Signed Credential Authentication for Implantable Medical Devices

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Implantable medical devices (IMDs) face challenges in establishing secure communication due to limitations in authentication mechanisms, particularly when network access is unavailable and non-replaceable batteries restrict communication options, making existing solutions impractical for authenticating external instruments.

Innovation Solution

A method and system that utilize a credential signed with a private key, including a time-to-live (TTL) indicator, IMD Identifier, and external instrument Identifier, which is authenticated using a public key to establish a secure communication session, avoiding the need to store private keys at the IMD and ensuring only authorized devices can access the IMD.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If authentication is based on interaction with a user entering information into an external instrument, then user control is achieved, but authentication reliability deteriorates when network access is unavailable

Engineering Contradiction:

Improveuser controlVSAvoidauthentication reliability

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The system pre-establishes a secure credential in the external instrument before network access is needed. The credential is obtained through a secure channel when network access is available, stored locally, and can be used for authentication when network access becomes unavailable, eliminating the need for real-time network dependency

Inventive Principle:

Principle #10Preliminary action

2Adaptability or versatility

If authentication relies on communication with a remote secure server over a network, then centralized security management is achieved, but authentication reliability deteriorates when network access is unavailable

Engineering Contradiction:

Improvecentralized security managementVSAvoidauthentication reliability

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The authentication credential is obtained in advance through a secure channel when network access is available, then stored locally in the external instrument. This allows the credential to be used for subsequent authentication without requiring continuous network access to the remote server

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The credential acts as an intermediary that carries authentication information from the remote secure server to the IMD. Instead of requiring direct real-time communication with the server, the credential mediates the authentication process locally, enabling authentication when the server is inaccessible

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If private keys are stored at the IMD for authentication, then authentication capability is improved, but security deteriorates due to the risk of private key compromise

Engineering Contradiction:

Improveauthentication capabilityVSAvoidsecurity risk

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system introduces a credential as an intermediary that contains public key information but not the private key. The credential enables authentication functionality while eliminating the need to store private keys at the IMD, thus maintaining authentication capability without the security risk of private key storage

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The private key is extracted from the IMD and stored securely at the remote certification authority instead. Only the public key and credential information are retained at the IMD, removing the security vulnerability of storing private keys at the device while preserving authentication functionality

Inventive Principle:

Principle #2Taking out (Extraction)

4Use of energy by moving object

If wireless communication uses low range low power platform for short periods, then energy consumption is reduced, but communication reliability deteriorates

Engineering Contradiction:

Improveenergy consumptionVSAvoidcommunication reliability

Core Design Contradiction:

Use of energy by moving objectVSReliability

Solution Approach 1:

Authentication credentials are established in advance when communication conditions are favorable, allowing the IMD to quickly authenticate and establish secure sessions without prolonged communication attempts. This reduces overall energy consumption while maintaining reliability through pre-established trust relationships

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS10541977B2Utilizing signed credentials for secure communication with an implantable medical device

Publication Date: 2020.01.21 PACESETTER INC

AI summary

Methods and devices for establishing secure communications with an implantable medical device (IMD) are provided. The method and devices receive a credential from an external instrument (EI). The credential is signed utilizing a private key, and the credential includes at least two of a credential time to live (TTL) indicator, an IMD Identifier (ID), and an EI ID. The method and device authenticate the credential using a public key and verify the at least two of the TTL indicator, the IMD ID, and the EI ID. The method and device establish a secure communications session with the EI based on the verification and authentication.