Intraoral scanning device configured to authenticate mode requests

Abstract

In accordance with an embodiment, a method and a handheld intraoral scanning device are disclosed. The handheld intraoral scanning device is configured to acquire intraoral scan data from a three-dimensional dental object during a scan session. The handheld intraoral scanning device may include a processing unit configured to process intraoral scanning data of a patient and provide 2D image data and / or 3D image data, a memory, and a wireless interface configured to transmit the 2D image data and / or the 3D image data, where the processing unit is configured to receive a mode request via the wireless interface, wherein the mode request is one or more of a service mode request, a custom mode request, an upgrade mode request and a debug mode request for a service mode, where the service mode is characterized in that a firmware portion of the memory (3) is writable, the mode request is authenticated, and if the authentication of the mode request is successful, the mode request is not authenticated. If so, the handheld intraoral scanning device is placed in the requested mode.

Description

Technical Field

[0001] The present disclosure relates to an intra-oral scanning device, and in particular, to an intra-oral scanning device and a related method for configuring or operating the intra-oral scanning device. Background Art

[0002] The functionality of intraoral scanning devices has become increasingly advanced. Wireless communications between intraoral scanning devices and external devices such as clinical computers, scanning computers, dental software on computers, and custom computers have been developed. Typically, the wireless communication interface of intraoral scanning devices uses an interface based on open standards. However, this presents many challenges in terms of security. Intraoral scanning devices can assume that any input data is legitimate and can allow unauthorized parties to write or change memory. Any such attack could result in malfunction of the intraoral scanning device, or a battery drain attack.

[0003] However, the intraoral scanning device is a small device with strict limitations in computing power, memory space, etc. Therefore, the device communicating with the intraoral scanning device cannot use the readily available security algorithms and protocols, otherwise there is a risk of draining the battery of the intraoral scanning device or reducing the function of the intraoral scanning device, rendering the intraoral scanning almost useless.

[0004] Existing intraoral scanning devices are part of a service infrastructure that includes intraoral scanning devices, scanning software for specific services, and communication between service providers. Services may, for example, include manufacturing aligners, retainers, crowns, implants, stents, night guards, etc. In order to improve the availability of such infrastructure to dentists, a minimum interaction between the infrastructure and the dentist is required. One way to achieve this is by applying wireless communication between the intraoral scanning device and an external computer that is connected to a server that can forward the intraoral scan data to the service provider. The patient's scan data can be characterized as personal information, and therefore, it is necessary to minimize any risk of a third party stealing or destroying at least the scan data. The scan data is characterized as personal information, and in some cases, other types of personal information such as age, gender, location address, personal security number, etc. are associated with the scan data. In this example, it is necessary to improve the security of wireless communication in the service infrastructure. Summary of the invention

[0005] One aspect of the present disclosure is to reduce the risk of a third party accessing any part of an intra-oral scanning device. There is a need for an intra-oral scanning device that is capable of preventing unauthorized modifications to the intra-oral scanning device and its operation.

[0006] Another aspect of the present disclosure is to provide an intraoral scanning device and method that attempts to mitigate, alleviate, or eliminate the possibility of a third party stealing and / or destroying a patient's personal information.

[0007] Another aspect of the present disclosure is to improve the security of intraoral scanning devices. Security includes assessing threats, vulnerabilities and attacks, and developing appropriate security measures and countermeasures to prevent threats and attacks. The present disclosure relates to an intraoral scanning device, which includes a processing unit configured to process intraoral scan data of a patient and provide 2D image data and / or 3D image data.

[0008] According to this aspect, a handheld intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The handheld intraoral scanning device may include a processing unit configured to process intraoral scan data of a patient and provide 3D image data; a memory; and a wireless interface configured to transmit 3D image data, wherein the processing unit is configured to receive a mode request via the wireless interface when the 3D image data is not being transmitted, wherein the mode request is one or more of a service mode request for a service mode, a customization mode request for customizing a user interface of the handheld intraoral scanning device, an upgrade mode for upgrading the handheld intraoral scanning device, and a debug mode request, wherein the service mode is characterized in that a firmware portion of the memory is writable; authenticate the mode request to confirm that the mode request is valid for the handheld intraoral scanning device; and if the authentication of the mode request is successful, place the handheld intraoral scanning device in the requested mode.

[0009] According to this aspect, a method for configuring a handheld intraoral scanning device is disclosed, which may include a processing unit configured to process intraoral scan data of a patient and provide 3D image data. The handheld intraoral scanning device may also include a memory unit and a wireless interface configured to transmit 3D images. The method may include receiving a mode request via the wireless interface when 3D image data is not transmitted, and wherein the mode request may be one or more of a service mode request, a customization mode request, an upgrade mode request, and a debug mode request for updating firmware data, and wherein the service mode means that the firmware portion of the memory is writable. In addition, the method may include authenticating the mode request to confirm that the mode request is valid for the handheld intraoral scanning device, and if the authentication of the mode request is successful, the intraoral scanning device is placed in the requested mode.

[0010] According to this aspect, an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The intraoral scanning device may include: a processing unit configured to process intraoral scan data of a patient; a memory; and a wireless interface configured to transmit the intraoral scan data of the patient, wherein the processing unit is configured to receive a mode request via the wireless interface, wherein the mode request is one or more of a service mode request, a customization mode request, an upgrade mode, and a debug mode request for a service mode, wherein the service mode is characterized in that a firmware portion of the memory is writable; authenticate the mode request; and if the authentication of the mode request is successful, place the intraoral scanning device in the requested mode.

[0011] According to this aspect, an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The intraoral scanning device may include: a processing unit configured to process intraoral scan data of a patient; a memory; and a wireless interface configured to transmit the intraoral scan data of the patient, wherein the processing unit is configured to receive a mode request via the wireless interface, wherein the mode request is one or more of a service mode request, a customization mode request, an upgrade mode, and a debug mode request for a service mode, wherein the service mode is characterized in that a portion of the memory is writable; authenticate the mode request; and if the authentication of the mode request is successful, place the intraoral scanning device in the requested mode.

[0012] According to this aspect, an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The intraoral scanning device may include a processing unit configured to process intraoral scan data of a patient and provide 2D image data and / or 3D image data; a memory; and a wireless interface configured to transmit the 2D image data and / or the 3D image data, wherein the processing unit is configured to receive an instruction request via the wireless interface, wherein the instruction request is one or more of a service instruction request, a customization instruction request, an upgrade instruction request, and a debugging instruction request for a service instruction, wherein the service instruction is characterized in that a firmware portion of the memory is writable; authenticate the instruction request; and if the authentication of the instruction request is successful, place the intraoral scanning device in the requested instruction.

