Home gateway communication and security control method for home vestibular rehabilitation

Abstract

The invention discloses a home gateway communication and security control method for home vestibular rehabilitation, and belongs to the technical field of medical Internet of Things security. The method is applied to a special home gateway repeater, Bluetooth 5.0 automatic pairing is triggered by pressing a physical key for a long time, and the legality of equipment is verified based on a pre-registered white list of a doctor end; the SM4 encrypts and distributes the prescription after the SM2 verifies the signature of the prescription; event reporting supports Wi-Fi / 5G / 4G / SMS and satellite communication multimode dynamic switching, and a short message or Beidou / low orbit satellite emergency channel is started when no ground network coverage exceeds 2 hours; firmware upgrading can be executed by secondary examination and approval of a doctor; and a future 6G protocol stack is compatible, and smooth evolution can be realized through secure upgrade. According to the method, a medical-level security control closed loop of'one-key trusted access, prescription tamper-proofing, communication full-scene coverage and upgrading auditing 'is realized, and the operation complexity and data security risk in old-age rehabilitation are remarkably relieved.

Description

Technical Field

[0001] This invention belongs to the field of medical Internet of Things and information security interdisciplinary technology, specifically relating to a home gateway communication and security control method for a home vestibular rehabilitation system, and more particularly to a multi-mode communication switching, national cryptographic encryption verification and zero-interaction control method used in a dedicated home gateway repeater for elderly patients during device pairing, prescription distribution, event reporting and firmware upgrade processes. Background Technology

[0002] With the growing demand for remote rehabilitation, home gateways are widely used to connect wearable devices to cloud platforms. However, existing home rehabilitation devices have the following problems:

[0003] Pairing is complicated: General smart home gateways (such as Xiaomi multi-mode gateway) require scanning a QR code with a mobile app, configuring the network via Wi-Fi, or using an account and password to complete device binding. This has a high barrier to entry and is difficult for elderly users to operate.

[0004] Prescription transmission is insecure: Rehabilitation prescriptions sent from the cloud often use plaintext HTTP or weakly encrypted MQTT without strong identity authentication and encryption protection, posing a risk of tampering and leakage (such as CN114567890A), which does not comply with the "Guiding Principles for Cybersecurity of Medical Devices";

[0005] Poor communication link reliability: Relying solely on a single Wi-Fi or cellular network, it cannot cover urban and rural areas as well as remote signal blind spots;

[0006] Firmware upgrades lack an approval mechanism: FOTA upgrades lack secondary confirmation from a doctor, posing a risk of malicious firmware injection.

[0007] While some solutions incorporate 4G backup (such as EP3890123B1), they fail to address the issues of prescription integrity verification and device legitimacy binding. Furthermore, no solution combines physical button-triggered automatic pairing with doctor-side whitelist authorization to achieve medical-grade trusted access. In addition, with the commercialization of 5G, the future development of 6G standards, and the application of low-Earth orbit satellite communication networks, there is an urgent need for a home gateway communication and security control method that can support multiple generations of cellular networks and satellite communications. Summary of the Invention

[0008] The purpose of this invention is to provide a home gateway communication and security control method for home-based vestibular rehabilitation, solving the above-mentioned technical problems and achieving the following technical effects:

[0009] One-click pairing: Trigger Bluetooth 5.0 broadcast via physical button to automatically pair with smart glasses and IMU wristband, without manual input;

[0010] Prescription verification and distribution: After cloud-based prescriptions are signed with SM2, they are verified and encrypted by the home gateway and distributed to the patient's device, ensuring the integrity and confidentiality of the prescription;

[0011] Multi-mode communication redundancy: Supports dynamic switching between five modes: Wi-Fi, 5G, 4G, SMS, and satellite, adapting to different network environments;

[0012] FOTA Approval Upgrade: Firmware upgrades require secondary confirmation from the doctor to prevent unauthorized firmware tampering.

[0013] Achieving a medical-grade gateway control loop of "one-click pairing, signature verification and distribution, multi-mode reporting, and approval upgrade".

[0014] The aforementioned home gateway communication and security control method for home-based vestibular rehabilitation, applied to a dedicated home gateway repeater, includes:

[0015] In response to a user pressing and holding the physical pairing button for ≥3 seconds, initiate Bluetooth 5.0 broadcast, which carries a temporary session identifier;

[0016] Receive a binding request from the smart glasses and the IMU wristband, the binding request including the device type, device public key and factory unique ID;

[0017] The system queries the pre-registration whitelist of doctors stored locally. If the device ID exists in the whitelist, it calls the built-in national cryptographic security chip to generate a session key and establishes an encrypted BLE connection. The device ID and connection status are written to the secure storage area, and the green status indicator light is turned on to complete the pairing.

