Intraoral scanning device configured to authenticate mode requests

Abstract

According to one embodiment, a method and an intraoral scanning device are disclosed. The intraoral scanning device is configured to acquire intraoral scan data from a three-dimensional dental object during a scan session. The intraoral scanning device may include a processing unit configured to process intraoral scanning data of a patient and provide two-dimensional image data and / or three-dimensional image data, a memory, and a wireless interface configured to transmit the two-dimensional image data and / or the three-dimensional image data, where the processing unit is configured to receive a mode request via the wireless interface, wherein the mode request is one or more of a service mode request, a custom mode request, an upgrade mode request and a debug mode request for a service mode, wherein the service mode is characterized in that a firmware portion of the memory (3) is writable; authenticating the mode request; and placing the intraoral scanning device in the requested mode if the authentication of the mode request is successful.

Description

Technical Field

[0001] The present disclosure relates to an intraoral scanning device, and more particularly to an intraoral scanning device and a related method for configuring or operating the intraoral scanning device. Background Art

[0002] The functionality of intraoral scanning devices has become increasingly advanced. Wireless communications between intraoral scanning devices and external devices (e.g., clinical computers, scanning computers, dental software on computers, and custom computers) have been developed. Typically, the wireless communication interface of an intraoral scanning device uses an interface based on open standards. However, this presents many challenges in terms of security. An intraoral scanning device may assume that any input data is legitimate and may allow unauthorized parties to write or change memory. Any such attack may result in a malfunction of the intraoral scanning device, or a battery drain attack.

[0003] However, the intraoral scanning device is a small device with strict limitations in computing power, memory space, etc. Therefore, the device communicating with the intraoral scanning device cannot use the readily available security algorithms and protocols, which poses risks such as draining the battery of the intraoral scanning device or reducing the function of the intraoral scanning device, rendering the intraoral scanning almost useless.

[0004] Existing intraoral scanning devices are part of a service infrastructure that includes intraoral scanning devices, scanning software for specific services, and communication between service providers. Services may include, for example, manufacturing braces, retainers, crowns, implants, braces, mouth guards, etc. In order to improve the availability of this infrastructure to dentists, a minimum interaction between the infrastructure and the dentist is required. One way to achieve this is by applying wireless communication between the intraoral scanning device and an external computer that is connected to a server that can forward the intraoral scan data to the service provider. The patient's scan data can be characterized as personal information, and therefore, any risk of a third party stealing or destroying at least the scan data needs to be minimized. The scan data is characterized as personal information, and in some cases, other types of personal information such as age, gender, location address, personal security number, etc. are associated with the scan data. In this example, the security of wireless communication in the service infrastructure needs to be improved. Summary of the invention

[0005] An object of one aspect of the present disclosure is to reduce the risk of a third party accessing any part of an intra-oral scanning device. There is a need for an intra-oral scanning device that is capable of preventing unauthorized modifications to the intra-oral scanning device and its operation.

[0006] It is an object of another aspect of the present disclosure to provide an intraoral scanning device and method that seeks to mitigate, reduce or eliminate the possibility of a third party stealing and / or destroying a patient's personal information.

[0007] Another aspect of the present disclosure is to improve the security of an intraoral scanning device. Security includes assessing threats, vulnerabilities, and attacks, and developing appropriate security measures and countermeasures to prevent threats and attacks. The present disclosure relates to an intraoral scanning device including a processing unit, the processing unit being configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data.

[0008] According to this aspect, a handheld intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The handheld intraoral scanning device may include a processing unit configured to process intraoral scan data of a patient and provide three-dimensional image data; a memory; and a wireless interface configured to transmit three-dimensional image data, wherein the processing unit is configured to receive a mode request via the wireless interface when no three-dimensional image data is transmitted, wherein the mode request is one or more of a service mode request for a service mode, a customization mode request for customizing a user interface of the handheld intraoral scanning device, an upgrade mode for upgrading the handheld intraoral scanning device, and a debug mode request, wherein the service mode is characterized in that a firmware portion of the memory is writable; the mode request is authenticated to confirm that the mode request is valid for the handheld intraoral scanning device; and if the authentication of the mode request is successful, the handheld intraoral scanning device is placed in the requested mode.

[0009] According to this aspect, a method for configuring a handheld intraoral scanning device is disclosed, which may include a processing unit configured to process intraoral scan data of a patient and provide three-dimensional image data. The handheld intraoral scanning device may also include a memory unit and a wireless interface configured to transmit a three-dimensional image. The method may include receiving a mode request via the wireless interface when no three-dimensional image data is transmitted, wherein the mode request may be one or more of a service mode request, a customization mode request, an upgrade mode request, and a debug mode request for updating firmware data, and wherein the service mode means that the firmware portion of the memory is writable. In addition, the method may include authenticating the mode request to confirm that the mode request is valid for the handheld intraoral scanning device, and if the authentication of the mode request is successful, placing the intraoral scanning device in the requested mode.

[0010] According to this aspect, an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The intraoral scanning device may include a processing unit configured to process intraoral scan data of a patient; a memory; and a wireless interface configured to transmit the intraoral scan data of the patient, wherein the processing unit is configured to receive a mode request via the wireless interface, wherein the mode request is one or more of a service mode request, a customization mode request, an upgrade mode, and a debug mode request for a service mode, wherein the service mode is characterized in that a firmware portion of the memory is writable; authenticate the mode request; and if the authentication of the mode request is successful, place the intraoral scanning device in the requested mode.

[0011] According to this aspect, an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The intraoral scanning device may include a processing unit configured to process intraoral scan data of a patient; a memory; and a wireless interface configured to transmit the intraoral scan data of the patient, wherein the processing unit is configured to receive a mode request via the wireless interface, wherein the mode request is one or more of a service mode request, a customization mode request, an upgrade mode, and a debugging mode request for a service mode, wherein the service mode is characterized in that a portion of the memory is writable; authenticate the mode request; and if the authentication of the mode request is successful, place the intraoral scanning device in the requested mode.

[0012] According to this aspect, an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The intraoral scanning device may include a processing unit configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data; a memory; and a wireless interface configured to transmit two-dimensional image data and / or three-dimensional image data, wherein the processing unit is configured to receive an instruction request via the wireless interface, wherein the instruction request is one or more of a service instruction request, a customization instruction request, an upgrade instruction request, and a debugging instruction request for a service instruction, wherein the service instruction is characterized in that a firmware portion of the memory is writable; authenticate the instruction request; and if the authentication of the instruction request is successful, place the intraoral scanning device in the requested instruction.

[0013] The mode request may be similar to the command request. For example, during the transmission of data packets to the intraoral scanning device via the wireless communication link, each data packet is authenticated or verified based on the signature, and, when all data packets are successfully authenticated or verified, the intraoral scanning mode is placed in the service command, which causes the data packets to be installed in the firmware portion of the memory.

[0014] According to this aspect, an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The intraoral scanning device may include a processing unit configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data; a memory; and a wireless interface configured to transmit the two-dimensional image data and / or the three-dimensional image data, wherein the processing unit is configured to receive a connection request via the wireless interface, wherein the connection request is one or more of a service connection request, a customization connection request, an upgrade connection request, and a debugging connection request for a service connection, wherein the service connection is characterized in that a firmware portion of the memory is writable; authenticate the connection request; and if the authentication of the connection request is successful, place the intraoral scanning device in the requested connection.

[0015] A mode request, command request, connection request, memory request, or status request may be similar, but have few differentiating elements in how to configure the intra-oral scanning device to receive a data packet from an external device and install the data packet.

[0016] The handheld intraoral scanning device may receive a mode request when no three-dimensional image data is being transmitted via the wireless interface.

[0017] The intraoral scanning device may be placed in a request mode that configures the intraoral scanning device to modify how the optical unit acquires images and how the processing unit processes images, eg, two-dimensional and / or three-dimensional images, into image data.

[0018] When an intraoral scanning device is being used intentionally, such as to scan the oral cavity of a patient, it is in a scanning session.

[0019] The intraoral scanning device may be a handheld scanning device for scanning the inside of a patient's oral cavity. The intraoral scanning device is different from other types of dental scanning devices in that the intraoral scanning device is a handheld scanning device that can be easily operated by a user with one hand, and it has no wired connection with any external device during scanning the inside of a patient's oral cavity. Therefore, the only attack that the intraoral scanning device may suffer is an attack via a wireless interface.

[0020] An intraoral scanning device refers to a device configured to scan inside a patient's oral cavity or at a portion or portions of the oral cavity, such as a tooth, multiple teeth, gums, etc., or to obtain two-dimensional image data and / or three-dimensional image data of the patient's oral cavity or a portion thereof, such as a tooth, multiple teeth and / or gums, etc. The intraoral scanning device may be an intraoral scanner that is fully or partially inserted into the patient's oral cavity, such as a wireless intraoral scanning device.

[0021] The disclosed method and intraoral scanning device enable secure configuration of the intraoral scanning device, such as secure access to the memory of the intraoral scanning device. An advantage of the present disclosure is that the intraoral scanning device can only be configured or updated by an authorized party. Therefore, the disclosed intraoral device has the advantage of detecting and preventing any modification by an unauthorized party. The intraoral scanning device disclosed herein is advantageously protected from attacks, such as spoofing attacks, man-in-the-middle attacks, and / or replay attacks.

[0022] The intraoral scanning device is a key element in providing the required level of security for wireless communications in a service infrastructure that includes at least the intraoral scanning device and the scanning computer or dental software on the computer. It is not possible for a third party to attack the wireless communications, since that person must actually have the intraoral scanning device in his or her hands. It is not even possible to access the scanning computer or the dental software.

[0023] The methods disclosed herein enable secure configuration and / or updating of intra-oral scanning devices.

[0024] The present disclosure improves the security of intraoral scanning devices. Security includes assessing threats, vulnerabilities, and attacks, and developing appropriate security measures and countermeasures to prevent threats and attacks.

[0025] The intraoral scanning device includes a processing unit. The processing unit may be configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data. The two-dimensional image data and / or three-dimensional image data may contain information about the patient's oral anatomical structure, such as teeth, gums, bone levels, and / or information about diagnostic indicators, such as caries, bone loss, gingivitis, gum recession, periodontitis, bone loss, cracks, and bite.

[0026] The two-dimensional image data and / or the three-dimensional image data may be image data configured to be visualized on a display in two dimensions or three dimensions, respectively.

[0027] The intraoral scanning device may operate in one or more modes. The one or more modes may include a first mode and / or a second mode. The one or more modes may include a third mode and / or a fourth mode. The one or more modes may include a default mode.

[0028] The first mode may be a service mode. The service mode may be characterized by a firmware portion of the memory being writable in the service mode. In at least one other mode of the intraoral scanning device, the firmware portion of the memory may be write-protected. Furthermore, the service mode may include setting the intraoral scanning device in a state in which an optical unit of the intraoral scanning device is ready to be used, for example by heating (one or more) light projectors and / or switching on an image sensor. Furthermore, the service mode may include setting the intraoral scanning device in a state in which the intraoral scanning device performs a self-test of moving parts, such as a movable focusing lens, of the intensity of the light projectors and / or of the signal-to-noise ratio of the image sensor. Self-tests may be performed on other elements of the intraoral scanning device, but are not mentioned in the present disclosure.

[0029] The second mode may be a custom mode. The custom mode may be characterized in that a custom portion of the memory can be read and / or written in the custom mode. The custom mode may be characterized in that the firmware portion of the memory is write-protected. The custom portion of the memory may contain setting data, such as power management settings, configuration of a user interface of the intraoral scanning device, and / or settings of an optical unit of the intraoral scanning device. The intraoral scanning device may include a color image sensor, such as an RGB image sensor, and, in the custom mode, different color areas may be configured to be deactivated and / or activated during at least one scanning session. Therefore, the custom portion of the memory may contain data related to which color areas of the RBG image sensor should be activated or deactivated during the scanning session. The intraoral scanning device may include a monochrome image sensor and a color light emitting diode, and, in the custom mode, different color light emitting diodes may be configured to be deactivated and / or activated during the scanning session. Therefore, the custom portion of the memory may contain data related to which color light emitting diodes should be activated or deactivated during the scanning session. The color light emitting diode may be configured to emit colored light, such as blue, red, green, etc. In another example, an intraoral scanning device may include one or more near infrared light emitting diodes, which may also be configured to be activated and / or deactivated during a scanning session in a customized mode.

[0030] The optical unit may include one or more light projectors, one or more optical components, and one or more image sensors.

[0031] The user interface of the intraoral scanning device may include at least one touch sensor, at least one touch button, at least one light emitting diode, a tactile sensor and / or an accelerometer. The handheld intraoral scanning device may include a motion sensor configured to sense the movement of the handheld intraoral scanning device. The handheld intraoral scanning device is configured to wirelessly communicate with an external device connected to a display. The cursor on the display may move around based on the motion signal provided to the external device by the motion sensor. The user is able to navigate the cursor on the display by moving the handheld intraoral scanning device. The service mode request may include a setting update related to the motion sensor of the handheld intraoral scanning device, and the customization mode request may involve customization of the user interface of the handheld intraoral scanning device, which may involve the graphical settings of the graphical user interface on the display. For example, when the handheld intraoral scanning device is connected to the external device, the handheld intraoral scanning device forwards the customization package to the external device via the wireless interface, and then the external device is configured to change the graphical settings based on the customization package. The customization package can be updated through the customization mode request.

[0032] The third mode may be a debug mode. The debug mode may be characterized in that a debug portion of the memory can be read and / or written in the customized mode. The debug mode may be characterized in that a customized portion of the memory can be read and / or written in the debug mode. The debug mode may be characterized in that a firmware portion of the memory can be read and / or written in the debug mode. In at least one other mode of the intraoral scanning device, such as in the default mode and / or the customized mode, the debug portion of the memory may be read-protected and / or write-protected. In the debug mode, the handheld intraoral scanning device may be configured to transmit debug data related to the performance of the handheld intraoral scanning device, such as the temperature within the handheld intraoral scanning device during scanning, the performance of the light projector and image sensor of the handheld intraoral scanning device. In addition, the debug data may relate to the performance of the wireless interface during scanning and when scanning is not in progress.

[0033] The firmware data may include updates to the handheld intraoral scanning device that improve the functionality and features of the device.

[0034] A fourth mode may be an upgrade mode. The upgrade mode may be characterized in that the upgrade portion of the memory can be read and / or written in the upgrade mode. The upgrade mode may be characterized in that the firmware portion of the memory is write protected. The upgrade portion of the memory may contain intraoral scanning device data, such as improved features, new features related to the operating software system, FPGA or other electronic / digital hardware of the intraoral scanning device, such as scanner throttle, focus lens motor, (one or more) light projector and / or image sensor.

[0035] The default mode may be a boot mode. The boot mode may be characterized in that the intraoral scanning device may be operated according to operating parameters set during boot and / or in response to user input through a user interface. The user input may include entering a scan mode, stopping a scan mode, entering a command mode, in which the intraoral scanning device is used as a pointer in a software application, i.e., when the scanner is moved, a cursor / pointer in the software moves accordingly. The default mode may be characterized in that in the default mode the firmware portion (or at least a portion thereof) and / or the customization portion (or at least a portion thereof) of the memory is write-protected and / or read-protected. The default mode may be characterized in that in the default mode the debug portion (or at least a portion thereof) of the memory is read-protected and / or write-protected.

[0036] The intraoral scanning device may include a memory. The memory may be embedded in the processing unit and / or used in a memory unit connected to the processing unit. The memory may include a first memory portion. The first memory portion may be a firmware portion of the memory. The firmware portion of the memory may be configured to be accessed in a service mode, such as writing and / or reading in a service mode. The firmware portion of the memory may also be configured to be accessed in a debug mode. The memory may include a second memory portion. The second memory portion may be a customized portion of the memory. The customized portion of the memory may be configured to be accessed in a customized mode, such as being written and / or read in a customized mode. The customized portion of the memory may also be configured to be accessed in a service mode and / or a debug mode. The memory may include a third memory portion. The third memory portion may be a debug portion of the memory. The debug portion of the memory may be configured to be accessed in a debug mode, such as being written or read in a debug mode. The memory may include a fourth memory portion, which may be an upgrade portion of the memory. The upgrade portion of the memory may be configured to be accessed in an upgrade mode, such as being written or read in an upgrade mode.

[0037] The intraoral scanning device may include a wireless interface configured to enable wireless communication between the intraoral scanning device and another device. The wireless interface may include a wireless transceiver configured, for example, to wirelessly communicate in a frequency range of 2.4 GHz to 2.5 GHz, 2.4 GHz to 5 GHz, or about 2.45 GHz or about 5 GHz. The wireless transceiver may be a Bluetooth transceiver, a Bluetooth low energy transceiver, or a wireless fidelity (WIFI) transceiver. The wireless interface may form a connection to one or more other devices, such as a connection to a computer, and / or a scanning computer, and / or a tablet computer and / or a smart phone.

[0038] The processing unit / intraoral scanning device may be configured to receive a mode request via a wireless interface. The mode request may include a mode identifier indicating the requested mode. The mode request may be a service mode request, for example, the mode identifier indicates a first / service mode. The mode request may be a custom mode request, for example, the mode identifier indicates a second / custom mode. The mode request may be a debug mode request, for example, the mode identifier indicates a third / debug mode. The mode request may be an upgrade mode request, for example, the mode identifier indicates a fourth / upgrade mode. Therefore, the mode request may be one of a service mode request, a custom mode request, an upgrade mode request, and a debug mode request.

[0039] If the intra-oral scanning device is not placed in a scanning session, the intra-oral scanning device may be placed in a request mode. When placed in a scanning session, the intra-oral scanning device performs scanning in the scanning session.

[0040] The intraoral scanning device can be arranged to be placed in the request mode at a specific time of the day when the intraoral scanning device is not used. The arrangement can be determined by the processing unit based on the historical usage time of the intraoral scanning device and the machine learning model. The machine learning model receives a timestamp from the clock in the intraoral scanning device and inputs information about when the intraoral scanning device was used for a scanning session. The machine learning model contains a training data set, which contains the historical usage time of the intraoral scanning device in the scanning session. Based on the machine learning model and the timestamp defining the time of the day, if a mode request is received, the processing unit will know when to be set to the requested mode. The advantage of this arrangement is that valid authenticated mode requests do not interfere with the dentist's work using the intraoral scanning device. In addition, when placed in the customized mode, the intraoral scanning device can be programmed to perform time-consuming updates within (one or more) specific time periods. For example, updates that last more than 30 minutes will be automatically scheduled to be performed within a period of longer than 30 minutes when the intraoral scanning device is not used, such as outside of working hours or during a break at the dentist / clinic.

[0041] The processing unit may be configured to place the intra-oral scanning device into the requested mode if authentication of the mode request is successful and the timestamp is within the time period. The timestamp is generated by a clock of the intra-oral scanning device and received by the processing unit.

[0042] The processing unit may include a machine learning model that includes a training data set that includes historical data related to the usage time of the intraoral scanning device in a scanning session, and wherein the machine learning model receives a timestamp from a clock in the intraoral scanning device and inputs information about when the intraoral scanning device was used in the scanning session, and the processing unit may then be configured to place the intraoral scanning device in the requested mode if authentication of the mode request is successful and if the machine learning model outputs a trigger that allows the intraoral scanning device to be placed in the requested mode.

[0043] The mode request may include a sender identifier indicating the sender of the mode request. The mode request may include a certificate, such as a digital signature, for certifying the sender of the mode request. This allows direct authentication of the mode request. The mode request may include a session identifier, such as an encrypted session identifier.

[0044] Before receiving the mode request, the intra-oral scanning device can be paired with the sender of the mode request. In pairing, the intra-oral scanning device and the sending / client device can exchange one or more of the intra-oral scanning device identifier, the sender identifier, the session identifier, etc.

[0045] The processing unit / intraoral scanning device is configured to authenticate the mode request and place the intraoral scanning device in the requested mode if the authentication of the mode request succeeds. The processing unit may be configured to place the intraoral device in a mode different from the requested mode, such as a default mode, if the authentication of the mode request fails.

[0046] The intra-oral scanning device disclosed herein has the advantage of verifying the integrity of the received mode request and / or its sender, detecting any changes and ignoring the changed mode request. The intra-oral scanning device disclosed herein can advantageously allow access to specific portions of the memory only by an authenticated party, such as an authenticated scanning computer, an authenticated computer, an authenticated accessory device, an authenticated external device and / or an authenticated server.

[0047] The processing unit may be configured to authenticate the mode request by authenticating a sender of the mode request.

[0048] The processing unit / intraoral scanning device may be configured to authenticate the mode request by verifying the integrity of a digital signature of the mode request. The processing unit may be configured to authenticate the mode request by verifying the integrity of the mode request. The mode request may include a message authentication code (MAC). Verifying the integrity of the mode request may include verifying the message authentication code, such as using a session identifier stored in the intraoral scanning device. The mode request may include a digital signature or a certificate. Verifying the integrity of the mode request may include verifying the digital signature or the certificate.

[0049] The processing unit / intraoral scanning device may be configured to send a mode response. For example, if the authentication of the mode request is successful, placing the intraoral scanning device in the requested mode may include sending a mode response. The processing unit / intraoral scanning device may be configured to generate and / or send a mode response in response to the mode request. The processing unit may be configured to obtain and / or store a session identifier (also referred to as a session key), and include the session identifier and / or an encrypted version thereof in the mode response. Obtaining the session identifier may include generating the session identifier, for example as a random or pseudo-random number. Therefore, the intraoral scanning device and / or the processing unit may include a digital generator, which is configured to generate a random or pseudo-random number as a session identifier, for example. By using a unique session identifier or a session identifier from a large number of available session identifiers, the requirements for the processing power of the intraoral scanning device can be reduced. In addition, encryption is simplified and replay attacks are prevented.

[0050] The processing unit may be configured to encrypt the session identifier, optionally based on the intraoral scanning device key. The session identifier may be a session key in the form of a symmetric key. The symmetric session key may provide lightweight processing of security algorithms on the processing unit, such as lightweight encryption, lightweight decryption, lightweight integrity protection, etc. The intraoral scanning device key may be a symmetric key or a public key in a private-public key pair. For example, the intraoral scanning device key may be stored in a permanent memory of the intraoral scanning device during manufacturing or during a customization session.

[0051] The mode response may include an encrypted session key. The session response may include an intraoral scanning device identifier and / or a session key. Thus, the processing unit may be configured to send the intraoral scanning device identifier and / or the session key in the mode response. The mode response including the intraoral scanning device identifier may enable the sender of the mode request to obtain the intraoral scanning device key from a database or by requesting the intraoral scanning device key from the manufacturer, which in turn enables the sender of the mode request to decrypt the encrypted session identifier / key and use the session identifier when sending data to the intraoral scanning device.

[0052] The pattern request may be received in the session. The processing unit / intra-oral scanning device may be configured to terminate the session if authentication of the pattern request fails.

[0053] The pattern request may include a signature, and authenticating the pattern request may include verifying the signature of the pattern request.

[0054] The processing unit may be configured to obtain a session identifier, e.g., generate a session identifier, e.g., upon receiving a mode request or when the intra-oral scanning device is in a service mode, a customization mode, or a debug mode. The processing unit may be configured to encrypt the session identifier, e.g., using an intra-oral scanning device key. The processing unit may be configured to send the session identifier or the encrypted session identifier via a wireless interface, e.g., as part of a session establishment message or a mode response. The processing unit may be configured to store the session identifier in the intra-oral scanning device.

[0055] The processing unit may be configured to receive data via a wireless interface, for example, when the intraoral scanning device is in a certain mode, such as a service mode, a customization mode, and / or a debugging mode. The processing unit may be configured to authenticate the received data, for example, when the intraoral scanning device is in one or more modes, such as a service mode, a customization mode, and / or a debugging mode. The processing unit may be configured to store the intraoral scanning device data in a portion of the memory based on the received data if the authentication of the data is successful. For example, when the intraoral scanning device is in the service mode, the processing unit may store the intraoral scanning data, such as firmware, in a firmware portion of the memory based on the received data. In an exemplary intraoral scanning device, when the intraoral scanning device is in the customization mode, the processing unit may store the intraoral scanning data, such as customization data, in a customization portion of the memory based on the received data. In an exemplary intraoral scanning device, when the intraoral scanning device is in the debugging mode, the processing unit may store the intraoral scanning device data (debugging data) in a debugging portion of the memory based on the received data.

[0056] The processing unit may be configured to authenticate the received data by verifying the integrity of the received data. Verifying the integrity of the received data may be based on a session identifier stored in the intraoral scanning device. The received data may include a message authentication code. Verifying the integrity of the received data may include verifying the message authentication code, for example using a stored session identifier. The received data may include a digital signature. Verifying the integrity of the received data may include verifying the digital signature.

[0057] The data may include a session identifier, and authenticating the data may include comparing the session identifier of the received data with a session identifier stored in the intra-oral scanning device.

[0058] Data may be received in the session. The processing unit may be configured to terminate the session if authentication of the received data fails, for example, the processing unit may be configured to terminate the session if the integrity of the received data is compromised, i.e., verification of the integrity fails. The processing unit may be configured to place the intraoral scanning device in another mode, such as a default mode, if authentication of the received data fails.

[0059] The intraoral scanning device / processing unit may be configured to receive a mode exit request and place the intraoral scanning device in another mode, such as a default mode, if authentication of the mode exit request succeeds. For example, the client device may send a mode exit request when customization or transfer of firmware is complete.

[0060] The disclosed method implements secure configuration and / or updating of an intra-oral scanning device. The method may include placing the intra-oral scanning device in a default mode if authentication of a mode request fails. The method may include determining whether operation in the default mode fails, and switching to a service mode if operation of the intra-oral scanning device in the default mode fails.

[0061] In the method, authenticating the mode request may include authenticating a sender of the mode request.

[0062] In the method, the mode request may include a digital signature, and authenticating the mode request may include verifying the digital signature.

[0063] In the method, authenticating the mode request may include verifying the integrity of the mode request.