[0013] The mode request may be similar to the command request. For example, during the transmission of data packets to the intraoral scanning device via the wireless communication link, each data packet is authenticated or verified based on the signature, and when all data packets are successfully authenticated or verified, the intraoral scanning mode is placed in the service command, which causes the data packets to be installed in the firmware portion of the memory.

[0014] According to this aspect, an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The intraoral scanning device may include a processing unit configured to process intraoral scan data of a patient and provide 2D image data and / or 3D image data; a memory; and a wireless interface configured to transmit the 2D image data and / or the 3D image data, wherein the processing unit is configured to receive a connection request via the wireless interface, wherein the connection request is one or more of a service connection request, a customization connection request, an upgrade connection request, and a debugging connection request for a service connection, wherein the service connection is characterized in that a firmware portion of the memory is writable; authenticate the connection request; and if the authentication of the connection request is successful, place the intraoral scanning device in the requested connection.

[0015] A mode request, command request, connection request, memory request, or status request may be similar, but have few differentiating elements in how the intra-oral scanning device is configured to receive a data packet from an external device and install the data packet.

[0016] The handheld intraoral scanning device may receive a mode request when no 3D image data is being transmitted via the wireless interface.

[0017] The intraoral scanning device may be placed in a requested mode that configures the intraoral scanning device to perform changes to how the optical unit acquires images and how the processing unit processes the images into image data, such as 2D images and / or 3D images.

[0018] When the intraoral scanning device is used intentionally, such as for scanning the oral cavity of a patient, the intraoral scanning device is in a scanning phase.

[0019] The intraoral scanning device may be a handheld scanning device for scanning the inside of a patient's oral cavity. The intraoral scanning device differs from other types of dental scanning devices in that the intraoral scanning device is a handheld scanning device that can be easily operated by a user with one hand and has no wired connection to any external device during scanning of the inside of a patient's oral cavity. Therefore, the only attack that the intraoral scanning device may suffer is via a wireless interface.

[0020] An intraoral scanning device refers to a device configured to scan the inside of a patient's mouth or a part of the mouth or multiple parts of the mouth, a part of the mouth or multiple parts of the mouth such as a tooth, multiple teeth, gums, etc., or a device to obtain 2D image data and / or 3D image data of the patient's mouth or a part of the mouth, a part of the mouth such as a tooth, multiple teeth, gums, etc. The intraoral scanning device can be an intraoral scanner that is fully or partially inserted into the patient's mouth, such as a wireless intraoral scanning device.

[0021] The disclosed method and intraoral scanning device provide secure configuration of the intraoral scanning device, such as secure access to the memory of the intraoral scanning device. An advantage of the present disclosure is that the intraoral scanning device can be configured or updated only by authorized parties. Therefore, the disclosed intraoral device has the advantage of detecting and preventing any modification by unauthorized parties. The intraoral scanning device disclosed herein is advantageously protected from attacks, such as spoofing attacks, man-in-the-middle attacks, and / or replay attacks.

[0022] The intraoral scanning device is a key element to provide the required level of security for wireless communications in a service infrastructure that contains at least the intraoral scanning device and the scanning computer or dental software on the computer. It is not possible for a third party to attack the wireless communications, since this person would need to physically hold the intraoral scanning device in their hands. It would not even be sufficient to access the scanning computer or the dental software.

[0023] The methods disclosed herein provide for secure configuration and / or updating of intraoral scanning devices.

[0024] The present disclosure provides improved security for intraoral scanning devices. Security includes assessing threats, vulnerabilities, and attacks, and developing appropriate security measures and countermeasures to protect against threats and attacks.

[0025] The intraoral scanning device includes a processing unit. The processing unit may be configured to process intraoral scan data of the patient and provide 2D image data and / or 3D image data. The 2D image data and / or 3D image data may contain information about the patient's oral anatomical structure, such as teeth, gums, bone levels, and / or information about diagnostic indicators, such as caries, bone loss, gingivitis, gum recession, periodontitis, bone loss, cracks, and bite.

[0026] The 2D image data and / or the 3D image data may be image data configured to be visualized on a display in 2D or 3D, respectively.

[0027] The intraoral scanning device may operate in one or more modes. The one or more modes may include a first mode and / or a second mode. The one or more modes may include a third mode and / or a fourth mode. The one or more modes may include a default mode.

[0028] The first mode may be a service mode. The service mode is characterized in that the firmware portion of the memory may be written in the service mode. The firmware portion of the memory may be write-protected in at least one other mode of the intraoral scanning device. Furthermore, the service mode may include setting the intraoral scanning device to a state in which the optical unit of the intraoral scanning device is ready for use, for example by heating (one or more) light projectors and / or turning on the image sensor. Furthermore, the service mode may include setting the intraoral scanning device in a state in which the intraoral scanning device is performing a self-test of the moving parts of the movable focusing lens, the intensity of (one or more) light projectors and / or the signal-to-noise ratio of the image sensor. Other elements of the intraoral scanning device may be susceptible to self-tests but are not mentioned in the present disclosure.

[0029] The second mode may be a custom mode. The custom mode is characterized in that a custom portion of the memory may be read and / or written in the custom mode. The custom mode is characterized in that the firmware portion of the memory is write protected. The custom portion of the memory may include setting data, such as power management settings, configuration of a user interface of the intraoral scanning device, and / or settings of an optical unit of the intraoral scanning device. The intraoral scanning device may include a color image sensor, such as an RGB image sensor, and in a custom mode, different color areas may be configured to be deactivated and / or activated during at least one scanning session. Therefore, the custom portion of the memory may include data related to which color areas of the RBG image sensor should be activated or deactivated during a scanning session. An intraoral scanning device may include a monochrome image sensor and a color light emitting diode, and in a custom mode, different color light emitting diodes may be configured to be deactivated and / or activated during a scanning session. Therefore, the custom portion of the memory may include data related to which color light emitting diodes should be activated or deactivated during a scanning session. The color light emitting diode may be configured to emit light having a color such as blue, red, green, etc. In another example, the intra-oral scanning device may include one or more near infrared light emitting diodes, which may also be set to activate and / or deactivate during a scanning session in a customized mode.

[0030] The optical unit may include one or more light projectors, one or more optical components, and one or more image sensors.

