Neural interfaces are biomedical devices that may be used to study and investigate the nervous system and the brain, and to develop diagnosis and treatment options for brain-related disorders. Applications for neural interfaces include, but are not limited to, motor prostheses, deep-brain stimulation, visual and hearing prostheses, brain-function mapping, seizure detection, and the like. Neural interfaces may be used for several applications including diagnostics, therapeutics, basic research and brain-machine or brain-computer interfaces.
Neural interfaces may involve the capture of data generated by the brain of a patient or user. This data may be viewed as intimately private and deserving of extreme security. Conventional neural interfaces may produce unsecured neural data that freely generates electromagnetic signatures that could compromise the privacy, security, and safety of the patient or user.
As neural interfaces mature, it is extremely important to address the security needs of these neural interface devices and the data they produce. Conventional methods for addressing the security concerns associated with neural interfaces have involved solutions similar to the approaches taken with regards to low-power internet-of-things (IoT) devices. However, conventional systems have not developed hardware-level solutions to address all of the security concerns associated with neural interfaces.
Disclosed herein are systems and methods for circuit- and system-level techniques and approaches for data encryption in scalable, high-bandwidth, bidirectional neural interfaces. In some embodiments, the disclosed systems and methods may be configured to encrypt neural data as close as possible to the data source, and before the data is transmitted out of the body. In some embodiments, the disclosed systems and methods may utilize hardware-based approaches.
Systems and methods such as those disclosed herein will be important to ensure the privacy and security of neural data for patients and other users of neural interfaces as these devices are employed in a variety of applications.
In some embodiments a neural interface device includes an electrode array configured to stimulate or record from neural tissue adjacent to the electrode array, and an integrated circuit in electrical communication with the electrode array, the integrated circuit having an analog-to-digital converter (ADC) producing digitized electrical signal output, where the ADC has an encryption module, where the encryption module encrypts the digitized electrical signal output of the ADC. Optionally, the ADC includes a successive approximation register (SAR) architecture. Optionally, the encryption module includes a bit stream cipher, where the encryption module applies the bit stream cipher to the digitized electrical signal output of the ADC. Optionally, the encryption module includes a block stream cipher, where the encryption module applies the block stream cipher to the digitized electrical signal output of the ADC. Optionally, a cipher of the encryption module takes as input 1-, 8-, 128-, 192- or 256-bits. The neural interface device may also include a wireless transmitter communicatively coupled to the integrated circuit or the encryption module and an external processor. The neural interface device may also include control logic for operating the integrated circuit or electrode array, memory for storing recordings from the electrode array, and a power management unit for providing power to the integrated circuit or electrode array.
In some embodiments a neural interface device includes an electrode array configured to stimulate or record from neural tissue adjacent the electrode array, and an integrated circuit in electrical communication with the electrode array, the integrated circuit having a successive approximation register (SAR) analog-to-digital converter (ADC), where the SAR ADC includes a cipher module, where the cipher module applies a cipher to an electrical signal output by a digital-to-analog circuit (DAC) of the SAR ADC to generate an encrypted serial output. Optionally, the cipher could include bit stream cipher or a block cipher. Optionally, the SAR ADC includes a sample and hold circuit configured to receive the electrical signal from the electrode array, a comparator electrically coupled to the sample and hold circuit, where the comparator compares the received electrical signal to a reference signal of the DAC, where the DAC is electrically coupled to the comparator, and a binary search algorithm electrically coupled to the comparator, where the binary search algorithm generates a digital electrical signal representative of the received electrical signal. Optionally, the cipher module takes as input at least one of 1-, 8-, 128-, 192-, or 256-bits. Optionally, the neural interface device may include a wireless transmitter communicatively coupled to the integrated circuit or a cipher block module, and an external processor. In some embodiments, the neural interface device includes control logic for operating the integrated circuit or electrode array, memory for storing recordings from the electrode array, and a power management unit for providing power to the integrated circuit or electrode array.
In some embodiments, a neural interface device includes an electrode array configured to stimulate or record from neural tissue adjacent the electrode array, at least one recording array, each of the at least one recording array having at least one integrated circuit in electrical communication with the electrode array, where each of the at least one integrated circuits includes a successive approximation register (SAR) analog-to-digital converter (ADC), where the SAR ADC receives an electrical signal from the at least one recording array and outputs a digital electrical signal, and a stream cipher module can that implement a symmetric cryptographic algorithm, where the stream cipher module applies the symmetric cryptographic algorithm to the digital electrical signal output by the SAR ADC to generate serial encrypted output. Optionally, the SAR ADC includes a sample and hold circuit configured to receive the electrical signal from the at least one recording array, a comparator electrically coupled to the sample and hold circuit, where the comparator compares the received electrical signal to a reference signal of a digital-to-analog circuit (DAC) of the SAR ADC, where the DAC is electrically coupled to the comparator, and a binary search algorithm electrically coupled to the comparator, where the binary search algorithm generates the digital electrical signal representative of the received electrical signal.
