Patent Application
20240130682
Implantable medical devices that exchange data between the body and devices outside the body require unique and rigorous levels of security in order to ensure the integrity of the data they handle and the interactions they enable. These interfaces record, process, and transmit highly personal and sensitive data relating to the physiologic state and highly personal activities of a user. This type of personal data has the potential to be uniquely sensitive, and therefore the measures put in place to secure such data are of even greater concern than those associated with other personal devices that handle personal or medical data.
Although the security of digital communications, including those related to personal electronic devices, has been the subject of substantial technological development over decades, the same standards of security have not historically been applied to implantable medical devices. The state-of-the-art for implantable electronic medical devices, even those which have communication interfaces for interacting with systems outside the body, includes no security or minimal security protocols at the device and system levels. The United States FDA And other regulatory agencies have not required security of this nature, even though substantial attention has been paid to the need to protect personal health data (as exemplified by HIPAA in the United States) and personal digital data (as exemplified by the GDPR in the European Union). With the advent of more sophisticated personal electronic technologies comes a new imperative to secure data digital interactions relating to implantable devices.
Implantable electronic devices have the potential to enable bidirectional communication between the body of the user and systems external to the body. Complete security requires end-to-end protection of the data handled by such interfaces, and the processes through which the data is handled. As background, it is helpful to consider steps through which sensor or other data is handled in a prototypical implantable electronic device that interfaces with the human body, with a view toward security at every stage and in the transitions between stages.
The present disclosure is directed to data encryption systems for medical devices, including implantable or non-implantable medical devices.
In one embodiment, there is provided a medical device system for use with a subject, the medical device system comprising: a medical device configured to sense data associated with the subject or receive control input, the medical device comprising one or more electronics modules; an external device communicably coupled to the medical device, the external device configured to at least one of receive or communicate data to the medical device; a storage medium communicable coupled to the receiver, the storage medium comprising data configured to be retrieved by the external device; and one or more communications interfaces between the medical device, the external device, and the storage medium or components thereof, wherein the one or more communications interfaces comprise an encryption protocol.
In some embodiments, the medical device comprises an implantable medical device.
In some embodiments, the medical device comprises a non-implantable device.
In some embodiments, the external device comprises a tablet, a smartphone, a laptop, a desktop, a secure server, a smartwatch, a head-mounted virtual reality device, a head-mounted augmented reality device, or a smart inductive charger device.
In some embodiments, the medical device comprises a pacemaker, an insulin pump, a cardioverter-defibrillator, a left ventricular assist device, a glucose monitor, an infusion pump, or a neurostimulator.
In some embodiments, all of the one or more communications interfaces are encrypted.
In some embodiments, a subset of the one or more communications interfaces are encrypted.
In some embodiments, the encryption protocol comprises at least one of Advanced Encryption Standard, Data Encryption Standard or variations thereof (e.g., Triple DES), Rivest-Shamir-Adleman (RSA), Blowfish, or Twofish.
The present disclosure is directed to secure communications interfaces for medical device systems, particularly communications interfaces implementing end-to-end encryption.
Some medical devices (e.g., pacemakers or insulin pumps) are configured to generate, receive, and/or communicate (either wirelessly or via wired connections) information that is associated with the subject in which the medical device is implanted or control the operations of the medical device. For example, a medical device could sense a biological parameter associated with the subject and communicate that data to an external device. As another example, a medical device could receive control input from an external source that affects the operation of the medical device. Accordingly, such medical devices necessarily involve the use of communications interfaces in order to transfer data between the devices of the system and/or components thereof. Referring now to
The medical device 110 can include a range of electrical or electronic components. In the illustrated embodiment, the medical device 110 includes an electrode-amplifier stage 112, an analog front-end stage 114, an analog-to-digital converter (ADC) stage 116, a digital signal processing (DSP) stage 118, and a transceiver stage 120 that are communicatively coupled together. The electrode-amplifier stage 112 can be configured to amplify signals sensed from the subject 102 (e.g., in embodiments where the medical device 110 is a cardioverter-defibrillator), apply electrical signals to the subject 102 (e.g., in embodiments where the medical device 110 is a neurostimulator), actuate components of the medical device 110 (e.g., in embodiments where the medical device 110 includes an infusion pump), or control settings of the medical device 110 (e.g., the rate of a pacemaker) and so on. The analog front-end stage 114 can be configured to amplify signals that are sensed from or applied to the subject 102, perform conditioning of the sensed or applied analog signals, perform analog filtering, and so on. The front-end stage 114 can include, for example, one or more application-specific integrated circuits (ASICs) or other electronics. The ADC stage 116 can be configured to convert received analog signals to digital signals. The DSP stage 118 can be configured to perform various DSP techniques, including multiplexing of digital signals received via the electrode-amplifier stage 112 and/or from the external device 130. For example, the DSP stage 118 can be configured to convert instructions from the external device 130 to a corresponding digital signal. The transceiver stage 120 can be configured to transfer data from the medical device 110 to the external device 130 located outside of the body of the subject 102.