[0031] The user interface of the intraoral scanning device may include at least one touch sensor, at least one touch button, at least one light emitting diode, a tactile sensor and / or an accelerometer. The handheld intraoral scanning device may include a motion sensor configured to sense the movement of the handheld intraoral scanning device. The handheld intraoral scanning device is configured to wirelessly communicate with an external device connected to a display. The cursor on the display may move around based on the motion signal provided to the external device by the motion sensor. The user can navigate the cursor on the display by moving the handheld intraoral scanning device. The service mode request may include a setting update related to the motion sensor of the handheld intraoral scanning device, and the customization mode request may be related to the customization of the user interface of the handheld intraoral scanning device, which may involve the graphic settings of the graphical user interface on the display. For example, when the handheld intraoral scanning device is connected to the external device, the handheld intraoral scanning device forwards the customization package to the external device via the wireless interface, and then the external device is configured to change the graphic settings based on the customization package. The customization package can be updated by the customization mode request.

[0032] The third mode may be a debug mode. The debug mode is characterized in that a debug portion of the memory may be read and / or written in a customized mode. The debug mode is characterized in that a customized portion of the memory may be read and / or written in the debug mode. The debug mode is characterized in that a firmware portion of the memory may be read and / or written in the debug mode. In at least one other mode of the intraoral scanning device, such as in a default mode and / or a customized mode, the debug portion of the memory may be read protected and / or write protected. In the debug mode, the handheld intraoral scanning device may be configured to transmit debug data related to the performance of the handheld intraoral scanning device, such as the temperature within the handheld intraoral scanning device during scanning, the performance of a light projector and an image sensor of the handheld intraoral scanning device. In addition, the debug data may relate to the performance of the wireless interface during scanning and when no scanning is being performed.

[0033] The firmware data may include updates to the handheld intraoral scanning device that improve the functionality and features of the device.

[0034] A fourth mode may be an upgrade mode. The upgrade mode is characterized in that an upgrade portion of the memory may be read and / or written in the upgrade mode. The upgrade mode is characterized in that the firmware portion of the memory is write protected. The upgrade portion of the memory may include intraoral scanning device data, such as improved features, new features related to the operating software system, FPGA, or other electronic / digital hardware of the intraoral scanning device, such as a scanner throttle, a focus lens motor, (one or more) light projectors, and / or an image sensor.

[0035] The default mode may be a startup mode. The startup mode is characterized in that the intraoral scanning device may operate according to operating parameters set during startup and / or in response to user input via a user interface. The user input may include entering a scanning mode, stopping a scanning mode, entering a command mode, wherein the intraoral scanning device is used as a pointer in a software application, i.e., when the scanner is moved, the cursor / pointer in the software moves accordingly. The default mode is characterized in that in the default mode, the firmware portion (or at least a portion thereof) and / or the customization portion (or at least a portion thereof) of the memory is write-protected and / or read-protected. The default mode is characterized in that in the default mode, the debug portion (or at least a portion thereof) of the memory is read-protected and / or write-protected.

[0036] The intraoral scanning device may include a memory. The memory may be embedded in the processing unit and / or used in a memory unit connected to the processing unit. The memory may include a first memory portion. The first memory portion may be a firmware portion of the memory. The firmware portion of the memory may be configured to be accessed in service mode, such as being written and / or read in service mode. The firmware portion of the memory may be additionally configured to be accessed in debug mode. The memory may include a second memory portion. The second memory portion may be a customized portion of the memory. The customized portion of the memory may be configured to be accessed in customized mode, such as being written and / or read in customized mode. The customized portion of the memory may be additionally configured to be accessed in service mode and / or debug mode. The memory may include a third memory portion. The third memory portion may be a debug portion of the memory. The debug portion of the memory may be configured to be accessed in debug mode, such as being written or read in debug mode. The memory may include a fourth memory portion, which may be an upgrade portion of the memory. The upgrade portion of the memory may be configured to be accessed in upgrade mode, such as being written or read in upgrade mode.

[0037] The intraoral scanning device may include a wireless interface configured to enable wireless communication between the intraoral scanning device and another device. The wireless interface may include a wireless transceiver configured, for example, for wireless communication within a frequency range of from 2.4 GHz to 2.5 GHz, 2.4 GHz to 5 GHz, about 2.45 GHz, or about 5 GHz. The wireless transceiver may be a Bluetooth transceiver, a Bluetooth low energy transceiver, or a wireless fidelity (WIFI) transceiver. The wireless interface may form a connection to one or more other devices, such as a connection to a computer, and / or a scanning computer, and / or a tablet computer, and / or a smart phone.

[0038] The processing unit / intraoral scanning device may be configured to receive a mode request via a wireless interface. The mode request may include a mode identifier indicating a requested mode. The mode request may be a service mode request, for example, the mode identifier indicates a first / service mode. The mode request may be a custom mode request, for example, the mode identifier indicates a second / custom mode. The mode request may be a debug mode request, for example, the mode identifier indicates a third / debug mode. The mode request may be an upgrade mode request, for example, the mode identifier indicates a fourth / upgrade mode. Therefore, the mode request may be one of a service mode request, a custom mode request, an upgrade mode request, and a debug mode request.

[0039] If the intra-oral scanning device is not placed in a scanning session, the intra-oral scanning device may be placed in the requested mode. When placed in a scanning session, the intra-oral scanning device scans in the scanning session.

[0040] The intraoral scanning device can be arranged to be placed in the requested mode at a specific time of the day when the intraoral scanning device is not used. The arrangement can be determined by the processing unit based on the historical usage time of the intraoral scanning device and the machine learning model. The machine learning model receives a timestamp from a clock in the intraoral scanning device and inputs information about when the intraoral scanning device is used in a scanning session. The machine learning model contains a training data set that contains the historical usage time of the intraoral scanning device in the scanning session. Based on the machine learning model and the timestamp defining the time of the day, if a mode request is received, the processing unit will know when to be set to the requested mode. The advantage of this arrangement is that a valid authentication mode request will not interfere with the dentist's work using the intraoral scanning device. In addition, when placed in a customized mode, the intraoral scanning device can be programmed to perform time-consuming updates within (one or more) specific time periods. For example, updates that last more than 30 minutes will be automatically scheduled to be performed during a time period of more than 30 minutes when the intraoral scanning device is not used, such as outside of working hours or during a break at the dentist / clinic.

[0041] The processing unit may be configured to place the intra-oral scanning device in the requested mode if authentication of the mode request is successful and if the timestamp is within the time period. The timestamp is generated by a clock of the intra-oral scanning device and received by the processing unit.

[0042] The processing unit may include a machine learning model including a training data set including historical data related to when the intraoral scanning device was used in a scanning session, and wherein the machine learning model receives a timestamp from a clock in the intraoral scanning device and inputs information about when the intraoral scanning device was used in the scanning session, and if authentication of the mode request is successful and if the machine learning model outputs a trigger that allows the intraoral scanning device to be placed in the mode, the processing unit may be configured to place the intraoral scanning device in the requested mode.

