Implantable Device Telemetry Security via Protocol Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Implantable medical devices face challenges in securely communicating telemetry data with external devices, as commercially available telemetry protocols can reveal how to initiate and conduct sessions, compromising security by allowing unauthorized access.
Innovation Solution
The implementation of a system that uses a combination of proprietary and non-proprietary telemetry communication protocols, where a proprietary protocol (e.g., induction-based) is used for secure session initiation and a non-proprietary protocol (e.g., BLE) for data transmission, generating unique session identifiers and keys for secure communication, and expiring security information after each session to prevent unauthorized reuse.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If commercially available telemetry protocols are used for wireless communication between implantable devices and external devices, then ease of operation and widespread provisioning are improved, but security deteriorates because the protocols become publicly available and allow unauthorized access
Solution Approach 1:
The patent segments the telemetry communication process into two distinct phases: session initiation using a proprietary secure protocol, and data transmission using a commercial protocol. This segmentation allows each phase to use the most appropriate protocol for its specific security requirements, resolving the contradiction between ease of operation and security.
Solution Approach 2:
The patent introduces an intermediary security mechanism that acts as a mediator between the commercial telemetry protocol and the proprietary secure protocol. This intermediary layer validates credentials and establishes secure sessions, allowing commercial protocols to be used for data transmission while maintaining security through the intermediary's control over session initiation.
2Reliability
If proprietary telemetry protocols are used for secure communication, then security is improved, but device complexity and manufacturing difficulty increase
Solution Approach 1:
The patent divides the communication system into two parts: a simplified commercial protocol for data transmission and a proprietary secure protocol only for session initiation. This segmentation reduces overall device complexity by allowing the majority of communication to use simple commercial protocols while maintaining security through the specialized proprietary protocol.
Solution Approach 2:
The patent makes the system universally compatible with commercial telemetry standards for data transmission, while adding proprietary security only where needed for session initiation. This multi-functionality approach allows the device to work with multiple external devices using standard protocols while maintaining security through the proprietary layer.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach enhances security by ensuring only authorized devices can establish and maintain telemetry sessions with implantable devices, preventing unauthorized access and ensuring data confidentiality.
Implementation Method 1
telemetry communication between an implantable device and an external device
Data Source
AI summary
Systems, apparatus, methods and non-transitory computer readable media facilitating telemetry data communication security between an implantable device and an external clinician device are provided. An implantable device can include a security component configured to generate security information based on reception of a clinician telemetry session request from the clinician device via a first telemetry communication protocol. The security information can include a session identifier and a first session key, and the clinician telemetry session request can include a clinician device identifier associated with the clinician device. The implantable device can further include a communication component configured to establish a clinician telemetry session with the clinician device using a second telemetry communication protocol based on determining that a connection request, received via the second telemetry communication protocol, was transmitted by the clinician device based on inclusion of the clinician device in the connection request.