Facilitating telemetry data communication security between an implantable device and an external device

Patent metadata

Field	Value
Publication number	US-11759644-B2
Application number	US-202016805515-A
Country	US
Kind code	B2
Filing date	Feb 28, 2020
Priority date	Jul 27, 2016
Publication date	Sep 19, 2023
Grant date	Sep 19, 2023

Abstract

Systems, apparatus, methods and non-transitory computer readable media facilitating telemetry data communication security between an implantable device and an external clinician device are provided. An implantable device can include a security component configured to generate security information based on reception of a clinician telemetry session request from the clinician device via a first telemetry communication protocol. The security information can include a session identifier and a first session key, and the clinician telemetry session request can include a clinician device identifier associated with the clinician device. The implantable device can further include a communication component configured to establish a clinician telemetry session with the clinician device using a second telemetry communication protocol based on determining that a connection request, received via the second telemetry communication protocol, was transmitted by the clinician device based on inclusion of the clinician device in the connection request.

First claim

What is claimed is:

1. A device comprising:
sensing circuitry configured to obtain sensed physiological data corresponding to one or more parameters associated with a patient; and
processing circuitry configured to:
receive, via first communication circuitry, a first request according to a first telemetry communication protocol, wherein the first request comprises a device identifier associated with a second device;
generate, based on receiving the first request comprising the device identifier, security information comprising a session identifier and a session key;
send, via the first communication circuitry, the security information according to the first telemetry communication protocol;
activate, based on sending the security information comprising the session identifier and the session key according to the first telemetry communication protocol, telemetry communication by the device via a second telemetry communication protocol by activating second communication circuitry separate from the first communication circuitry, wherein the first telemetry communication protocol is associated with first wireless data communication over a first distance and the second telemetry communication protocol is associated with second wireless data communication over a second distance greater than the first distance;
receive, via the second communication circuitry, a second request according to the second telemetry communication protocol, wherein the second request comprises the device identifier; and
establish, using the security information, a telemetry session with the second device according to the second telemetry communication protocol based on inclusion of the device identifier in the second request.

2. The device of claim 1 , wherein the first telemetry communication protocol comprises a proprietary telemetry communication protocol and the second telemetry communication protocol comprises a non-proprietary telemetry communication protocol.

3. The device of claim 1 , wherein the first telemetry communication protocol comprises an induction-based telemetry communication protocol and the second telemetry communication protocol comprises a Bluetooth® low energy based telemetry communication protocol.

4. The device of claim 1 , wherein the processing circuitry is further configured to transmit, via the second communication circuitry, one or more advertisement data packets comprising the session identifier according to the second telemetry communication protocol in response to activating the telemetry communication by the device according to the second telemetry communication protocol by activating the second communication circuitry.

5. The device of claim 4 , wherein the processing circuitry is further configured to receive, via the second communication circuitry, the second request in response to reception of at least one advertisement data packet of the one or more advertisement data packets by the second device, the at least one advertisement data packet including the session identifier.

6. The device of claim 1 , wherein after establishing the telemetry session, the processing circuitry is configured to:
encrypt a set of data transmitted by the device using the session key during the telemetry session with the second device; and
decrypt a set of data received by the device using the session key during the telemetry session with the second device.

7. The device of claim 6 , wherein the session key is a first session key, wherein the set of data transmitted by the device represents a first set of data, wherein the set of data received by the device represents a second set of data, wherein to generate the security information, the processing circuitry is further configured to generate a second session key, and wherein the processing circuitry is further configured to:
encrypt a third set of data transmitted by the device using the second session key during the telemetry session with the second device, wherein the first set of data represents a first data type, and wherein the third set of data represents a second data type; and
decrypt a fourth set of data received by the device using the second session key during the telemetry session with the second device.

8. The device of claim 1 , wherein after establishing the telemetry session, the processing circuitry is further configured to:
communicate with the second device via the second communication circuitry using the security information during the telemetry session with the second device; and
render the security information unusable to establish or perform another telemetry session including the device after a termination of the telemetry session.

9. The device of claim 1 , wherein the processing circuitry is further configured to:
terminate the telemetry session; and
render the security information unusable to establish or perform another telemetry session with the device after a failure of the device to re-establish the telemetry session using the security information within a defined period of time after the termination of the telemetry session.

10. The device of claim 1 , wherein the telemetry session comprises a first type of telemetry session, wherein the security information comprises first security information and wherein the processor is further configured to:
receive second security information from a remote server device for establishing a second type of telemetry session with a third device;
employ the second security information to establish a trusted relationship with the third device and store information associating a monitoring device identifier for the third device in the memory; and
establish the second type of telemetry session with the third device using the second telemetry communication protocol based on determining that the monitoring session request, received via the second telemetry communication protocol, was transmitted by the third device based on inclusion of the monitoring device identifier in the monitoring session request.

11. The device of claim 10 , wherein the device is further configured to:
communicate a first type of information with the second device during the first type of telemetry session; and
communicate a second type of information with the third device during the second type of telemetry session, wherein the first type of information represents a first level of sensitivity and the second type of information represents a second level of sensitivity, and wherein the first level of sensitivity is greater than the second level of sensitivity.

12. The device of claim 10 , wherein the device is configured to perform one-way and two-way communications with the second device during the first type of telemetry session, and wherein the device is configured to perform one-way and forgo two-way communications with the monitoring device during the second type of telemetry session.

13. The device of claim 10 , wherein the device is configured to receive programming information from the second device during the first type of telemetry session and forgo receipt of the programming information from the third device during the second type of telemetry session.

14. A method comprising:
obtaining, by sensing circuitry of a device, sensed physiological data corresponding to one or more parameters associated with a patient; and
receiving, by processing circuitry of the device via first communication circuitry, a first request according to a first telemetry communication protocol, wherein the first request comprises a device identifier associated with a second device;
generating, by the processing circuitry based on receiving the first request compri

Assignees

• Medtronic Inc

Inventors

• Schilling Eric A
• House Christopher T
• Kivi Gary P
• Kleckner Karen J
• Komp John W
• Wine Nicholas C
• Yoder Matthew R
• Zhang Bo

Classifications

• G08C17/02 Primary

  using a radio link · CPC title

• A61N1/37252 Primary

  Details of algorithms or data aspects of communication system, e.g. handshaking, transmitting specific data or segmenting data · CPC title

• H04Q2209/43

  using wireless personal area networks [WPAN], e.g. 802.15, 802.15.1, 802.15.4, Bluetooth® or Zigbee® · CPC title

• H04Q2209/86

  Performing a diagnostic of the sensing device · CPC title

• A61N1/00

  Electrotherapy; Circuits therefor (A61N2/00 takes precedence; irradiation apparatus A61N5/00) · CPC title