[0018] The system receives a structured rehabilitation prescription pushed from the cloud via MQTT over TLS, the prescription being signed with an SM2 private key; it calls a security chip to perform SM2 signature verification on the prescription, discarding it and reporting a security alarm if the verification fails; if the verification passes, it uses the public key of the paired device to encrypt the prescription payload with SM4 and broadcasts it to the smart glasses via BLE.

[0019] The system receives event summaries uploaded by smart glasses. The summaries are in JSON format and include the event type, timestamp, and prescription ID. It dynamically selects the communication channel based on the current network status: prioritizing uploads to the cloud via Wi-Fi; if Wi-Fi is disconnected and the 5G or 4G signal strength is greater than -100dBm, it switches to the 5G / 4G channel; if there is no terrestrial cellular network coverage for more than 2 hours, the summaries are compressed into SMS format and sent via AT commands through the built-in SIM card to a designated SMS number at the medical center; when an external low-orbit satellite communication terminal or BeiDou short message module is detected, the satellite channel is automatically activated as the highest priority emergency reporting path; simultaneously, unsuccessfully uploaded summaries are cached in an eMMC encrypted partition and automatically resumed after network recovery.

[0020] Receive firmware over-the-air (FOTA) upgrade instructions initiated by the doctor's terminal, the instructions containing the new firmware hash value and the doctor's digital signature; call the security chip to verify the signature validity and firmware integrity; if the verification is successful, return a "pending approval" status to the doctor's terminal; only after receiving a secondary confirmation instruction from the doctor's terminal will the firmware flashing operation be performed and an audit log be recorded.

[0021] The home gateway repeater is compatible with future 6G communication protocols and supports the loading of a lightweight 6G access protocol stack through secure firmware upgrades.

[0022] The doctor-side pre-registration whitelist is pre-entered by the doctor on the Web management platform using the device's unique factory ID, and then sent to the secure storage area of ​​the home gateway repeater through a secure channel.

[0023] Both the SM2 signature verification and SM4 encryption are executed by the Huada Electronics CIU9832 national cryptographic security chip hardware, and the main control chip cannot access the plaintext private key.

[0024] The SMS compression format for the event summary is: [VH] Event Type Abbreviation: Duration; TS: Unix Timestamp; PID: Patient Hash, with each SMS message not exceeding 160 bytes.

[0025] The eMMC encrypted partition uses AES-256 encryption, and the key is derived from the security chip, so it can still be decrypted after the main system restarts.

[0026] The FOTA secondary confirmation instruction is triggered by clicking the "Approve Upgrade" button on the doctor's web platform, and the gateway only accepts confirmations from doctors associated with the same prescription.

[0027] After pairing is complete, the home gateway repeater automatically rejects connection requests from new devices not on the whitelist to prevent unauthorized devices from accessing the network.

[0028] The 5G or 4G signal strength threshold of -100dBm can be remotely configured according to the regional network quality, and the configuration parameters are sent after being signed by SM2.

[0029] The home gateway repeater automatically identifies the 5G / 4G network type by querying the communication module's capabilities and prioritizes using the 5G SA standalone networking mode for data transmission.

[0030] The satellite channels include BeiDou-3 regional short message, TianTong-1 or low-orbit broadband satellite systems, and the event digest is uploaded via L / S band link after being encoded.

[0031] The communication protocol stack of the home gateway repeater reserves a 6G New Radio (NR) lightweight access layer interface, supporting the future loading of the 6G NR-Light protocol module via secure FOTA.

