Implanted Medical Device Access Control via Physiological Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing security architectures for implanted medical devices (IMDs) fail to provide an adequate balance between security and accessibility, posing a threat to timely medical intervention during emergencies.

Innovation Solution

The implementation of a system that controls access to IMDs based on the measurement of dynamic physiological values, allowing secure access by monitoring devices if the values are within a specified threshold, and includes a failsafe mode for emergency scenarios where traditional biometrics may not be available.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional cryptographic access-control approaches are used with pre-provisioned keys, then security is improved, but accessibility during emergencies deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidaccessibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system changes the authentication parameter from static pre-provisioned keys to dynamic physiological values that can be measured in real-time. This allows the authentication mechanism to adapt between normal operation (using physiological values) and emergency operation (using alternative authentication methods), resolving the contradiction between security and accessibility

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The authentication system transitions from a static key-based approach to a dynamic physiological value-based approach. The system can dynamically switch between different authentication modes (physiological values during normal operation, alternative methods during emergencies), enabling both strong security and rapid emergency access

Inventive Principle:
Principle #15Dynamics

2Reliability

If base station architecture with pre-established shared symmetric keys is used, then security is improved, but device complexity and infrastructure requirements worsen

Engineering Contradiction:
ImprovesecurityVSAvoidinfrastructure complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The invention extracts the authentication functionality from the base station architecture and embeds it directly in the IMD. The IMD autonomously measures physiological values and performs authentication decisions locally, eliminating the need for continuous base station involvement and reducing infrastructure complexity while maintaining security

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The IMD performs self-authentication by measuring its own physiological values and comparing them against stored thresholds. This self-service authentication mechanism eliminates dependency on external base stations for routine authentication, simplifying the overall system architecture while maintaining strong security

Inventive Principle:
Principle #25Self-service

3Ease of operation

If rapid unimpeded access is allowed during emergencies, then accessibility is improved, but security deteriorates

Engineering Contradiction:
ImproveaccessibilityVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary authentication using physiological values before allowing access during normal operation. In emergency situations, the pre-established alternative authentication methods (such as emergency access codes or simplified verification) are already in place, enabling rapid access without compromising the overall security framework

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8515070B2Access control for implanted medical devices
Publication Date: 2013.08.20 RSA SECURITY INC
  • US8515070B2 patent drawing
  • US8515070B2 patent drawing
  • US8515070B2 patent drawing

AI summary

Enhanced security is provided in a system comprising a medical device and a monitoring device. The medical device is configured for implantation into a living organism, and comprises processing circuitry and an interface for communicating with the monitoring device. Access to the medical device by the monitoring device is controlled based on measurement of one or more physiological values of the living organism by at least one of the two devices. In an illustrative embodiment, the medical device and the monitoring device are configured to include respective physiological value sensors for measuring respective dynamic physiological values of the living organism. The medical device is further configured to determine if the dynamic physiological values are sufficiently similar to one another and to grant or deny the monitoring device access to the medical device based on the determination.