Fingerprint Authentication for Medical Infusion Pumps

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Portable medical infusion systems face security vulnerabilities due to susceptibility to eavesdropping and hacking attacks, particularly in wireless communications between infusion pumps and controllers, which can compromise patient data and insulin delivery systems.

Innovation Solution

The infusion system employs bi-directional communication with fingerprint authentication and a configurable attenuator to ensure secure pairing and data transmission, using a pump processor, memory, and radio with a graphical user interface and fingerprint scanner to manage security conditions and signal strength, thereby protecting patient data and preventing unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If wireless communication is implemented between infusion pump and controller, then convenience and ease of operation are improved, but security vulnerability to eavesdropping and hacking attacks increases

Engineering Contradiction:
Improvewireless communication convenienceVSAvoidsecurity vulnerability
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary authentication actions before establishing wireless communication. The controller and infusion pump exchange authentication data and verify each other's identity before allowing data transmission, preventing unauthorized access and eavesdropping attacks in advance

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary authentication mechanism between the controller and infusion pump. Authentication data acts as a mediator that verifies the identity of both devices, ensuring that only authorized devices can communicate wirelessly, thus addressing security vulnerabilities while maintaining convenience

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If authentication security measures are implemented, then patient data security is improved, but device complexity increases

Engineering Contradiction:
Improvepatient data securityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system uses authentication data copies or tokens that can be exchanged and verified without requiring complex cryptographic protocols. The controller and pump exchange authentication credentials that serve as simplified representations of device identity, reducing computational complexity while maintaining security

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The authentication mechanism is designed to be universal and multi-functional, serving both as identity verification and as a basis for secure communication establishment. The same authentication data structure supports multiple security functions, reducing the need for separate complex security subsystems

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11361059B2Fingerprint enhanced authentication for medical devices in wireless networks
Publication Date: 2022.06.14 MEDTRONIC MINIMED INC
  • US11361059B2 patent drawing
  • US11361059B2 patent drawing
  • US11361059B2 patent drawing

AI summary

An infusion system to administer fluid is disclosed. The infusion system includes an infusion pump having a pump processor, a pump memory and a pump radio to enable bi-directional communication. The pump memory stores a plurality of fingerprint tokens and security conditions. The infusion system includes a controller with a processor, a controller memory and a controller radio to transmit and receive communication from the pump radio. The controller includes a fingerprint scanner and a graphical user interface (GUI) and controls to manipulate the GUI. The GUI and fingerprint scanner enable the controller to scan and determine tokens based on scanned fingerprints. Additionally, communication between the infusion pump and the controller establish relative proximity between the infusion pump and the controller such that when the relative proximity exceeds a threshold distance at least one of the plurality of security conditions is automatically matched.