[0043] The mode request may include a sender identifier indicating the sender of the mode request. The mode request may include a certificate, such as a digital signature, for certifying the sender of the mode request. This allows direct authentication of the mode request. The mode request may include a session identifier, such as an encrypted session identifier.

[0044] Before receiving the mode request, the intra-oral scanning device may be paired with the sender of the mode request. In pairing, the intra-oral scanning device and the sending / client device may have exchanged one or more of the intra-oral scanning device identifier, the sender identifier, the session identifier, etc.

[0045] The processing unit / intraoral scanning device is configured to authenticate the mode request and, if authentication of the mode request succeeds, place the intraoral scanning device in the requested mode. The processing unit may be configured to place the intraoral device in a mode different from the requested mode, such as a default mode, if authentication of the mode request fails.

[0046] The intra-oral scanning device disclosed herein has the advantage of verifying the integrity of a received pattern request and / or its sender, detecting any changes and ignoring the requested changed pattern. The intra-oral scanning device disclosed herein can advantageously allow access to specific portions of memory only by an authenticated party, such as an authenticated scanning computer, an authenticated computer, an authenticated accessory device, an authenticated external device and / or an authenticated server.

[0047] The processing unit may be configured to authenticate the mode request by authenticating a sender of the mode request.

[0048] The processing unit / intra-oral scanning device may be configured to authenticate the mode request by verifying the integrity of a digital signature of the mode request. The processing unit may be configured to authenticate the mode request by verifying the integrity of the mode request. The mode request may include a message authentication code (MAC). Verifying the integrity of the mode request may include verifying the message authentication code, for example using a session identifier stored in the intra-oral scanning device. The mode request may include a digital signature or a certificate. Verifying the integrity of the mode request may include verifying the digital signature or the certificate.

[0049] The processing unit / intraoral scanning device may be configured to send a mode response. For example, if the authentication of the mode request is successful, placing the intraoral scanning device in the requested mode may include sending a mode response. The processing unit / intraoral scanning device may be configured to generate and / or send a mode response in response to the mode request. The processing unit may be configured to obtain and / or store a session identifier (which may also be represented as a session key) and include the session identifier and / or an encrypted version thereof in the mode response. Obtaining the session identifier may include generating the session identifier, for example as a random number or a pseudo-random number. Therefore, the intraoral scanning device and / or the processing unit may include a number generator, for example configured to generate a random number or a pseudo-random number as a session identifier. By using a unique session identifier or a session identifier from a large number of available session identifiers, the processing power requirements in the intraoral scanning device may be reduced. In addition, simple encryption is facilitated and replay attacks are prevented.

[0050] The processing unit may be configured to encrypt the session identifier, optionally based on the intra-oral scanning device key. The session identifier may be a session key in the form of a symmetric key. The symmetric session key may provide lightweight processing of security algorithms on the processing unit, such as lightweight encryption, lightweight decryption, lightweight integrity protection, etc. The intra-oral scanning device key may be a symmetric key or a public key in a private key-public key pair. The intra-oral scanning device key may be stored in a permanent memory of the intra-oral scanning device, for example during manufacturing or during a customization session.

[0051] The pattern response may include an encrypted session key. The session response may include an intra-oral scanning device identifier and / or a session key. Thus, the processing unit may be configured to send the intra-oral scanning device identifier and / or the session key in the pattern response. The pattern response including the intra-oral scanning device identifier may enable the sender of the pattern request to obtain the intra-oral scanning device key from a database or by requesting the intra-oral scanning device key from the manufacturer, which in turn enables the sender of the pattern request to decrypt the encrypted session identifier / key and use the session identifier when sending data to the intra-oral scanning device.

[0052] A pattern request may be received in a session. The processing unit / intra-oral scanning device may be configured to terminate the session if authentication of the pattern request fails.

[0053] The mode request may include a signature, and the authentication mode request may include verifying the signature of the mode request.

[0054] The processing unit may be configured to obtain the session identifier, e.g., generate the session identifier, e.g., upon receiving a mode request or when the intra-oral scanning device is in a service mode, a customization mode, or a debug mode. The processing unit may be configured to encrypt the session identifier, e.g., using an intra-oral scanning device key. The processing unit may be configured to transmit the session identifier or the encrypted session identifier via a wireless interface, e.g., as part of a mode response or a session setup message. The processing unit may be configured to store the session identifier in the intra-oral scanning device.

[0055] The processing unit may be configured to receive data via the wireless interface, for example, when the intraoral scanning device is in a certain mode, such as a service mode, a customization mode, and / or a debugging mode. The processing unit may be configured to authenticate the received data, for example, when the intraoral scanning device is in one or more modes, such as a service mode, a customization mode, and / or a debugging mode. The processing unit may be configured to store the intraoral scanning device data in a portion of the memory based on the received data if the authentication of the data is successful. For example, when the intraoral scanning device is in the service mode, the processing unit may store the intraoral scanning data, such as, for example, firmware, in the firmware portion of the memory based on the received data. In the exemplary intraoral scanning device, when the intraoral scanning device is in the customization mode, the processing unit may store the intraoral scanning data, such as customization data, in the customization portion of the memory based on the received data. In the exemplary intraoral scanning device, when the intraoral scanning device is in the debugging mode, the processing unit may store the intraoral scanning device data (debugging data) in the debugging portion of the memory based on the received data.

[0056] The processing unit may be configured to authenticate the received data by verifying the integrity of the received data. Verifying the integrity of the received data may be based on a session identifier stored in the intra-oral scanning device. The received data may include a message authentication code. Verifying the integrity of the received data may include, for example, verifying the message authentication code using the stored session identifier. The received data may include a digital signature. Verifying the integrity of the received data may include verifying the digital signature.

[0057] The data may include a session identifier, and authenticating the data may include comparing the session identifier of the received data with a session identifier stored in the intra-oral scanning device.

[0058] Data may be received in the session. The processing unit may be configured to terminate the session if authentication of the received data fails, for example, the processing unit may be configured to terminate the session if the integrity of the received data is compromised, i.e., verification of the integrity fails. The processing unit may be configured to place the intraoral scanning device in another mode, such as a default mode, if authentication of the received data fails.

[0059] The intraoral scanning device / processing unit may be configured to receive a mode exit request and, for example, if authentication of the mode exit request is successful, place the intraoral scanning device in another mode, such as a default mode. For example, the client device may send a mode exit request when customization or transfer of firmware is complete.

[0060] The disclosed method provides secure configuration and / or updating of an intra-oral scanning device. The method may include placing the intra-oral scanning device in a default mode if authentication of a mode request fails. The method may include determining whether operation in the default mode fails, and switching to a service mode if operation of the intra-oral scanning device in the default mode fails.