[0064] The method may include receiving data via a wireless interface, such as when the intraoral scanning device is in one or more modes, such as a service mode, a customization mode, an upgrade mode, and / or a debug mode. The method may include authenticating the received data, such as when the intraoral scanning device is in one or more modes, such as a service mode, a customization mode, an upgrade mode, and / or a debug mode. The method may include storing the intraoral scanning device data in a portion of a memory based on the received data if the data authentication is successful. For example, when the intraoral scanning device is in a service mode, the method may include storing the intraoral scanning device data (firmware) in a firmware portion of the memory based on the received data. In an exemplary method, when the intraoral scanning device is in a customization mode, the method may include storing the intraoral scanning device data (e.g., customization data, scan settings) in a customization portion of the memory based on the received data. In an exemplary method, when the intraoral scanning device is in a debug mode, the method may include storing the intraoral scanning device data (debug data) in a debug portion of the memory based on the received data. In an exemplary method, when the intraoral scanning device is in an upgrade mode, the method may include storing intraoral scanning device data (e.g., data including improved features, new features related to an operating software system, an FPGA, or other electronic / digital hardware of the intraoral scanning device, etc.) in a debug portion of the memory based on the received data. The method may include placing the intraoral scanning device in another mode, such as a default mode, if authentication of the received data fails.

[0065] The processing unit may be configured to operate the intra-oral scanning device in a default mode and to switch to a service mode if operating the intra-oral scanning device in the default mode fails.

[0066] Intraoral scanning devices with communication protection and related methods:

[0067] Furthermore, the present disclosure relates to an intra-oral scanning device with communication protection and a related method, and more particularly to an intra-oral scanning device and a related method for securely communicating with an auxiliary device / system.

[0068] According to some aspects, an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The intraoral scanning device may include a processing unit configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data; a memory; and a wireless interface configured to transmit the two-dimensional image data and / or the three-dimensional image data. In addition, the processing unit may be configured to receive a session request for a session via the wireless interface; obtain and store a session key; sign the session key with an intraoral scanning device key, and wherein the intraoral scanning device key may be stored in a permanent memory of the intraoral scanning device. The processing unit may be configured to send a session response that may include a signed session key, and receive session data via the wireless interface in the session.

[0069] According to some aspects, an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The intraoral scanning device may include a processing unit configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data; a memory; and a wireless interface configured to transmit the two-dimensional image data and / or the three-dimensional image data. In addition, the processing unit may be configured to receive a session request for a session via the wireless interface; obtain and store a session key; encrypt the session key based on an intraoral scanning device key, and wherein the intraoral scanning device key may be stored in a permanent memory of the intraoral scanning device. The processing unit may be configured to send a session response that may include an encrypted session key, and receive session data via the wireless interface in the session.

[0070] According to some aspects, an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The intraoral scanning device may include a processing unit configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data; a memory; and a wireless interface configured to transmit the two-dimensional image data and / or the three-dimensional image data. In addition, the wireless interface may be configured to transmit a session request to the processing unit. In addition, the processing unit may be configured to obtain and store a session key, and encrypt the session key based on an intraoral scanning device key that may be stored in a permanent memory of the intraoral scanning device. The processing unit may also be configured to send a session response that may include an encrypted session key, and receive session data via the wireless interface in the session.

[0071] According to some aspects, a method of communicating with an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The method may include a processing unit, a memory unit, and a wireless interface configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data. In addition, the method may include receiving a session request for a session via the wireless interface, obtaining and storing a session key, and signing the session key using an intraoral scanning device key, wherein the intraoral scanning device key may be stored in a permanent memory of the intraoral scanning device. In addition, the method may include sending a session response including the signed session key via the wireless interface, and receiving session data in the session.

[0072] According to some aspects, a method of communicating with an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The method may include a processing unit, a memory unit, and a wireless interface configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data. In addition, the method may include receiving a session request for a session via the wireless interface, obtaining and storing a session key, and encrypting the session key based on an intraoral scanning device key, wherein the intraoral scanning device key may be stored in a permanent memory of the intraoral scanning device. In addition, the method may include sending a session response including the encrypted session key via the wireless interface, and receiving session data in the session.

[0073] According to some aspects, a method of communicating with an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The method may include a processing unit configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data, a memory unit, and a wireless interface. In addition, the method may include transmitting a session request to the processing unit, obtaining and storing a session key, and encrypting the session key based on an intraoral scanning device key, wherein the intraoral scanning device key may be stored in a permanent memory of the intraoral scanning device. In addition, the method may include sending a session response including the encrypted session key via the wireless interface, and receiving session data in the session.

[0074] When an intraoral scanning device is being used intentionally, such as for scanning the oral cavity of a patient, the intraoral scanning device is in a scanning session.

[0075] The session key may be signed prior to being encrypted based on the intra-oral scanning device key, and wherein the session response contains the encrypted session key. The processing unit may be configured to verify the integrity of the session data. Encryption of the session key provides an additional layer of security when distributing the session key between the intra-oral scanning device and the external device(s).

[0076] The intraoral scanning device includes a processing unit. The processing unit may be configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data. The two-dimensional image data and / or three-dimensional image data may contain information about the patient's oral anatomical structure, such as teeth, gums, bone levels, and / or information about diagnostic indicators, such as caries, bone loss, gingivitis, gum recession, periodontitis, bone loss, cracks, and bite.

[0077] The two-dimensional image data and / or the three-dimensional image data may be image data configured to be visualized on a display in two dimensions or three dimensions, respectively.

[0078] The session data may include customization data, and the customization data may include, for example, settings of a color image sensor of an intraoral scanning device. The intraoral scanning device may include a color image sensor, such as an RGB image sensor, wherein the customization data may include information about different color areas to be deactivated and / or activated during at least one scan. Therefore, the customization data may relate to which color areas of the RBG image sensor should be activated or deactivated during a scanning session. The intraoral scanning device may include a monochrome image sensor and a color light emitting diode, and, in this example, the customization data may include information about which different color light emitting diodes should be deactivated and / or activated during a scanning session. Therefore, the customization data may include information related to which color light emitting diodes should be activated or deactivated during a scanning session. The color light emitting diode may be configured to emit colored light, such as blue, red, green, etc. In another example, the intraoral scanning device may include one or more near-infrared light emitting diodes, which may also be configured to be activated and / or deactivated by customization data during a scanning session. The customization data may include setting data, such as power management settings, configuration of a user interface of the intraoral scanning device, and / or settings of an optical unit of the intraoral scanning device.

[0079] The optical unit may include one or more light projectors, one or more optical components, and one or more image sensors.

[0080] The intraoral scanning device may include a processing unit, a memory unit and a wireless interface. The wireless interface may include a wireless transceiver configured, for example, for wireless communication at a frequency range of 2.4 GHz to 2.5 GHz, 2.4 GHz to 5 GHz, or about 2.4 GHz or about 5 GHz.

[0081] The processing unit may be configured to receive a session request for the session via the wireless interface. The processing unit may be configured to verify the session request, such as authenticating a sender of the session request, such as a client device or a server device. It is contemplated that the intra-oral scanning device and the sender of the session request have a pre-established authentication connection, thereby allowing the session request to be authenticated by the intra-oral scanning device. The session request may include a digital signature supporting authentication of the session request.

[0082] In one or more exemplary intraoral scanning devices, the session request includes a digital signature. The processing unit can be configured to verify the integrity of the session request, for example by verifying the digital signature. For example, a verifier of the processing unit can be configured to verify the digital signature. The processing unit verifies the digital signature using a signature verification function and a public key of the sender, which has generated the digital signature and included the digital signature in the session request. If the intraoral scanning device / processing unit determines that the digital signature has not been successfully verified using the purported public key of the sender, the intraoral scanning device ignores the session request and terminates the session. This can provide the advantage that the intraoral scanning device rejects session requests from unauthenticated parties, thereby reducing the risk of battery drain attacks or limiting their impact.

[0083] Before receiving the session request, the intra-oral scanning device can be paired with the sender of the session request. In pairing, the intra-oral scanning device and the sending / client device can exchange one or more of the intra-oral scanning device identifier, the sender identifier, the session key / identifier, etc.

[0084] The processing unit is configured to obtain and / or store a session key; and encrypt the session key, optionally based on the intraoral scanning device key. The session key may be a symmetric key. The symmetric session key may provide lightweight processing of security algorithms on the processing unit, such as lightweight encryption, lightweight decryption, lightweight integrity protection, etc.

[0085] The processing unit is configured to obtain a session key, and obtaining the session key may include generating the session key, for example as a random or pseudo-random number. Therefore, the intra-oral scanning device and / or the processing unit may include a number generator, which is configured to generate a random or pseudo-random number, for example. By using a unique session key or a session key from a large number of available session keys, the requirements on the processing power of the intra-oral scanning device can be reduced. In addition, encryption can be simplified and replay attacks can be prevented.

[0086] The intra-oral scanning device key may be a symmetric key or a public key in a private-public key pair. For example, the intra-oral scanning device key may be stored in a permanent memory of the intra-oral scanning device during manufacture or during a customization session.

[0087] The processing unit is configured to send a session response in response to the session request. The session response may include an encrypted session key. The session response may include an intra-oral scanning device identifier and / or a session key. Therefore, the processing unit may be configured to send the intra-oral scanning device identifier and / or the session key in the session response. The session response including the intra-oral scanning device identifier may enable the sender of the session request to obtain the intra-oral scanning device key from a database or by requesting the intra-oral scanning device key from the manufacturer, which in turn enables the sender of the session request to decrypt the session key and use the session key when sending session data to the intra-oral scanning device.

[0088] The intra-oral scanning device disclosed herein has the advantage of verifying the integrity of received data, detecting any changes and ignoring the changed data. The intra-oral scanning device disclosed herein has the advantage of only opening a session with an authenticated party, such as an authenticated custom device, an authenticated accessory device, an authenticated external device and / or an authenticated server.

[0089] The processing unit is configured to receive session data in the session via the wireless interface. The processing unit may be configured to verify the integrity of the session data. The session data may include a message authentication code. Verifying the integrity of the session data may include verifying the message authentication code, for example using a stored session key. The session data may include a digital signature. Verifying the integrity of the session data may include verifying the digital signature.

[0090] The processing unit may be configured to terminate the session if the integrity of the session data is compromised, ie, the integrity verification fails.

[0091] The processing unit may be configured to decrypt the session data using the session key. The processing unit may be configured to store at least a portion of the decrypted session data in the memory unit. The processing unit may be configured to terminate the session if the decryption of the session data fails. The session data may include customization data, intraoral scanning device operating parameters, and / or firmware data.

[0092] The intraoral scanning device operating parameters may correspond to settings of the handheld intraoral scanning device, which may involve settings of an image sensor, a light projector, a wireless interface, a scanning sequence of the handheld intraoral scanning device, etc. The scanning sequence corresponds to scanning the patient's jaw with the handheld intraoral scanning device, and the handheld intraoral scanning device is configured to determine and transmit three-dimensional image data in real time based on intraoral scanning data acquired by the image sensor of the handheld intraoral scanning device during the scanning sequence.

[0093] Furthermore, the intraoral scanning device operating parameters relate to power management settings, configuration of a user interface of the intraoral scanning device and / or settings of an optical unit of the intraoral scanning device.

[0094] The handheld intraoral scanning device may include a user interface, which may include at least one touch sensor, at least one touch button, at least one light emitting diode, a tactile sensor and / or an accelerometer. The handheld intraoral scanning device may include a motion sensor configured to sense the movement of the handheld intraoral scanning device. The handheld intraoral scanning device is configured to wirelessly communicate with an external device connected to a display. The cursor on the display may move around based on the motion signal provided to the external device by the motion sensor. The user is able to navigate the cursor on the display by moving the handheld intraoral scanning device. The session data may include setting updates related to the motion sensor of the handheld intraoral scanning device, and the customization data may include settings for customizing the user interface of the handheld intraoral scanning device, which may involve graphical settings of a graphical user interface on the display. For example, when the handheld intraoral scanning device is connected to an external device, the handheld intraoral scanning device forwards the customization package to the external device via a wireless interface, and the external device is then configured to change the graphical settings based on the customization package. The customization package may be updated by the customization data provided by the session data.

[0095] The firmware data may include updates to the handheld intraoral scanning device that improve the functionality and features of the device.

[0096] The processing unit may be configured to process the intraoral scan data of the patient according to the received session data and provide two-dimensional image data and / or three-dimensional image data. Therefore, the sender of the session request may control the operation of the intraoral scanning device by sending customization data, intraoral scanning device operation parameters and / or firmware data. The disclosed intraoral scanning device and method prevent unauthorized access or control of the intraoral scanning device.

[0097] The session data may be related to providing image data with improved quality or more features. In this example, the session data may be related to an optical unit, or to a firmware update that improves the process of processing intraoral scan data into image data.

[0098] The intraoral scanning device can be scheduled to send a session response at a specific time of a day when the intraoral scanning device is not in use. The schedule can be determined by the processing unit based on the historical usage time of the intraoral scanning device and a machine learning model. The machine learning model receives a timestamp from a clock in the intraoral scanning device and inputs information about when the intraoral scanning device was used for a scanning session. The machine learning model contains a training data set, which contains the historical usage time of the intraoral scanning device in the scanning session. Based on the machine learning model and the timestamp defining the time of the day, if a mode request is received, the processing unit will know when to set to the requested mode. The advantage of this schedule is that the session request does not interfere with the dentist's work using the intraoral scanning device. In addition, the processing unit can be configured to perform time-consuming updates within (one or more) specific time periods. For example, an update that lasts more than 30 minutes will be automatically scheduled to be performed within a period of longer than 30 minutes when the intraoral scanning device is not in use, such as outside of working hours or during a break at the dentist / clinic. In other words, the processing unit is configured to schedule updates based on an estimated time for installing the update into the firmware of the memory unit.

[0099] The processing unit may be configured to send the session response if the timestamp is within a time period. The timestamp is generated by a clock of the intra-oral scanning device and received by the processing unit.

[0100] The processing unit may include a machine learning model that includes a training data set that includes historical data related to the usage time of an intraoral scanning device in a scanning session, and wherein the machine learning model receives a timestamp from a clock in the intraoral scanning device and inputs information about when the intraoral scanning device was used for the scanning session, and, if the machine learning model outputs a trigger condition that allows the processing unit to send a session response, the processing unit may be configured to send a session response.

[0101] The session data may relate to optical data associated with an optical unit for processing intraoral scan data, and for providing image data. The optical data may include settings for the light projector(s), image sensor(s), motors for focusing lenses, or firmware / settings for providing triangulation calculations including emitted light from the light projector(s) and reflected light received by the image sensor(s). Furthermore, the optical data may include modified, updated, or new computer-implemented methods for processing intraoral scan data into two-dimensional image data and / or three-dimensional image data.

[0102] The session request corresponds to an optical session request associated with transmitting session data related to optical data.

[0103] As used herein, the term "intraoral scanning device" refers to a device configured to scan inside a patient's oral cavity or at one or more parts of the oral cavity, such as one tooth, multiple teeth, gums, etc., or to obtain two-dimensional image data and / or three-dimensional image data of the patient's oral cavity or a part thereof, such as one tooth, multiple teeth and / or gums, etc. The intraoral scanning device may be an intraoral scanner that is fully or partially inserted into the patient's oral cavity, such as a handheld wireless intraoral scanner.

[0104] Communication method between intraoral scanning devices:

[0105] The present disclosure relates to the field of intraoral scanning devices, and in particular to the security of intraoral scanning devices. An intraoral scanning device and a method for ensuring secure communication of the intraoral scanning device are disclosed.

[0106] Another aspect of the present disclosure is to provide an intra-oral scanning device with the ability to prevent unauthorized parties from accessing it and protect its communications from modification attacks and replay attacks, while minimizing the computational overhead and power consumption of the intra-oral scanning device. In addition, the present disclosure provides a scalable security architecture.

[0107] According to this aspect, an intraoral scanning device configured to acquire intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The intraoral scanning device may include a processing unit configured to process the intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data, a wireless interface configured to transmit the two-dimensional image data and / or three-dimensional image data, and a memory. The processing unit may be configured to receive a link request for a session via the wireless interface, obtain a session identifier, and transmit a link response via the wireless interface, the link response including an intraoral scanning device identifier and a session identifier. In addition, the processing unit may be configured to receive an authentication message including an authentication key identifier and client device data via the wireless interface, select an intraoral scanning device key from a plurality of intraoral scanning device keys in a storage unit based on the authentication key identifier, verify the client device data based on the selected intraoral scanning device key, and terminate the session if the verification fails.

[0108] According to this aspect, a method for configuring an intraoral scanning device is disclosed, the intraoral scanning device may include a processing unit configured to process intraoral scanning data of a patient and provide two-dimensional image data and / or three-dimensional image data, a storage unit, and a wireless interface configured to transmit two-dimensional images and / or three-dimensional images. The method may include receiving a connection request for a session via a wireless interface, obtaining a session identifier, transmitting a connection response including an intraoral scanning device identifier and a session identifier via a wireless interface, receiving an authentication message including an authentication key identifier and client device data via a wireless interface, selecting an intraoral scanning device key from a plurality of intraoral scanning device keys based on the authentication key identifier, verifying the client device data based on the selected intraoral scanning device key; and terminating the session if the verification fails.

[0109] According to this aspect, an intraoral scanning device for acquiring intraoral scan data from a three-dimensional dental object during a scanning session is disclosed. The intraoral scanning device may include a processing unit configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data, a wireless interface configured to transmit two-dimensional image data and / or three-dimensional image data, and a memory. The processing unit may be configured to receive a connection request for a session via the wireless interface, obtain a session identifier, and transmit a connection response via the wireless interface, the connection response including an intraoral scanning device identifier and a session identifier. In addition, the processing unit may be configured to receive an authentication message including an authentication key identifier and client device data via the wireless interface, select an intraoral scanning device key from a plurality of intraoral scanning device keys in a storage unit based on the authentication key identifier, verify the client device data based on the selected intraoral scanning device key, and terminate the session if the verification fails.

[0110] An intraoral scanning device is a handheld scanning device used to scan the inside of a patient's mouth. The difference between an intraoral scanning device and other types of dental scanning devices is that an intraoral scanning device is a handheld scanning device that can be easily operated by a user with one hand, and it has no wired connection to any external device during scanning of the inside of a patient's mouth. Therefore, the only attack that an intraoral scanning device may suffer is an attack via a wireless interface.

[0111] The disclosed method and intraoral scanning device enable secure configuration of the intraoral scanning device, such as secure access to the memory of the intraoral scanning device. An advantage of the present disclosure is that the intraoral scanning device can only be configured or updated by an authorized party. Therefore, the disclosed intraoral device has the advantage of detecting and preventing any modification by an unauthorized party. The intraoral scanning device disclosed herein is advantageously protected from attacks, such as spoofing attacks, man-in-the-middle attacks, and / or replay attacks.

[0112] The intraoral scanning device is a key element in providing the required level of security for wireless communications in a service infrastructure that includes at least the intraoral scanning device and the scanning computer or dental software on the computer. It is not possible for a third party to attack the wireless communications, since that person must actually have the intraoral scanning device in his or her hands. It is not even possible to access the scanning computer or the dental software.

[0113] The methods disclosed herein enable secure configuration and / or updating of intra-oral scanning devices.

[0114] The present disclosure improves the security of intraoral scanning devices. Security includes assessing threats, vulnerabilities, and attacks, and developing appropriate security measures and countermeasures to prevent threats and attacks.

[0115] The intraoral scanning device includes a processing unit. The processing unit may be configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data. The two-dimensional image data and / or three-dimensional image data may contain information about the patient's oral anatomical structure, such as teeth, gums, bone levels, and / or information about diagnostic indicators, such as caries, bone loss, gingivitis, gum recession, periodontitis, bone loss, cracks, and bite.

[0116] The two-dimensional image data and / or the three-dimensional image data may be image data configured to be visualized on a display in two dimensions or three dimensions, respectively.

[0117] The term "certificate" as used herein refers to a data structure that supports verification of its source and content, such as verification of the legitimacy and / or authenticity of its source and content. A certificate can be configured to provide content associated with the holder of the certificate by the issuer of the certificate. The certificate contains a digital signature, enabling the recipient of the certificate to verify or authenticate the certificate content and source. The certificate may contain one or more identifiers and / or cryptographic materials, such as one or more encryption keys (e.g., intraoral scanning device keys), enabling secure communication in an intraoral scanning device system. Therefore, a certificate allows authentication, non-repudiation and / or integrity protection of the source and content. The certificate may also include a validity period, one or more algorithm parameters and / or an issuer. A certificate may include a digital certificate, a public key certificate, an attribute certificate and / or an authorization certificate.

[0118] As used herein, the term "key" refers to a cryptographic key, i.e., a piece of data (e.g., a string, a parameter) that determines the functional output of a cryptographic algorithm. For example, during encryption, a key allows plaintext to be converted into ciphertext, and vice versa during decryption. The key can also be used to verify a digital signature and / or a message authentication code MAC. When the same key is used for encryption and decryption, the key is called a symmetric key. In asymmetric encryption or public key encryption, the cryptographic material is a key pair, i.e., a so-called private-public key pair including a public key and a private key. In an asymmetric or public key cryptographic system (e.g., the Rivest Shamir Adelman (RSA) cryptographic system and the elliptic curve cryptographic system (ECC)), the public key is used for encryption and / or signature verification, while the private key is used for decryption and / or signature generation. The intraoral scanning device key can be a cryptographic material that allows one or more symmetric keys to be derived, such as a session key and / or a certificate key for intraoral scanning device communication. For example, during manufacturing, the intraoral scanning device key can be stored in a storage unit of the intraoral scanning device. The intraoral scanning device key can include cryptographic material for deriving a symmetric key. The intra-oral scanning device key includes, for example, an Advanced Encryption Standard (AES) key, such as an AES-128 bit key.

[0119] As used herein, the term "identifier" refers to a piece of data that is used to identify (e.g., for classification) and / or uniquely identify. An identifier may be in the form of a word, number, letter, symbol, list, array, or any combination thereof. For example, an identifier that is a number may be in the form of an integer, such as an unsigned integer uint, whose length is, for example, 8 bits, 16 bits, 32 bits, etc., such as an array of unsigned integers.

[0120] As used herein, the term "client device" refers to a device capable of communicating with an intraoral scanning device. A client device may refer to a computing device that acts as a client. A client device may include a custom device, a repeater, a tablet, a personal computer, an application running on a personal computer or tablet, and / or a USB dongle plugged into a personal computer.

[0121] The present disclosure relates to an intraoral scanning device. The intraoral scanning device may include a processing unit, a memory unit, and a wireless interface configured to process intraoral scanning data of a patient and provide two-dimensional image data and / or three-dimensional image data. The memory unit may include removable and non-removable data storage units, including but not limited to read-only memory (ROM), random access memory (RAM), etc. The memory unit may have an intraoral scanning device certificate stored thereon. The memory unit may have an intraoral scanning device certificate stored in a storage address of the memory unit and / or a storage unit, such as a specified storage unit and / or a specified address. The wireless interface may include a wireless transceiver, which is configured to wirelessly communicate in a frequency range of 2.4 GHz to 2.5 GHz, 2.4 GHz to 5 GHz, or about 2.45 GHz or about 5 GHz. In one or more exemplary intraoral scanning devices, the wireless interface is configured to communicate with a client device or an intraoral scanning device, such as wireless communication, and the client device or the intraoral scanning device respectively includes a wireless transceiver configured to receive and / or transmit data. The processing unit may be configured to receive a link request for a session via a wireless interface; and obtain a session identifier, for example, in response to the link request. The wireless interface may be configured to receive a link request for a session from a client device. The processing unit may be configured to obtain the session identifier, for example, by generating a random or pseudo-random number. The processing unit may be configured to store the session identifier in a memory unit. The memory unit may be configured to store the session identifier in a memory address of the memory unit and / or a storage unit of the memory unit, such as a specified storage unit and / or a specified address. The link request may include an authentication key identifier and / or an authentication type identifier to allow the intra-oral scanning device to perform authentication of the link request and the client device sending the link request at this early stage. This can provide a certain level of access control.

[0122] The processing unit may be configured to transmit a link response including an intra-oral scanning device identifier and a session identifier via the wireless interface. The processing unit may be configured to generate the link response by including the session identifier and the intra-oral scanning device identifier in the link response. The intra-oral scanning device identifier may refer to a unique identifier of the intra-oral scanning device. The intra-oral scanning device identifier may be included in an intra-oral scanning device certificate. The wireless interface may be configured to transmit the link response to, for example, a client device.

[0123] The processing unit may be configured to receive an authentication message including an authentication key identifier and client device data via the wireless interface. For example, the wireless interface may be configured to receive an authentication message from a client device. For example, the intraoral scanning device receives an authentication message from a client device to establish a communication session. The client device data may include a client device certificate (encrypted or unencrypted), customization data, intraoral scanning device operating parameters, and / or firmware data. For example, the authentication message may include an authentication key identifier in plain text. The authentication key identifier indicates an intraoral scanning device key, i.e., an intraoral scanning device key stored in a memory unit of the intraoral scanning device, for example as part of an intraoral scanning device certificate.

[0124] The processing unit may be configured to select an intra-oral scanning device key from a plurality of intra-oral scanning device keys in the memory unit based on the authentication key identifier and optionally other identifiers. Based on the intra-oral scanning device key identifier held by the intra-oral scanning device, when the authentication key identifier can be accepted by the intra-oral scanning device, the processing unit may be configured to select the intra-oral scanning device key indicated by the authentication key identifier, and use the selected intra-oral scanning device key as key material for ensuring a secure session. The processing unit may be configured to select the intra-oral scanning device key from a plurality of intra-oral scanning device keys in the memory unit based on the authentication key identifier and the authentication type identifier.

[0125] The authentication type identifier may be received by the intra-oral scanning device in plain text and / or as a client device type identifier in an (encrypted or decrypted) client device certificate. For example, the processing unit may be configured to select the authentication key identifier and the intra-oral scanning device key indicated by the authentication type identifier.