In some embodiments, a neural interface device includes an electrode array configured to stimulate or record from neural tissue adjacent the electrode array, a plurality of recording arrays each having at least one integrated circuit in electrical communication with the electrode array, where each of the at least one integrated circuits includes a successive approximation register (SAR) analog-to-digital converter (ADC), where the SAR ADC receives an electrical signal from the plurality of recording arrays and outputs a digital electrical signal, and a block cipher module that can implement a symmetric cryptographic algorithm, where the block cipher module applies the symmetric cryptographic algorithm to the digital electrical signal output by the SAR ADC to generate serial encrypted output. Optionally, the SAR ADC includes a sample and hold circuit configured to receive the electrical signal from the at least one recording array, a comparator electrically coupled to the sample and hold circuit, where the comparator compares the received electrical signal to a reference signal of a digital-to-analog circuit (DAC) of the SAR ADC, where the DAC is electrically coupled to the comparator, and a binary search algorithm electrically coupled to the comparator, where the binary search algorithm generates the digital electrical signal representative of the received electrical signal.
In some embodiments, a neural interface device includes an electrode array configured to stimulate or record from neural tissue adjacent the electrode array, a plurality of recording arrays each having at least one integrated circuit in electrical communication with the electrode array, where each of the at least one integrated circuits includes a successive approximation register (SAR) analog-to-digital converter (ADC), where the SAR ADC receives an electrical signal from the plurality of recording arrays and outputs a digital electrical signal, and an unrolled pipelined cipher module that can implment a symmetric cryptographic algorithm, where the unrolled pipelined cipher module applies the symmetric cryptographic algorithm to the digital electrical signal output by the SAR ADC to generate serial encrypted output. Optionally, the SAR ADC includes a sample and hold circuit configured to receive the electrical signal from at least one recording array, a comparator electrically coupled to the sample and hold circuit, where the comparator compares the received electrical signal to a reference signal of a digital-to-analog circuit (DAC) of the SAR ADC, where the DAC is electrically coupled to the comparator, and a binary search algorithm electrically coupled to the comparator, where the binary search algorithm generates the digital electrical signal representative of the received electrical signal.
In some embodiments, a neural interface device includes an electrode array configured to stimulate or record from neural tissue adjacent the electrode array, and an integrated circuit in electrical communication with the electrode array, the integrated circuit including a successive approximation register (SAR) analog-to-digital converter (ADC), where the SAR ADC receives an electrical signal from the plurality of recording arrays and outputs a digital electrical signal passed through an accumulator of the SAR ADC, and a bit stream cipher module, where the bit stream cipher module applies a bit stream cipher to the digital electrical signal output by the accumulator of the SAR ADC to generate an encrypted serial output. The SAR ADC may include a sample and hold circuit configured to receive the electrical signal from at least one recording array, a multiplexor and the accumulator electrically coupled to the sample and hold circuit, where the accumulator gathers electrical signals, a comparator electrically coupled to the accumulator, where the comparator compares the received electrical signal to a reference signal of a digital-to-analog circuit (DAC) of the SAR ADC, where the DAC is electrically coupled to the comparator, and a binary search algorithm electrically coupled to the comparator, where the binary search algorithm generates the digital electrical signal representative of the received electrical signal. The bit stream cipher module may take as input at least one of 1-, 8-, 128-, 192-, or 256-bits. The neural interface device may also include a wireless transmitter communicatively coupled to the integrated circuit or a cypher block module, and an external processor. The neural interface device may also include control logic for operating the integrated circuit or electrode array, memory for storing recordings from the electrode array, and a power management unit for providing power to the integrated circuit or electrode array.
In some embodiments, a neural interface device may include an electrode array configured to stimulate or record from neural tissue adjacent the electrode array, a plurality of recording arrays each having at least one integrated circuit in electrical communication with the electrode array, where each of the at least one integrated circuits includes a successive approximation register (SAR) analog-to-digital converter (ADC), where the SAR ADC receives an electrical signal from the plurality of recording arrays and outputs a digital electrical signal passed through an accumulator of the SAR ADC, and a stream cipher module, where the stream cipher module applies a byte stream cipher to the digital electrical signal output by the accumulator of the SAR ADC to generate an encrypted serial output.