[0061] In the method, the authentication mode request may include a sender of the authentication mode request.

[0062] In the method, the mode request may include a digital signature, and authenticating the mode request may include verifying the digital signature.

[0063] In the method, authenticating the mode request may include verifying the integrity of the mode request.

[0064] The method may include, for example, receiving data via a wireless interface when the intraoral scanning device is in one or more modes, such as a service mode, a customization mode, an upgrade mode, and / or a debug mode. The method may include, for example, authenticating the received data when the intraoral scanning device is in one or more modes, such as a service mode, a customization mode, an upgrade mode, and / or a debug mode. The method may include storing the intraoral scanning device data in a portion of a memory based on the received data if the authentication of the data is successful. For example, when the intraoral scanning device is in a service mode, the method may include storing the intraoral scanning device data (firmware) in a firmware portion of the memory based on the received data. In an exemplary method, when the intraoral scanning device is in a customization mode, the method may include storing the intraoral scanning device data, such as customization data, scanning settings, in a customization portion of the memory based on the received data. In an exemplary method, when the intraoral scanning device is in a debug mode, the method may include storing the intraoral scanning device data (debug data) in a debug portion of the memory based on the received data. In an exemplary method, when the intraoral scanning device is in an upgrade mode, the method may include storing intraoral scanning device data based on the received data, such as data containing improved features, new features related to the operating software system, FPGA, or other electronic / digital hardware of the intraoral scanning device, in a debug portion of the memory. The method may include placing the intraoral scanning device in another mode, such as a default mode, if authentication of the received data fails.

[0065] The processing unit may be configured to operate the intra-oral scanning device in a default mode and to switch to a service mode if operating the intra-oral scanning device in the default mode fails. BRIEF DESCRIPTION OF THE DRAWINGS

[0066] Various aspects of the present disclosure may be best understood from the following detailed description in conjunction with the accompanying drawings. For clarity, the drawings are schematic and simplified and they only show details that improve understanding of the claims, while other details are omitted. Throughout the text, the same reference numerals are used for the same or corresponding parts. The various features of each aspect may each be combined with any or all features of the other aspects. These and other aspects, features and / or technical effects will be apparent from and explained with reference to the illustrations described below, in which:

[0067] Figure 1 An exemplary architecture according to the present disclosure is shown;

[0068] Figure 2 An exemplary intraoral scanning device is shown;

[0069] Figure 3 An exemplary sequence diagram between an intra-oral scanning device and a client device is shown;

[0070] Figure 4 shows an exemplary sequence diagram; and

[0071] Figure 5 An exemplary flow chart of a method is shown. DETAILED DESCRIPTION

[0072] The specific embodiments described below in conjunction with the accompanying drawings are intended as descriptions of various configurations. The specific embodiments contain specific details for the purpose of providing a thorough understanding of various concepts. However, it is apparent to those skilled in the art that these concepts can be practiced without these specific details. Several aspects of the devices, systems, media, programs, and methods are described by various blocks, functional units, modules, components, circuits, steps, processes, algorithms, etc. (collectively referred to as "elements"). Depending on the specific application, design constraints, or other reasons, these elements can be implemented using electronic hardware, computer programs, or any combination thereof.

[0073] The electronic hardware may include microprocessors, microcontrollers, digital signal processors (DSPs), field programmable gate arrays (FPGAs), programmable logic devices (PLDs), gated logic, discrete hardware circuits, and other appropriate hardware configured to perform the various functions described throughout the present disclosure. Computer programs should be broadly interpreted to mean instructions, instruction sets, codes, code segments, program codes, programs, subroutines, software modules, applications, software applications, software packages, routines, subroutines, objects, executable programs, threads of execution, procedures, functions, etc., whether referred to as software, firmware, middleware, microcode, hardware description language, or otherwise.

[0074] The scanning for providing intraoral scan data can be performed by a dental scanning system, which can include an intraoral scanning device, such as a TRIOS series scanner from 3Shape A / S. The dental scanning system can include wireless capabilities provided by a wireless network unit. The intraoral scanning device can adopt scanning principles such as triangulation-based scanning, confocal scanning, focused scanning, ultrasonic scanning, x-ray scanning, stereoscopic vision, motion structure, optical coherence tomography OCT, or any other scanning principle. In one embodiment, the intraoral scanning device operates by projecting a pattern and translating the focal plane along the optical axis of the intraoral scanning device and capturing multiple 2D images at different focal plane positions, so that each captured 2D image series corresponding to each focal plane forms a stack of 2D images. The acquired 2D image is also referred to herein as an original 2D image, where original in this context means that the image has not been image processed. The focal plane position is preferably moved along the optical axis of the scanning system so that for a given view of the object, that is, for a given arrangement of the scanning system relative to the object, the 2D images captured at multiple focal plane positions along the optical axis form a stack of the 2D images (also referred to herein as sub-scans). After moving the intraoral scanning device relative to the object or imaging the object in different views, a stack of new 2D images of the view can be captured. The focal plane position can be changed by means of at least one focusing element, such as moving a focusing lens. The intraoral scanning device generally moves and tilts during the scanning session so that at least some groups of sub-scans overlap at least partially to enable stitching in post-processing. The result of stitching is a digital 3D representation of the surface that is larger than the surface that can be captured by a single sub-scan, that is, it is larger than the field of view of the 3D scanning device. Stitching, also known as registration, is achieved by identifying overlapping areas of the 3D surface in each sub-scan and converting the sub-scans to a common coordinate system so that the overlapping areas match to ultimately produce a digital 3D model. For this purpose, an iterative closest point (ICP) algorithm can be used. Another example of an intraoral scanning device is a triangulation scanner, in which a time-varying pattern is projected onto a dental object, and a sequence of images of different pattern configurations is acquired by one or more cameras positioned at an angle relative to the projection unit.