[0032] Beneficial effects:

[0033] Senior-friendly zero-interaction: Through physical buttons and automatic whitelist verification, it achieves "one-button press, lifetime no configuration required";

[0034] Medical-grade security: Prescriptions are signed with SM2 and encrypted with SM4 throughout the entire process to prevent tampering and eavesdropping;

[0035] Highly reliable communication: Five-mode redundancy including Wi-Fi, 5G, 4G, SMS, and satellite ensures availability in remote areas;

[0036] Compliant and auditable: FOTA requires secondary approval from doctors and meets the requirements for medical device software updates in YY / T 1708-2020;

[0037] Privacy-friendly: Only the summary is forwarded, and the raw physiological data is not processed, reducing legal risks. Attached Figure Description

[0038] Figure 1 This is a schematic diagram of the overall system architecture of the present invention;

[0039] Figure 2 Flowchart for device pairing and prescription dispensing;

[0040] Figure 3 Flowchart for multi-mode communication switching decision-making for home gateways;

[0041] Figure 4 Diagram showing the configuration of a home gateway repeater;

[0042] Figure 5 This is a schematic diagram of a satellite communication expansion interface. Detailed Implementation

[0043] To enable those skilled in the art to clearly and completely implement the present invention, the following description is provided in conjunction with the appendix. Figure 1 To be continued Figure 5 Four examples are provided:

[0044] Example 1: Hardware Configuration and System Environment of a Home Gateway

[0045] like Figure 4 As shown, the hardware components of a home gateway repeater include:

[0046] Central control module (301): Rockchip RK3308B processor (supports Wi-Fi / 5G / 4G dual-mode);

[0047] Wi-Fi module (302): RTL8822CS;

[0048] 5G / 4G dual-mode communication module (303): RG500U;

[0049] Bluetooth controller (304): ESP32-C6;

[0050] National Cryptographic Security Chip (305): Huada CIU9832 National Cryptographic Security Chip (hardware execution of SM2 / SM4 algorithm);

[0051] Communication interfaces: ESP32-C6 Bluetooth 5.0 module, Quectel EC21 4G module, SIM card slot, Beidou short message extension interface ( Figure 5 );

[0052] Storage (306): 8GB eMMC encrypted partition (AES-256 encryption, key derived from security chip).

[0053] The software is based on Linux 5.10+Yocto and integrates the Mosquitto MQTT client, Paho TLS library, and GMSSL national cryptographic suite to achieve a system-level security closed loop.

[0054] Example 2: The entire process of device pairing and prescription dispensing

[0055] like Figure 2 As shown, this embodiment fully implements the following process:

[0056] User triggers pairing:

[0057] Users press and hold the physical button on the home gateway for ≥3 seconds to activate Bluetooth 5.0 broadcast (including temporary session identifier);

[0058] The smart glasses / IMU wristband sends a binding request (including device type, public key, and factory ID).

[0059] Whitelist verification and connection:

[0060] Query the doctor's pre-registration whitelist (enter IMEI on the web platform, issue SM2 signature);

[0061] When the whitelist is matched, CIU9832 is called to generate a session key and establish an encrypted BLE connection.

[0062] Prescription verification and distribution:

[0063] Cloud-based push of SM2-signed structured prescriptions (MQTT over TLS);

[0064] After successful verification by CIU9832, the prescription is encrypted using the paired device's public key SM4 and broadcast to the smart glasses via BLE.

[0065] Example 3: Multimode Communication Switching and Event Reporting

[0066] like Figure 3 As shown, the event summary multi-modal reporting process is as follows:

[0067] -Event Summary Collection

[0068] The smart glasses detect vestibular rehabilitation-specific events (such as exceeding eye closure limits) and generate a JSON-formatted summary, including the event type (such as "CLOSED_EYE"), Unix timestamp, and prescription ID.

[0069] -Communication channel dynamic switching logic

[0070] Phase 1: Wi-Fi Upload

[0071] When the home gateway detects that the Wi-Fi connection is normal, it directly uploads the event digest to the cloud via the MQTT over TLS protocol.

[0072] Phase Two: 5G / 4G Alternatives

[0073] If Wi-Fi is disconnected and the 5G / 4G signal strength is greater than -100dBm (this threshold can be configured remotely), it will automatically switch to 5G SA standalone networking mode for data transmission.

[0074] Phase Three: Emergency SMS Channel

[0075] If there is no terrestrial cellular network coverage for more than 2 hours, the event summary will be compressed into SMS format ([VH] event type abbreviation: duration; TS: Unix timestamp; PID: patient hash, single SMS ≤ 160 bytes) and sent to the designated SMS number of the medical center via AT command through the SIM card.

[0076] Phase 4: Satellite Communication as a Backup

[0077] When the BeiDou short message module (308) or a low-orbit satellite terminal is detected to be accessing the network, the L / S band satellite channel is activated to upload the summary.

[0078] -Data caching and resume download

[0079] Event digests that fail to upload are cached in an eMMC encrypted partition (AES-256 encryption, key derived from the security chip), and will automatically resume uploading once the network is restored.