In some embodiments, a neural interface device may include an electrode array configured to stimulate or record from neural tissue adjacent the electrode array, at least one recording array, each of the at least one recording array having at least one integrated circuit in electrical communication with the electrode array, where each of the at least one integrated circuits includes a successive approximation register (SAR) analog-to-digital converter (ADC), where the SAR ADC includes a sample and hold circuit, a multiplexor and an accumulator positioned after the sample and hold circuit, a comparator, a digital-to-analog circuit (DAC), a switch array, and a binary search algorithm, and a block cipher module, where the block cipher module applies a block cipher to an electrical signal output by the accumulator of the SAR ADC to generate an encrypted serial output. Optionally, the neural interface device may have a sample and hold circuit configured to receive the electrical signal from at least one recording array, a multiplexor and the accumulator electrically coupled to the sample and hold circuit, where the accumulator gathers electrical signals, a comparator electrically coupled to the accumulator, where the comparator compares the received electrical signal to a reference signal of a digital-to-analog circuit (DAC) of the SAR ADC, where the DAC is electrically coupled to the comparator, and a binary search algorithm electrically coupled to the comparator, where the binary search algorithm generates the digital electrical signal representative of the received electrical signal.
In some embodiments, a neural interface device includes an electrode array configured to stimulate or record from neural tissue adjacent the electrode array, at least one recording array, each of the at least one recording array having at least one integrated circuit in electrical communication with the electrode array, where each of the at least one integrated circuits includes a successive approximation register (SAR) analog-to-digital converter (ADC), where the SAR ADC receives an electrical signal from the plurality of recording arrays and outputs a digital electrical signal passed through an accumulator of the SAR ADC, and an unrolled pipelined cipher module, where the unrolled pipelined cipher module applies an unrolled pipelined cipher to the digital electrical signal output by the accumulator of the SAR ADC to generate an encrypted serial output. Optionally, the SAR ADC may include a sample and hold circuit configured to receive the electrical signal from the at least one recording array, a multiplexor and the accumulator electrically coupled to the sample and hold circuit, where the accumulator gathers electrical signals, a comparator electrically coupled to the accumulator, where the comparator compares the received electrical signal to a reference signal of a digital-to-analog circuit (DAC) of the SAR ADC, where the DAC is electrically coupled to the comparator, and a binary search algorithm electrically coupled to the comparator, where the binary search algorithm generates the digital electrical signal representative of the received electrical signal.
In some embodiments, a neural interface device includes an electrode array configured to record from neural tissue adjacent the electrode array, at least one recording array, each of the at least one recording array having at least one integrated circuit in electrical communication with the electrode array, one or more processing blocks in communication with the at least one recording array and configured to extract features from the electrical signals received by the at least one recording array, and an encryption module that can implement a symmetric cryptographic algorithm, where the encryption module applies a symmetric cryptographic algorithm to the electrical signals after the one or more processing blocks has extracted features from the electrical signals.
In conventional systems without security features, the brain implant could be accessed by malicious actors to cause perturbations or modifications to the nervous systems, thus posing additional security risks for the user of a brain implant. For example, if the brain implant was used for recording, the amplification and digitization of neural signals would increase the power of the electromagnetic (EM) fields they produce and could cause security issues when, for instance, these digitized signals are transmitted via a wire or wirelessly. In another example, if the brain implant was used for stimulation, interception, modification or replacement of stimulating commands may cause significant harm to the patient or user. Further, even at baseline recording or stimulation, neural devices may be vulnerable to security issues.
In some embodiments, the present disclosure provides hardware-based solutions to preserving the privacy and security of data recorded and transmitted by neural interfaces (e.g., brain-machine interfaces, brain-computer interfaces, brain implants). The disclosed systems and methods provide hardware-level security where the data is generated (such as for neural interfaces that record) or used (such as for neural interfaces that stimulate) in order to enable the use of neural interfaces for practical and clinical applications.
In some embodiments, to increase security, the disclosed systems and methods provide for end-to-end encryption of recording signals and stimulating commands between the origin and destination of the data, and at-rest if data is stored in a different location (e.g., secured servers). In some embodiments, the disclosed system may encrypt data everywhere it is at-rest, including the origin device, which may provide protections against the device being compromised. In some embodiments, the disclosed systems may encrypt data as close as possible to digitization, such that non-encrypted bits are not generated, or encrypted shortly after generation.
As illustrated in
Conventional neural devices have thus far been unable to achieve hardware-level security because as the number of channels interfacing with the brain continues to increase from few tens or hundreds to more than a few thousands, the size and power of the ICs become critical because of the safety limitations on power dissipation near the brain and neural tissue, and available surgical techniques. The disclosed systems and methods address this problem through the use of circuit-level techniques and approaches for data encryption in scalable, high-bandwidth, bidirectional neural interfaces. For example, the disclosed systems and methods may perform circuit-level techniques that can enable the low-power and compact implementation of hardware-friendly encryption algorithms such as the advanced encryption standard (AES), Sa1sa20, and the like.