[0126] The processing unit may be configured to verify the client device data based on the selected intra-oral scanning device key; and terminate the session if the verification fails. Verifying the client device data may be based on the intra-oral scanning device certificate or at least a portion thereof. Verifying the client device data based on the selected intra-oral scanning device key may include verifying the integrity of the client device data based on the selected intra-oral scanning device key, such as verifying a MAC and / or digital signature contained in the client device data. Verifying the client device data based on the selected intra-oral scanning device key may include, when receiving the encrypted client device data, decrypting the client device data, such as the client device certificate, using the selected intra-oral scanning device key (as key material for deriving a decryption key or as a decryption key). Verifying the client device data based on the selected intra-oral scanning device key may include verifying the client device data, such as the decrypted client device certificate, by comparing the received client device data with data stored in the memory unit. The client device data may include a client device certificate (e.g., an encrypted client device certificate), an authentication key identifier, and / or an authentication type identifier. A client device certificate may be assigned to the client device. A client device certificate refers to a certificate generated and assigned to the client device by, for example, a device that manufactures the client device.

[0127] The client device certificate may include a certificate type identifier. The certificate type identifier may indicate a certificate type among various certificate types, such as an intraoral scanning device family certificate type, an intraoral scanning device certificate type, a firmware certificate type, a research and development certificate type, and a client device certificate type. The intraoral scanning device may use the certificate type identifier to identify the type of certificate it receives, stores, and / or obtains. The client device certificate may include a version identifier indicating a data format version of the certificate. The intraoral scanning device may be configured to use the certificate type identifier and / or version identifier to determine what type of data the certificate contains and what type of data is contained in a field of the certificate. For example, the intraoral scanning device determines which field of the certificate contains a digital signature and / or which public key is required to verify the digital signature based on the certificate type identifier and / or version identifier. It is conceivable that there is a one-to-one mapping relationship between a certificate type identifier and a public-private key pair.

[0128] The client device certificate may include a signing device identifier. The signing device identifier refers to a unique identifier that identifies a device (e.g., a manufacturing device, such as an integrated circuit card, a smart card, a hardware security module) that signed the client device certificate. The signing device identifier may, for example, include a media access control (MAC) address and / or a serial number of the signing device. The signing device identifier optionally allows, for example, an intra-oral scanning device to determine whether the signing device is, for example, blacklisted, thereby rejecting certificates signed by a blacklisted signing device.

[0129] The client device certificate may include one or more hardware identifiers, such as a first hardware identifier and / or a second hardware identifier. The hardware identifier may identify a piece of hardware included in the client device, such as a radio chip included in the client device or a digital signal processor of the client device. The hardware identifier may be stored in a register of the piece of hardware during the manufacture of the piece of hardware, the register being included in the intraoral scanning device. The hardware identifier may include a serial number, a media access control (MAC) address, a chip identifier, or any combination thereof. The client device certificate may include a client device type identifier. The client device type identifier may indicate the type to which the client device belongs. The client device may be classified as a client device type corresponding to a model, category, or type of the client device, such as a customized type, such as a computer product model, category, or type configured for a customized intraoral scanning device, a USB dongle product model, category, or type configured for a customized intraoral scanning device.

[0130] The client device certificate may include a client device identifier. The client device identifier refers to an identifier that identifies the client device. The client device identifier may include, for example, a media access control (MAC) address of the client device and / or a serial number of the client device.

[0131] The client device certificate may include a client device key identifier. The client device key identifier may indicate a client device key used as key material for ensuring secure communications with external parties, such as secure communications with an intra-oral scanning device. In one or more exemplary client device certificates, the client device certificate includes a Bluetooth address or an IP address of the client device.

[0132] The client device certificate includes a digital signature. The digital signature supports proving or verifying the authenticity of the intraoral scanning device certificate, such as verifying the legitimacy of the signer. The digital signature is optionally generated by a manufacturing device using a client device customized private key. The intraoral scanning device can be configured to verify the digital signature of the client device certificate when receiving a (encrypted or unencrypted) client device certificate containing a digital signature (i.e., receiving an authentication message containing an encrypted client device certificate and obtaining a decrypted version of the client device certificate). The digital signature can be verified by the intraoral scanning device using the corresponding client device customized public key. If the digital signature fails to be successfully verified using the claimed public key, the intraoral scanning device can ignore the client device certificate and / or terminate normal operation. This can provide the advantage that the intraoral scanning device rejects client device certificates that have been tampered with or received from an unauthenticated party. Therefore, communication with the intraoral scanning device is resistant to counterfeiting, modification and spoofing attacks.

[0133] The authentication message may include an authentication type identifier. Selecting an intraoral scanning device key from a plurality of intraoral scanning device keys may be based on the authentication type identifier. The authentication type identifier may indicate, for example, a client device type identifier and / or a certificate type identifier of an (encrypted) client device certificate. The client device may be classified as a client device type corresponding to a model, category or type of the client device, such as a customized type, such as a computer product model, category or type configured for a customized intraoral scanning device, a USB dongle product model, category or type configured for a customized intraoral scanning device. The client device type identifier may refer to an identifier indicating a client device type. The client device type identifier may uniquely identify a client device type. The client device type identifier may identify the type to which the client device belongs. The client device type identifier may be included in a client device certificate. The intraoral scanning device may be configured to select an intraoral scanning device key corresponding to the authentication type identifier and / or the authentication key identifier.

[0134] Customizing the intraoral scanning device means that the customized portion of the memory can be in read and / or write mode. Customizing the intraoral scanning device means that the firmware portion of the memory is write-protected. The customized portion of the memory may contain setting data, such as power management settings, configuration of a user interface of the intraoral scanning device and / or settings of an optical unit of the intraoral scanning device.

[0135] The optical unit may include one or more light projectors, one or more optical components, and one or more image sensors.

[0136] The user interface of the intraoral scanning device may include at least one touch sensor, at least one touch button, at least one light emitting diode, a tactile sensor and / or an accelerometer.

[0137] The client device data may include customization data including setting data, such as power management settings, configuration of a user interface of the intraoral scanning device, and / or settings of an optical unit of the intraoral scanning device. The client device data may include improved feature updates, new feature updates related to the operating software system, FPGA, or other electronic / digital hardware of the intraoral scanning device.

[0138] The client device data may include an encrypted client device certificate; and the processing unit may be configured to generate a certificate key based on the selected intra-oral scan device key and / or the session identifier. Verifying the client device data may include decrypting the encrypted client device certificate with the certificate key to obtain a decrypted version of the encrypted client device certificate. The encrypted client device certificate may be generated by the client device using an encryption algorithm and the certificate key.

[0139] The intraoral scanning device may be configured to decrypt the encrypted client device certificate using a certificate key, a common secret and / or an intraoral scanning device key. The certificate key may be based on the common secret and / or the certificate value. The intraoral scanning device may be configured to obtain and / or generate a common secret based on an intraoral scanning device key, such as a selected intraoral scanning device key. For example, in order to generate a common secret based on the intraoral scanning device key, the intraoral scanning device may obtain the intraoral scanning device key from a memory unit and / or obtain the intraoral scanning device certificate from a memory unit, the intraoral scanning device certificate including the intraoral scanning device key used to derive the common secret. The intraoral scanning device may be configured to store the common secret in a memory unit so as to retrieve the common secret from the memory unit, for example, when needed.

[0140] The intraoral scanning device can be scheduled to receive client device data or link requests at a specific time of the day when the intraoral scanning device is not in use. The schedule can be determined by the processing unit based on the historical usage time of the intraoral scanning device and a machine learning model. The machine learning model receives a timestamp from a clock in the intraoral scanning device and inputs information about when the intraoral scanning device was used for a scanning session. The machine learning model contains a training data set that contains the historical usage time of the intraoral scanning device in the scanning session. Based on the machine learning model and the timestamp defining the time of day, the processing unit will know when to be configured to receive client device data. The advantage of this arrangement is that valid authenticated mode requests will not interfere with the dentist's work using the intraoral scanning device. In addition, when placed in a customized mode, the intraoral scanning device can be programmed to perform time-consuming updates within (one or more) specific time periods. For example, updates that last more than 30 minutes will be automatically scheduled to be performed within a period of longer than 30 minutes when the intraoral scanning device is not in use, such as outside of working hours or during a break at the dentist / clinic.

[0141] The processing unit may be configured to place the intraoral scanning device into the requested mode if authentication of the mode request is successful and if the timestamp is within the time period. The timestamp is generated by a clock of the intraoral scanning device and received by the processing unit.

[0142] The processing unit may include a machine learning model including a training data set including historical data related to the time of use of the intra-oral scanning device in a scanning session, and wherein the machine learning model receives a timestamp from a clock in the intra-oral scanning device and inputs information about when the intra-oral scanning device was used for a scanning session, and the processing unit may then be configured to receive a link request or client device data based on an output of the machine learning model. The output of the machine learning model is a trigger for the processing unit to know when it is in a state to receive link requests and client device data.

[0143] The intra-oral scanning device may be configured to generate a common secret based on the session identifier using the processing unit and store the common secret in the memory unit. For example, the intra-oral scanning device may generate the common secret based on an intra-oral scanning device key, such as a selected intra-oral scanning device key, and the session identifier. The intra-oral scanning device may generate the common secret CS, for example, as follows:

[0144] CS=hash(IOS_KEY,S_ID),

[0145] Where hash is a hash function, IOS_KEY is a (selected) intra-oral scanning device key, and S_ID is a session identifier. The session identifier may be generated by the intra-oral scanning device upon receiving a link request. The session identifier may include a random number or a pseudo-random number of a limited length. The common secret may be used as a certificate key in one or more exemplary intra-oral scanning devices.

[0146] The certificate key may be based on a common secret, for example, by performing a hash function on the common secret and / or the certificate value. The intra-oral scanning device may then generate the certificate key, for example, as follows:

[0147] C_KEY=hash(CS,C_VAL),

[0148] Where hash is a hash function, CS is a common secret, and C_VAL is a certificate value. The certificate value can be a predefined value or a string, such as "certificate".

[0149] In one or more exemplary intra-oral scanning devices, a certificate key may be optionally generated by performing a hash function on an intra-oral scanning device key and a session identifier. The intra-oral scanning device may use the certificate key generated by the intra-oral scanning device to decrypt the encrypted client device certificate (part of the client device data) and obtain a decrypted version of the client device certificate. The intra-oral scanning device may verify the contents of the decrypted version of the client device certificate.

[0150] In one or more exemplary intra-oral scanning devices, verifying the client device data includes determining whether the authentication key identifier matches a client device key identifier of the client device certificate, and if a mismatch is determined, then verification fails.

[0151] The intra-oral scanning device may be configured to verify whether the authentication key identifier matches a corresponding client device key identifier included in the client device certificate. The intra-oral scanning device may be configured to verify whether the value of the authentication key identifier is equal to the value of the client device key identifier included in the client device certificate. For example, the intra-oral scanning device may be configured to verify whether the authentication key identifier matches a corresponding client device key identifier included in a decrypted version of the client device certificate. In one or more exemplary intra-oral scanning devices, verifying the client device data includes determining whether a client device type identifier of the client device certificate is valid, and if the client device type identifier of the client device certificate is invalid, the verification fails. For example, the intra-oral scanning device may be configured to verify whether the authentication type identifier matches a corresponding client device type identifier included in a decrypted version of the client device certificate.

[0152] In one or more exemplary intra-oral scanning devices, determining whether a client device type identifier of a client device certificate is valid includes determining whether the client device type identifier is blacklisted, wherein if the client device type identifier is blacklisted, e.g., appears on a list of blacklisted client device types, then the client device type is invalid. In one or more exemplary intra-oral scanning devices, determining whether a client device type identifier of a client device certificate is valid includes determining whether the client device type identifier is allowed, wherein if the client device type identifier is allowed, e.g., appears on a list of allowed client device types, then the client device type is valid. For example, if the authentication type identifier matches a corresponding client device type identifier contained in a decrypted version of the client device certificate, then the client device type identifier of the client device may be valid.

[0153] In one or more exemplary intraoral scanning devices, verifying the client device data includes verifying the digital signature of the client device certificate, and if the digital signature cannot be verified, the verification fails. For example, the client device data includes a digital signature attached thereto to protect the integrity of the client device data. Verifying the digital signature, for example, includes calculating a comparison result based on the digital signature and a corresponding client device public key, and comparing the comparison result with the received client device data / client device certificate. The corresponding client device public key can be retrieved by the intraoral scanning device from a memory unit, a remote data storage unit and / or a server device. When the digital signature raised to the power of the client device public key is the same as the received client device data, the digital signature can be verified as valid, or the verification is successful.

[0154] In one or more exemplary intraoral scanning devices, the client device certificate includes a signing device identifier and / or a client device identifier. The client device identifier refers to an identifier that identifies a client device. The client device identifier may include, for example, a media access control (MAC) address of the client device and / or a serial number of the client device. The intraoral scanning device may be configured to verify the client device data by determining whether the signing device identifier and / or the client device identifier is valid. For example, the intraoral scanning device may be configured to determine that the signing device identifier is valid by verifying that the signing device identifier is not blacklisted. For example, the intraoral scanning device may be configured to determine that the client device identifier is valid by verifying that the client device identifier is not blacklisted. The client device identifier allows, for example, the intraoral scanning device to identify the client device among multiple client devices. If the signing device identifier and / or the client device identifier are invalid, the verification fails. For example, if the intraoral scanning device determines that the signing device identifier and / or the client device identifier are blacklisted, the signing device identifier and / or the client device identifier are invalid and the verification fails.

[0155] In one or more exemplary intraoral scanning devices, the processing unit may be configured to receive an additional authentication message. The additional authentication message may contain client device data and / or an authentication device identifier. The authentication device identifier may refer to an identifier that enables the client device to be authenticated, such as a client device identifier contained in an authentication message. For example, the authentication device identifier contains a serial number, a media access control (MAC) address, or any combination thereof. The intraoral scanning device may be configured to verify the authentication message and authenticate the client device that sent the authentication message. The processing unit may be configured to obtain a common secret from a memory unit based on the authentication device identifier. The memory unit may have a client device identifier associated with a common secret stored thereon. The processing unit may then be configured to retrieve the corresponding common secret based on the authentication device identifier. Previously, for example, during the initial round of authentication of the returned client device, a common secret has been generated and stored. Therefore, once the client device is authenticated, the processing unit is able to retrieve the corresponding common secret. This provides faster subsequent authentication and avoids having to regenerate a common secret for calculating an additional certificate key, thereby saving corresponding power consumption. The processing unit may be configured to generate an additional certificate key from the common secret; and verify the client device data based on the additional certificate key. For example, the processing unit may generate an additional certificate key by calculating a hash value based on a common secret and a certificate value. As described above, the processing unit may be configured to verify the client device data based on the additional certificate key by verifying the integrity of the client device data, such as verifying the MAC and / or digital signature of the client device data. The processing unit is configured to verify the client device data based on the additional certificate key by decrypting the client device data using the additional certificate key (as a decryption key) upon receiving the encrypted client device data. The processing unit is configured to verify the client device data by verifying the content of the client device data. The processing unit may be configured to verify the client device data based on the additional certificate key by comparing the client device data with the data stored in the memory unit.

[0156] In one or more exemplary intraoral scanning devices, the processing unit may be configured to generate an offline session key based on a common secret and a session identifier, and the processing unit may be configured to communicate with a client device using the offline session key. The offline session key may be used to ensure secure offline communication between the intraoral scanning device and the client device. Offline communication refers to communication that does not involve any other network device (e.g., a server device). Generating the offline session key may include generating the offline key based on the common secret (e.g., performing a hash function of the common secret and the offline value), and calculating the offline session key based on the offline key and the session identifier (e.g., performing a hash function of the offline key and the session identifier). The offline session key is used by the intraoral scanning device and the client device to protect (e.g., encrypt) intraoral scanning device data transmitted between the intraoral scanning device and the client device.

[0157] In one or more exemplary intraoral scanning devices, the authentication message includes an authentication token identifier, and the processing unit may be configured to store the authentication token identifier in a memory unit and associate the authentication token identifier with a common secret. The authentication token identifier may indicate that token-based authentication is enabled at the intraoral scanning device, that is, when the intraoral scanning device receives the authentication token identifier from the authenticated client device, it may enable token-based authentication in future communications with the same client device by storing, for example, an indicator, such as a flag associated with the common secret and the client. For example, the intraoral scanning device receiving the authentication token identifier may be configured to indicate to the processing unit that token-based authentication is enabled by storing and / or linking the token identifier with a common secret generated for the same client device, for example, by storing and / or linking the token identifier with a common secret with a client device identifier of the same client device in, for example, a table. The token identifier and token-based authentication may be used for intraoral scanning device management, such as grouping intraoral scanning devices within a dental clinic, and allowing for further customization, as well as potentially simpler and faster client device authentication, with minimal or no user physical interaction / intervention. The client device securely accesses the data storage device in which the token identifier is securely stored, for example, in a first session, and retrieves the credentials and password material to perform token-based authentication in subsequent sessions. In this way, any client device in, for example, a dental clinic can perform updates of the intraoral scanning device in a secure manner using token-based authentication.

[0158] In one or more exemplary intraoral scanning devices, the processing unit may be configured to receive an additional authentication message, the authentication message containing client device data, an authentication type identifier, an authentication key identifier, and / or an authentication session token identifier. The additional authentication message may contain an authentication device identifier. The processing unit may be configured to find a common secret in a memory unit based on locating a stored client device type identifier corresponding to the authentication type identifier and / or locating a stored client device identifier corresponding to the authentication device identifier, the common secret being linked to the client device type identifier and / or the client device identifier of the client device that sent the additional authentication message. The processing unit may be configured to obtain a common secret based on the authentication type identifier; generate a token key based on the common secret; and generate a session token identifier based on the token key and the session identifier. The processing unit may have generated a common secret in an earlier session with the client device, for example, in order to establish a certificate key, and may have stored the common secret and linked it to the client device type identifier and / or the client device identifier. The processing unit may then be configured to obtain a common secret based on the authentication type identifier and / or the authentication client identifier corresponding to the stored client device type identifier and / or the client device identifier. The processing unit may be configured to generate a token key by performing a hash function on a common secret and a token value (e.g., a predefined arbitrary string or a predefined arbitrary value). The processing unit may be configured to generate a session token identifier based on the token key and the session identifier by generating a session identifier and performing a hash function on the token key and the session identifier. The processing unit may be configured to verify the authentication session token identifier based on the session token identifier. The processing unit may be configured to verify the authentication session token identifier by comparing the authentication session token identifier with the generated session token identifier. For example, if the processing unit determines that the authentication session token identifier matches the generated session token identifier, the verification is successful, and the processing unit may continue to run without physical user intervention and continue to verify the client device data provided in another authentication message. The client device data may include a client device certificate. The intra-oral scanning device may verify whether the client device certificate (and / or check against a blacklist) allows any customization or update. The verified authentication token identifier may be used, for example, to indicate to the intra-oral scanning device that the client device holds a previous shared token key, and is therefore allowed to accurately customize the intra-oral scanning device without physical user intervention of the intra-oral scanning device.

[0159] In one or more exemplary intraoral scanning devices, the processing unit may be configured to generate a session key based on a session identifier and an intraoral scanning device key, and the processing unit may be configured to receive and authenticate session data based on the session key. Generating a session key based on the session identifier and the intraoral scanning device key may include calculating the session key by generating a common secret based on the intraoral scanning device key and the session identifier, and optionally generating a hash value of the common secret and the session value, the generated hash value corresponding to the session key. For example, the processing unit may be configured to authenticate session data based on the session key by verifying a MAC generated using the session key and / or by decrypting the session data using the session key. The present disclosure relates to a method for operating an intraoral scanning device, the intraoral scanning device comprising a processing unit configured to process intraoral scanning data of a patient and provide two-dimensional image data and / or three-dimensional image data, a storage unit, and a wireless interface, the method being, for example, a method for controlling the communication of an intraoral scanning device, for example, a method for ensuring secure communication of an intraoral scanning device. The method includes receiving a link request for a session via a wireless interface. The link request may include an authentication key identifier and / or an authentication type identifier to allow the intra-oral scanning device to perform authentication of the link request and the client device sending the link request at this early stage. This can provide a certain level of access control. The method includes obtaining a session identifier, for example, using an intra-oral scanning device. Obtaining the session identifier may include generating a session identifier, for example, by generating a random number or a pseudo-random number. For example, the processing unit generates a random number or a pseudo-random number of a predetermined length, such as 16 bytes, 32 bytes, 64 bytes, etc., which will be used as a session identifier. Obtaining the session identifier may include retrieving the session identifier from a memory unit. The method may include storing the session identifier in a memory unit. For example, storing the session identifier in a memory unit includes storing the session identifier in a memory address of the memory unit and / or a memory cell of the memory unit, such as a specified memory cell and / or a specified address.

[0160] The method includes transmitting a link response including an intra-oral scanning device identifier and a session identifier via a wireless interface. Transmitting the link response may include generating a link response by including the session identifier and the intra-oral scanning device identifier, and transmitting the generated link response to, for example, a client device.

[0161] The method includes receiving an authentication message via a wireless interface. The authentication message includes an authentication key identifier and client device data. The method may include receiving an authentication message from a client device via a wireless interface. For example, an intra-oral scanning device receives an authentication message from a client device to establish a communication session. The client device data may include a client device certificate, customization data, intra-oral scanning device operating parameters, and / or firmware data. The authentication key identifier may be an identifier used to verify whether the client device provides an authentication key identifier that can be accepted by the intra-oral scanning device.

[0162] The method includes selecting an intra-oral scanning device key from a plurality of intra-oral scanning device keys in a memory unit based on an authentication key identifier. When the authentication key identifier matches an intra-oral scanning device key identifier maintained by the intra-oral scanning device and / or when the authentication key identifier indicates an intra-oral scanning device key of the intra-oral scanning device, the processing unit may be configured to use the authentication key identifier as a key identifier indicating which intra-oral scanning device key is to be used as key material in the session. The selection of the intra-oral scanning device key from a plurality of intra-oral scanning device keys in the memory unit may be based on the authentication key identifier and an authentication type identifier. The authentication type identifier may be received by the intra-oral scanning device in plain text and / or as a client device type identifier in an (encrypted or decrypted) client certificate. For example, the processing unit selects the authentication key identifier and the intra-oral scanning device key indicated by the authentication type identifier.

[0163] The method includes verifying the client device data based on the selected intra-oral scanning device key. Verifying the client device data can be based on the intra-oral scanning device certificate or at least a portion thereof. In addition, the method includes terminating the session if the verification fails. Verifying the client device data based on the selected intra-oral scanning device key can include verifying the integrity of the client device data based on the selected intra-oral scanning device key, such as verifying the MAC and / or digital signature contained in the client device data. Verifying the client device data based on the selected intra-oral scanning device key can include, when the received client device data is encrypted, decrypting the client device data using the selected intra-oral scanning device key (as key material for deriving a decryption key or as a decryption key). Verifying the client device data based on the selected intra-oral scanning device key can include verifying the client device data by comparing the received client device data, such as the decrypted client certificate, with the data stored in the memory unit. For example, if the integrity of the client device data is detected to be destroyed by, for example, verifying the MAC or digital signature, if the decryption fails, and / or if the comparison of the received client device data with the data stored in the memory unit indicates a mismatch, then the verification fails.

[0164] The authentication message optionally includes an authentication type identifier. The authentication type identifier may indicate a client device type identifier and / or a certificate type identifier. Selecting an intra-oral scan device key from a plurality of intra-oral scan device keys may be based on the authentication type identifier. Selecting the intra-oral scan device key may be based on the authentication type identifier provided in the authentication message and / or the verified authentication key identifier.

[0165] The client device data may include a client device certificate (eg, an encrypted client device certificate), an authentication key identifier, and / or an authentication type identifier.A client device certificate may be assigned to a client device.

[0166] The method may include generating a certificate key based on a selected intra-oral scanning device key and / or a session identifier; and verifying the client device data may include decrypting the encrypted client device certificate with the certificate key to obtain a decrypted version of the encrypted client device certificate. Decrypting the encrypted client device certificate with the certificate key may include using the certificate key, the common secret and / or the intra-oral scanning device key to decrypt the encrypted client device certificate, for example, generating the certificate key based on the common secret, and processing the encrypted client certificate using the decryption function and the certificate key. The certificate key may be based on the common secret and / or the certificate value. Generating the certificate key may include obtaining or generating the common secret based on the selected intra-oral scanning device key. For example, generating the common secret based on the intra-oral scanning device key includes retrieving the intra-oral scanning device certificate from a memory unit, the intra-oral scanning device certificate containing the selected intra-oral scanning device key, and / or retrieving the selected intra-oral scanning device key from a memory unit. The method may include generating the common secret based on the session identifier and / or the intra-oral scanning device key. For example, generating the common secret CS based on the selected intra-oral scanning device key and the session identifier, such as as follows:

[0167] CS=hash(IOS_KEY,S_ID),

[0168] Where hash is a hash function, IOS_KEY is a selected intra-oral scanning device key, and S_ID is a session identifier. The session identifier may include a random number or a pseudo-random number of a limited length. The common secret may be used as a certificate key in one or more exemplary intra-oral scanning devices. The intra-oral scanning device may be configured to store the common secret in a memory unit so as to retrieve the common secret from the memory unit, for example, when needed.

[0169] Generating the certificate key may include performing a hash function on the common secret and / or the certificate value. The intra-oral scanning device may then, for example, generate the certificate key, such as as follows:

[0170] C_KEY=hash(CS,C_VAL),

[0171] Where hash is a hash function, CS is a common secret, and C_VAL is a certificate value. The certificate value can be a predefined value or a string, such as "certificate".

[0172] In one or more exemplary methods, generating the certificate key includes performing a hash function on the intra-oral scanning device key and the session identifier. In other words, if the client device also uses the common secret as the certificate key to encrypt the client device certificate, the common secret can be used as the certificate key.

