devices. The apparatus includes a server adapted to receive and store at least one request to modify the behavior of an implantable medical device provided by a programmer adapted to allow a clinician to create the at least one request at a first selected time. The apparatus further includes a monitor adapted to receive the requests from the server and transmit the requests to the implantable medical device at a second selected time and a bi-directional communications system adapted to couple the server and the monitor.

Claims

1. An apparatus, comprising:

a server operating to receive and store at least one request to modify the behavior of an implantable medical device (IMD), the at least one request received from a programmer at a first location and created by a clinician via the programmer at a first selected time;

a monitor at a second location remote from the first location and operating to receive the at least one request from the server, subsequently conduct a programming telemetry session with the IMD, verify a status of the IMD indicating that the at least one request safely complies with a current programming state of the IMD, and transmit the at least one request to the implantable medical device at a second selected time; and

a bi-directional communications system communicatively coupling the server and the monitor.

2. The apparatus of claim 1, wherein the server further verifies that the clinician is authorized to submit the at least one request to the implantable medical device.

3. The apparatus of claim 2, wherein the bi-directional communication system is provides a secure communication link between the server and the monitor.

4. The apparatus of claim 1, wherein the monitor decrypts the at least one request.

5. The apparatus of claim 4, wherein the monitor transmits the at least one decrypted request to the implantable medical device using a radio frequency transmitter.

6. The apparatus of claim 5, wherein the implantable medical device receives the at least one decrypted requests using a radio frequency receiver.

7. The apparatus of claim 1, wherein the second selected time is substantially later than the first selected time.

8. The apparatus of claim 4, wherein the monitor transmits the at least one decrypted requests to a plurality of implantable medical devices.

9. The apparatus of claim 8, wherein the server allows the clinician to submit requests to at least one of the plurality of implantable medical devices.

10. An apparatus, comprising:

a programmer for creating, at a first selected time, a plurality of requests to modify the operation of at least one of a plurality of implantable medical devices, wherein a clinician operates the programmer to create the plurality of requests;

a server at a first selected location operating to receive, store, and encrypt the plurality of requests, wherein the server verifies that the clinician is authorized to submit requests to the at least one of the plurality of implantable medical devices;

a monitor at a second selected location and remote from the programmer operating to receive and decrypt the plurality of requests from the server, conduct a telemetry session with a given implantable medical device and verify an identity of the given implantable medical device, and transmit the requests to the at least one of the plurality of implantable medical devices at a second selected time subsequent to the first selected time; and

a secure bi-directional communications system enabling the server and the monitor to exchange encrypted information.

11. The apparatus of claim 10, wherein the secure bi-directional communications system comprises a Virtual Private Network.

12. The apparatus of claim 10, wherein the secure bi-directional communications system comprises a Secure Socket Layer connection.

13. The apparatus of claim 10, wherein the monitor comprises a radio frequency transmitter that transmits the plurality of requests to the at least one of a plurality of implantable medical devices.

14. The apparatus of claim 13, wherein the at least one of the plurality of implantable medical devices comprises a radio frequency receivers that receive the requests from the monitor.

15. The apparatus of claim 10, wherein the second selected time is substantially later than the first selected time.

16. A method, comprising:

programming at a first selected time at least one request to modify the operation of an implantable medical device;

storing the at least one request at a first selected location;

transmitting the at least one request from the first selected location at a second selected time to a second selected location remote from a programmer used for programming the at least one request;

conducting a telemetry programming session between the second selected location and the implantable medical device;

verifying that the at least one request is safely compatible with a current state of the implantable medical device; and

transmitting the at least one request from the second selected location to the implantable medical device if the at least one request is safely compatible.

17. The method of claim 16, wherein programming comprises authorizing a clinician to create the at least one request.

18. The method of claim 17, wherein programming further comprises selecting the implantable medical device from among a plurality of implantable medical devices that the clinician is authorized to program.

19. The method of claim 16, wherein transmitting the at least one request from the first selected location to the second selected location comprises forming a secure communication link between the first selected location and the second selected location.

20. The method of claim 19, wherein forming a secure connection comprises forming a Virtual Private Network connection.

21. The method of claim 20, wherein forming a secure connection comprises forming a Secure Socket Layer connection.

22. The method of claim 19, wherein transmitting the at least one request from the first selected location further comprises encrypting the at least one request at the first location.

23. The method of claim 22, wherein transmitting the at least one encrypted request from the first selected location to the second selected location further comprises transmitting the encrypted request from the first selected location to the second selected location using the secure connection.

24. The method of claim 23, wherein transmitting the at least one request from the first selected location to the second selected location further comprises decrypting the at least one request at the second selected location.

25. The method of claim 24, wherein transmitting the at least one request from the first selected location to the second selected location comprises retrieving the at least one request at a second selected time that is substantially later than the first selected time.

26. A method, comprising:

creating, at a first selected time, at least one request to modify the operation of an implantable medical device using a programmer;

storing the at least one request on a server at a first selected location;

encrypting the at least one request on the server at a second selected time in response to notification that a monitor at a second location remote from the programmer is substantially ready to receive the request;

transmitting the at least one encrypted request from the server to the monitor through a secure bi-directional communications network when a monitor at a second location is substantially ready to receive the at least one encrypted request;

decrypting the at least one encrypted request on the monitor;

establishing a telemetry programming session between the monitor and the implantable medical device;

determining that a current state of the implantable medical device is safely compatible with the at least one request; and

transmitting the at least one decrypted request from the monitor to the implantable medical device using a radio frequency transmitter, if the current state is safely compatible.

27. The method of claim 26, wherein creating the at least one request comprises authorizing a clinician to create a request;

28. The method of claim 26, wherein transmitting the at least one encrypted request from the server to the monitor through a secure bi-directional communications network comprises transmitting the at least one encrypted request through a Virtual Private Network.

29. The method of claim 26, wherein transmitting the at least one encrypted request from the server to the monitor through a secure bi-directional communications network comprises transmitting the at least one encrypted request through a Secure Socket Layer.