[0080] Example 4: FOTA Upgrade and 6G Compatibility Implementation

[0081] FPTA upgrade process:

[0082] The doctor sends FOTA commands (including the new firmware hash and SM2 signature);

[0083] After the gateway verification is successful, it returns to "Pending Approval" and only accepts secondary confirmation from doctors associated with the same prescription (click "Approve Upgrade" on the Web platform);

[0084] Perform firmware flashing and record audit logs (upgrade time, doctor ID, version).

[0085] G compatibility:

[0086] like Figure 5 As shown, the satellite communication extension interface (BeiDou / Low Orbit satellite) reserves a 6G NR-Light protocol stack interface;

[0087] The 6G lightweight protocol module is loaded via secure FOTA to support future 6G New Radio access (Note: 6G compatibility and satellite communication are parallel expansions and are not on the same interface).

[0088] The above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

[0089] Feasibility description

[0090] The method of this invention is based on existing medical IoT development kits and national cryptographic standards, and its functionality can be verified through the following methods:

[0091] One-click pairing: The main control chip (such as Rockchip RK3308) triggers Bluetooth 5.0 broadcast through a physical button, verifies the legality of the device by combining the doctor's pre-registered whitelist (stored in the eMMC encrypted partition), calls the national cryptographic security chip (such as BGI CIU9832) to generate a session key and establish an encrypted BLE connection.

[0092] Prescription verification and distribution: After the cloud prescription is signed by SM2, the home gateway calls the security chip to verify the signature and encrypt it by SM4, and broadcasts it to the smart glasses via BLE. The main control chip has no plaintext private key access.

[0093] Multi-mode communication reporting: Integrates Wi-Fi / 5G / 4G modules (supports 5G SA mode), controls SMS sending and receiving via AT commands; when a BeiDou / Low Earth Orbit satellite terminal is detected, it enables L / S band upload of digests (JSON format, compressed to ≤160 bytes). Unsuccessful uploads are cached in an AES-256 encrypted partition (key derived from the security chip), and automatically resume transmission after network recovery.

[0094] FOTA approval upgrade: The security chip verifies the firmware hash value and digital signature, and the firmware flashing is only performed after the doctor confirms it a second time (triggered by the Web platform), and an audit log (including timestamp and doctor ID) is recorded.

[0095] G Compatibility: Reserves a 6G New Radio (NR-Light) protocol stack interface, supports loading 6G lightweight modules via secure FOTA, and adapts to future communication standards.

[0096] The technological integration and innovation of this invention

[0097] This invention addresses core issues in home-based vestibular rehabilitation scenarios, such as complex device pairing, insecure data transmission, and unreliable communication links, through the collaborative use of multiple technical modules, resulting in the following innovations:

[0098] Privacy protection and data security:

[0099] Raw data from smart glasses / IMU wristbands is destroyed locally, and event summaries are uploaded using SM4 encryption.

[0100] The SM2 / SM4 algorithm provides full-process protection, and the security chip isolates the private key in hardware to prevent tampering with the main control chip.

[0101] Communication link redundancy design:

[0102] Multi-mode dynamic switching (Wi-Fi→5G / 4G→SMS→Satellite), supports emergency upload via satellite channel (L / S band);

[0103] Unsuccessful data is cached to an AES-256 encrypted partition and will be automatically resumed once the network is restored.

[0104] Aging-friendly interaction and trusted access:

[0105] One-click physical pairing (press and hold for ≥3 seconds to trigger Bluetooth broadcast), adapted to the operating habits of elderly users;

[0106] The doctor-side pre-registration whitelist (IMEI + SM2 signature) only allows legitimate devices to access the system.

[0107] Medical-grade approval closed loop:

[0108] FOTA upgrades require secondary confirmation from a doctor to prevent unauthorized firmware tampering;

[0109] The upgrade operation records audit logs (doctor ID, timestamp, version number) meet compliance requirements.

[0110] Future communication evolution capabilities:

[0111] It reserves a 6G NR-Light protocol stack interface to support secure FOTA loading of 6G modules and adapt to communication standard iterations.

[0112] This integrated technology solution breaks through the bottlenecks of traditional home rehabilitation equipment in terms of operational complexity, data security, and communication reliability, providing a practical medical IoT solution for the vestibular rehabilitation field.