[0173] Verifying the client device data may include decrypting the encrypted client device certificate using a certificate key generated by the intra-oral scanning device and obtaining a decrypted version of the client device certificate.

[0174] In one or more exemplary methods, verifying the client device data may include verifying the contents of a decrypted version of the client device certificate. For example, verifying the client device data includes determining whether the authentication key identifier matches the client device key identifier of the client device certificate, and if a mismatch is determined, then verification fails.

[0175] In one or more exemplary methods, verifying the client device data includes determining whether a client device type identifier of a client device certificate is valid, and if the client device type identifier of the client device is invalid, then the verification fails. For example, the authentication type identifier is sent in plain text in the authentication message, and if the authentication type identifier matches a corresponding client device type identifier included in a decrypted version of the client device certificate, then the authentication type identifier sent in plain text is valid. For example, determining whether the client device type identifier of the client device certificate is valid may include determining whether the client device type identifier of the client device certificate is included in a list of authorized client devices.

[0176] In one or more exemplary methods, determining whether the client device type identifier of the client device certificate is valid includes determining whether the client device type identifier is blacklisted, wherein if the client device type identifier is blacklisted, such as appears on a list of blacklisted client device types, then the client device type is invalid. In one or more exemplary methods, determining whether the client device type identifier of the client device certificate is valid includes determining whether the client device type identifier is allowed, wherein if the client device type identifier is allowed, such as appears on a list of allowed or authorized client device types, then the client device type is valid.

[0177] In one or more exemplary methods, verifying the client device data includes verifying a digital signature of a client device certificate, and if the digital signature fails verification, the verification fails. For example, the client device data includes a digital signature attached thereto to protect the integrity of the client device data. Verifying the digital signature, for example, includes calculating a comparison result based on the digital signature and a corresponding public key, and comparing the comparison result with the received client device data. When the digital signature raised to the power of the public key is the same as the received client device data, the digital signature can be verified as valid, or the verification can be successful.

[0178] In one or more exemplary methods, the client device certificate includes a signing device identifier and / or a client device identifier, and verifying the client device data includes determining whether the signing device identifier and / or the client device identifier is valid, and wherein verification fails if the client device identifier and / or the signing device identifier of the client device is invalid.

[0179] In one or more exemplary methods, determining whether the client device identifier of the client device certificate is valid includes determining whether the client device identifier is blacklisted, wherein if the client device identifier is blacklisted, such as appears on a list of blacklisted client devices, then the client device identifier is invalid. In one or more exemplary methods, determining whether the client device identifier of the client device certificate is valid includes determining whether the client device identifier is allowed, wherein if the client device identifier is allowed, such as appears on a list of allowed or authorized client devices, then the client device type is valid.

[0180] In one or more exemplary methods, the method includes receiving an additional authentication message including client device data and / or an authentication device identifier. The method may also include obtaining a common secret from a memory unit based on the authentication device identifier, generating an additional certificate key from the common secret, and verifying the client device data based on the additional certificate key.

[0181] In one or more exemplary methods, a method includes generating an offline session key based on a common secret and a session identifier, and communicating with a client device using the offline session key.

[0182] In one or more exemplary methods, the method includes receiving an additional authentication message, the authentication message including client device data, an authentication type identifier, an authentication key identifier, and / or an authentication session token identifier. The additional authentication message may include an authentication device identifier. The method may include, based on locating a stored client device type identifier corresponding to the authentication type identifier, and / or based on locating a stored client device identifier corresponding to the authentication device identifier, finding or determining in a memory unit a common secret linked to a client device type identifier and / or a client device identifier of a client device that sent the additional authentication message. The method may include obtaining a common secret based on the authentication type identifier; generating a token key based on the common secret; and generating a session token identifier based on the token key and a session identifier. The processing unit may have generated a common secret in an earlier session with the client device, for example, to establish a certificate key, and may have stored the common secret and linked it to the client device type identifier and / or the client device identifier. The method may include obtaining a common secret based on the authentication type identifier and / or an authentication client identifier and / or a client device identifier corresponding to the stored client device type identifier. The method may include generating a token key by performing a hash function on a common secret and a token value (e.g., a predefined arbitrary string or a predefined arbitrary value). The method may include generating a session token identifier based on the token key and the session identifier by generating a session identifier and performing a hash function on the token key and the session identifier. The method may include verifying the authentication session token identifier based on the session token identifier. The method may include verifying the authentication session token identifier by comparing the authentication session token identifier with the generated session token identifier. For example, if it is determined that the authentication session token identifier matches the generated session token identifier, the verification is successful, and the processing unit may continue to operate without physical user intervention and continue to verify the client device data provided in another authentication message. The client device data may include a client device certificate. The intra-oral scanning device may verify whether the client device certificate (and check against a blacklist) allows any customization. The verified authentication token identifier may be used, for example, to indicate to the intra-oral scanning device that the client device holds a previously shared token key and is therefore allowed to accurately customize the intra-oral scanning device without physical user intervention of the intra-oral scanning device.

[0183] In one or more exemplary methods, a method includes generating a session key based on a session identifier and an intra-oral scanning device key, and receiving and authenticating session data based on the session key.

[0184] Dental system, intraoral scanning device, and method for ensuring secure communication with a user application:

[0185] In addition, the present disclosure relates to a dental system including a server device and an intraoral scanning device system, wherein the intraoral scanning device system includes an intraoral scanning device and an external device. Specifically, the present disclosure relates to a device for ensuring secure communication of a user application on an attached external device of a dental system including an intraoral scanning device, and a method for ensuring secure communication of a user application on an attached external device of a dental system including an intraoral scanning device.

[0186] Another aspect of the present disclosure is to improve the security of dental system communications. The dental system includes a server device, an external device on which a user application is installed, and an intraoral scanning device. The server device can be controlled by the manufacturer of the intraoral scanning device. The server device can be a distributed server device, that is, a server device with distributed processors. That is, the methods, user applications, and server devices disclosed herein make dental system communications robust against security threats, vulnerabilities, and attacks by implementing appropriate security measures and countermeasures, such as security mechanisms, to resist threats and attacks. The present disclosure relates to dental system communications that are robust against replay attacks, unauthorized access, battery depletion attacks, and man-in-the-middle attacks.

[0187] Another aspect of the present disclosure is to improve the security of an intraoral scanning device. Security includes assessing threats, vulnerabilities, and attacks, and developing appropriate security measures and countermeasures to prevent threats and attacks. The present disclosure relates to an intraoral scanning device including a processing unit, the processing unit being configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data.

[0188] An important advantage of the present disclosure is that the risk of sensitive user data, such as intraoral scanning device settings and / or user-specific software updates, being sent or shared to third-party user applications or compromised user applications is greatly reduced or eliminated.

[0189] In addition, the present disclosure allows intraoral scanning device manufacturers to securely save and maintain updated and correct information about user applications. Furthermore, a server device or intraoral scanning device manufacturer can save updated user application information on a specific intraoral scanning device and link the user application with the specific intraoral scanning device.

[0190] According to these aspects, a method for ensuring secure communication of a user application installed on an external device of a dental system is disclosed, the dental system including an intraoral scanning device, a server device, and an external device. Ensuring secure communication of the user application includes obtaining query data in the server device; transmitting the query data from the server device to the user application installed on the external device; transmitting a query request including the query data from the user application to the intraoral scanning device; receiving a query response including response data from the intraoral scanning device; forwarding the response data from the user application to the server device; verifying the response data in the server device based on the query data; and, if the verification of the response data is successful, approving the user application in the server device.

[0191] According to this aspect, a dental system is disclosed, which includes a server device and an intraoral scanning device system. The intraoral scanning device system includes an external device and an intraoral scanning device, and the server device is configured to ensure secure communication of a user application installed on the external device. The server device can be configured to approve the user application, wherein approving the user application includes obtaining query data; transmitting the query data to the user application; receiving a response message containing response data from the user application, the response data containing an intraoral scanning device identifier; verifying the response data based on the query data; and, if the response data is verified, approving the user application. The external device may include a processing unit, a memory unit; and a wireless interface, wherein the user application is configured to ensure secure communication of the user application. Ensuring secure communication of the user application may include obtaining query data from the server device; transmitting a query request containing the query data to the intraoral scanning device of the intraoral scanning device system; receiving a query response containing the response data from the intraoral scanning device; and forwarding the response data to the server device.

[0192] As used herein, the term "identifier" refers to a piece of data used for identification (e.g., for classification) and / or unique identification. An identifier may be in the form of a word, number, letter, symbol, list, array, or any combination thereof. For example, an identifier that is a number may be in the form of an integer, such as an unsigned integer uint, having a length of, for example, 8 bits, 16 bits, 32 bits or more bits, such as an array of unsigned integers. An identifier may have a length of multiple bytes. For example, an intraoral scanning device identifier may have a length of 20 bytes.

[0193] The external device includes a memory unit and a wireless interface respectively connected to the processing unit. The memory unit may include removable and non-removable data storage units, including but not limited to read-only memory (ROM), random access memory (RAM), etc. The memory unit has a user application stored thereon. The wireless interface includes an antenna and a wireless transceiver, which is configured to perform wireless communication in a frequency range of 2.4 GHz to 2.5 GHz, 2.4 GHz to 5 GHz, or about 2.45 GHz or about 5 GHz, for example. The wireless interface can be configured to communicate, such as wirelessly, with an intraoral scanning device including an antenna and a wireless transceiver.

[0194] The user application may be dental software configured to operate the intraoral scanning device. The user application may be dental software configured to receive two-dimensional image data and / or three-dimensional image data and visualize the image data in real time on a graphical user interface.

[0195] The method includes obtaining query data in a server device. Obtaining the query data may include generating the query data, for example, generating the query data based on a default query value and / or a timestamp. Therefore, the server device may be configured to generate the query data, for example, based on a default query value and / or a timestamp. The server device may be configured to generate the query data at a certain time interval, for example, every 5 minutes, every 10 minutes or every 30 minutes. Although a shorter time between the generation of (different) query data can improve security, a too short time between the generation of (different) query data may place excessive timing requirements on the user application / intraoral scanning device, which in turn may lead to unnecessary false verifications and require the generation of power-consuming query responses in the intraoral scanning device. The query data may be random or pseudo-random. The query data may include at least 8 bytes, for example at least 16 bytes. The query data may be a 16-byte value. The server device may be configured to generate the query data based on a lookup table and / or a function, for example, with a timestamp as an input. Obtaining the query data based on the timestamp value allows and / or provides query data with a built-in validity period. Obtaining query data at given time intervals allows and / or provides query data with a built-in validity period.

[0196] The present disclosure relates to secure communication between entities of a dental system. The dental system includes a server device and an intraoral scanning device system, and the intraoral scanning device system includes an external device and an intraoral scanning device. The external device forms a communication device that communicates with the intraoral scanning device. The external device is usually paired or wirelessly coupled with the intraoral scanning device.

[0197] Obtaining the query data may include storing the query data in the server device. The server device may be configured to delete the query data after verifying the response data. The method may include deleting the query data after a certain period of time and / or replacing the query data with new query data.

[0198] The method includes transmitting query data from a server device to a user application.

[0199] The method includes transmitting, from a user application to an intraoral scanning device, a query request including query data.

[0200] The method includes receiving, for example in a user application, a challenge response, the challenge response including response data from an intra-oral scanning device. The response data may include at least 8 bytes, for example at least 16 bytes or at least 32 bytes. The response data may have a length in the range of 16 to 72 bytes. The response data may include an intra-oral scanning device identifier. The response data may include a key identifier for enabling a server device to use or apply correct key material when verifying the response data. The response data may include intra-oral scanning device challenge data generated in the intra-oral scanning device.

[0201] The response data includes a response value, such as a query response value, and / or intraoral scanning device data. The response data may include a checksum value based on the response value and / or the intraoral scanning device data. The response value may be based on the query data and / or the intraoral scanning device data, such as an intraoral scanning device identifier. The response value may be generated based on one or more of the query data from the server device, the intraoral scanning device key identified by the key identifier, the intraoral scanning device identifier, and the intraoral scanning device query data. The response value may be based on a static string. The response value may be encrypted using one or more of the query data from the server device, the key identified by the key identifier, the intraoral scanning device identifier, and the intraoral scanning device query data as key material.

[0202] The method includes forwarding response data from a user application to a server device, for example in a response message. Verifying the response data in the server device based on query data, for example a response value of the response data. Verifying the response data in the server device based on the query data may include, for example, calculating the query data based on a default query value and / or a timestamp. Verifying the response data in the server device based on the query data may include retrieving the query data from a memory of the server device. Verifying the response data in the server device may be based on intra-oral scanning device query data of the response data. Verifying the response data in the server device may be based on an intra-oral scanning device identifier of the response data. Verifying the response data may include calculating a verification value based on the query data from the server device and / or a key identified by a key identifier of the response data, the intra-oral scanning device query data, and one or more of the intra-oral scanning device identifier. Verifying the response data may include comparing the verification value to the response value. If the verification value corresponds to the response value, the response data may be verified (verification successful).

[0203] The method optionally includes, if the verification response data is successful, approving the user application in the server device. Thus, if the verification response data is successful, the server device considers the user application as a trusted entity in the system. In other words, if the verification response data is successful, it can be said that the user application is whitelisted in the server device.

[0204] The method optionally includes, if the verification response data fails, then disapproving the user application in the server device. Thus, if the verification response data succeeds, then the server device may treat the user application as an untrusted entity in the system. If the verification response data fails, for example if the verification response data fails multiple times, for example two, three or more times, then the user application may be blacklisted in the server device, for example for a period of time. The method may include, if the verification response data fails, then setting the user application status identifier to a value indicating that the user application is not approved.

[0205] The method may include determining response data in the intraoral scanning device, or at least determining its response value, based on the query data and / or the intraoral scanning device identifier of the intraoral scanning device. Therefore, the intraoral scanning device can be configured to generate response data based on the query data and / or the intraoral scanning device identifier. The response data based on the intraoral scanning device identifier, such as the response value, enables the server device to authenticate the intraoral scanning device. The response data optionally includes or indicates the intraoral scanning device identifier. Therefore, the server device is able to identify a specific intraoral scanning device.

[0206] In the method, receiving a query response including response data from the intra-oral scanning device may be performed by a user application.

[0207] In the method, approving the user application includes setting a user application state identifier to a value indicating that the user application is approved.

[0208] The method may include linking the user application to the intra-oral scanning device, such as to an intra-oral scanning device identifier of the intra-oral scanning device, in a memory of the server device if the validation response data is successful.

[0209] The method may include transmitting a request for interrogation data from the user application. Thus, for example, if the user application is updated and / or if the external device and / or the user application is restarted, the user application and / or the intraoral scanning device may be able to initiate a secure communication between the user application and the server device, thereby increasing the level of security.

[0210] The request for the interrogation data may be transmitted if a first approval criterion, for example in the user application, is met. The first approval criterion may include, for example, a determination in the user application whether the user application has been previously approved, wherein the first approval criterion is met if the user application has not been previously approved. The first approval criterion may be met if the user application is started for the first time, for example after installing the user application and / or after the external device is powered on again. The first approval criterion may be met if the user application has been updated to a new version.

[0211] The method may include storing an approval timestamp indicating the last approval time; determining whether a second approval criterion based on the approval timestamp is met; and initiating secure communication of the user application if the second approval criterion is met. This ensures that the server device approves / disapproves the user application at a certain frequency, further improves the security of the dental system by maintaining an updated user application database in the server device, and optimizes dental system communication.

[0212] In the method, approving the user application may include transmitting intra-oral scanning device settings specific to the intra-oral scanning device to the user application. Approving the user application may include transmitting intra-oral scanning device operating parameters specific to the intra-oral scanning device to the user application.

[0213] The method may include not approving or rejecting the user application if the response data is not received within an approval period, such as from obtaining the query data or transmitting the query data. In one or more exemplary server devices / methods, the length of the approval period may be determined by the frequency of determining new query data. In one or more exemplary devices / methods, the query data is calculated or generated at given time intervals, such as every 5 minutes or every 10 minutes.

[0214] The method may include establishing a secure session between the user application and the intraoral scanning device, and optionally transmitting a challenge request in the secure session, such as an integrity protected, encrypted, authenticated and / or mutually authenticated session. A challenge response may be received in the secure session.

[0215] The method may include establishing a secure session, such as an integrity protected, encrypted, authenticated and / or mutually authenticated session, between the server device and the user application, and optionally transmitting the challenge data in the secure session. The response data may be forwarded from the user application to the server device in the secure session.

[0216] The server device may be configured to determine whether an approval criterion is satisfied, the server device being configured to initiate secure communication of the user application if the approval criterion is satisfied, wherein the approval criterion comprises a first approval criterion and a second approval criterion, and wherein the approval criterion is satisfied if the first approval criterion and / or the second approval criterion are satisfied. The second approval criterion may be satisfied if the time since the last approval is longer than an approval time threshold, such as one or more days, such as 7 days, 14 days. Thus, approving the user application at a minimum frequency may be employed to ensure that the user application data is updated in the server device.

[0217] The present disclosure also relates to a user application for an external device of a dental system. The external device may be a tablet computer, a dental clinic computer, or a computer. When installed on the external device, the user application is configured to ensure secure communication of the user application.

[0218] The user application may be configured to determine whether a first approval criterion is met, and, if the first approval criterion is met, initiate secure communication of the user application, and wherein obtaining the query data comprises transmitting a request for the query data to the server device. The request for the query data is a message requesting the server device to transmit the query data to the user application. Thus, the user application and / or the intraoral scanning device (via the user application) may actively initiate approval of the user application in the server device.

[0219] By enabling dental system entities to initiate secure communications of user applications, the approval process can be optimized, for example by having the approval process only be initiated when necessary or only when justified by changes to different entities in the dental system.

[0220] Client devices used to secure intraoral scanning devices:

[0221] The capabilities of intraoral scanning devices are becoming more and more advanced. Intraoral scanning device communications include wireless communication between intraoral scanning devices and external devices, such as computers and tablets, which adds complexity. Intraoral scanning device communications face many challenges in terms of security. The device communicating with the intraoral scanning device may be a legitimate device, but it may also be a fraudulent device. If the communication with the intraoral scanning device does not allow for the distinction between legitimate and fraudulent devices, then this opens the door to a large number of attacks, such as unauthorized access to the intraoral scanning device memory to write or change data. Any such attack may cause the failure of the intraoral scanning device, such as a battery drain attack.

[0222] However, the intraoral scanning device is a small device with strict limitations in computing power, storage space, etc. Therefore, the device communicating with the intraoral scanning device cannot use the readily available security algorithms and protocols, which poses risks such as draining the battery of the intraoral scanning device or reducing the function of the intraoral scanning device, making intraoral scanning almost useless.

[0223] Existing intraoral scanning devices are part of a service infrastructure that includes intraoral scanning devices, scanning software for specific services, and communication between service providers. Services may include, for example, manufacturing aligners, retainers, crowns, implants, braces, mouth guards, etc. In order to improve the availability of such infrastructure to dentists, a minimum interaction between the infrastructure and the dentist is required. One way to achieve this is by applying wireless communication between the intraoral scanning device and an external computer that is connected to a server that can forward the intraoral scan data to the service provider. The patient's scan data can be characterized as personal information, and therefore, any risk of a third party stealing or destroying at least the scan data, etc., needs to be minimized. The scan data is characterized as personal information, and, in some cases, other types of personal information, such as age, gender, location address, personal security number, etc., are associated with the scan data. In this example, the security of wireless communication in the service infrastructure needs to be improved.

[0224] An object of one aspect of the present disclosure is to provide a client device and a method that attempts to mitigate, alleviate or eliminate one or more of the above-mentioned deficiencies and disadvantages in the art, either alone or in any combination.

[0225] Another aspect of the present disclosure aims to improve the security of wireless communications with an intraoral scanning device to protect the intraoral scanning device from potential attacks, such as providing an improved client device and a method for communicating with an intraoral scanning device, which improves the security of communications with the intraoral scanning device.

[0226] According to these aspects, a client device for communicating with an intraoral scanning device is disclosed. The client device may include a processing unit, a storage unit, and a wireless interface, the wireless interface being configured to receive two-dimensional image data and / or three-dimensional image data from the intraoral scanning device. The processing unit may be configured to send a session request to the intraoral scanning device via the wireless interface, and to receive a session response from the intraoral scanning device via the wireless interface, the session response including an intraoral scanning device identifier. Furthermore, the processing unit may be configured to obtain a session key based on the session response. Furthermore, the processing unit may be configured to determine intraoral scanning device data, generate session data based on the session key and the intraoral scanning device data, and send the session data to the intraoral scanning device via the wireless interface.

[0227] According to these aspects, a client device for intraoral scanning device communication is disclosed. The client device may include a processing unit, a storage unit, and a wireless interface, the wireless interface being configured to receive two-dimensional image data and / or three-dimensional image data from the intraoral scanning device. The processing unit may be configured to send a session request for a user session to the intraoral scanning device via the wireless interface, and receive a session response from the intraoral scanning device via the wireless interface, the session response including an intraoral scanning device identifier. In addition, the processing unit may be configured to obtain a session key based on the session response, wherein obtaining the session key includes establishing a connection with a session key generator via the wireless interface; sending a session key request to the session key generator via the wireless interface, the session key request including an intraoral scanning device identifier; receiving a session key response from a session key device via the wireless interface; and determining a session key based on the session key response. In addition, the processing unit may be configured to determine intraoral scanning device data, generate session data based on the session key and the intraoral scanning device data, and send the session data to the intraoral scanning device via the wireless interface.

[0228] According to this aspect, a method for intraoral scanning device communication performed in a client device is disclosed, the client device including a processing unit, a storage unit and a wireless interface, the wireless interface being configured to receive two-dimensional image data and / or three-dimensional image data from the intraoral scanning device. The method may include sending a session request for a session to the intraoral scanning device via the wireless interface, receiving a session response via the wireless interface, and obtaining a session key based on the session response, wherein obtaining the session key includes establishing a connection with a session key device, sending a session key request to the session key device, receiving a session key response from the session key device, and determining the session key based on the session key response. In addition, the method may include determining intraoral scanning device data, generating session data based on the session key and the intraoral scanning device data, and sending the session data to the intraoral scanning device via the wireless interface.

[0229] An intraoral scanning device is a handheld scanning device used to scan the inside of a patient's mouth. The difference between an intraoral scanning device and other types of dental scanning devices is that an intraoral scanning device is a handheld scanning device that can be easily operated by a user with one hand, and it has no wired connection to any external device during scanning of the inside of a patient's mouth. Therefore, the only attack that an intraoral scanning device may suffer is an attack via a wireless interface.

[0230] The disclosed method and intraoral scanning device enable secure configuration of the intraoral scanning device, such as secure access to the memory of the intraoral scanning device. An advantage of the present disclosure is that the intraoral scanning device can only be configured or updated by an authorized party. Therefore, the disclosed intraoral device has the advantage of detecting and preventing any modification by an unauthorized party. The intraoral scanning device disclosed herein is advantageously protected from attacks, such as spoofing attacks, man-in-the-middle attacks, and / or replay attacks.

[0231] The intraoral scanning device is a key element in providing the required level of security for wireless communications in a service infrastructure that includes at least the intraoral scanning device and the scanning computer or dental software installed on a computer. It is not possible for a third party to attack the wireless communications, since this person must actually hold the intraoral scanning device. He does not even have access to the scanning computer or the dental software.

[0232] The disclosed method and client device provide secure communications from a client device to an intra-oral scanning device, such as providing the client device with secure and / or authorized access to a memory of the intra-oral scanning device. One advantage of the present disclosure is that communications between the client device and the intra-oral scanning device are protected from any action, or at least some actions, from unwelcome parties. Thus, the disclosed client device has the advantage of allowing the intra-oral scanning device to detect any modifications made by unauthorized parties. The client device provides secure communications suitable for an intra-oral scanning device, which in turn is able to securely communicate with legitimate parties, such as a client device, and resist attacks, such as spoofing attacks, man-in-the-middle attacks, and / or replay attacks.

[0233] The methods disclosed herein enable secure configuration and / or updating of intra-oral scanning devices.

[0234] The present disclosure improves the security of communications between a client device and an intraoral scanning device. Security includes assessing threats, vulnerabilities, and attacks, and developing appropriate security measures and countermeasures to protect against threats and attacks. The present disclosure provides an intraoral scanning device including a processing unit, which is configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data. The two-dimensional image data and / or three-dimensional image data may include information about the patient's oral anatomical structure, such as teeth, gums, bone levels, and / or information about diagnostic indicators, such as caries, bone loss, gingivitis, gum recession, periodontitis, bone loss, cracks, and bites.

[0235] The processing unit can be configured to obtain a session key, which includes establishing a connection with a session key device via a wireless interface; transmitting a session key request to the session key device via the wireless interface, the session key request including an intra-oral scanning device identifier; receiving a session key response from the session key device via the wireless interface; and determining the session key based on the session key response.

[0236] The processing unit may be configured to obtain the session key, which includes validating the intra-oral scanning device identifier based on the client device key, and deriving the session key based on the intra-oral scanning device identifier.

[0237] The processing unit may be configured to process the received two-dimensional image data and / or three-dimensional image data to visualize the data on a display for designing dental accessories, such as aligners, retainers, crowns, implants, braces, bite pads, etc., and / or for providing diagnostic data.

[0238] The two-dimensional image data and / or the three-dimensional image data may be image data configured to be visualized on a display in two dimensions or three dimensions, respectively.

[0239] As used herein, the term "client device" refers to a device that communicates with an intraoral scanning device. A client device may refer to a computing device that acts as a client. Client devices may include customized devices, handheld devices, repeaters, tablet computers, personal computers, mobile phones, and / or USB dongles that plug into personal computers. The client device may control the operation of the intraoral scanning device by sending customization data, intraoral scanning device operating parameters, and / or firmware data. The disclosed client device and method support the intraoral scanning device against attacks, such as unauthorized access or control of the intraoral scanning device, while still allowing legitimate parties access, such as client device access, such as for customization purposes, update purposes, maintenance purposes.