[0075] The intraoral scanning device includes one or more light projectors configured to generate an illumination pattern to be projected onto a three-dimensional dental object during a scanning session. The (one or more) light projectors preferably include a light source, a mask having a spatial pattern, and one or more lenses, such as a collimating lens or a projection lens. The light source can be configured to generate light of a single wavelength or a combination of wavelengths (monochromatic or polychromatic). The combination of wavelengths can be generated by using a light source configured to generate light including different wavelengths (such as white light). Alternatively, the (one or more) light projectors may include a plurality of light sources, such as LEDs, which respectively generate light of different wavelengths, such as red, green, and blue light, which can be combined to form light including different wavelengths. Therefore, the light generated by the light source can be defined by a wavelength that defines a specific color, or by a range of different wavelengths that define a combination of colors, such as white light. In one embodiment, the intraoral scanning device includes a light source configured to excite the fluorescent material of the tooth to obtain fluorescent data from the dental object. Such a light source can be configured to generate a narrow range of wavelengths. In another embodiment, the light from the light source is infrared (IR) light that can penetrate dental tissue. The (one or more) light projectors may be a DLP projector using a micromirror array for generating a time-varying pattern, or a diffractive optical element (DOF), or a backlit mask projector, wherein a light source is placed behind a mask having a spatial pattern, whereby the light projected on the surface of the dental object is patterned. The backlit mask projector may include a collimating lens for collimating light from the light source, the collimating lens being placed between the light source and the mask. The mask may have a checkerboard pattern so that the generated illumination pattern is a checkerboard pattern. Alternatively, the mask may have other patterns, such as lines or dots, etc.

[0076] The intraoral scanning device preferably also includes an optical component for directing light from the light source to the surface of the dental object. The specific arrangement of the optical component depends on whether the intraoral scanning device is a focused scanning device, a scanning device using triangulation, or any other type of scanning device. The same applicant further describes a focused scanning device in EP 2 442 720 B1, the entire contents of which are incorporated herein by reference.

[0077] Using the optical components of the intraoral scanning device, light reflected from the dental object is directed toward (one or more) image sensors in response to the illumination of the dental object. (One or more) image sensors are configured to generate multiple images based on the incident light received from the illuminated dental object. The image sensor can be a high-speed image sensor, such as an image sensor configured to acquire images with an exposure of less than 1 / 1000 seconds or a frame rate of more than 250 frames per second (fps). As an example, the image sensor can be a rolling shutter (CCD) or a global shutter sensor (CMOS). (One or more) image sensors can be monochrome sensors that include a color filter array, such as a Bayer filter and / or additional filters, which can be configured to substantially remove one or more color components from the reflected light before the reflected light is converted into an electrical signal and retain only other components that are not removed. For example, such additional filters can be used to remove a portion of the white light spectrum, such as a blue component, and retain only red and green components in the signal generated in response to the excitation fluorescent material of the tooth.

[0078] The network unit may be configured to connect the dental scanning system to a network including a plurality of network elements, the plurality of network elements including at least one network element configured to receive the processed data. The network unit may include a wireless network unit. The wireless network unit is configured to wirelessly connect the dental scanning system to a network including a plurality of network elements, the plurality of network elements including at least one network element configured to receive the processed data.

[0079] The dental scanning system preferably also includes a processor configured to generate scan data, such as intraoral scan data, by processing a two-dimensional (2D) image acquired by the intraoral scanning device. The processor may be part of the intraoral scanning device. As an example, the processor may include a field programmable gate array (FPGA) and / or an advanced RISC machine (ARM) processor located on the intraoral scanning device. The scan data includes information related to a three-dimensional dental object. The scan data may include any of the following: a 2D image, a 3D point cloud, depth data, texture data, intensity data, color data, and / or a combination thereof. As an example, the scan data may include one or more point clouds, each of which includes a set of 3D points describing a three-dimensional dental object. As another example, the scan data may include an image, each image including image data described, for example, by image coordinates and a timestamp (x, y, t), wherein the depth information may be inferred from the timestamp. The (one or more) image sensors of the intraoral scanning device may acquire multiple original 2D images of the dental object in response to irradiating the object using one or more light projectors. Multiple original 2D images may also be referred to herein as stacks of 2D images. The 2D image can then be provided as an input to a processor that processes the 2D image to generate scan data. The processing of the 2D image can include a step of determining which portion of each of the 2D images is focused in order to infer / generate depth information from the image. The depth information can be used to generate a 3D point cloud including, for example, a set of 3D points in a space described by Cartesian coordinates (x, y, z). The 3D point cloud can be generated by a processor or another processing unit. Each 2D / 3D point can also include a timestamp indicating when the 2D / 3D point was recorded, i.e., which image in the stack of 2D images the point originated from. The timestamp is related to the z coordinate of the 3D point, i.e., the z coordinate can be inferred from the timestamp. Therefore, the output of the processor is scan data, and the scan data may include image data and / or depth data, for example, described by image coordinates and timestamps (x, y, t), or alternatively described as (x, y, z). In addition to scan data, the intraoral scanning device can be configured to transmit other types of data. Examples of data include 3D information, texture information such as infrared (IR) images, fluorescence images, reflectance color images, x-ray images, and / or combinations thereof.

[0080] Figure 1An exemplary architecture 100 according to the present disclosure is shown. The architecture 100 includes an intraoral scanning device 10, a client device 110, and a server device 111. The client device 110 may include a computing device, a customized device, a handheld device, a repeater, a tablet computer, a personal computer, a mobile phone, and / or a USB dongle plugged into a personal computer that acts as a client. The server device 111 may include a computing device configured to act as a server, i.e., to serve requests from the client device 110 and / or from the intraoral scanning device 10. The server device 111 may be controlled by the intraoral scanning device manufacturer.

[0081] The intraoral scanning device 10 can be connected to the client device 110 via a communication link 113, such as a wireless communication link or a two-way wireless communication link. The wireless communication link can be carried by a short-range communication system, such as Bluetooth, low-power Bluetooth, IEEE 802.11, Zigbee, WIFI. The intraoral scanning device 10 can be connected to the client device 110 via a network.

[0082] The intraoral scanning device 10 may be connected to a server device 111 via a two-way wireless communication link 114 through a network 114a or a wireless communication link 114, such as a wireless communication link through a network and / or a two-way wireless communication link.

[0083] Client device 110 may be connected to server device 111 via communication link 112 over network 112a, such as a wireless communication link and / or a two-way wireless communication link over the network. In one embodiment, network 112a may be the Internet.

[0084] Figure 2 An exemplary intraoral scanning device 10 is shown. The exemplary intraoral scanning device 10 includes a processing unit 202 configured to process intraoral scan data of a patient 290 and provide 2D image data and / or 3D image data. The exemplary intraoral scanning device 10 includes a memory and a wireless interface 204. The memory is Figure 2 In the embodiment of the present invention, the memory unit 203 is shown in the form of a memory unit 203 external to the processing unit 202. In other exemplary intra-oral scanning devices, the memory may be at least partially embedded in the processing unit 202 and / or the memory unit 203.