Claims

1. A home gateway communication and security control method for home-based vestibular rehabilitation, characterized in that, The method, applied to a dedicated home gateway repeater, includes: In response to a user pressing and holding the physical pairing button for ≥3 seconds, initiate Bluetooth 5.0 broadcast, which carries a temporary session identifier; Receive a binding request from the smart glasses and the IMU wristband, the binding request including the device type, device public key and factory unique ID; The system queries the locally stored doctor-side pre-registration whitelist. If the device ID exists in the whitelist, it uses the built-in national cryptographic security chip to generate a session key and establishes an encrypted BLE connection. The device ID and connection status are written to the secure storage area, and the green status indicator light is turned on to complete the pairing. The system receives a structured rehabilitation prescription pushed from the cloud via MQTT over TLS, and the prescription is signed with an SM2 private key. The security chip is used to perform SM2 signature verification on the prescription. If the verification fails, the prescription is discarded and a security alarm is reported. If the verification passes, the prescription payload is encrypted using the public key of the paired device using SM4 and broadcast to the smart glasses via BLE. The system receives event summaries uploaded by smart glasses. The summaries are in JSON format and include the event type, timestamp, and prescription ID. It dynamically selects the communication channel based on the current network status: prioritizing uploads to the cloud via Wi-Fi; if Wi-Fi is disconnected and the 5G or 4G signal strength is greater than -100dBm, it switches to the 5G / 4G channel; if there is no terrestrial cellular network coverage for more than 2 hours, the summaries are compressed into SMS format and sent via AT commands through the built-in SIM card to a designated SMS number at the medical center; when an external low-orbit satellite communication terminal or BeiDou short message module is detected, the satellite channel is automatically activated as the highest priority emergency reporting path; simultaneously, unsuccessfully uploaded summaries are cached in an eMMC encrypted partition and automatically resumed after network recovery. Receive firmware over-the-air (FOTA) upgrade instructions initiated by the doctor's terminal, the instructions containing the new firmware hash value and the doctor's digital signature; call the security chip to verify the signature validity and firmware integrity; if the verification is successful, return a "pending approval" status to the doctor's terminal; only after receiving a secondary confirmation instruction from the doctor's terminal will the firmware flashing operation be performed and an audit log be recorded. The home gateway repeater is compatible with future 6G communication protocols and supports the loading of a lightweight 6G access protocol stack through secure firmware upgrades.

2. The method according to claim 1, characterized in that, The doctor-side pre-registration whitelist is pre-entered by the doctor on the Web management platform using the device's unique factory ID, and then sent to the secure storage area of ​​the home gateway repeater through a secure channel.

3. The method according to claim 1, characterized in that, Both the SM2 signature verification and SM4 encryption are executed by the Huada Electronics CIU9832 national cryptographic security chip hardware, and the main control chip cannot access the plaintext private key.

4. The method according to claim 1, characterized in that, The SMS compression format for the event summary is: [VH] Event Type Abbreviation: Duration; TS: Unix timestamp; PID: patient hash, each SMS message cannot exceed 160 bytes.

5. The method according to claim 1, characterized in that, The eMMC encrypted partition uses AES-256 encryption, and the key is derived from the security chip, so it can still be decrypted after the main system restarts.

6. The method according to claim 1, characterized in that, The FOTA secondary confirmation instruction is triggered by clicking the "Approve Upgrade" button on the doctor's web platform, and the gateway only accepts confirmations from doctors associated with the same prescription.

7. The method according to claim 1, characterized in that, After pairing is complete, the home gateway repeater automatically rejects connection requests from new devices not on the whitelist to prevent unauthorized devices from accessing the network.

8. The method according to claim 1, characterized in that, The 5G or 4G signal strength threshold of -100dBm can be remotely configured according to the regional network quality, and the configuration parameters are sent after being signed by SM2.

9. The method according to claim 1, characterized in that, The home gateway repeater automatically identifies the 5G / 4G network type by querying the communication module's capabilities and prioritizes using the 5G SA standalone networking mode for data transmission.

10. The method according to claim 1, characterized in that, The satellite channels include BeiDou-3 regional short message, TianTong-1 or low-orbit broadband satellite systems, and the event digest is uploaded via L / S band link after being encoded.

11. The method according to claim 1, characterized in that, The communication protocol stack of the home gateway repeater reserves a 6G New Radio (NR) lightweight access layer interface, supporting the future loading of the 6G NR-Light protocol module via secure FOTA.

Images