Facilitating telemetry data communication security between an implantable device and an external device

Patent metadata

Field	Value
Publication number	US-10576290-B2
Application number	US-201615220667-A
Country	US
Kind code	B2
Filing date	Jul 27, 2016
Priority date	Jul 27, 2016
Publication date	Mar 3, 2020
Grant date	Mar 3, 2020

Abstract

Systems, apparatus, methods and non-transitory computer readable media facilitating telemetry data communication security between an implantable device and an external clinician device are provided. An implantable device can include a security component configured to generate security information based on reception of a clinician telemetry session request from the clinician device via a first telemetry communication protocol. The security information can include a session identifier and a first session key, and the clinician telemetry session request can include a clinician device identifier associated with the clinician device. The implantable device can further include a communication component configured to establish a clinician telemetry session with the clinician device using a second telemetry communication protocol based on determining that a connection request, received via the second telemetry communication protocol, was transmitted by the clinician device based on inclusion of the clinician device in the connection request.

First claim

What is claimed is:

1. An implantable device, comprising:
a housing configured to be implanted at least partially within a patient;
a memory, coupled to the housing, that stores executable components;
circuitry, coupled to the housing, and configured to at least one of obtain sensed physiological data associated with the patient or deliver a therapy to the patient; and
a processor, coupled to the housing, and the processor is configured to:
generate security information based on reception of a clinician telemetry session request from a clinician device via a first telemetry communication protocol, the security information comprising a session identifier, a first session key, and a second session key, and the clinician telemetry session request comprising a clinician device identifier associated with the clinician device;
activate telemetry communication by the implantable device via a second telemetry communication protocol based on sending the security information to the clinician device using the first telemetry communication protocol;
establish a clinician telemetry session with the clinician device using the second telemetry communication protocol based on determining that a connection request, received via the second telemetry communication protocol, was transmitted by the clinician device based on inclusion of the clinician device identifier in the connection request;
encrypt first transmitted data transmitted by the implantable device using the first session key in association with performance of the clinician telemetry session with the clinician device; and
encrypt second transmitted data transmitted by the implantable device using the second session key in association with the performance of the clinician telemetry session with the clinician device, wherein the first transmitted data represents a first data type, and wherein the second transmitted data represents a second data type different from the first data type.

2. The implantable device of claim 1 , wherein the first telemetry communication protocol comprises a proprietary telemetry communication protocol and the second telemetry communication protocol comprises a non-proprietary telemetry communication protocol.

3. The implantable device of claim 1 , wherein the first telemetry communication protocol is associated with first wireless data communication over a first distance and the second telemetry communication protocol is associated with second wireless data communication over a second distance longer than the first distance.

4. The implantable device of claim 1 , wherein the first telemetry communication protocol comprises an induction-based telemetry communication protocol and the second telemetry communication protocol comprises a Bluetooth low energy based telemetry communication protocol.

5. The implantable device of claim 1 , wherein the processor is further configured to:
transmit one or more advertisement data packets comprising the session identifier using the second telemetry communication protocol in association with activation of the telemetry communication by the implantable device via the second telemetry communication protocol.

6. The implantable device of claim 5 , wherein the processor is further configured to:
receive the connection request based on reception of at least one advertisement data packet of the one or more advertisement data packets by the clinician device and recognition, by the clinician device, of the session identifier in the at least one advertisement data packet.

7. The implantable device of claim 1 , wherein the processor is further configured to:
decrypt first received data received by the implantable device using the first session key in association with performance of the clinician telemetry session with the clinician device.

8. The implantable device of claim 7 , wherein the processor is further configured to:
decrypt second received data received by the implantable device using the second session key in association with the performance of the clinician telemetry session with the clinician device.

9. The implantable device of claim 7 , wherein the processor is further configured to:
decrypt the first received data using the first session key and the second session key in association with the performance of the clinician telemetry session with the clinician device.

10. The implantable device of claim 1 , wherein after establishment of the clinician telemetry session, the processor is further configured to:
communicate data with the clinician device using the security information in association with performance of the clinician telemetry session with the clinician device, and wherein the security component is further configured to:
render the security information unusable to establish or perform another telemetry session including the implantable device after a closing of the clinician telemetry session.

11. The implantable device of claim 1 , wherein the processor is further configured to:
render the security information unusable to establish or perform another telemetry session including the implantable device after a failure of the implantable device to re-establish the clinician telemetry session using the security information within a defined period of time after loss of the clinician telemetry session.

12. The implantable device of claim 1 , wherein the processor is further configured to:
inhibit the telemetry communication,
during establishment of the clinician telemetry session between the implantable device and the clinician device or
during the clinician telemetry session between the implantable device and the clinician device.

13. The implantable device of claim 1 , wherein the security information comprises first security information and wherein the processor is further configured to:
receive second security information from a remote server device for establishing a monitoring telemetry session with a monitor; and
employ the second security information to establish a trusted relationship with the monitor and store information associating a monitoring device identifier for the monitor in the memory, wherein the processor is further configured to:
establish the monitoring telemetry session with the monitor using the second telemetry communication protocol based on determining that the monitoring session request, received via the second telemetry communication protocol, was transmitted by the monitor based on inclusion of the monitoring device identifier in the monitoring session request.

14. The implantable device of claim 13 , wherein the implantable device is further configured to communicate a first type of information with the clinician device during the clinician telemetry session and a second type of information with the monitor during the monitoring telemetry session, wherein the first type of information is classified as having a first level of sensitivity and the second type of information is classified as having a second level of sensitivity and wherein the first level of sensitivity is greater than the second level of sensitivity.

15. The implantable device of claim 13 , wherein the implantable device is configured to perform one-way and two-way communications with the clinician device during the clinician telemetry session, and wherein the implantable device is configured to perform one-way and forgo two-way communications with the monitoring device during the monitoring telemetry session.

16. The implantable device of claim 13 , wherein the implantable device is configured to receive programming information from the clinician device during

Assignees

• Medtronic Inc

Inventors

• Schilling Eric A
• House Christopher T
• Kivi Gary P
• Kleckner Karen J
• Komp John W
• Wine Nicholas C
• Yoder Matthew R
• Zhang Bo

Classifications

• A61N1/37264

  Changing the program; Upgrading firmware · CPC title

• A61N1/37223

  Circuits for electromagnetic coupling · CPC title

• H04Q2209/86

  Performing a diagnostic of the sensing device · CPC title

• H04Q9/00

  Arrangements in telecontrol or telemetry systems for selectively calling a substation from a main station, in which substation desired apparatus is selected for applying a control signal thereto or for obtaining measured values therefrom · CPC title

• A61N1/37217

  characterised by the communication link, e.g. acoustic or tactile · CPC title