[0085] The processing unit 202 is configured to receive a mode request via the wireless interface 204. Therefore, the processing unit 202 includes a receiving / transmitting unit 205, which is configured to send and / or receive via the wireless interface 204. The receiving / transmitting unit 205 is configured to send and receive to / from an external device via the wireless interface 204, such as a server device, a client device, a customized device, an accessory, a relay device, a smart phone. The processing unit 202 is configured to authenticate the mode request. Therefore, the processing unit 202 may include an authenticator 206 configured to authenticate the mode request. The processing unit 202 is configured to place the intraoral scanning device in a requested mode, such as a service mode, a customized mode, an upgrade mode, or a debug mode, if the authentication of the mode request is successful. Therefore, the processing unit 202 includes a mode controller 207, which is configured to place the intraoral scanning device 10 in the requested mode, for example based on an output from the authenticator 206. In Figure 2 In the intraoral scanning device of the present invention, the processing unit 202 is configured to place the intraoral scanning device in a default mode if the authentication of the mode request fails, the default mode including starting the intraoral scanning device and operating the intraoral scanning device according to the operating parameters set during startup. In one embodiment, the operating parameters set during startup may be stored in the non-volatile portion of the memory unit 203. In one embodiment, the operating parameters set during startup may include default settings that enable the intraoral scanning device to operate according to the default settings programmed during the production of the intraoral scanning device.

[0086] The intraoral scanning device includes a light projector 220 and an image sensor 230. The light projector contains at least one or more light emitting diodes and / or one or more infrared light sources for emitting light patterns to a three-dimensional dental object 290 of a patient or a wax model 290 as a replica of a patient's dental object. The image sensor 230 receives reflected light from the dental object 290, and the image sensor 230 converts the reflected light into intraoral scan data. The processing unit 202 is then configured to process the intraoral scan data into 2D image data and / or 3D image data. The image data is then forwarded to the wireless interface 204, which transmits the data to an external device.

[0087] Figure 3An exemplary sequence diagram 300 between the intraoral scanning device 10 and the client device 110 is shown. In one embodiment, the client device 110 may be in the form of a customized device. The intraoral scanning device 10 receives a customized mode request 301 from the client device 110 via the wireless interface 204, the mode request including a digital signature and a mode identifier. The digital signature may be a signature according to a digital signature standard or other appropriate standard, such as RSA for digital signatures known in the art. The intraoral scanning device 10 authenticates the mode request by verifying the digital signature. In the sequence diagram 300 shown, the authentication is successful, and the processing unit 202 places the intraoral scanning device 10 in a customized mode, including sending a customized mode response 302 to the client device via the wireless interface 204. In the customized mode of the intraoral scanning device 10, the firmware portion of the memory is write-protected, while the customized mode portion of the memory is write-enabled.

[0088] Upon receiving the custom mode response 302, the client device 110 sends data 303 to the intra-oral scanning device 10, which receives the data and authenticates the received data 303, for example by using a digital signature or a session identifier / key as described above. If the authentication of the data 303 is successful, the processing unit 202 derives the intra-oral scanning device data (customized data) from the data 303 and stores the intra-oral scanning device data (customized data) in the custom portion of the memory. If the authentication 303 of the data fails, the processing unit 202 places the intra-oral scanning device in the default mode.

[0089] When the customization data has been transmitted, the client device may send a mode exit request, and the intraoral scanning device is configured to optionally authenticate the mode exit request and optionally place the intraoral scanning device in a default mode if authentication of the mode exit request is successful.

[0090] In another embodiment, the client device may be in the form of a smartphone or tablet computer and may include software configured to provide the functionality of the customized device.

[0091] Figure 4 An exemplary sequence diagram 300' is shown, in which the client device 110 is used to update the firmware of the intra-oral scanning device 10, and the client device 110 is in the form of a customized device. The customized device 10 receives a service mode request 304 from the client device 110 via the wireless interface 204. The intra-oral scanning device 10 authenticates the service mode request. In the illustrated sequence diagram 300', the authentication is successful, and the processing unit 202 places the intra-oral scanning device 10 in the service mode, including sending a service mode response 305 to the client device via the wireless interface 204. In the service mode of the intra-oral scanning device 10, the processing unit 202 is allowed to write to the firmware portion of the memory.

[0092] Upon receiving the service mode response 305, the client device 110 sends data 306 to the intra-oral scanning device 10, which receives the data and authenticates the received data 306, for example, by using a digital signature or a session identifier / key as described above. Before sending the data to the intra-oral scanning device, the client device 110 may correspond with the server device 111, as indicated by dashed arrows 307, 308, for example, to determine the data 306 to be sent to the intra-oral scanning device 10. If the authentication of the data 306 is successful, the processing unit 202 derives the intra-oral scanning device data (firmware data) from the data 306 and stores the intra-oral scanning device data (firmware data) in the firmware portion of the memory. If the authentication of the data 306 fails, the processing unit 202 may place the intra-oral scanning device in a default mode and / or terminate the session.

[0093] When the firmware has been transferred, the client device may send a mode exit request, and the intra-oral scanning device is configured to optionally authenticate the mode exit request, and optionally place the intra-oral scanning device in a default mode if authentication of the mode exit request is successful.

[0094] Figure 5 An exemplary flow chart of a method 400 is shown, which is used, for example, to configure an intraoral scanning device 10, which includes a processing unit 202, a memory and a wireless interface 204, and the processing unit 202 is configured to process intraoral scan data of a patient and provide 2D image data and / or 3D image data. The method 400 includes receiving 401 a mode request via the wireless interface 204, and authenticating 402 the mode request. Authenticating 402 the mode request includes verifying the sender of the mode request and verifying the integrity of the mode request. If the authentication 404 of the mode request is successful, the method continues to place the intraoral scanning device 10 in the requested mode 403. If the authentication 404 of the mode request fails, the method optionally continues to place the intraoral scanning device 10 in a default mode 405. After placing the intraoral scanning device 10 in the requested mode, the method optionally continues to receive 408 data via the wireless interface, authenticate 410 the received data; and if the authentication of the data is successful, store 412 the intraoral device data in a portion of the memory corresponding to the requested mode based on the received data. If the authentication 410 of the received data fails, the method can continue to place 405 the intraoral scanning device in a default mode or another mode and / or terminate the session. While storing, the method 400 optionally includes evaluating 414 whether a mode exit request has been received. If so, the method continues to place 405 the intraoral scanning device in the default mode. If not, the method continues to receive 408 data.

[0095] Although some embodiments have been described and shown in detail, the present disclosure is not limited to such details, but may also be implemented in other ways within the scope of the subject matter defined in the appended claims. In particular, it should be understood that other embodiments may be utilized and structural and functional modifications may be made without departing from the scope of the present invention.