[0240] The intraoral scanning device may operate in one or more modes. The one or more modes may include a first mode and / or a second mode. The one or more modes may include a third mode and / or a fourth mode. The one or more modes may include a default mode.

[0241] The client device may include a memory unit and a wireless interface connected to the processing unit, respectively. The wireless interface may include a wireless transceiver, which is configured to, for example, wirelessly communicate in a frequency range of 2.4 GHz to 2.5 GHz, 2.4 GHz to 5 GHz, or about 2.45 GHz or about 5 GHz. The wireless transceiver may be a Bluetooth transceiver, a Bluetooth low energy transceiver, or a wireless fidelity (WIFI) transceiver. The wireless interface may form a connection to one or more other devices, such as a computer, and / or a scanning computer, and / or a tablet computer and / or a smart phone.

[0242] In one embodiment, the wireless interface is configured to communicate, such as wirelessly, with an intra-oral scanning device including a wireless transceiver.

[0243] The processing unit may be configured to transmit a session request for a session to the intraoral scanning device via a wireless interface. The processing unit may be configured to receive a session response from the intraoral scanning device via the wireless interface, for example, from the intraoral scanning device and / or a session key device. The session response may include an intraoral scanning device identifier or an identifier derived therefrom. In an exemplary client device, the client device may receive the intraoral scanning device identifier during pairing of the client device with the intraoral scanning device. Therefore, the processing unit, for example, includes a receiving / transmitting unit, which is configured to send data and / or receive data, such as a session request\session response, via the wireless interface. The processing unit may be configured to obtain a session key based on, for example, a session response, for example, extracting a session key from or based on the session response. Therefore, the processing unit includes an acquirer. The processing unit may obtain a session key from, for example, a key library stored in a memory unit. The processing unit may be configured to obtain a session key, wherein obtaining the session key may include establishing a connection to the session key device via the wireless interface. The processing unit may send a session key request to, for example, a session key device of a session key server via the wireless interface, for example, via a wireless communication link established between the client device and the session key device via the wireless interface. The processing unit may receive a session key response from the session key device via the wireless interface and may determine the session key based on the session key response.

[0244] The session response may include an intra-oral scanning device identifier. The intra-oral scanning device identifier may include a hardware number of the intra-oral scanning device and / or a serial number of the intra-oral scanning device. The client device may retrieve the session key from the session key device by providing the intra-oral scanning device identifier to the session key device, e.g., as part of a session key request, and requesting a session key or an intra-oral scanning device key from the session key device and / or requesting the session key device to decrypt the session response and / or the session key.

[0245] In one or more exemplary client devices, a processing unit configured to obtain a session key may be configured to establish a connection to a session key device via a wireless interface, send a session key request to the session key device via the wireless interface, receive a session key response from the session key device via the wireless interface, and determine the session key based on the session key response. The session key request may include an intra-oral scanning device identifier. The connection to the session key device may be a secure connection over a network, which may include, for example, a private network and / or a public network.

[0246] The session key means may be a custom accessory device; wherein the custom accessory device optionally comprises a storage device containing a list configured to provide a session key and / or a session key response based on a session key request.

[0247] The processing unit may be configured to determine intraoral scanning device data. Thus, the processing, for example, includes a determiner. The intraoral scanning device data, for example, includes firmware, customization data, and / or intraoral scanning device operating parameters. The customization data may, for example, be setting data of the intraoral scanning device, such as power management settings, configuration settings, configuration of a user interface of the intraoral scanning device, and / or settings of an optical unit of the intraoral scanning device. Firmware may refer to a computer program provided by a manufacturer of the intraoral scanning device and to be installed on the intraoral scanning device to control the intraoral scanning device. For example, the firmware is installed to upgrade the operation and capabilities of the intraoral scanning device.

[0248] The optical unit may include one or more light projectors, one or more optical components, and one or more image sensors.

[0249] The user interface of the intraoral scanning device may include at least one touch sensor, at least one touch button, at least one light emitting diode, a tactile sensor and / or an accelerometer.

[0250] The session response may contain an encrypted session key.The processing unit may be configured to determine the session key by retrieving the session key from the session key response.

[0251] In one or more exemplary client devices, determining the session key includes retrieving the intra-oral scanning device key from the session key response or from the memory unit, and decrypting the encrypted session key based on the intra-oral scanning device key. Determining the session key may include decrypting the encrypted session key with a global key. The global key is, for example, a key common to a group of client devices. The processing unit may be configured to retrieve the intra-oral scanning device key from the session key response, and decrypt the encrypted session key based on the intra-oral scanning device key. The processing unit may include a decryption / encryption unit. The intra-oral scanning device key may, for example, be a symmetric key or a public key in a private-public key pair. The intra-oral scanning device key may include an AES-128-bit key as a symmetric key. Using a symmetric key as the intra-oral scanning device key provides the advantage of being able to use a hardware accelerator. The intra-oral scanning device key may include a public key of a private-public key pair, such as a public key of a private-public key pair of an authorized publisher of the session key, such as a client device or a session key device.

[0252] The processing unit may be configured to determine the session key by including decrypting the encrypted session key with the global key, i.e. determining the session key may include decrypting the encrypted session key with the global key. The global key may be, for example, a symmetric key or a public key of a private-public key pair. The session key may comply with an encryption standard, such as the Advanced Encryption Standard (AES), the RSA cryptosystem, a triple data encryption algorithm.

[0253] The processing unit may be configured to generate session data, for example including a message authentication code, based on the session key and the intraoral scanning device data. Thus, the processing unit may include a generator. The processing unit may generate a message authentication code based on the session key and the intraoral scanning device data. The message authentication code may be included in the session data. The processing unit may be configured to generate the session data based on the intraoral scanning device key. The processing unit may be configured to digitally sign the intraoral scanning device data, for example using a private key of a client device and / or a group of client devices to digitally sign the intraoral scanning device data. The processing unit may be configured to digitally sign the intraoral scanning device data using a private key obtained from a session key device, the digital signature being, for example, part of a session key response. The processing unit may generate a digital signature using a signature generation function and a private key of the client device, and attach the digital signature to the session data. Then, upon receiving the session data, the intraoral scanning device may verify the digital signature. If the digital signature is not successfully verified using the claimed public key of the client device, the intraoral scanning device may ignore the session data and / or terminate the session. This can provide the advantage that the client device enables the intra-oral scanning device to reject tampered or received session data from unauthenticated parties, and that communications with the intra-oral scanning device are thereby resistant to impersonation and spoofing attacks.

[0254] The processing unit may be configured to send the session data to the intra-oral scanning device via the wireless interface, for example using the receiving / transmitting unit. The session data may include intra-oral scanning device data encrypted with the session key. To encrypt the session data with the session key, the client device may utilize any of the above-mentioned encryption standards.

[0255] Methods for controlling access to intraoral scanning device services:

[0256] Furthermore, the present disclosure relates to a method of controlling client access to services of an intra-oral scanning device.

[0257] An object of one aspect of the present disclosure is to provide a client device and a method that attempts to mitigate, alleviate or eliminate one or more of the above-mentioned deficiencies and disadvantages in the art, either alone or in any combination.

[0258] Another aspect of the present disclosure aims to improve the security of wireless communications with an intraoral scanning device to protect the intraoral scanning device from potential attacks, such as providing an improved client device and a method for communicating with an intraoral scanning device, which can improve the security of communications with the intraoral scanning device.

[0259] It is an object of yet another aspect of the present disclosure to provide a method of operating an intra-oral scanning device, wherein access of a client device to an intra-oral scanning service is controlled in an efficient manner.

[0260] According to multiple aspects, a method for controlling access of a client device to a service of an intra-oral scanning device is disclosed. The method may include the following steps: requesting the client device to access the service of the intra-oral scanning device by providing a client device authenticator to the intra-oral scanning device; authenticating the client device based on confirmation of the provided client device authenticator by the intra-oral scanning device. In addition, the method may include comparing the security level associated with the service requested by the client device with the highest security level assigned to the client device by the intra-oral scanning device upon successful authentication, wherein the security level is selected from a plurality of hierarchical security levels; and granting the client device access to the service of the intra-oral scanning device if the requested security level is lower than or equal to the highest security level assigned to the client device.

[0261] The present disclosure is beneficial in that it allows for service access control implemented at runtime on the intraoral scanning device without the need for an external entity, and it provides client-specific service access while having low resource requirements, considering that the resources of intraoral scanning devices are typically limited, especially in terms of storage space, power consumption, and computational workload.

[0262] Another client device may be configured to communicate with the intraoral scanning device via the client device through at least one wired communication link. The client device that communicates with the intraoral scanning device via the wireless interface may be a gateway of the intraoral scanning device. First, the other client device must establish a connection to the client device through a key exchange scheme. Then, the client device may send another session request to the intraoral scanning device via the wireless interface. Then, the processing unit of the client device may receive a session response from the intraoral scanning device via the wireless interface, and then the processing unit may obtain a session key based on the session response. Session data to be transmitted between another client device and the intraoral scanning device may be generated based on the session key and the intraoral scanning device data. The session data is then transmitted via the wireless interface between the client device and the intraoral scanning device, and then transmitted via at least one wired connection between another client device and the client device. In another example, another session request may be part of a session request generated by the client device, which means that only one session request needs to be forwarded in order to establish a communication link between another client device, the client device, and the intraoral scanning device. Another client device may be located away from a clinic operating the client device and the intraoral scanning device. In another client device, a dentist may be required to remotely monitor a scan of a patient, which can be accomplished with high security by configuring the client device as a gateway between another client device and the intraoral scanning device.

[0263] The other client device may be a second client device, and the client device may be the first client device, and the dental system may include the first client device, at least one second client device, and an intraoral scanning device.

[0264] The other client device, the client device, and the intra-oral scanning device may be part of a mesh network for sharing or distributing intra-oral scan data.

[0265] Client device with certificate and related methods:

[0266] In addition, the present disclosure relates to a client device for intra-oral scanning device communication and related methods. Specifically, a method of operating a client device for intra-oral scanning device communication is disclosed.

[0267] An object of one aspect of the present disclosure is to provide a client device and a method that attempts to mitigate, alleviate or eliminate one or more of the above-mentioned deficiencies and disadvantages in the art, either alone or in any combination.

[0268] Another aspect of the present disclosure aims to improve the security of wireless communications with an intraoral scanning device to protect the intraoral scanning device from potential attacks, such as providing an improved client device and a method for communicating with an intraoral scanning device, which can improve the security of communications with the intraoral scanning device.

[0269] There is a need for client devices and methods that provide increased security for intraoral scanning device communications. In addition, there is a need for devices and methods that reduce the risk of intraoral scanning and intraoral scanning functionality being compromised by a third party.

[0270] According to these aspects, a client device for intraoral scanning device communication is disclosed. The client device may include a processing unit, a memory unit, and a wireless interface. The memory unit may have a client device key stored thereon, such as at least one client device key, and / or a client device certificate. The processing unit may be configured to receive a connection response via the wireless interface, the connection response including, for example, an intraoral scanning device identifier; generate one or more keys based on the intraoral scanning device identifier and / or the client device key, such as including a certificate key; obtain an authentication message based on the certificate key and / or the client device certificate. Obtaining the authentication message may optionally include generating and / or obtaining an encrypted client device certificate by, for example, encrypting the client device certificate with a certificate key, and optionally including the encrypted client device certificate in the authentication message. The processing unit may be configured to transmit the authentication message via the wireless interface.

[0271] The processing unit may be configured to obtain the session identifier. Generating the one or more keys may include generating an intra-oral scanning device key based on the intra-oral scanning device identifier and the client device key, and may also include generating a common secret based on the intra-oral scanning device key and the session identifier.

[0272] The certificate key may be based on a common secret and a certificate value.

[0273] Generating one or more keys may include generating a session key based on the intra-oral scanning device identifier, the session identifier, and the client device key.The processing unit may be configured to transmit the session key to the customization device.

[0274] The session key may be based on a common secret and a session value.

[0275] The processing unit may be further configured to include an authentication key identifier indicating the client device key in the authentication message.

[0276] The processing unit may also be configured to include an authentication type identifier in the authentication message.

[0277] A client device certificate can contain one or more of the following items:

[0278] The certificate type identifier;

[0279] Signing device identifiers;

[0280] Client device type identifier;

[0281] Client device identifier;

[0282] Client device key identifier;

[0283] One or more hardware identifiers; and

[0284] Digital signature.

[0285] According to these aspects, a method of operating a client device for intra-oral scanning device communications is disclosed, the client device including a memory unit having client device keys, such as at least one client device key, and / or a client device certificate stored thereon. The method includes receiving a connection response via a wireless interface, the connection response including, for example, an intra-oral scanning device identifier; generating one or more keys, such as including a certificate key, based on the intra-oral scanning device identifier and / or the client device key; and obtaining an authentication message based on the certificate key and / or the client device certificate. Obtaining the authentication message optionally includes generating an encrypted client device certificate, such as by encrypting the client device certificate with the certificate key, and optionally including the encrypted client device certificate in the authentication message. The method includes transmitting the authentication message via the wireless interface.

[0286] The method may include obtaining a session identifier, and wherein generating one or more keys may include generating an intra-oral scanning device key based on the intra-oral scanning device identifier and a client device key, and generating a common secret based on the intra-oral scanning device key and the session identifier.

[0287] The certificate key may be based on the common secret and the certificate value, or the method may include basing the certificate key on the common secret and the certificate value.

[0288] Generating one or more keys may include generating a session key based on the intra-oral scanning device identifier, the session identifier, and the client device key. The method may also include transmitting the session key to the customized device.

[0289] The session key may be based on the common secret and the session value, or the method may include basing the session key on the common secret and the session value.

[0290] Obtaining the authentication message may include including an authentication key identifier indicative of a client device key in the authentication message.

[0291] Obtaining the authentication message may include including an authentication type identifier in the authentication message.

[0292] Advantageously, the method and the intra-oral scanning device enable the intra-oral scanning device manufacturer to control access to the intra-oral scanning device by a client device and / or implement version control of access by a client device.

[0293] The disclosed method and apparatus provide an extensible security architecture with higher security for an intraoral scanning device system. The disclosed client device and method support the intraoral scanning device against attacks, such as unauthorized access or control of the intraoral scanning device, while still allowing legitimate parties to access, such as client device access, for customization purposes, update purposes, maintenance purposes, for example. The client device and the method allow the intraoral scanning device to open sessions only with authenticated parties, such as authenticated customized devices, authenticated accessory devices, authenticated external devices, and / or authenticated servers. This can provide robustness against impersonation and masquerade attacks, battery exhaustion attacks, man-in-the-middle attacks, and / or replay attacks. In addition, the need to update and / or exchange keys in the event that the keys have been leaked at the client device is reduced and simplified.

[0294] The processing unit may be configured to process the received two-dimensional image data and / or three-dimensional image data to visualize the data on a display for designing dental accessories, such as aligners, retainers, crowns, implants, braces, bite pads, etc., and / or for providing diagnostic data.

[0295] The two-dimensional image data and / or the three-dimensional image data may be image data configured to be visualized on a display in two dimensions or three dimensions, respectively.

[0296] As used herein, the term "client device" refers to a device that communicates with an intraoral scanning device. A client device may refer to a computing device that acts as a client. Client devices may include customized devices, handheld devices, repeaters, tablet computers, personal computers, mobile phones, and / or USB dongles that plug into personal computers. The client device may control the operation of the intraoral scanning device by sending customization data, intraoral scanning device operating parameters, and / or firmware data. The disclosed client device and method support the intraoral scanning device against attacks, such as unauthorized access or control of the intraoral scanning device, while still allowing legitimate parties, such as client devices, access for, for example, customization purposes, update purposes, maintenance purposes.

[0297] The intraoral scanning device may operate in one or more modes. The one or more modes may include a first mode and / or a second mode. The one or more modes may include a third mode and / or a fourth mode. The one or more modes may include a default mode.

[0298] The client device may include a memory unit and a wireless interface connected to the processing unit, respectively. The wireless interface may include a wireless transceiver, which is configured to, for example, wirelessly communicate in a frequency range of 2.4 GHz to 2.5 GHz, 2.4 GHz to 5 GHz, or about 2.45 GHz or about 5 GHz. The wireless transceiver may be a Bluetooth transceiver, a Bluetooth low energy transceiver, or a wireless fidelity (WIFI) transceiver. The wireless interface may form a connection to one or more other devices, such as a connection to a computer, and / or a scanning computer, and / or a tablet computer and / or a smart phone.

[0299] In one embodiment, the wireless interface is configured to communicate, such as wirelessly, with an intra-oral scanning device including a wireless transceiver.

[0300] The processing unit may be configured to send a session request to the intraoral scanning device via a wireless interface. The processing unit may be configured to receive a session response from the intraoral scanning device via the wireless interface, for example, from the intraoral scanning device and / or a session key device. The session response may include an intraoral scanning device identifier or an identifier derived therefrom. In an exemplary client device, the client device may receive the intraoral scanning device identifier during pairing of the client device with the intraoral scanning device. Therefore, the processing unit, for example, includes a receiving / sending unit configured to send data such as a session request and / or receive data such as a session response via the wireless interface. The processing unit may be configured to obtain a session key based on, for example, a session response, for example, extracting the session key from the session response or based on the session response. Therefore, the processing unit includes an acquirer. The processing unit may retrieve the session key from, for example, a key library stored in a memory unit. The processing unit may be configured to obtain a session key, wherein obtaining the session key may include establishing a connection to the session key device via the wireless interface. The processing unit may send a session key request to the session key device via the wireless interface, for example, via a wireless communication link established between the client device and the session key device via the wireless interface, the session key device being, for example, a session key server. The processing unit may receive a session key response from the session key device via the wireless interface and may determine the session key based on the session key response.

[0301] The session response may include an intra-oral scanning device identifier. The intra-oral scanning device identifier may include a hardware number of the intra-oral scanning device and / or a serial number of the intra-oral scanning device. The client device may retrieve the session key from the session key device by providing the intra-oral scanning device identifier to the session key device, e.g., as part of a session key request, and requesting the session key or intra-oral scanning device key from the session key device and / or requesting the session key device to decrypt the session response and / or the session key.

[0302] In one or more exemplary client devices, a processing unit configured to obtain a session key may be configured to establish a connection to a session key device via a wireless interface, send a session key request to the session key device via the wireless interface, receive a session key response from the session key device via the wireless interface, and determine the session key based on the session key response. The session key request may include an intra-oral scanning device identifier. The connection to the session key device may be a secure connection over a network, which may include, for example, a private network and / or a public network.

[0303] The session key means may be a custom accessory device; wherein the custom accessory device optionally comprises a storage means containing a list configured to provide a session key and / or a session key response based on a session key request.

[0304] The processing unit may be configured to determine intraoral scanning device data. Thus, the processing, for example, includes a determiner. The intraoral scanning device data, for example, includes firmware, customization data, and / or intraoral scanning device operating parameters. The customization data may, for example, be setting data of the intraoral scanning device, such as power management settings, configuration settings, configuration of a user interface of the intraoral scanning device, and / or settings of an optical unit of the intraoral scanning device. Firmware may refer to a computer program provided by a manufacturer of the intraoral scanning device and to be installed on the intraoral scanning device to control the intraoral scanning device. For example, the firmware is installed to upgrade the operation and capabilities of the intraoral scanning device.

[0305] The optical unit may include one or more light projectors, one or more optical components, and one or more image sensors.

[0306] The user interface of the intraoral scanning device may include at least one touch sensor, at least one touch button, at least one light emitting diode, a tactile sensor and / or an accelerometer.

[0307] The session response may contain an encrypted session key.The processing unit may be configured to determine the session key by retrieving the session key from the session key response.

[0308] In one or more exemplary client devices, determining the session key includes retrieving the intra-oral scanning device key from the session key response or from the memory unit, and decrypting the encrypted session key based on the intra-oral scanning device key. Determining the session key may include decrypting the encrypted session key with a global key. The global key is, for example, a key common to a group of client devices. The processing unit may be configured to retrieve the intra-oral scanning device key from the session key response, and decrypt the encrypted session key based on the intra-oral scanning device key. The processing unit may include a decryption / encryption unit. The intra-oral scanning device key may, for example, be a symmetric key or a public key in a private-public key pair. The intra-oral scanning device key may include an AES-128-bit key as a symmetric key. Using a symmetric key as the intra-oral scanning device key provides the advantage of being able to use a hardware accelerator. The intra-oral scanning device key may include a public key of a private-public key pair, such as a public key of a private-public key pair of an authorized publisher of the session key, such as a client device or a session key device.

[0309] The processing unit may be configured to determine the session key by including decrypting the encrypted session key with the global key, i.e. determining the session key may include decrypting the encrypted session key with the global key. The global key may be, for example, a symmetric key or a public key of a private-public key pair. The session key may comply with an encryption standard, such as the Advanced Encryption Standard (AES), the RSA cryptosystem, a triple data encryption algorithm.

[0310] The processing unit may be configured to generate session data, for example including a message authentication code, based on the session key and the intraoral scanning device data. Therefore, the processing unit may include a generator. The processing unit may generate a message authentication code based on the session key and the intraoral scanning device data. The message authentication code may be included in the session data. The processing unit may be configured to generate session data based on the intraoral scanning device key. The processing unit may be configured to digitally sign the intraoral scanning device data, for example using a private key of a client device and / or a group of client devices to digitally sign the intraoral scanning device data. The processing unit may be configured to digitally sign the intraoral scanning device data using a private key obtained from a session key device, the digital signature being, for example, part of a session key response. The processing unit may generate a digital signature using a signature generation function and a private key of the client device, and attach the digital signature to the session data. Then, upon receiving the session data, the intraoral scanning device may verify the digital signature. If the digital signature is not successfully verified using the claimed public key of the client device, the intraoral scanning device may ignore the session data and / or terminate the session. This can provide the advantage that the client device enables the intra-oral scanning device to reject tampered or received session data from unauthenticated parties, and that communications with the intra-oral scanning device are thereby resistant to impersonation and spoofing attacks.

[0311] The processing unit may be configured to send the session data to the intra-oral scanning device via the wireless interface, for example using the receiving / transmitting unit. The session data may include intra-oral scanning device data encrypted with the session key. To encrypt the session data with the session key, the client device may utilize any of the above-mentioned encryption standards.

[0312] The present disclosure relates to improving the security of intra-oral scanning device communications. That is, the client device disclosed herein makes intra-oral scanning device communications robust to security threats, vulnerabilities, and attacks by implementing appropriate security measures and countermeasures (e.g., security mechanisms) to resist threats and attacks. The present disclosure relates to intra-oral scanning device communications that are robust to replay attacks, unauthorized access, battery drain attacks, and man-in-the-middle attacks.

[0313] As used herein, the term "intraoral scanning device" refers to a device configured to acquire intraoral scan data from a three-dimensional dental object during a scanning session.

[0314] As used herein, the term "certificate" refers to a data structure capable of verifying its source and content, such as verifying the legitimacy and / or authenticity of its source and content. A certificate is configured to provide content associated with the holder of the certificate by the issuer of the certificate. The certificate contains a digital signature so that the recipient of the certificate can verify or authenticate the certificate content and source. The certificate may contain one or more identifiers and / or key materials, such as one or more encryption keys, such as an intraoral scanning device key, so that secure communication can be performed in the intraoral scanning device system. Therefore, the certificate allows the authentication, non-repudiation and / or integrity protection of the source and content to be implemented. The certificate may also contain a validity period, one or more algorithm parameters and / or an issuer. The certificate may include a digital certificate, a public key certificate, an attribute certificate and / or an authorization certificate. Examples of certificates include X.509 certificates, secure / multipurpose Internet mail extensions (S / MIME) certificates and / or transport layer security (TLS) certificates.

[0315] As used herein, the term "key" refers to a cryptographic key, i.e., a piece of data, such as a string, a parameter, that determines the functional output of a cryptographic algorithm. For example, during encryption, a key allows plaintext to be converted into ciphertext, and vice versa during decryption. The key can also be used to verify a digital signature and / or a message authentication code MAC. When the same key is used for encryption and decryption, the key is called a symmetric key. In asymmetric encryption or public key encryption, the key material is a key pair, i.e., a so-called private-public key pair including a public key and a private key. In an asymmetric or public key cryptographic system (e.g., the Rivest Shamir Adelman (RSA) cryptographic system), the public key is used for encryption and / or signature verification, while the private key is used for decryption and / or signature generation. The intraoral scanning device key can be a key material that allows one or more symmetric keys to be derived, such as a session key and / or a certificate key for intraoral scanning device communication. For example, during manufacturing, the intraoral scanning device key can be stored in a storage unit of the intraoral scanning device. The intraoral scanning device key can include key material for deriving a symmetric key. The intra-oral scanning device key includes, for example, an Advanced Encryption Standard (AES) key, such as an AES-128 bit key.

[0316] As used herein, the term "identifier" refers to a piece of data used to identify, e.g., for classification, and / or uniquely identify. An identifier may be in the form of a word, number, letter, symbol, list, array, or any combination thereof. For example, an identifier that is a number may be in the form of an integer, such as an unsigned integer uint, whose length may be, e.g., 8 bits, 16 bits, 32 bits, etc., such as an array of unsigned integers.

[0317] A client device for communicating with an intraoral scanning device for intraoral scanning device is disclosed. The term "client device" as used herein refers to a device capable of communicating with an intraoral scanning device. A client device may refer to a computing device that acts as a client. The client device may include a customized device, a handheld device, a repeater, a tablet computer, a personal computer, an application running on a personal computer or a tablet computer, or a mobile phone and / or a USB dongle plugged into a personal computer. The client device may belong to a client device type indicated by a client device type identifier, and the client device type corresponds to, for example, a model, category or type of the client device, such as a customized type, such as a tablet product model, category or type for a customized intraoral scanning device, a USB dongle product model, category or type for a customized intraoral scanning device. The client device may be configured to control the operation of the intraoral scanning device by sending customized data, intraoral scanning device operating parameters and / or firmware data.

