Therapy Device Pairing with Candidate Shared Secrets for Trusted Links
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing medication delivery systems face challenges in securely establishing trusted connections among therapy devices due to risks of inadvertent or malicious connections, which can lead to misdelivery of medication and potential harm to users, and current pairing techniques are cumbersome and expose user health information.
Innovation Solution
A system and method for establishing trusted communication links between therapy devices using candidate shared secret keys generated from pre-defined and variable components, validated through remote or local secret operations, ensuring secure and user-friendly pairing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional pairing techniques are used to establish connections between therapy devices, then device connectivity is achieved, but security risks increase due to inadvertent or malicious connections
Solution Approach 1:
The system performs preliminary actions by pre-provisioning each therapy device with a unique cryptographic identity and public key during manufacturing. Before establishing connections, devices engage in mutual authentication using these pre-configured credentials, ensuring that only authorized devices can connect. This preliminary security setup prevents unauthorized connections before they can occur, resolving the contradiction between achieving connectivity and preventing security risks.
2Reliability
If secure authentication protocols are implemented between therapy devices, then connection security is improved, but pairing complexity increases
Solution Approach 1:
The authentication system operates autonomously without requiring user intervention. When therapy devices come into proximity, they automatically initiate the pairing process by exchanging cryptographic credentials and establishing secure connections. The devices self-verify each other's identities using pre-configured public keys and generate shared secrets independently. This self-service approach maintains high security while eliminating the complexity of manual pairing procedures, resolving the contradiction between secure authentication and pairing simplicity.
3Ease of operation
If manual pairing methods are used for therapy devices, then connection establishment is achieved, but user cognitive burden increases
Solution Approach 1:
The system replaces manual mechanical pairing operations with automated cryptographic processes. Instead of requiring users to manually enter codes, press buttons, or follow complex pairing procedures, the devices use wireless communication to automatically exchange cryptographic credentials and establish secure connections. This substitution of automated electronic authentication for manual operations dramatically reduces both the time required for pairing and the cognitive burden on users, while maintaining robust security.
Data Source
AI summary
Systems, methods and devices are described for establishing trusted connections among two or more therapy devices that form, or form part of, a medication therapy system. A, medication delivery electronics may include a first communication interface, a connection manager, and a therapy management application. A first communication interface may be configured to establish and communicate over one or more communication links. A connection manager may be configured to generate a candidate shared secret key and provide the shared key to a first therapy device over a first communication link established by a first communication interface. A candidate shared key may be generated responsive to one or more shared secret parameters. A therapy management application may be configured to receive, using the first communication interface, the first therapy related information from the first therapy device over a first trusted communication link established by the first communication interface responsive to acceptance of a candidate shared secret.