[0096] Benefits, other advantages, and solutions to problems have been described herein with respect to specific embodiments. However, benefits, advantages, solutions to problems, and any (one or more) parts / (one or more) units that may cause any benefit, advantage, or solution to appear or become more significant should not be construed as key, essential, or necessary features or parts / elements of any or all claims or the present invention. Therefore, the scope of the present invention is limited only by the appended claims, wherein unless expressly stated, references to singular parts / units / elements are not intended to mean "one and only one", but "one or more". A claim may refer to any of the preceding claims, and "any" is understood to mean "any one or more" in the preceding claims.

[0097] Structural features of the apparatus described above in the detailed description and / or in the claims may be combined with steps of the method when appropriately replaced by corresponding processes.

[0098] As used, the singular forms "a", "an", and "the" are intended to include the plural forms as well (i.e., have the meaning of "at least one"), unless expressly stated otherwise. It will also be understood that the terms "includes", "comprises", "including", and / or "comprising", when used in this specification, specify the presence of stated features, integers, steps, operations, elements, and / or parts, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements, parts, and / or combinations thereof. It will also be understood that, unless expressly stated otherwise, when an element is referred to as being "connected" or "coupled" to another element, the element may be directly connected or coupled to the other element, but there may also be intermediate elements. In addition, "connected" or "coupled" as used herein may include wireless connections or couplings. As used herein, the term "and / or" includes any and all combinations of one or more of the associated listed items. Unless expressly stated otherwise, the steps of any disclosed method are not limited to the exact order described herein.

[0099] It should be understood that throughout this specification, references to "one embodiment" or "embodiment" or "aspect" or features included as "possible" mean that the specific features, structures or characteristics described in conjunction with this embodiment are included in at least one embodiment of the present disclosure. In addition, in one or more embodiments of the present disclosure, the specific features, structures or characteristics may be appropriately combined. The previous description is provided to enable those skilled in the art to practice the various aspects described herein. Various modifications to these aspects will be apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects.

[0100] The claims are not intended to be limited to the aspects shown herein, but are to be accorded the full scope consistent with the claim language, wherein, unless otherwise specifically stated, elements referred to in the singular are not intended to mean "one and only one," but rather "one or more." Unless expressly stated otherwise, the term "some" refers to one or more.

Claims

1. A handheld intraoral scanning device (10) for acquiring intraoral scan data from a three-dimensional dental object during a scanning session, the handheld intraoral scanning device comprising: A processing unit (2) configured to process the intraoral scan data of the patient and provide 3D image data; a wireless interface (4) configured to transmit said 3D image data; and Memory (3); Wherein, the processing unit (2) is configured as follows: receiving a mode request via the wireless interface when no 3D image data is transmitted, wherein the mode request is one or more of: a service mode request for a service mode, a customization mode request for customizing a user interface of the handheld intraoral scanning device, an upgrade mode request for upgrading the handheld intraoral scanning device, and a debugging mode request, wherein the service mode is characterized in that a firmware portion of the memory (3) is writable; authenticating the mode request to confirm that the mode request is valid for the handheld intra-oral scanning device; and If authentication of the mode request is successful, placing the handheld intra-oral scanning device into the requested mode.

2. The handheld intraoral scanning device according to claim 1, wherein: The processing unit is configured to place the intra-oral scanning device into a default mode if authentication of the mode request fails.

3. The handheld intraoral scanning device according to claim 2, wherein: The default mode includes starting up the handheld intra-oral scanning device and operating the handheld intra-oral scanning device according to operating parameters set during start-up.

4. The handheld intraoral scanning device according to any one of claims 1 to 3, wherein: The processing unit is configured to authenticate the mode request by authenticating a sender of the mode request.

5. A handheld intraoral scanning device according to any one of the preceding claims, wherein: The processing unit is configured to authenticate the mode request by verifying the integrity of the mode request.

6. A handheld intraoral scanning device according to any one of the preceding claims, wherein: If authentication of the mode request is successful, placing the handheld intraoral scanning device in the requested mode includes sending a mode response.

7. A handheld intraoral scanning device according to any one of the preceding claims, wherein: The mode request is received in a session, and the processing unit is configured to terminate the session if authentication of the mode request fails.

8. A handheld intraoral scanning device according to any one of the preceding claims, wherein: The mode request includes a signature, and wherein authenticating the mode request includes verifying the signature of the mode request.

9. A handheld intraoral scanning device according to any one of the preceding claims, wherein: When the handheld intra-oral scanning device is in a service mode, the processing unit is configured to generate a session identifier, transmit the session identifier via the wireless interface, and store the session identifier in the handheld intra-oral scanning device.

10. A handheld intraoral scanning device according to any one of the preceding claims, wherein: When the handheld intraoral scanning device is in service mode, the processing unit is configured to receive data via the wireless interface, wherein the processing unit is configured to authenticate the received data, and if the authentication of the data is successful, store the intraoral scanning device data in a portion of the memory based on the received data.

11. The handheld intraoral scanning device according to claim 10 as appended to claim 9, wherein: The data includes a session identifier, and wherein authenticating the data includes comparing the received session identifier with the session identifier stored in the handheld intra-oral scanning device.

12. The handheld intraoral scanning device according to claim 10, wherein: The data is received in a session, and the processing unit is configured to terminate the session if authentication of the received data fails.

13. A method (400) for configuring a handheld intraoral scanning device, the handheld intraoral scanning device comprising a processing unit, a memory and a wireless interface, the processing unit being configured to process intraoral scanning data of a patient and provide 3D image data, the wireless interface being configured to transmit the 3D image data, the method comprising: receiving (401) a mode request via the wireless interface when no 3D image data is transmitted, wherein the mode request is one or more of: a service mode request for updating firmware data, a customization mode request for customizing a user interface of the handheld intraoral scanning device, an upgrade mode request for upgrading the handheld intraoral scanning device, and a debug mode request, and wherein the service mode is characterized in that the firmware portion of the memory (3) is writable; Authenticating (402) the mode request to confirm that the mode request is valid for the handheld intra-oral scanning device; and • If authentication of the mode request is successful, placing (403) the handheld intra-oral scanning device into the requested mode.

14. The method of claim 13, comprising placing (405) the handheld intra-oral scanning device in a default mode if authentication of the mode request fails.

15. The method according to any one of claims 13 to 14, wherein: Authenticating the mode request includes authenticating a sender of the mode request.

16. The method according to any one of claims 13 to 15, wherein: Authenticating the mode request includes verifying the integrity of the mode request.

17. The method according to any one of claims 13 to 16, wherein: When the handheld intraoral scanning device is in a service mode, the method includes: · receiving (408) data via the wireless interface; Authenticating (410) the received data; and If authentication of the data is successful, storing (412) intra-oral scanning device data in a portion of the memory based on the received data.

Images