[0318] The client device includes a memory unit and a wireless interface connected to the processing unit respectively. The memory unit may include removable and non-removable data storage units, including but not limited to read-only memory (ROM), random access memory (RAM), etc. The memory unit stores a client device certificate thereon. The memory unit may store a client device certificate and / or a client device key in a memory address and / or a storage unit of the memory unit, such as in a specified storage unit and / or a specified address. The wireless interface may include a wireless transceiver, which is configured to perform wireless communication in a frequency range of 2.4 GHz to 2.5 GHz, for example. The wireless interface may include one or more connectors for connecting to another device, such as a custom device. The connector may be a standard connector, such as a USB connector (USB 2.0 standard A, USB 2.0 standard B, Micro-A USB, Micro-B USB, Mini-A USB, Mini-B USB, etc.). The connector may be a proprietary connector used by a manufacturer of personal electronic devices. The wireless interface may be configured to communicate with an intraoral scanning device including a wireless transceiver, such as wireless communication.

[0319] The client device certificate may include a certificate type identifier. The certificate type identifier may indicate a certificate type among various certificate types, such as an intraoral scanning device family certificate type, an intraoral scanning device certificate type, a firmware certificate type, a research and development certificate type, and / or a client device certificate type. The certificate type identifier may be used by the intraoral scanning device and / or the client device to identify the type of certificate received, stored, authenticated, and / or retrieved by the intraoral scanning device. The client device certificate may include a version identifier indicating a data format version of the certificate. The intraoral scanning device may use the certificate type identifier and / or version identifier of the client device certificate to determine what type of data the client device certificate contains and / or what type of data is contained in a field of the client device certificate. For example, the intraoral scanning device may determine which field of the client device certificate contains a digital signature and / or which public key is required to verify the digital signature of the client device certificate based on the certificate type identifier and / or version identifier. It is conceivable that there is a one-to-one mapping relationship between the certificate type identifier and the public-private key pair.

[0320] The client device certificate may include a signing device identifier. The signing device identifier refers to a unique identifier that identifies a device that signed the client device certificate, such as a manufacturing device, such as an integrated circuit card, a smart card, a hardware security module. The signing device identifier may include, for example, a media access control (MAC) address of the signing device and / or a serial number of the signing device. The signing device identifier may allow, for example, an intra-oral scanning device to determine whether the signing device is blacklisted, such as to reject certificates signed by a signing device that is blacklisted, such as due to theft or other tampering.

[0321] The client device certificate may include a client device type identifier. The client device type identifier may indicate a certain client device type among various client device types, such as a model, category, or type of a client device, a USB dongle product model, category, or type used to customize the intraoral scanning device. The intraoral scanning device may use the client device type identifier to identify what type of client device the intraoral scanning device is communicating with. The client device type identifier may enable the intraoral scanning device to select a set of keys from a plurality of sets of keys in the intraoral scanning device. Each set of keys in the intraoral scanning device may be used by a corresponding different type of client device.

[0322] The client device certificate may include a client device identifier. The client device identifier may be based on one or more hardware identifiers of one or more hardware components / modules of the client device.

[0323] The client device certificate may include a client device key identifier. The client device key identifier indicates the client device key.

[0324] The client device certificate may include one or more hardware identifiers, such as a first hardware identifier and / or a second hardware identifier. The hardware identifier may identify a piece of hardware included in the client device, such as a radio chip included in the client device or a digital signal processor of the client device. The (one or more) hardware identifiers may be stored in a register of the piece of hardware included in the client device during the manufacture of the piece of hardware. The hardware identifier may include a serial number of the hardware, a chip identifier, or any combination thereof. A client device that receives or retrieves a client device certificate including a hardware identifier from a memory unit may verify the client device certificate by comparing the hardware identifier stored therein with a corresponding hardware identifier included in the client device certificate. Such verification may be performed when the client device certificate is retrieved from the memory unit, such as when the client device is booted or powered on. The client device certificate may include, for example, one or more Bluetooth addresses assigned by the manufacturer during manufacture.

[0325] The client device certificate may contain, for example, a user identifier in the form of a username. The client device certificate with the user identifier may facilitate use of a generic device, such as a tablet, as a client device, for example, by implementing user authentication / key generation / encryption at a remote server device controlled, for example, by the intraoral scanning device manufacturer.

[0326] The client device certificate may include a digital signature. The digital signature can prove or verify the authenticity of the client device certificate, such as verifying the legitimacy of the signer. The digital signature is optionally generated by a manufacturing device using a client device family private key when manufacturing the client device. The digital signature can be verified by an intraoral scanning device and / or a customized device using the public key of the corresponding client device family. If the digital signature fails to be successfully verified using the claimed public key, the intraoral scanning device can ignore the client device certificate and / or terminate normal operation. This can provide the advantage that the intraoral scanning device rejects client device certificates that have been tampered with or received from an unauthenticated party. Therefore, communication with the intraoral scanning device can resist counterfeiting, modification and spoofing attacks.

[0327] The processing unit is configured to receive a connection response via the wireless interface, the connection response including the intra-oral scanning device identifier. The connection response may be generated by the intra-oral scanning device and / or sent from the intra-oral scanning device. The processing unit is configured to generate one or more keys, for example based on the intra-oral scanning device identifier and / or the client device key. Generating the one or more keys may include generating a common secret based on the client device key. Generating the one or more keys may include generating the intra-oral scanning device key based on the intra-oral scanning device identifier and / or the client device key, for example including performing a hash function. For example, the intra-oral scanning device key IOS_KEY may be given as:

[0328] IOS_KEY=hash(IOS_ID,CD_KEY),

[0329] Where hash is the hash function, IOS_ID is the intra-oral scanning device identifier, and CD_KEY is the client device key.

[0330] By generating and / or using a common secret, the need to exchange keys is avoided. Furthermore, if the common secret is based on the intra-oral scanning device identifier (the client device key is different from the intra-oral scanning device key), the client device key cannot be derived from the intra-oral scanning device key used by the intra-oral scanning device. Thus, the risk of leaking the client device key is greatly reduced.

[0331] The one or more keys generated based on the intra-oral scan device identifier and / or the client device key may be based on a common secret.

[0332] The certificate key can be based on a common secret and / or a certificate value. The certificate value can be a predefined value or string, such as "certificate". The certificate key can be generated by performing a hash function on the common secret and / or the certificate value. For example, the certificate key C_KEY can be given as:

[0333] C_KEY=hash(CS,C_VAL),

[0334] Where hash is the hash function, CS is the common secret, and C_VAL is the certificate value.

[0335] Generating one or more keys may include generating a session key. The session key may be different from a certificate key. The session key may be based on an intraoral scanning device identifier. The session key may be based on a session identifier. The session key may be based on a client device key. The processing unit may be configured to transmit the session key to the customized device. When configured to operate as a customized device, the client device may be configured to perform customized communications with the intraoral scanning device based on the session key. The session key may be based on a common secret and / or a session value. The session value may be a predefined value or string, such as "session". The session key may be generated by performing a hash function on the common secret and / or session value. For example, the session key S_KEY may be given as:

[0336] S_KEY=hash(CS,S_VAL),

[0337] Where hash is a hash function, CS is a common secret, and S_VAL is a session value. Session-specific communication is achieved by generating a session key based on the session identifier and the common secret.

[0338] The processing unit is configured to obtain an authentication message based on the certificate key and / or the client device certificate. Obtaining the authentication message may include including the client device certificate in the authentication message.

[0339] The processing unit may be configured to include, in the authentication message, an authentication key identifier, for example, indicating a client device key. The authentication key identifier may indicate or match a client device key identifier of a client device certificate. The authentication message including the authentication key identifier indicating the client device key enables the intra-oral scanning device to select a correct intra-oral scanning device key from a plurality of intra-oral scanning device keys, for example, in order to generate or select a common secret. Subsequently, the intra-oral scanning device may generate a certificate key for decrypting the encrypted client device certificate in the intra-oral scanning device.

[0340] The processing unit may be configured to include an authentication type identifier in the authentication message. The authentication type identifier may indicate or match a client device type identifier and / or a certificate type identifier of a client device certificate. When the intraoral scanning device includes multiple sets of intraoral scanning device keys, the authentication message including the authentication type identifier may enable the intraoral scanning device to select an intraoral scanning device key from a selected set of intraoral scanning device keys. Additionally or alternatively, the intraoral scanning device may be configured to process the authentication message in a different manner based on the authentication type identifier. Thus, the intraoral scanning device may be able to select an appropriate authentication message processing scheme.

[0341] The method includes receiving a connection response via a wireless interface, such as from an intra-oral scanning device. The connection response may include an intra-oral scanning device identifier. The method includes generating and / or obtaining one or more keys, such as based on the intra-oral scanning device identifier and / or a client device key. Generating the one or more keys may include generating a common secret based on the client device key. The one or more keys may include a certificate key.

[0342] The method includes generating and / or obtaining an authentication message based on a certificate key and / or a client device certificate. Obtaining and / or generating the authentication message may include generating an encrypted client device certificate with a client device by encrypting the client device certificate with a certificate key and optionally including the encrypted client device certificate in the authentication message. Obtaining and / or generating the authentication message may include obtaining an encrypted client device certificate, such as from a memory unit and / or a server device. Obtaining the encrypted client device certificate may include transmitting a certificate request to the server device. In response, the server device generates and transmits a certificate response containing the encrypted client device certificate (the client device certificate has been encrypted with the certificate key). The client device receives the certificate response with the encrypted client device certificate and includes the encrypted client device certificate in the authentication message. Therefore, obtaining the encrypted client device certificate may include receiving a certificate response containing the encrypted client device certificate from the server device. Obtaining the authentication message may include including the client device certificate in the authentication message.

[0343] The method includes transmitting an authentication message via a wireless interface, such as to an intra-oral scanning device.

[0344] The method may include obtaining a session identifier, such as by receiving the session identifier from the intra-oral scanning device. The connection response may include the session identifier. Generating one or more keys may include generating an intra-oral scanning device key based on the intra-oral scanning device identifier and the client device key. For example, the intra-oral scanning device key IOS_KEY may be given as:

[0345] IOS_KEY=hash(IOS_ID,CD_KEY),

[0346] Where hash is the hash function, IOS_ID is the intra-oral scanning device identifier, and CD_KEY is the client device key.

[0347] Generating one or more keys may include generating a common secret. The common secret may be based on the intra-oral scanning device key and / or the session identifier. The common secret may be based on the intra-oral scanning device identifier. The intra-oral scanning device key and / or the client device key may be used as the common secret. For example, the common secret CS may be given as:

[0348] CS=hash(IOS_KEY,S_ID),

[0349] Where hash is a hash function, IOS_KEY is an intra-oral scanning device key, and S_ID is a session identifier. Generating one or more keys may include generating one or more keys based on a common secret.

[0350] In this method, the certificate key may be based on a common secret and / or a certificate value. The certificate value may be a predefined value or string, such as "certificate". Generating the certificate key may include performing a hash function on the common secret and / or the certificate value. For example, the certificate key C_KEY may be given as:

[0351] C_KEY=hash(CS,C_VAL),

[0352] Where hash is the hash function, CS is the common secret, and C_VAL is the certificate value.

[0353] Generating one or more keys may include generating a session key. The session key may be different from a certificate key. The session key may be based on an intra-oral scanning device identifier. The session key may be based on a session identifier. The session key may be based on a client device key. The method may include transmitting the session key to a customized device. The method may include performing customized communications with the intra-oral scanning device based on the session key.

[0354] In this method, the session key may be based on a common secret and / or a session value. The session value may be a predefined value or string, such as "session". Generating the session key may include performing a hash function on the common secret and / or the session value. For example, the session key S_KEY may be given as:

[0355] S_KEY=hash(CS,S_VAL),

[0356] Where hash is a hash function, CS is a common secret, and S_VAL is a session value. Session-specific communication is achieved by generating a session key based on the session identifier and the common secret.

[0357] Based on a common secret unique to the intra-oral scanning device (e.g., the common secret is based on the intra-oral scanning device identifier and / or the session identifier), the communication with the intra-oral scanning device provides intra-oral scanning device-specific communication. Therefore, other intra-oral scanning devices cannot process / understand the authentication message for the specific intra-oral scanning device.

[0358] In the method, generating an authentication message may include including an authentication key identifier in the authentication message. The authentication key identifier may indicate or match a client device key identifier of a client device certificate. The authentication message enables the intra-oral scanning device to select a correct intra-oral scanning device key from a plurality of intra-oral scanning device keys, for example, to generate or select a common secret, the authentication message including the authentication key identifier indicating the client device key. Subsequently, the intra-oral scanning device may generate a certificate key for decrypting the encrypted client device certificate in the intra-oral scanning device, for example, generated based on the selected intra-oral scanning device key.

[0359] In the method, generating an authentication message may include including an authentication type identifier in the authentication message. The authentication type identifier may indicate or match a client device type identifier and / or a certificate type identifier of a client device certificate. When the intraoral scanning device includes multiple sets of intraoral scanning device keys, the authentication message including the authentication type identifier may enable the intraoral scanning device to select an intraoral scanning device key from a selected set of intraoral scanning device keys. Additionally or alternatively, the intraoral scanning device may be configured to process the authentication message in different manners based on the authentication type identifier. Therefore, the intraoral scanning device may be able to select an appropriate authentication message processing scheme based on the authentication type identifier. The authentication type identifier may be a client device type identifier of a client device certificate.

[0360] In the exemplary method or exemplary client device, the common secret CS may be given as:

[0361] CS=hash(CD_KEY,S_ID),

[0362] Where hash is the hash function, CD_KEY is the client device key, and S_ID is the session identifier. BRIEF DESCRIPTION OF THE DRAWINGS

[0363] Various aspects of the present disclosure can be best understood by reading the following detailed description in conjunction with the accompanying drawings. For clarity, the drawings are schematic and simplified, and they only show details used to improve the understanding of the claims, while other details are omitted. In this document, the same figure numerals are used for the same or corresponding parts. The various features of each aspect can each be combined with any or all features of the other aspects. These and other aspects, features and / or technical effects will become apparent from the illustrations described below and will be explained with reference to these illustrations, in which:

[0364] Figure 1 An exemplary architecture according to the present disclosure is shown;

[0365] Figure 2 An exemplary intraoral scanning device is shown;

[0366] Figure 3 An exemplary sequence diagram between an intra-oral scanning device and a client device is shown;

[0367] Figure 4 An exemplary sequence diagram is shown;

[0368] Figure 5 An exemplary flow chart of the method is shown;

[0369] Figure 6 An exemplary architecture according to the present disclosure is shown;

[0370] Figure 7 An exemplary intraoral scanning device is shown;

[0371] Figure 8 An exemplary sequence diagram between an intra-oral scanning device and a client device is shown;

[0372] Fig. 9 An exemplary sequence diagram is shown;

[0373] Fig.10 An exemplary flow chart of the method is shown;

[0374] Fig.11 A system including an intraoral scanning device is shown;

[0375] Fig.12 An exemplary intraoral scanning device is shown;

[0376] Fig.13A An example of a client device certificate key is shown;

[0377] Fig. 13B An exemplary intraoral scanning device certificate is shown;

[0378] Fig.14 An exemplary sequence diagram is shown;

[0379] Fig.15 An exemplary flow chart illustrating a method; and

[0380] Fig.16 A dental system is schematically shown;

[0381] Fig.17 An exemplary signal diagram is shown;

[0382] Fig.18 is a flow chart of an exemplary method according to the present invention; and

[0383] Fig.19 An exemplary server device is schematically shown;

[0384] Fig. 20 An exemplary architecture according to the present disclosure is shown;

[0385] Fig.21A An exemplary intraoral scanning device is shown;

[0386] Fig. 21B An exemplary client device is shown;

[0387] Fig. 22 An exemplary sequence diagram is shown;

[0388] Fig.23 An exemplary flow chart of the method is shown;

[0389] Fig.24 Various clients in the prior art are shown to access intra-oral scanning device services;

[0390] Fig.25 is similar to Fig. 20 , but with client-specific intraoral scanning device service access controls implemented;

[0391] Fig.26 is a block diagram of an intraoral scanning device wirelessly connected to an external device;

[0392] Fig. 27 An example of a message sequence chart is shown, in which a user of an intra-oral scanning device authorizes the intra-oral scanning device to provide services to the intra-oral scanning device by making a gesture to the intra-oral scanning device;

[0393] Fig.28 Shows Fig. 27 A variation of the message sequence diagram;

[0394] Fig.29 and Fig.30 is a message sequence diagram that is subsequently executed, wherein authorization to access services of the intra-oral scanning device is granted by an entity that is trusted by the intra-oral scanning device;

[0395] Fig.31 shows a message sequence chart in which a customer authenticates himself to an intra-oral scanning device;

[0396] Fig.32 Shows Fig.31 A variation of the message sequence diagram;

[0397] Fig.33 shows the hierarchical security classification of intraoral scanning device services;

[0398] Fig.34 Assignment of security levels to authorization methods is shown;

[0399] Fig.35 Schematically illustrates an exemplary architecture according to the present disclosure;

[0400] Fig.36 An exemplary client device is schematically shown;

[0401] Fig.37 An exemplary client device certificate is schematically shown;

[0402] Fig.38 An exemplary client device certificate is schematically shown;

[0403] Fig.39 An exemplary signaling diagram is schematically shown;

[0404] Fig.40 An exemplary signaling diagram is schematically shown;

[0405] Fig.41 An exemplary signaling diagram is schematically shown;

[0406] Fig.42 A flowchart schematically illustrates an exemplary method; and

[0407] Fig.43 An exemplary signaling diagram is schematically shown. DETAILED DESCRIPTION

[0408] The detailed description set forth below in conjunction with the accompanying drawings is intended as an illustration of various configurations. The detailed description includes specific details that help to provide a thorough understanding of the various concepts. However, it is apparent to those skilled in the art that these concepts can be practiced without these specific details. Aspects of the devices, systems, media, programs, and methods are illustrated by various blocks, functional units, modules, components, circuits, steps, processes, algorithms, etc. (collectively referred to as "elements"). Depending on the specific application, design constraints, or other reasons, these elements may be implemented using electronic hardware, computer programs, or any combination thereof.

[0409] The electronic hardware may include microprocessors, microcontrollers, digital signal processors (DSPs), field programmable gate arrays (FPGAs), programmable logic devices (PLDs), gated logic, discrete hardware circuits, and other appropriate hardware configured to perform the various functions described in the present disclosure. Computer programs should be broadly interpreted as instructions, instruction sets, codes, code segments, program codes, programs, subroutines, software modules, applications, software applications, software packages, routines, subroutines, objects, executable programs, execution threads, procedures, functions, etc., whether referred to as software, firmware, middleware, microcode, hardware description language, or otherwise.

[0410] The scanning for providing intraoral scan data can be performed by a dental scanning system, which can include an intraoral scanning device, such as a TRIOS series scanner from 3Shape A / S. The dental scanning system can include wireless capabilities provided by a wireless network unit. The intraoral scanning device can use a scanning principle, such as triangulation-based scanning, confocal scanning, focused scanning, ultrasonic scanning, X-ray scanning, stereoscopic vision, motion structure, optical coherence tomography (OCT) or any other scanning principle. In one embodiment, the intraoral scanning device is operated by projecting a pattern and translating the focal plane along the optical axis of the intraoral scanning device, and capturing multiple two-dimensional images at different focal plane positions, so that each captured two-dimensional image series corresponding to each focal plane forms a stack of two-dimensional images. The obtained two-dimensional image is also referred to as the original two-dimensional image in this article, where "original" means that the image has not been image processed in this article. It is preferred to move the focal plane position along the optical axis of the scanning system so that the two-dimensional images captured at multiple focal plane positions along the optical axis form the stack of two-dimensional images (also referred to as sub-scans) for a given view of the object, that is, for a given arrangement of the scanning system relative to the object. After moving the intraoral scanning device relative to the object or imaging the object in different views, a new stack of two-dimensional images of the view can be captured. The focal plane position can be changed by means of at least one focusing element, such as a moving focusing lens. The intraoral scanning device is usually moved and tilted during the scanning session so that at least some groups of sub-scans overlap at least partially so that they can be stitched in post-processing. The result of stitching is that the digital three-dimensional representation of the surface is larger than the surface that can be captured by a single sub-scan, that is, larger than the field of view of the three-dimensional scanning device. The working principle of stitching (also known as registration) is to identify the overlapping areas of the three-dimensional surface in each sub-scan and convert the sub-scans to a common coordinate system so that the overlapping areas match, ultimately generating a digital three-dimensional model. An iterative closest point (ICP) algorithm can be used for this purpose. Another example of an intraoral scanning device is a triangulation scanner, in which a time-varying pattern is projected onto a dental object, and a sequence of images of different pattern configurations is acquired by one or more cameras arranged at an angle relative to the light projector unit.

[0411] The intraoral scanning device includes one or more light projectors configured to generate an illumination pattern to be projected onto a three-dimensional dental object during scanning. The (one or more) light projectors preferably include a light source, a mask having a spatial pattern, and one or more lenses, such as a collimating lens or a projection lens. The light source can be configured to generate light of a single wavelength or a combination of wavelengths (monochromatic or polychromatic). A light source configured to generate light including different wavelengths (e.g., white light) can be used to generate a combination of wavelengths. Alternatively, the (one or more) light projectors may include multiple light sources, such as LEDs that generate light of different wavelengths (e.g., red, green, and blue), respectively, which can be combined to form light including different wavelengths. Therefore, the light generated by the light source can be limited by a wavelength that defines a specific color, or by a range of different wavelengths that define a combination of colors, such as white light. In one embodiment, the intraoral scanning device includes a light source configured to excite a fluorescent material of a tooth to obtain fluorescent data from a dental object. Such a light source can be configured to generate a narrow range of wavelengths. In another embodiment, the light from the light source is infrared (IR) light that can penetrate tooth tissue. The (one or more) light projectors can be DLP light projectors that use a micromirror array to produce a time-varying pattern, or a diffractive optical element (DOF), or a backlit mask light projector, in which a light source is placed behind a mask having a spatial pattern, whereby the light projected on the surface of the dental object is patterned. The backlit mask light projector may include a collimating lens for collimating light from the light source, the collimating lens being placed between the light source and the mask. The mask may have a checkerboard pattern so that the generated illumination pattern is a checkerboard pattern. Alternatively, the mask may have other patterns, such as lines or dots, etc.

[0412] The intraoral scanning device preferably also includes an optical component for directing light from the light source to the surface of the dental object. The specific arrangement of the optical component depends on whether the intraoral scanning device is a focused scanning device, a scanning device using triangulation, or any other type of scanning device. The same applicant further describes a focused scanning device in EP 2442 720B1, the entire contents of which are incorporated herein by reference.

[0413] Light reflected from a dental object in response to irradiation of the dental object is directed to (one or more) image sensors using the optical components of the intraoral scanning device. (One or more) image sensors are configured to generate multiple images based on incident light received from the irradiated dental object. The image sensor can be a high-speed image sensor, such as an image sensor configured to acquire images with an exposure shorter than 1 / 1000 second or a frame rate exceeding 250 frames per second (fps). As an example, the image sensor can be a rolling shutter (CCD) or a global shutter sensor (CMOS). (One or more) image sensors can be monochrome sensors including a filter array, such as a Bayer filter and / or another filter that can be configured to substantially eliminate one or more color components from the reflected light before the reflected light is converted into an electrical signal and retain only other components that are not eliminated. For example, such another filter can be used to eliminate a portion of the white light spectrum, such as a blue component, from a signal generated in response to the excitation fluorescent material of the tooth, and retain only red and green components.

[0414] The network unit may be configured to connect the dental scanning system to a network including a plurality of network elements including at least one network element configured to receive the processed data. The network unit may include a wireless network unit. The wireless network unit is configured to wirelessly connect the dental scanning system to a network including a plurality of network elements including at least one network element configured to receive the processed data.

[0415] The dental scanning system preferably also includes a processor configured to generate scan data (e.g., intraoral scan data) by processing a two-dimensional (2D) image acquired by the intraoral scanning device. The processor may be part of the intraoral scanning device. As an example, the processor may include a field programmable gate array (FPGA) and / or an advanced RISC computer (ARM) processor located on the intraoral scanning device. The scan data includes information related to a three-dimensional dental object. The scan data may include any of the following information: a two-dimensional image, a three-dimensional point cloud, depth data, texture data, intensity data, color data, and / or a combination thereof. As an example, the scan data may include one or more point clouds, each of which includes a set of three-dimensional points describing a three-dimensional dental object. As another example, the scan data may include images, each of which includes image data, such as image data described by image coordinates and a timestamp (x, y, t), wherein the depth information may be inferred from the timestamp. The (one or more) image sensors of the intraoral scanning device may acquire multiple original two-dimensional images of the dental object in response to irradiating the dental object using one or more light projectors. Multiple original two-dimensional images may also be referred to as a stack of two-dimensional images herein. The two-dimensional image can then be provided as an input to a processor, which processes the two-dimensional image to generate scan data. The processing of the two-dimensional image can include a step of determining which part of each two-dimensional image is in focus to infer / generate depth information from the image. The depth information can be used to generate a three-dimensional point cloud including a set of three-dimensional points in space, such as a three-dimensional point cloud described by Cartesian coordinates (x, y, z). The three-dimensional point cloud can be generated by a processor or another processing unit. Each two-dimensional / three-dimensional point can also include a timestamp indicating when the two-dimensional / three-dimensional point was recorded, that is, which image in the stack of two-dimensional images the point originated from. The timestamp is associated with the z coordinate of the three-dimensional point, that is, the z coordinate can be inferred from the timestamp. Therefore, the output of the processor is scan data, and the scan data may include image data and / or depth data, such as described by image coordinates and timestamps (x, y, t) or described as (x, y, z) in an alternative manner. In addition to scan data, the intraoral scanning device can be configured to transmit other types of data. Examples of data include three-dimensional information, texture information, such as infrared (IR) images, fluorescent images, reflective color images, X-ray images, and / or combinations thereof.