The recording array may produce data 315 corresponding to recorded neural activity. In some embodiments, the stimulator array may receive stimulation control data 317 corresponding to signals for controlling operation of the stimulation provided by the electrode array 301. The received stimulation control data 317 may be routed to a stimulator controller 319 within the stimulator array 307. Further, the neural interface front-end IC 303 may include control logic 309, memory 311, and a power management unit (PMU) 313.
As illustrated in
The chip-level system architecture of a general high-bandwidth neural interface front-end IC illustrated in
As illustrated in
By contrast, the disclosed embodiments may provide for systems and methods for symmetric cryptographic algorithms that may be implemented in scalable, high-bandwidth neural interfaces due to their lower complexity and better hardware compatibility than asymmetric cryptographic algorithms. Examples of such symmetric cryptographic algorithms include both stream and block ciphers such as Salsa20 and AES-128.
In some embodiments, symmetric, hardware-friendly encryption algorithms can be directly integrated into the system. For example, as illustrated in
In the example illustrated in
Similarly, as illustrated in
The disclosed system with neural stimulator array 415 may also utilize data parallelism when implementing de-encryption. For example, in the case of visual prosthesis applications, cryptographic algorithms may be used to provide data rates of 100s of Mb/s for thousands of channels.
FIG. SI illustrates a circuit block diagram 637 where the serial outputs of “B” parallel modified ADCs 639 are grouped together to be the input of a B-bit, unrolled, pipelined Stream or Block Cipher 641 configured to produce encrypted output 643. In some embodiments, the “B” parallel modified ADCs 639 may be similar to those illustrated in
Embodiments of the present disclosure may include one or more encryption algorithms. Encryption algorithms may include a set of mathematical operations that may be repeated a specific number of times to the input data, in successive fashion such that the output of each set of operations will become the input of the next one. For example, a Sa1sa20 algorithm may be configured to apply the specific set of operations to the data (and its subsequent outputs) a total of 20 times. In this manner, the algorithm can be applied in a loop (i.e., sequentially) or it can be in an open loop (i.e., unrolled), where it is applied in a more parallel fashion.
In some embodiments, the encryption may be performed during digitization by the analog-to-digital converter, thus the system is configured such that it never generates digital bits representing un-encrypted neural data.
In some embodiments, the encryption may be performed following feature extraction from the neural data, thus users will not lose the ability to perform signal processing on the raw data stream which may provide compression and power savings benefits.
In some embodiments, the encryption may be performed during digitization. In such an embodiment the system may never generate a full digital word (group of bits) representing un-encrypted neural data.
As illustrated above, in some embodiments, the serial output of 1, 8, 128, 192, 256 parallel, modified ADCs may be grouped together to form the input of a 1-, 8-, 128-, 192-, 256-bit symmetric stream or block ciphers. The data may then be encrypted following the respective symmetric cryptographic algorithm.
In some embodiments, the serial output of 1, 8, 128, 192, 256 parallel, modified ADCs may be grouped together to form the input of a 1-, 8-, 128-, 192-, 256-bit, unrolled, pipelined stream or block ciphers. In such an embodiment, the cyclic nature of the ADC may be advantaged to perform rounds of the cipher simultaneously with the binary search algorithm of the ADC. The data may then be encrypted following the respective symmetric cryptographic algorithm.
Alternatively, in some embodiments the data encryption may be performed following feature extraction from the neural data. The advantage of such a system would be not losing the ability to perform signal processing on the raw data stream for compression, power savings, and the like.
Accordingly, the disclosed systems and methods may be utilized for front-end integrated circuits in high-bandwidth neural interfaces. As high-bandwidth neural interfaces include integrated circuits that are typically used to communicate via a wire with another electronic chips within the same device for wireless communication the security issues associated with the integrated circuits may be addressed via data encryption. Other security aspects such as authentication may be implemented in other ICs of the neural interface.
The disclosed systems and methods provide encryption systems for neural interfaces, where the encryption may be performed in body, on the head, at the point of data generation, or as part of the architecture of the neural interfaces. Additionally, or alternatively, data encryption may be conducted outside of the body. The disclosed methods and system may include both hardware and software components.
The application claims priority to U.S. Provisional Patent Application No. 63/317,706, titled SYSTEMS AND METHODS FOR IN-BODY SECURITY EMPLOYING HARDWARE-LEVEL SYSTEMS IN BIDIRECTIONAL NEURAL INTERFACES, filed Mar. 8, 2022, which is hereby incorporated by reference herein in its entirety.
Number | Date | Country | |
---|---|---|---|
63317706 | Mar 2022 | US |