Secure Implantable Medical Device Wireless Control via Intermediary

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional short-range wireless communication protocols, such as Bluetooth, used in implantable medical device systems are vulnerable to encryption compromises, potentially allowing malicious third parties to control these devices.

Innovation Solution

Establishing an indirect secure communication channel between an implantable medical device system and a central system via an intermediary mobile device, using a two-phase process to encrypt communications and authorize user access, thereby enhancing security and preventing unauthorized control.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If conventional short-range wireless communication protocols (e.g., Bluetooth) are used for control, then ease of operation is improved, but security reliability deteriorates due to encryption vulnerabilities

Engineering Contradiction:
Improvewireless control capabilityVSAvoidsecurity against malicious control
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a smartphone as an intermediary device between the control entity and the implantable medical device system. The smartphone runs a trusted application that establishes secure communication channels, acting as a mediator that prevents direct vulnerable connections while maintaining wireless control functionality. This resolves the contradiction by preserving ease of operation through wireless interface while improving security reliability through the intermediary's encryption mechanisms.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Device complexity

If direct wireless connection is used between controller and implantable device, then device complexity is reduced, but security reliability worsens due to exposure to malicious third parties

Engineering Contradiction:
Improvecommunication architectureVSAvoidprotection against unauthorized access
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent segments the communication architecture into multiple layers: a secure channel between the implantable device and smartphone, and a separate authorization channel through the trusted application. This segmentation allows the implantable device to maintain simple hardware while distributing security functions across the smartphone and application layers, thus reducing overall system complexity while improving security reliability.

Inventive Principle:
Principle #1Segmentation

3Reliability

If encryption mechanisms are strengthened to prevent compromise, then security reliability is improved, but ease of operation deteriorates due to additional security steps

Engineering Contradiction:
Improveencryption securityVSAvoiduser control process
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent implements preliminary authorization actions during device pairing and setup, where the trusted application pre-establishes secure communication channels and authorization credentials. By performing these security-critical actions in advance, the system ensures strong encryption and authorization without requiring users to perform complex security steps during normal operation, thus improving reliability while maintaining ease of operation.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3408995B1Secure authorization in an implantable medical device system
Publication Date: 2021.12.01 COCHLEAR LIMITED
  • EP3408995B1 patent drawingFigure 1
  • EP3408995B1 patent drawingFigure 2
  • EP3408995B1 patent drawingFigure 3

AI summary

Embodiments presented herein are generally directed to techniques for enabling a user of a mobile electronic device to wirelessly control one or more functions of an implantable medical device system. The techniques presented herein establish a secure (encrypted) communication channel between the implantable medical device system and a central system associated with the manufacturer of the implantable medical device system and use the secure communication channel to authorize a user to wirelessly control one or more functions of the implantable medical device system via the mobile electronic device.