[0416] Figure 1An exemplary architecture 100 according to the present disclosure is shown. The architecture 100 includes an intraoral scanning device 10, a client device 110, and a server device 111. The client device 110 may include a computing device, a customized device, a handheld device, a repeater, a tablet computer, a personal computer, a mobile phone, and / or a USB dongle plugged into a personal computer as a client. The server device 111 may include a computing device configured to act as a server, i.e., to serve requests from the client device 110 and / or from the intraoral scanning device 10. The server device 111 may be controlled by the intraoral scanning device manufacturer.

[0417] The intraoral scanning device 10 can be connected to the client device 110 via a communication link 113, which is, for example, a wireless communication link or a bidirectional wireless communication link. The wireless communication link can be carried on a short-range communication system, such as Bluetooth, Bluetooth low energy, IEEE 802.11, Zigbee, WIFI. The intraoral scanning device 10 can be connected to the client device 110 via a network.

[0418] The intraoral scanning device 10 may be connected to the server device 111 via a wireless communication link 114 or a bidirectional wireless communication link 114 through a network 114a, such as via a bidirectional wireless communication link and / or a wireless communication link through a network.

[0419] The client device 110 may be connected to the server device 111 via a communication link 112 through a network 112a, such as via a bidirectional wireless communication link and / or a wireless communication link. In one embodiment, the network 112a may be the Internet.

[0420] Figure 2 An exemplary intraoral scanning device 10 is shown. The exemplary intraoral scanning device 10 includes a processing unit 202 configured to process intraoral scan data of a patient 290 and provide two-dimensional image data and / or three-dimensional image data. The exemplary intraoral scanning device 10 includes a memory and a wireless interface 204. The memory is Figure 2 203 is shown in the form of a memory unit 203 external to the processing unit 202. In other exemplary intra-oral scanning devices, the memory may be at least partially embedded in the processing unit 202 and / or the memory unit 203.

[0421] The processing unit 202 is configured to receive a mode request via the wireless interface 204. Therefore, the processing unit 202 includes a receiving / transmitting unit 205 configured to send and / or receive via the wireless interface 204. The receiving / transmitting unit 205 is configured to send / receive to / from an external device via the wireless interface 204, the external device being, for example, a server device, a client device, a customized device, an accessory, a relay device, a smart phone. The processing unit 202 is configured to authenticate the mode request. Therefore, the processing unit 202 may include an authenticator 206 configured to authenticate the mode request. The processing unit 202 is configured to place the intraoral scanning device in a requested mode, such as a service mode, a customized mode, an upgrade mode, or a debug mode, if the authentication of the mode request is successful. Therefore, the processing unit 202 includes a mode controller 207, which is configured to place the intraoral scanning device 10 in the requested mode, for example, based on an output from the authenticator 206. In Figure 2 In the intraoral scanning device of the present invention, the processing unit 202 is configured to place the intraoral scanning device in a default mode if the authentication of the mode request fails, the default mode including booting the intraoral scanning device and operating the intraoral scanning device according to the operating parameters set during the booting. In one embodiment, the operating parameters set during the booting may be stored in the non-volatile portion of the memory unit 203. In one embodiment, the operating parameters set during the booting may include default settings that enable the intraoral scanning device to operate according to the default settings programmed during the production of the intraoral scanning device.

[0422] The intraoral scanning device includes a light projector 220 and an image sensor 230. The light projector includes at least one or more light emitting diodes and / or one or more infrared light sources for emitting light patterns to a three-dimensional dental object 290 of the patient or a wax model 290 as a replica of the patient's teeth. The image sensor 230 receives reflected light from the dental object 290, and the image sensor 230 converts the reflected light into intraoral scanning data. The processing unit 202 is then configured to process the intraoral scanning data into two-dimensional image data and / or three-dimensional image data. The image data is then forwarded to the wireless interface 204, which transmits the data to an external device.

[0423] Figure 3An exemplary sequence diagram 300 between the intraoral scanning device 10 and the client device 110 is shown. In one embodiment, the client device 110 may be in the form of a customized device. The intraoral scanning device 10 receives a customized mode request 301 from the client device 110 via the wireless interface 204, the mode request including a digital signature and a mode identifier. The digital signature may be a signature in accordance with a digital signature standard or other appropriate standard for digital signatures in the art (e.g., RSA). The intraoral scanning device 10 authenticates the mode request by verifying the digital signature. In the sequence diagram 300 shown, the authentication is successful, and the processing unit 202 places the intraoral scanning device 10 in a customized mode, including sending a customized mode response 302 to the client device via the wireless interface 204. In the customized mode of the intraoral scanning device 10, the firmware portion of the memory is write-protected, while the customized mode portion of the memory is writable.

[0424] Upon receiving the custom mode response 302, the client device 110 sends data 303 to the intraoral scanning device 10, which receives the data and authenticates the received data 303, for example by using a digital signature or session identifier / key as described above. If the authentication of the data 303 is successful, the processing unit 202 derives the intraoral scanning device data (customized data) from the data 303 and stores the intraoral scanning device data (customized data) in the custom portion of the memory. If the authentication of the data 303 fails, the processing unit 202 places the intraoral scanning device in the default mode.

[0425] When the customization data has been transmitted, the client device may send a mode exit request, and the intraoral scanning device is configured to optionally authenticate the mode exit request and, optionally, place the intraoral scanning device in a default mode if authentication of the mode exit request is successful.

[0426] In another embodiment, the client device may be in the form of a smartphone or tablet and may include software configured to provide the functionality of the customized device.

[0427] Figure 4 An exemplary sequence diagram 300' is shown, in which the client device 110 is used to update the firmware of the intra-oral scanning device 10, and the client device 110 is in the form of a customized device. The customized device 10 receives a service mode request 304 from the client device 110 via the wireless interface 204. The intra-oral scanning device 10 authenticates the service mode request. In the sequence diagram 300' shown, the authentication is successful, and the processing unit 202 places the intra-oral scanning device 10 in a service mode, including sending a service mode response 305 to the client device via the wireless interface 204. In the service mode of the intra-oral scanning device 10, the processing unit 202 is allowed to write to the firmware portion of the memory.

[0428] Upon receiving the service mode response 305, the client device 110 sends data 306 to the intra-oral scanning device 10, which receives the data and authenticates the received data 306, for example by using a digital signature or session identifier / key as described above. Before sending data to the intra-oral scanning device, the client device 110 may correspond with the server device 111, as shown by dashed arrows 307, 308, for example to determine the data 306 to be sent to the intra-oral scanning device 10. If the authentication of the data 306 is successful, the processing unit 202 derives the intra-oral scanning device data (firmware data) from the data 306 and stores the intra-oral scanning device data (firmware data) in the firmware portion of the memory. If the authentication of the data 306 fails, the processing unit 202 may place the intra-oral scanning device in a default mode and / or terminate the session.

[0429] When the firmware has been transferred, the client device may send a mode exit request, and the intraoral scanning device is configured to optionally authenticate the mode exit request and, optionally, place the intraoral scanning device in a default mode if authentication of the mode exit request is successful.

[0430] Figure 5 An exemplary flow chart of a method 400 for configuring an intraoral scanning device 10, for example, is shown, the intraoral scanning device 10 comprising a processing unit 202 configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data, a memory, and a wireless interface 204. The method 400 comprises receiving 401 a mode request via the wireless interface 204, and authenticating 402 the mode request. Authenticating 402 the mode request comprises authenticating the sender of the mode request and verifying the integrity of the mode request. If the authentication of the mode request succeeds 404, the method proceeds to placing the intraoral scanning device 10 in the requested mode 403. If the authentication of the mode request fails 404, the method optionally proceeds to placing the intraoral scanning device 10 in a default mode 405. After placing the intraoral scanning device 10 in the requested mode, the method optionally proceeds to receiving 408 data via the wireless interface, authenticating 410 the received data; and, if the authentication of the data succeeds, storing 412 the intraoral device data in a memory portion corresponding to the requested mode based on the received data. If the authentication 410 of the received data fails, the method may proceed to placing the intra-oral scanning device in 405 a default mode or another mode and / or terminating the session. Upon storage, the method 400 optionally includes evaluating 414 whether a mode exit request has been received. If so, the method proceeds to placing the intra-oral scanning device in 405 a default mode. If not, the method proceeds to receiving 408 data.

[0431] Intraoral scanning devices with communication protection and related methods:

[0432] Figure 6 An exemplary architecture 100 according to the present disclosure is schematically shown. The architecture 100 includes an intraoral scanning device 10, a client device 110, and a server device 111. The client device 110 may include a computing device that acts as a client, such as a customized device, a handheld device, a repeater, a tablet computer, a personal computer, a mobile phone, and / or a USB dongle plugged into a personal computer. The server device 111 may include a computing device configured to act as a server, i.e., to serve requests from the client device 110 and / or from the intraoral scanning device 10. The server device 111 may be controlled by a manufacturer of the intraoral scanning device.

[0433] The intraoral scanning device 10 can be connected to the client device 110 via a communication link 113, which is, for example, a two-way communication link and / or a wireless communication link. The wireless communication link can be carried on a short-range communication system, such as Bluetooth, Bluetooth low energy and / or WIFI. The intraoral scanning device 10 can be connected to the client device 110 via a network.

[0434] The intraoral scanning device 10 may be connected to the server device 111 via a wireless communication link 114 or a bidirectional wireless communication link 114 through a network 114a, such as via a bidirectional wireless communication link and / or a wireless communication link through a network.

[0435] Client device 110 may be connected to server device 111 via communication link 112 through network 112a, such as via a bidirectional wireless communication link and / or a wireless communication link. In one embodiment, network 112a may be the Internet.

[0436] Figure 7 Schematically illustrated is an exemplary intraoral scanning device 10. The exemplary intraoral scanning device 10 comprises a processing unit 202 configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data.

[0437] The exemplary intra-oral scanning device 10 includes a memory unit 203 and a wireless interface 204 connected to a processing unit 202, respectively. Figure 7203 is shown in the form of a memory unit 203 external to the processing unit 202. In other exemplary intraoral scanning devices, the memory may be at least partially embedded in the processing unit 202 and / or the memory unit 203. The processing unit 202 is configured to receive a session request for a session via the wireless interface 204. Therefore, the processing unit 202 includes a receiving / sending unit 205 configured to send and / or receive via the wireless interface 204. The receiving / sending unit 205 is configured to send / receive to / from an external device via the wireless interface 204, the external device being, for example, a server device, a client device, a customized device, an accessory, a relay device, a tablet computer. The processing unit 202 is configured to obtain and store a session key. Therefore, the processing unit 202 may include an obtainer 206 configured to obtain and / or generate a session key and store the session key in, for example, the memory unit 203. Obtaining the session key may include generating a random number or a pseudo-random number using a number generator 210 included in the intraoral scanning device 101. The processing unit 202 may include a random number generator 210. The session key obtained can be a 128-bit random number or pseudo-random number, a 192-bit random number or pseudo-random number, a 256-bit random number or pseudo-random number, or a random number or pseudo-random number of any other number of bits. The session key obtained can comply with an encryption standard, such as the Advanced Encryption Standard (AES), the RSA encryption system, the Triple Data Encryption Algorithm, the TDEA, the Elliptic Curve Cryptography System, any other encryption system. For example, a digital generator 210 can be used to uniquely generate a session key for each session. This provides robustness against, for example, replay attacks, etc.

[0438] When the intra-oral scanning device key can be stored in a permanent memory of the intra-oral scanning device, the processing unit 202 is configured to sign the session key by the intra-oral scanning device key. The processing unit 202 is configured to send a session response including the signed session key, for example, using the receiving / sending unit 205 and the wireless interface 204. The processing unit 202 is configured to receive session data in the session via the wireless interface 204, for example, using the receiving / sending unit 205 and the wireless interface 204. The processing unit 202 receives the session data in the session from an external device, such as the client device 110 and / or the server device 111.

[0439] The processing unit 202 is configured to encrypt a session key based on the intra-oral scanning device key. Therefore, the processing unit 202 may include an encryption / decryption unit 207. The processing unit 202 is configured to send a session response containing an encrypted session key, for example, using the receiving / sending unit 205 and the wireless interface 204, and the session key may be signed by the intra-oral scanning device key. The processing unit 202 is configured to receive session data in the session via the wireless interface 204, for example, using the receiving / sending unit 205 and the wireless interface 204. The processing unit 202 receives the session data in the session from an external device, which is, for example, the client device 110 and / or the server device 111.

[0440] The intraoral scanning device includes a light projector 220 and an image sensor 230. The light projector includes at least one or more light emitting diodes and / or one or more infrared light sources for emitting light patterns to a three-dimensional dental object 290 of the patient or a wax model 290 as a replica of the patient's teeth. The image sensor 230 receives reflected light from the dental object 290, and the image sensor 230 converts the reflected light into intraoral scanning data. The processing unit 202 is then configured to process the intraoral scanning data into two-dimensional image data and / or three-dimensional image data. The image data is then forwarded to the wireless interface 204, which transmits the data to an external device.

[0441] In one or more exemplary intraoral scanning devices, the processing unit 202 is configured to verify the integrity of the session data. Therefore, the processing unit 202 may include a verifier 208. For example, the processing unit 202 is configured to determine whether the integrity of the session data is compromised, that is, whether the session data is tampered with or modified by an unauthorized party. The processing unit 202 detects, for example, data insertion, deletion, and / or replacement by an unauthorized party, such as any party other than the transmitting party.

[0442] In one or more exemplary intra-oral scanning devices, the processing unit 202 is configured to terminate the session if the integrity of the session data is compromised. Therefore, the processing unit 202 may include a terminator 209. For example, when the processing unit 202 or the verifier 208 determines that the session data has been tampered with or modified (e.g., by insertion, deletion, and / or replacement) by an unauthorized party, the processing unit 202 rejects the received session data, and the terminator 209 or the processing unit 202 terminates the session with, for example, an external device. Terminating the session includes deleting the session key from, for example, the memory unit 203. Deleting the session key protects the intra-oral scanning device 10 from any replay attack or any attack based on any communications captured by the attacker.

[0443] In one or more exemplary intraoral scanning devices, the session data includes a message authentication code, and the processing unit 202 that verifies the integrity of the session data is configured to verify the message authentication code using a stored session key. Therefore, the verifier 208 is configured to verify the message authentication code using the stored session key. The message authentication code MAC is generated by a sender, such as an external device, based on the session data and the decrypted session key. Upon receiving the session data containing the MAC, the intraoral scanning device holding the stored session key can recalculate the MAC based on the received session data and the MAC generation function, and compare the recalculated MAC with the received MAC. If the recalculated MAC does not match the received MAC, the intraoral scanning device determines that the session data is corrupted. The intraoral scanning device ignores the session data and terminates the session. For example, the processing unit 202 ignores the session data and terminates the session using the terminator 208.

[0444] In one or more exemplary intraoral scanning devices, the session data includes a digital signature. The processing unit 202 that verifies the integrity of the session data is configured to verify the digital signature. For example, the verifier 208 is configured to verify the digital signature. The processing unit 202 verifies the digital signature using a signature verification function and the public key of the sender that generates the digital signature and attaches it to the session data. If the processing unit 202 determines that the digital signature cannot be successfully verified using the sender's purported public key, the processing unit 202 ignores the session data and terminates the session. This can provide the advantage that the intraoral scanning device 10 rejects session data that has been tampered with or received from an unauthenticated party, and is therefore robust against impersonation and spoofing attacks.

[0445] In one or more exemplary intraoral scanning devices, the processing unit 202 is configured to decrypt the session data with the session key and store the at least partially decrypted session data in the memory unit 203. The client device 110 or the server device 111 can send the encrypted session data to the intraoral scanning device 10. The processing unit 202 receives the encrypted session data via the receiving / transmitting unit 205 and the wireless interface 204. The processing unit 202 obtains the session key from the memory unit 203, for example, and decrypts the session data using the obtained session key and the decryption function. The processing unit 202 stores the decrypted session data in the memory unit 203. The processing unit 202 is configured to terminate the session if the decryption of the session data fails. If the session data is encrypted with a key different from the session key stored in the intraoral scanning device 10, the decryption of the session data may fail. This can provide the advantage that the intraoral scanning device 10 rejects session data received from a party that does not hold the session key, and is therefore robust to attacks based on such illegal data.

[0446] In one or more exemplary intraoral scanning devices, the session data includes customization data, intraoral scanning device operating parameters and / or firmware data. Firmware may refer to a computer program provided by the intraoral scanning device manufacturer and to be installed on the intraoral scanning device to control the intraoral scanning device. For example, the firmware is installed to upgrade the operation and capabilities of the intraoral scanning device. Customization data may, for example, include settings for a color image sensor of the intraoral scanning device. The intraoral scanning device may include a color image sensor, such as an RGB image sensor, wherein the customization data may include information about different color areas to be deactivated and / or activated during at least one scan. Therefore, the customization data may relate to which color areas of the RBG image sensor should be activated or deactivated during the scanning session. The intraoral scanning device may include a monochrome image sensor and a color light emitting diode, and, in this example, the customization data may include information about which different color light emitting diodes should be deactivated and / or activated during the scanning session. Therefore, the customization data may include information related to which color light emitting diodes should be activated or deactivated during the scanning session. The color light emitting diode may be configured to emit colored light, such as blue, red, green, etc. In another example, the intraoral scanning device may include one or more near infrared light emitting diodes, which may also be configured to be activated and / or deactivated during a scanning session by custom data. The custom data may include setting data, such as power management settings, configuration of a user interface of the intraoral scanning device, and / or settings of an optical unit of the intraoral scanning device.

[0447] The optical unit may include one or more light projectors, one or more optical components, and one or more image sensors.

[0448] In one or more processing intraoral scanning devices, the processing unit 202 is configured to process the intraoral scan data of the patient according to the received session data and provide two-dimensional image data and / or three-dimensional image data. The processing unit 202 can perform processing on the intraoral scan data of the patient based on the customized data and provide two-dimensional image data and / or three-dimensional image data.

[0449] In one or more exemplary intra-oral scanning devices, the session key comprises a symmetric key. The symmetric key may be generated uniquely for each session using, for example, a digital generator 210. The symmetric key may comprise an AES-128 bit key. Using a symmetric key as a session key can reduce processing power requirements and allow the intra-oral scanning device 10 to decrypt session data using a lightweight encryption algorithm.

[0450] In one or more exemplary intra-oral scanning devices, the intra-oral scanning device key is a symmetric key or a public key in a private-public key pair. The intra-oral scanning device key may include an AES-128 bit key as a symmetric key. Using a symmetric key as the intra-oral scanning device key provides the advantage of being able to use a hardware accelerator. The intra-oral scanning device key may include a public key of a private-public key pair, such as a public key of a private-public key pair of an authorized publisher of a session key (e.g., server 111).

[0451] In one or more exemplary intraoral scanning devices, the processing unit 202 is configured to send an intraoral scanning device identifier in a session response. The intraoral scanning device identifier may refer to a unique device identifier. The intraoral scanning device identifier may include a hardware number, a serial number, a MAC address. The session response may include an encrypted session key and the intraoral scanning device identifier. The processing unit 202 is configured to send the intraoral scanning device identifier in a session response to an external device, such as the client device 110, or the server device 111. During the production of the intraoral scanning device 10, the intraoral scanning device key may be stored in a permanent storage, such as in the memory unit 203 of the intraoral scanning device 10.

[0452] Figure 8An exemplary sequence diagram 300 between the intra-oral scanning device 10 and the client device 110 is shown. The intra-oral scanning device 10 receives a session request 301 for a session from the client device 110 via the wireless interface 204. The intra-oral scanning device 10 obtains and stores a session key. The intra-oral scanning device 10 encrypts the session key based on the intra-oral scanning device key. The intra-oral scanning device 10 sends a session response 302 containing the encrypted session key to the client device 110. Alternatively, the intra-oral scanning device 10 may send a session response 302 encrypted with the intra-oral scanning device key to the client device 110, the session response 302 containing the session key. The client device 110 receiving the session response 302 may request 304 the server device 111 to decrypt the encrypted session key contained in the session response 302, or to decrypt the encrypted session response 302. Based on the request 304, the server device 111 may send the decrypted session key to the client device 110 in a response 305. This may occur when the intra-oral scanning device key used at the intra-oral scanning device 10 is the public key of the private key-public key pair of the server 101. When the intra-oral scanning device key is a symmetric key, the server device 111 may send the decrypted session key to the client device 110 in the response 305, or send the intra-oral scanning device key to the client device 110 in the response 305, which is then able to decrypt the session key or the session response 302. The response 305 may contain the decrypted session key or intra-oral scanning device key. The communication link 112 between the client device 110 and the server device 111 is secure, i.e., authenticated, encrypted, and / or integrity protected using a security protocol (e.g., a transport layer security protocol). The intra-oral scanning device 10 receives session data 303 from the client device 110 via the wireless interface 204 in the session. The session data 303 may then be encrypted and / or integrity protected at the client device 110, for example, by using the session key. In one or more exemplary intra-oral scanning devices, the processing unit 202 is configured to verify the integrity of the session data, as described above in conjunction with Figure 2 The session data 303 may include a message authentication code. The message authentication code MAC is generated by the sender, such as a client device / server device, based on the session data and the decrypted session key. Upon receiving the session data including the MAC, the intraoral scanning device holding the stored session key is able to recalculate the MAC based on the received session data and the MAC generation function, and compare the recalculated MAC with the received MAC. If the recalculated MAC does not match the received MAC, the intraoral scanning device determines that the session data is corrupted. The intraoral scanning device ignores the session data and terminates the session. For example, the processing unit 202 ignores the session data and terminates the session using the terminator 208.

[0453] Fig. 9An exemplary sequence diagram 300' between the intra-oral scanning device 10, the client device 110, and the server device 111 is shown. The intra-oral scanning device 10 receives a session request 311 for a session from the server device 111 via the wireless interface 204. The intra-oral scanning device 10 obtains and stores a session key. The intra-oral scanning device 10 encrypts the session key based on the intra-oral scanning device key. The intra-oral scanning device 10 sends a session response 312 containing the encrypted session key to the server device 111. Alternatively, the intra-oral scanning device 10 may send a session response 312 encrypted with the intra-oral scanning device key to the server device 111, the session response 312 containing the session key. The server device 111 may decrypt the encrypted session key contained in the session response 312, or decrypt the encrypted session response 312. The communication link 112 between the intra-oral scanning device 10 and the server device 111 may be through the client device 110 and / or a network. The communication link 112 between the intra-oral scanning device 10 and the server device 111 may be secure or not, i.e., authenticated, encrypted and / or integrity protected using a secure protocol. The intra-oral scanning device 10 receives session data 313 for the session from the server device 111 via the wireless interface 204 during the session. The session data 313 may then be encrypted and / or integrity protected at the server device 111.

[0454] Fig.10 A flowchart 400 of an exemplary method according to the present disclosure is schematically shown. The method 400 is used for communication of an intra-oral scanning device 10 including a processing unit 202, a memory unit 203 and a wireless interface 204, for example, for protecting the communication of the intra-oral scanning device with an external device such as a client device and / or a server device and / or an auxiliary device. The method 400 is executed in the intra-oral scanning device 10. The method 400 includes receiving S1 a session request for a session via the wireless interface 204. Receiving S1 may include receiving a session request from an external device, such as a client device 110 and / or a server device 111.

[0455] The method 400 includes obtaining and storing an S2 session key, such as in the memory unit 203. Obtaining and storing the S2 session key, such as in the memory unit 203, may include generating a random or pseudo-random number using a number generator 210 included in the intraoral scanning device 10. Obtaining and storing the S2 session key may include generating a 128-bit random or pseudo-random number, a 192-bit random or pseudo-random number, a 256-bit random or pseudo-random number, or any other number of random or pseudo-random numbers.

[0456] Method 400 includes encrypting an S3 session key based on an intraoral scan device key. Encrypting and / or signing the S3 session key is performed based on the intraoral scan device key. Encryption may include using an encryption standard, such as the Advanced Encryption Standard (AES), RSA encryption system, Triple Data Encryption Algorithm, TDEA, Elliptic Curve Cryptography System, or any other encryption system.

[0457] Method 400 includes sending S4 a session response including an encrypted and / or signed session key in the session via a wireless interface, and receiving S5 session data in the session. Sending S4 a session response including an encrypted and / or signed session key may include sending the session response to client device 110 and / or server device 111. Receiving S5 session data in the session via wireless interface 204 may include receiving session data from client device 110 and / or server device 111.

[0458] In one or more exemplary methods, method 400 includes verifying the integrity of S6 session data. Verifying the integrity of the S6 session data may include determining whether the integrity of the session data is compromised, i.e., determining whether the session data has been tampered with or modified by an unauthorized party. Verifying the integrity of the S6 session data may include detecting, for example, data insertion, deletion, and / or replacement by an unauthorized party, such as any party other than a legitimate sender. Verifying the integrity of the S6 session data may include verifying a message authentication code attached to the session data (e.g., using a stored session key) and / or a digital signature attached to the session data. When it is determined that the integrity of the session data is not compromised, the intraoral scanning device 10 may authorize an external device to read and / or write to a memory area. For example, the session data or intraoral scanning device data derived therefrom may be written to the memory unit 203.

[0459] Method 400 includes terminating the S7 session if the integrity of the session data is compromised. For example, upon determining that the session data has been tampered with or modified (e.g., by insertion, deletion, and / or replacement) by an unauthorized party, terminating S7 includes rejecting the received session data and terminating the session with, for example, an external device. Terminating S7 may include deleting a session key from, for example, memory unit 203.

[0460] In one or more exemplary methods, method 400 includes decrypting S8 session data with a session key and storing S9 at least a portion of the decrypted session data in a memory unit. Decrypting S8 session data with a session key may include retrieving the session key from, for example, memory unit 203, and decrypting the session data using the retrieved session key and a decryption function.