In various embodiments, the stages of the medical device 110 can provide unidirectional or bidirectional communications (as indicated in
As generally noted above, data security is critical for medical device systems, such as the system 100 described above. Further, different inputs can be possible at each stage and each stage could be programmed or tampered with in a variety of different manners. Therefore, communications security for such systems 100 is important to ensure the ultimate functionality and operability of the systems 100.
Referring back to
In some embodiments, the system 100 can be configured to implement an end-to-end encryption, i.e., all or substantially all of the interfaces described above can implement an encryption protocol or encryption techniques. In other embodiments, a subset of the stages or components of the system 100 described above can implement an encryption protocol or encryption techniques.
Additional information regarding techniques for implementing secure communications in medical device systems can be found in U.S. patent application Ser. No. 18/180,248, titled SYSTEMS AND METHODS FOR IN-BODY SECURITY EMPLOYING HARDWARE-LEVEL SYSTEMS IN BIDIRECTIONAL NEURAL INTERFACES, filed Mar. 8, 2023, which is hereby incorporated by reference herein in its entirety.
This disclosure is not limited to the particular systems, devices and methods described, as these may vary. The terminology used in the description is for the purpose of describing the particular versions or embodiments only, and is not intended to limit the scope of the disclosure.
The following terms shall have, for the purposes of this application, the respective meanings set forth below. Unless otherwise defined, all technical and scientific terms used herein have the same meanings as commonly understood by one of ordinary skill in the art. Nothing in this disclosure is to be construed as an admission that the embodiments described in this disclosure are not entitled to antedate such disclosure by virtue of prior invention.
As used herein, the term “implantable medical device” includes any device that is at least partially introduced, either surgically or medically, into the body of a subject and is intended to remain there after the procedure.
As used herein, the singular forms “a,” “an,” and “the” include plural references, unless the context clearly dictates otherwise. Thus, for example, reference to a “protein” is a reference to one or more proteins and equivalents thereof known to those skilled in the art, and so forth.
As used herein, the term “about” means plus or minus 10% of the numerical value of the number with which it is being used. Therefore, about 50 mm means in the range of 45 mm to 55 mm.
As used herein, the term “consists of” or “consisting of” means that the device or method includes only the elements, steps, or ingredients specifically recited in the particular claimed embodiment or claim.
In embodiments or claims where the term “comprising” is used as the transition phrase, such embodiments can also be envisioned with replacement of the term “comprising” with the terms “consisting of” or “consisting essentially of.”
As used herein, the term “subject” as used herein includes, but is not limited to, humans and non-human vertebrates such as wild, domestic, and farm animals.
While the present disclosure has been illustrated by the description of exemplary embodiments thereof, and while the embodiments have been described in certain detail, it is not the intention of the Applicants to restrict or in any way limit the scope of the appended claims to such detail. Additional advantages and modifications will readily appear to those skilled in the art. Therefore, the disclosure in its broader aspects is not limited to any of the specific details, representative devices and methods, and/or illustrative examples shown and described. Accordingly, departures may be made from such details without departing from the spirit or scope of the Applicant's general inventive concept.
With respect to the use of substantially any plural and/or singular terms herein, those having skill in the art can translate from the plural to the singular and/or from the singular to the plural as is appropriate to the context and/or application. The various singular/plural permutations may be expressly set forth herein for sake of clarity.
In addition, even if a specific number is explicitly recited, those skilled in the art will recognize that such recitation should be interpreted to mean at least the recited number (for example, the bare recitation of “two recitations,” without other modifiers, means at least two recitations, or two or more recitations). Furthermore, in those instances where a convention analogous to “at least one of A, B, and C, et cetera” is used, in general such a construction is intended in the sense one having skill in the art would understand the convention (for example, “a system having at least one of A, B, and C” would include but not be limited to systems that have A alone, B alone, C alone, A and B together, A and C together, B and C together, and/or A, B, and C together, et cetera). In those instances where a convention analogous to “at least one of A, B, or C, et cetera” is used, in general such a construction is intended in the sense one having skill in the art would understand the convention (for example, “a system having at least one of A, B, or C” would include but not be limited to systems that have A alone, B alone, C alone, A and B together, A and C together, B and C together, and/or A, B, and C together, et cetera). It will be further understood by those within the art that virtually any disjunctive word and/or phrase presenting two or more alternative terms, whether in the description, sample embodiments, or drawings, should be understood to contemplate the possibilities of including one of the terms, either of the terms, or both terms. For example, the phrase “A or B” will be understood to include the possibilities of “A” or “B” or “A and B.”
In addition, where features of the disclosure are described in terms of Markush groups, those skilled in the art will recognize that the disclosure is also thereby described in terms of any individual member or subgroup of members of the Markush group.
Various of the above-disclosed and other features and functions, or alternatives thereof, may be combined into many other different systems or applications. Various presently unforeseen or unanticipated alternatives, modifications, variations or improvements therein may be subsequently made by those skilled in the art, each of which is also intended to be encompassed by the disclosed embodiments.
The present application claims priority to U.S. Provisional Patent Application No. 63/417,841, titled SECURE INTERFACES FOR MEDICAL DEVICES, filed Oct. 20, 2022, which is hereby incorporated by reference herein in its entirety.
| Number | Date | Country | |
|---|---|---|---|
| 63417841 | Oct 2022 | US |
