Asymmetric Encryption for Medical Device Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current medical systems face security challenges in data exchange between medical measuring systems and ventilators or anesthesia devices, particularly in ensuring the authenticity and classification of data transmitted within a network, which can lead to inadequate control and monitoring of patient ventilation.

Innovation Solution

The implementation of an asymmetric encryption method for authenticating and encrypting data between medical measuring systems and ventilators or anesthesia devices, allowing them to identify and classify each other based on unique public and private key pairs, ensuring secure and reliable data exchange and adaptation of ventilation settings.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If data exchange is enabled between medical measuring systems and ventilators via a data network, then functional versatility and therapeutic possibilities are improved, but security and reliability of data transmission deteriorate

Engineering Contradiction:
Improvefunctional versatilityVSAvoidsecurity of data transmission
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces an asymmetric encryption system as an intermediary layer between the measuring system and ventilator. This encryption mechanism mediates data exchange by authenticating devices and encrypting transmitted data, thereby maintaining security while enabling versatile network-based communication and control functions.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If authentication and classification mechanisms are implemented in data exchange, then security and reliability are improved, but device complexity increases

Engineering Contradiction:
Improvesecurity of data transmissionVSAvoidcomplexity of authentication system
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary authentication and classification actions before actual data exchange occurs. Devices are authenticated and classified in advance using asymmetric encryption, establishing security credentials beforehand. This preliminary setup enables subsequent secure communication without requiring complex real-time authentication procedures during data transmission.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If only authenticated data is used for ventilation control, then patient safety is improved, but loss of time in data verification increases

Engineering Contradiction:
Improvepatient safetyVSAvoidtime for data verification
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The asymmetric encryption authentication is performed in advance, creating verified data packets with embedded authentication information. When data is transmitted for ventilation control, the verification process is streamlined because authentication was already established preliminarily, reducing the time penalty for safety verification while maintaining high patient safety standards.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10926048B2Medical system with improved security during an interaction of a medical measuring system with a ventilator or anesthesia device via a data network
Publication Date: 2021.02.23 DRAGERWERK AG
  • US10926048B2 patent drawing
  • US10926048B2 patent drawing
  • US10926048B2 patent drawing

AI summary

With the interaction of a medical measuring system (3) with a ventilator or anesthesia device (5) via a data network (60), data transmission security and mutual authentication between the medical measuring system (3) and the ventilator or anesthesia device (5) is improved in a medical system (1) by the use of asymmetric encryption pairs. A classification of the measuring systems (3) is possible on the basis of an identification/authentication provided by the asymmetric encryption pairs. The classification may be used to adapt a ventilation by the ventilator or anesthesia device (5) in respect to different defined measuring systems (3), for example, measuring systems (3) for detecting an oxygen saturation (SpO2).