[0461] Method for intraoral scanning devices to communicate with each other:

[0462] Fig.11 Exemplary equipment that may be used to manufacture, maintain, and / or operate the intraoral scanning device 2 is shown. Fig.11 An exemplary system 1 and intraoral scanning device 2 are shown. The system 1 may include one or more of a manufacturing device 12, a client device 10, and a server device 16 for manufacturing, maintaining, and / or operating the intraoral scanning device 2 in connection with processing intraoral scan data of a patient and providing two-dimensional image data and / or three-dimensional image data.

[0463] The manufacturing device 12 may be configured to perform any step of the method of manufacturing an intraoral scanning device. The manufacturing device 12 may be configured to generate an intraoral scanning device certificate including at least one of an intraoral scanning device identifier and a generated intraoral scanning device key. The manufacturing device 12 may be configured to transmit the intraoral scanning device certificate to the intraoral scanning device. The manufacturing device 12 may include a processing element (e.g., a processor and a memory)

[0464] The intraoral scanning device 2 is configured to perform intraoral scanning data and provide two-dimensional image data and / or three-dimensional image data based on the processed intraoral scanning data. The intraoral scanning device 2 can be configured to communicate with the manufacturing device 12 using, for example, a wireless communication link 23, such as a one-way or two-way wireless communication link. The wireless communication link can be carried on a short-range communication system such as WIFI, Bluetooth or Bluetooth low energy.

[0465] The intraoral scanning device 2 may be configured to connect to the client device 10 via a wireless communication link 21, such as a bidirectional wireless communication link. The wireless communication link 21 may be carried on a short-range communication system such as WIFI, Bluetooth, or Bluetooth low energy. The intraoral scanning device 2 may be configured to connect to the client device 10 via a network. The client device 10 may allow remote updates to the intraoral scanning device, such as firmware updates, customization updates, and debugging updates, wherein the dispenser is connected to the intraoral scanning device via the user's client device 10. The client device 10 may include a computing device as a client, such as a customization device 14 (e.g., a handheld device, a repeater, a tablet, a clinical computer, and / or a USB dongle plugged into a personal computer). The processing unit / intraoral scanning device is configured to receive a link request for a session via an interface; and obtain a session identifier. For example, the interface of the intraoral scanning device 2 is configured to receive a link request from the client device 10 via the communication link 21. For example, the intraoral scanning device 2 receives a link request from the client device 10 for establishing a communication session. The processing unit of the intra-oral scanning device is configured to transmit a link response comprising an intra-oral scanning device identifier and a session identifier via the interface. The processing unit of the intra-oral scanning device is configured to receive an authentication message comprising an authentication key identifier and client device data via the interface, for example, from client device 10 via communication link 21.

[0466] The client device 10 may be configured to communicate with the server device 16 via a communication link 24, such as a bidirectional communication link. The communication link 24 may be a wired link and / or a wireless communication link. The communication link 24 may include a network, such as the Internet.

[0467] The client device 10 may be configured to communicate with a server device 16 for maintenance and update purposes. The server device 16 may include a computing device configured to act as a server, i.e., to serve requests from the client device 10 and / or from the intraoral scanning device 2. The server device 16 may be controlled by the intraoral scanning device manufacturer. The server device 16 may be configured to communicate with the manufacturing device 12 via a communication link 22 for manufacturing, maintenance, and / or operational purposes. The server device 16 and the manufacturing device 12 may be located at the same location and / or form a single entity for manufacturing, maintenance, and / or operational purposes of the intraoral scanning device 2.

[0468] Fig.12 An exemplary intraoral scanning device 2 is shown. The intraoral scanning device 2 includes a processing unit 4, a memory unit 6, and a wireless interface 8. The intraoral scanning device 2 includes a processing unit 4 configured to process intraoral scan data of a patient and provide two-dimensional image data and / or three-dimensional image data. The wireless interface 8 includes a wireless transceiver, which is configured, for example, for wireless communication in a frequency range of 2.4 GHz to 2.5 GHz, 2.4 GHz to 5 GHz, or about 2.45 GHz or about 5 GHz. The wireless interface 8 is optionally configured for wireless communication with a manufacturing device 12. The processing unit 4 can be configured to provide two-dimensional image data and / or three-dimensional image data based on the intraoral scan data according to data received during manufacturing and / or updating, such as a customization update, a firmware update, or a debugging update. The intraoral scanning device optionally includes a light projector 220 and an image sensor 230. The light projector includes at least one or more light emitting diodes and / or one or more infrared light sources for emitting light patterns to a three-dimensional dental object 290 of a patient or a wax model 290 as a replica of a patient's teeth. The image sensor 230 receives reflected light from the dental object 290, and the image sensor 230 converts the reflected light into intraoral scan data. The processing unit 4 is then configured to process the intraoral scan data into two-dimensional image data and / or three-dimensional image data. The image data is then forwarded to the wireless interface 8, which transmits the data to an external device.

[0469] The processing unit 4 is configured to receive a link request for a session via the wireless interface 8; and obtain a session identifier. Therefore, the processing unit 4, for example, includes an obtaining unit 41 configured to obtain a session identifier. An example of the obtaining unit 41 includes a random number or pseudo-random number generator. The wireless interface is configured to receive a link request for a session from the client device 10. The processing unit 4 is configured to obtain the session identifier, for example, by generating a random number or a pseudo-random number. The processing unit 4 is configured to store the session identifier in the memory unit 6. The memory unit 6 can be configured to store the session identifier in a memory address of the memory unit 6 and / or a storage cell (cell) of the memory unit 6, for example, in a specified storage cell and / or a specified address. The link request may contain an authentication key identifier and / or an authentication type identifier to allow the intra-oral scanning device 2 to perform authentication of the link request and the client device 10 that sends the link request at this early stage. This can provide a certain level of access control.

[0470] The processing unit 4 is configured to transmit a link response including the intra-oral scanning device identifier and the session identifier via the wireless interface 8. The processing unit 4 is configured to generate the link response by including the session identifier and the intra-oral scanning device identifier in the link response. The intra-oral scanning device identifier may refer to a unique identifier of the intra-oral scanning device 2, such as a serial number, a MAC address, and / or a hardware identifier of the intra-oral scanning device 2. The wireless interface 8 is configured to transmit the link response to, for example, the client device 10.

[0471] The processing unit 4 is configured to receive an authentication message including an authentication key identifier and client device data via the wireless interface 8. For example, the wireless interface 8 is configured to receive an authentication message from a client device 10. For example, the intraoral scanning device 2 receives an authentication message from the client device 10 to establish a communication session. The client device data may include a client device certificate (encrypted or unencrypted), customization data, intraoral scanning device operating parameters and / or firmware data. For example, the authentication message may include an authentication key identifier in plain text. The authentication key identifier may indicate an intraoral scanning device key. The processing unit 4 that processes the authentication key identifier is configured to verify the authentication key identifier, for example by comparing the authentication key identifier with an intraoral scanning device key identifier, for example, stored in the memory unit 6, and if the authentication key identifier is, for example, equal to or higher than the stored intraoral scanning device key identifier, it is determined that the authentication key identifier is acceptable.

[0472] The processing unit 4 is configured to select an intra-oral scanning device key from a plurality of intra-oral scanning device keys in the memory unit 6 based on the authentication key identifier. Therefore, the processing unit 4, for example, includes a selection unit 42 configured to select the intra-oral scanning device key based on the authentication key identifier. Based on the intra-oral scanning device key identifier held by the intra-oral scanning device 2, when the authentication key identifier can be accepted by the intra-oral scanning device 2, the processing unit 4 is configured to select the intra-oral scanning device key indicated by the authentication key identifier, and use the selected intra-oral scanning device key as the key material for ensuring the secure session. Optionally, the processing unit 4 can be configured to select the intra-oral scanning device key from a plurality of intra-oral scanning device keys in the memory unit 6 based on the authentication key identifier and the authentication type identifier. The authentication type identifier can be included in the authentication message and received by the intra-oral scanning device 2 in plain text, and / or as a client device type identifier in an (encrypted or decrypted) client certificate. For example, the processing unit 4 is configured to select the intra-oral scanning device key indicated by the authentication key identifier and the authentication type identifier.

[0473] The processing unit 4 is configured to verify the client device data based on the selected intra-oral scanning device key; and terminate the session if the verification fails. For example, the processing unit 4 is configured to verify the client device data based on the selected intra-oral scanning device key by verifying the integrity of the client device data based on the selected intra-oral scanning device key, such as verifying the MAC and / or digital signature of the client device data. The processing unit 4 is configured to verify the client device data based on the selected intra-oral scanning device key by decrypting the client device data using the selected intra-oral scanning device key (as key material for deriving a decryption key or as a decryption key) upon receiving the encrypted client device data, and by verifying the content of the decrypted client device data. The processing unit 4 can be configured to verify the client device data based on the selected intra-oral scanning device key by comparing the decrypted client device data with the data stored in the memory unit 6. The client device data can include a client device certificate (e.g., an encrypted client device certificate), an authentication key identifier, and / or an authentication type identifier. A client device certificate can be assigned to the client device 10. A client device certificate refers to a certificate generated by, for example, a manufacturing device 12 and assigned to a client device. In Fig.13A An example of a client device certificate is shown in . The processing unit 4 is configured to generate a certificate key based on the selected intra-oral scan device key and / or session identifier. Verifying the client device data may include decrypting the encrypted client device certificate with the certificate key to obtain a decrypted version of the encrypted client device certificate.

[0474] The processing unit 4 may be configured to verify the client device data by determining whether the authentication key identifier matches the client device key identifier of the (decrypted) client device certificate, and if a mismatch is determined, then the verification fails.

[0475] In one or more exemplary intraoral scanning devices, the processing unit 4 is configured to verify the client device data by determining whether the client device type identifier of the client device certificate is valid, and if the client device type identifier of the client device is invalid, the verification fails. The processing unit 4 is configured to verify the client device data by verifying the digital signature of the client device certificate included in the client device data, and if the digital signature is not verified, the verification fails.

[0476] The processing unit 4 may be configured to verify the client device data by determining whether the signing device identifier and / or the client device identifier is valid, eg, not blacklisted.

[0477] In one or more exemplary intra-oral scanning devices, processing unit 4 is configured to generate an offline session key based on the common secret and the session identifier, and processing unit 4 is configured to communicate with the client device using the offline session key.

[0478] In one or more exemplary intra-oral scanning devices, the authentication message 421 includes an authentication token identifier, and the processing unit 4 is configured to store the authentication token identifier in the memory unit 6 and associate the authentication token identifier with the common secret. The authentication token identifier may indicate that token-based authentication is enabled at the intra-oral scanning device 2, i.e., when the intra-oral scanning device receives the authentication token identifier from the authenticated client device 10, it may implement the token-based authentication in future communications with the same client device 10 by storing, for example, an indicator of a flag associated with the common secret and the client device. For example, the intra-oral scanning device 2 receiving the authentication token identifier may be configured to instruct the processing unit 4 to implement the token-based authentication by storing and / or linking the token identifier with the common secret generated for the same client device 10, for example, by storing and / or linking the token identifier with the common secret and, for example, a client device identifier of the same client device in a table.

[0479] In the intra-oral scanning device 2, the processing unit 4 is configured to generate a session key based on the session identifier and the intra-oral scanning device key, and the processing unit 4 is configured to receive and authenticate session data based on the session key.

[0480] In one or more exemplary intraoral scanning devices, the processing unit 4 is configured to receive an additional authentication message via the wireless interface 8. The additional authentication message contains the client device data and the authentication device identifier. The processing unit 4 can be configured to obtain a common secret from the memory unit 6 based on the authentication device identifier. The processing unit 4 can be configured to generate an additional certificate key from the common secret; and verify the client device data based on the additional certificate key.

[0481] Fig.13A An exemplary client device certificate 106 is shown. The client device data may include the client device certificate 106 and / or an encrypted client device certificate 106A. The client device certificate 106 may be assigned to the client device 10. The client device certificate 106 refers to a certificate generated by, for example, the manufacturing device 12 and assigned to the client device 10. The encrypted client device certificate 106A may be generated by the client device 10 using an encryption algorithm and a certificate key.

[0482] The client device certificate 106 includes a certificate type identifier 130A. The certificate type identifier 130A may indicate a certificate type among various certificate types, such as an intraoral scanning device family certificate type, an intraoral scanning device certificate type, a firmware certificate type, a research and development certificate type, and a client device certificate type. The intraoral scanning device 2 may use the certificate type identifier 130A to identify the type of certificate it receives, stores, and / or obtains, and operate accordingly. The client device certificate 106 may include a version identifier 132 indicating a data format version of the client device certificate 106. The intraoral scanning device 2 may be configured to use the certificate type identifier 130A and / or the version identifier 132 to determine what type of data the certificate contains and / or what type of data is contained in a field of the certificate. For example, the intraoral scanning device 2 determines which field of the certificate 106 contains the digital signature 113A, and / or which public key is needed to verify the digital signature 113A, based on the certificate type identifier 130A and / or the version identifier 132. It is conceivable that there is a one-to-one mapping relationship between the certificate type identifier 130A and the public-private key pair. It is contemplated that the intra-oral scanning device 2 obtains the corresponding public key, for example, by retrieving the corresponding public key from the storage unit 6, a remote data storage, and / or receiving the corresponding public key from the client device 10 and / or the server device 16. The client device certificate 106 may include a signing device identifier 136A. The signing device identifier 136A refers to a unique identifier that identifies a device, which is a device that signed the client device certificate 106, for example, during the manufacture of the client device, such as the client device 10, the server device 16, an integrated circuit card, a smart card, and / or its hardware security module. The signing device identifier 136A may, for example, include a media access control (MAC) address of the signing device and / or a serial number of the signing device. The signing device identifier 136A allows, for example, the intra-oral scanning device 2 to determine whether the signing device is, for example, blacklisted, thereby rejecting a certificate signed by a blacklisted signing device. The client device certificate 106 may include one or more hardware identifiers, such as a first hardware identifier 148A and a second hardware identifier 150. The hardware identifiers 148A, 150 may identify a piece of hardware included in the client device 10, such as a radio chip included in the client device 10 and / or a digital signal processor of the client device 10. The hardware identifier(s) may be stored in a register of the piece of hardware included in the intraoral scanning device during manufacture of the hardware. The hardware identifier(s) may include a serial number, a media access control (MAC) address, a chip identifier, or any combination thereof.

[0483] In one or more exemplary client device certificates, the client device certificate 106 includes a client device type identifier 156. The client device type identifier 156 may indicate the type to which the client device belongs. The client device certificate 106 may include a client device identifier 158. The client device certificate may include a client device key identifier 159. The client device key identifier 159 may indicate a client device key used as key material for ensuring secure communications with external parties.

[0484] In one or more exemplary client device certificates, the client device certificate 106 includes the Bluetooth address or IP address 160 (when the wireless communication is based on WIFI) of the client device.

[0485] The client device certificate 106 includes a digital signature 113A. The digital signature 113A can prove or verify the authenticity of the client device certificate, such as verifying the legitimacy of the signer. The digital signature 113A is optionally generated by the manufacturing device 12 using a client device customized private key. The intraoral scanning device 2 can be configured to verify the digital signature 113A when receiving the client device certificate including the digital signature 113A (i.e., receiving an authentication message including an encrypted client device certificate and obtaining a decrypted version of the client device certificate 106B). The digital signature 113A can be verified by the intraoral scanning device 2 using, for example, a corresponding client device customized public key stored in the storage unit 6. If the digital signature 113A is not successfully verified using the claimed public key, the intraoral scanning device 2 can ignore the client device certificate 106 (and the authentication message) and / or terminate normal operation / session. This can provide the advantage that the intraoral scanning device 2 rejects client device certificates (and authentication messages) that have been tampered with or received from an unauthenticated party. Therefore, communication with the intra-oral scanning device 2 is resistant to counterfeiting, modification and spoofing attacks.

[0486] Fig. 13B An exemplary intra-oral scanning device certificate 100 is shown. The intra-oral scanning device certificate 100 includes an intra-oral scanning device identifier 112, at least one intra-oral scanning device key identifier, including a first intra-oral scanning device key identifier 114 indicating an intra-oral scanning device key, and one or more intra-oral scanning device keys. The intra-oral scanning device identifier 112 may refer to a unique or pseudo-unique identifier. The first intra-oral scanning device key identifier 114 indicates the first (one or more) intra-oral scanning device key of the intra-oral scanning device certificate. For example, the first intra-oral scanning device key identifier 114 may indicate or point to a certain intra-oral scanning device key in the first group 115 of intra-oral scanning device keys (115A, 115B, 115C, 115D) of the intra-oral scanning device certificate, such as the first primary intra-oral scanning device key 115A.

[0487] The intra-oral scanning device certificate 100 optionally includes at least four sets of intra-oral scanning device keys that enable secure and distinct communications with at least four different client devices / client device types.

[0488] The intra-oral scanning device certificate 100 includes a first set 115 of intra-oral scanning device keys, the first set 115 of intra-oral scanning device keys including a first master intra-oral scanning device key 115A. The at least one intra-oral scanning device key identifier includes a first intra-oral scanning device key identifier 114 indicating a certain intra-oral scanning device key in the first set 115 of intra-oral scanning device keys 115A, 115B, 115C, 115D. The first set 115 of intra-oral scanning device keys, for example, includes a first master key 115A, a first secondary key 115B, a first tertiary key 115C, and a first quaternary key 115D that are specifically used to ensure secure communication with a first client device or a first client device type. For example, the first set 115 of intra-oral scanning device keys may be a set of intra-oral scanning device keys 115A, 115B, 115C, 115D that are used to ensure secure communication of intra-oral scanning device data with a first client device.

[0489] The plurality of intra-oral scan device keys may include a second group 117 of intra-oral scan device keys including a second primary intra-oral scan device key 117A, a second secondary intra-oral scan device key 117B, a second tertiary intra-oral scan device key 117C, and / or a second quaternary intra-oral scan device key 117D. The at least one intra-oral scan device key identifier includes a second intra-oral scan device key identifier 116 indicating a certain intra-oral scan device key in the second group 117 of intra-oral scan device keys 117A, 117B, 117C, 117D. The intra-oral scan device is configured to communicate with one or more client devices, such as a first client device and / or a second client device. For each client device or client device type configured to communicate with the intra-oral scan device, the intra-oral scan device certificate optionally includes a group of intra-oral scan device keys configured to enable secure communication with the particular client device or client device type, and an intra-oral scan device key identifier indicating which intra-oral scan device keys are part of the intra-oral scan device certificate. The intra-oral scanning device certificate may include a third group 119 of intra-oral scanning device keys, the third group 119 of intra-oral scanning device keys including a third primary intra-oral scanning device key 119A, a third secondary intra-oral scanning device key 119B, a third tertiary intra-oral scanning device key 119C, and / or a third quaternary intra-oral scanning device key 119D. The at least one intra-oral scanning device key identifier includes a third intra-oral scanning device key identifier 118 indicating a certain intra-oral scanning device key in the third group 119 of intra-oral scanning device keys. The intra-oral scanning device certificate 100 may include a fourth group of intra-oral scanning device keys, the fourth group of intra-oral scanning device keys including a fourth primary intra-oral scanning device key (not shown). The at least one intra-oral scanning device key identifier includes a fourth intra-oral scanning device key identifier indicating a certain intra-oral scanning device key in the fourth group of intra-oral scanning device keys. The intraoral scanning device 2 can be configured to select a set of intraoral scanning device keys based on a client device or client device type connected to the intraoral scanning device, and select an intraoral scanning device key from a set of intraoral scanning device keys selected based on an intraoral scanning device key identifier associated with the selected set of intraoral scanning devices.

[0490] The intra-oral scanning device certificate 100 optionally includes a certificate type identifier 130B. The certificate type identifier 130B indicates that the intra-oral scanning device certificate 100 is, for example, an intra-oral scanning device certificate selected from a plurality of certificate types, such as an intra-oral scanning device family certificate type, an intra-oral scanning device certificate type, a firmware certificate type, a research and development certificate type, and a client device certificate type. The certificate type identifier 130B can be used to enable the intra-oral scanning device 2 to identify the type of certificate it receives, stores, authenticates, and / or retrieves. The intra-oral scanning device certificate 100 can include a version identifier indicating a data format version of the intra-oral scanning device certificate. The intra-oral scanning device 2 can use the certificate type identifier 130B and / or the version identifier to determine what type of data the intra-oral scanning device certificate 100 contains and what type of data is contained in the fields of the intra-oral scanning device certificate 100. For example, the intra-oral scanning device 2 can determine which field of the certificate contains the digital signature 113B and which public key is needed to verify the digital signature 113B based on the certificate type identifier 130B and / or the version identifier. It is contemplated that there is a one-to-one mapping relationship between the certificate type identifier 130A and the public-private key pair used to generate the digital signature 113B. The intraoral scanning device certificate 100 may include a length identifier indicating the length of the intraoral scanning device certificate 100, for example, in bits or bytes.

[0491] The intraoral scanning device certificate 100 optionally includes a signing device identifier 136B. The signing device identifier 136B refers to a unique identifier that identifies the device (e.g., manufacturing device 12, such as an integrated circuit card, a smart card, a hardware security module included in the manufacturing device 12) that signed the intraoral scanning device certificate 100. The signing device identifier 136B may include, for example, a media access control (MAC) address and a serial number of the signing device. The signing device identifier 136B allows, for example, the intraoral scanning device 2 to determine whether the signing device is blacklisted, thereby rejecting the intraoral scanning device ce...

Claims

1. A handheld intraoral scanning device (10), the handheld intraoral scanning device being used to acquire intraoral scan data from a three-dimensional dental object during a scanning session, the handheld intraoral scanning device comprising: A processing unit (2) configured to process the intraoral scan data of the patient and provide three-dimensional image data; a wireless interface (4) configured to transmit said three-dimensional image data; and Memory (3); The processing unit (2) is configured to: receiving a mode request via the wireless interface when no three-dimensional image data is transmitted, wherein the mode request is one or more of: a service mode request for a service mode, a customization mode request for customizing a user interface of the handheld intraoral scanning device, an upgrade mode request for upgrading the handheld intraoral scanning device, and a debug mode request, wherein the service mode is characterized in that the firmware portion of the memory (3) is writable; authenticating the mode request to confirm that the mode request is valid for the handheld intra-oral scanning device; and If authentication of the mode request is successful, placing the handheld intra-oral scanning device in the requested mode.

2. The handheld intraoral scanning device according to claim 1, wherein: The processing unit is configured to place the intra-oral scanning device into a default mode if authentication of the mode request fails.

3. The handheld intraoral scanning device according to claim 2, wherein: The default mode includes powering on the handheld intra-oral scanning device and operating the handheld intra-oral scanning device according to operating parameters set during powering on.

4. The handheld intraoral scanning device according to any one of claims 1 to 3, wherein: The processing unit is configured to authenticate the mode request by authenticating a sender of the mode request.

5. A handheld intraoral scanning device according to any one of the preceding claims, wherein: The processing unit is configured to authenticate the mode request by verifying the integrity of the mode request.

6. A handheld intraoral scanning device according to any one of the preceding claims, wherein: If authentication of the mode request is successful, placing the handheld intra-oral scanning device in the requested mode includes sending a mode response.

7. A handheld intraoral scanning device according to any one of the preceding claims, wherein: The mode request is received in a session, and the processing unit is configured to terminate the session if authentication of the mode request fails.

8. A handheld intraoral scanning device according to any one of the preceding claims, wherein: The mode request includes a signature, and wherein authenticating the mode request comprises verifying the signature of the mode request.

9. A handheld intraoral scanning device according to any one of the preceding claims, wherein: When the handheld intra-oral scanning device is in the service mode, the processing unit is configured to generate a session identifier, transmit the session identifier via the wireless interface, and store the session identifier in the handheld intra-oral scanning device.

10. A handheld intraoral scanning device according to any one of the preceding claims, wherein: When the handheld intraoral scanning device is in service mode, the processing unit is configured to receive data via the wireless interface, wherein the processing unit is configured to authenticate the received data, and if the authentication of the data is successful, store the intraoral scanning device data in a part of the memory based on the received data.

11. The handheld intraoral scanning device according to claim 10 as appended to claim 9, wherein: The data includes a session identifier, and wherein authenticating the data includes comparing the received session identifier with a session identifier stored in the handheld intra-oral scanning device.

12. The handheld intraoral scanning device according to claim 10, wherein: The data is received in a session, and the processing unit is configured to terminate the session if authentication of the received data fails.

13. A method (400) for configuring a handheld intraoral scanning device, the handheld intraoral scanning device comprising a processing unit, a memory and a wireless interface, the processing unit being configured to process intraoral scanning data of a patient and provide three-dimensional image data, the wireless interface being configured to transmit the three-dimensional image data, the method comprising: When no three-dimensional image data is transmitted, receiving (401) a mode request via the wireless interface, wherein the mode request is one or more of: a service mode request for upgrading firmware data, a customization mode request for customizing a user interface of the handheld intraoral scanning device, an upgrade mode request for upgrading the handheld intraoral scanning device, and a debugging mode request, and wherein the service mode is characterized in that the firmware portion of the memory (3) is writable; Authenticating (402) the mode request to confirm that the mode request is valid for the handheld intra-oral scanning device; and If the authentication of the mode request is successful, the handheld intra-oral scanning device is placed (403) in the requested mode.

14. The method according to claim 13, wherein: The method includes placing (405) the handheld intraoral scanning device in a default mode if authentication of the mode request fails.

15. The method according to any one of claims 13-14, wherein: Authenticating the mode request includes authenticating a sender of the mode request.

16. The method according to any one of claims 13 to 15, wherein: Authenticating the mode request includes verifying the integrity of the mode request.

17. The method according to any one of claims 13 to 16, wherein: When the handheld intraoral scanning device is in a service mode, the method includes: receiving (408) data via the wireless interface, Authenticating the received data (410); and If authentication of the data is successful, storing (412) the intra-oral scanning device data in a portion of the memory based on the received data.

Images