IMD Wireless Telemetry Authentication for Secure Therapy App Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Commercial machine-to-machine (M2M) communication protocols for implantable medical devices (IMDs) lack secure pairing procedures, exposing them to security risks due to potential unauthorized access by other applications on external devices.
Innovation Solution
Implement a bi-directional authentication system using a public key infrastructure (PKI) system to provision certified security credentials for both IMDs and external devices, establishing a mutual authentication process through challenge-response sequences over wireless telemetry links.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If commercial M2M communication protocols are used for wireless telemetry between external devices and IMDs, then ease of operation and device compatibility are improved, but security reliability deteriorates due to limited pairing procedures and potential unauthorized access
Solution Approach 1:
The patent implements preliminary authentication actions before establishing communication. External devices and IMDs exchange authentication credentials and establish trusted relationships before wireless telemetry begins, preventing unauthorized access while maintaining ease of operation through automated authentication sequences
Solution Approach 2:
The patent introduces an intermediary authentication layer between the external device and IMD. This intermediary verification process validates device identities and credentials before allowing M2M communication, enhancing security reliability without compromising the ease of use of commercial protocols
2Adaptability or versatility
If commercial M2M protocols with multiple applications are hosted on external devices, then adaptability and versatility are improved, but security reliability worsens due to potential unauthorized access by other applications
Solution Approach 1:
The patent segments authentication credentials and communication channels by application. Each therapy application on the external device has its own authenticated session with the IMD, isolating security contexts and preventing unauthorized access by other applications while maintaining system versatility
Solution Approach 2:
The patent applies local security quality to each communication session between a specific application and the IMD. Authentication credentials and security parameters are tailored to each therapy application's needs, ensuring that only authorized applications can access specific IMD functions while maintaining overall system adaptability
Data Source
AI summary
A system and method for facilitating bi-directional authentication between an external device and an implanted medical device (IMD), wherein a therapy application executing on the external device is operative to communicate with the IMD via wireless telemetry communications. Certified security credentials for respective devices may be provisioned with respect to the therapy application. Upon initiating wireless telemetry communications, respective certified security credentials are mutually verified by the external device and the IMD. Responsive to successful verification, a mutual authentication process may be executed between the external device and the IMD using a respective challenge-response sequence.