Facilitating trusted pairing of an implantable device and an external device

Patent metadata

Field	Value
Publication number	US-11813465-B2
Application number	US-202217933219-A
Country	US
Kind code	B2
Filing date	Sep 19, 2022
Priority date	Feb 27, 2017
Publication date	Nov 14, 2023
Grant date	Nov 14, 2023

Abstract

Systems, apparatus, methods and computer-readable storage media facilitating trusted pairing between an implantable medical device (IMD) and an external device are provided. In one embodiment, an IMD includes a housing configured to be implanted within a patient, a memory and circuitry within the housing and a processor that executes executable components stored in the memory. The executable components can include: a communication component configured to initiate establishing a telemetry connection with an external device in accordance with a first telemetry protocol based on reception of a request, from the external device, to establish the telemetry connection with the IMD using the first telemetry protocol; and a validation component configured to restrict establishment of the telemetry connection with the external device in accordance with the first telemetry protocol based on reception of validation information from the external device, wherein provision of the validation information is excluded from the first telemetry protocol.

First claim

The invention claimed is:

1. A first device comprising:
a housing;
sensing circuitry, within the housing, configured to obtain sensed physiological data of a patient;
a memory within the housing; and
a processor, within the housing, configured to:
negotiate one or more encryption keys with a second device in accordance with a wireless telemetry protocol in response to receipt of a request, from the second device, to establish a connection using the wireless telemetry protocol; and
based on receipt of validation information from the second device, the provision of the validation information not defined by the wireless telemetry protocol:
associate the one or more encryption keys and an identifier for the second device with a first data in the memory that characterizes the second device as authorized to establish the connection in accordance with the wireless telemetry protocol;
establish the connection with the second device in accordance with the wireless telemetry protocol; and
transmit the sensed physiological data of the patient to the second device via the established connection.

2. The first device of claim 1 , wherein the validation information indicates a remote server verified the second device or an entity operating the second device as being authorized to establish the connection with the first device.

3. The first device of claim 1 , wherein the validation information indicates an application of the second device, the application configured for interaction with the first device, determined an entity operating the second device is authorized to employ the second device to establish the connection with the first device.

4. The first device of claim 3 , wherein the application is configured to determine the entity is authorized based on reception of input, via the second device, that uniquely identifies the entity as an authorized entity.

5. The first device of claim 1 , wherein the wireless telemetry protocol comprises a first wireless telemetry protocol, and wherein the validation information comprises a signal received in accordance with a second wireless telemetry protocol.

6. The first device of claim 5 , wherein the first wireless telemetry protocol comprises a non-proprietary telemetry protocol and wherein the second wireless telemetry protocol comprises a proprietary telemetry protocol.

7. The first device of claim 1 , wherein, after negotiating one or more encryption keys with the second device, the processor is configured to associate the one or more encryption keys and the identifier for the second device with second data in the memory that characterizes the second device as potentially authorized to establish the connection in accordance with the wireless telemetry protocol.

8. The first device of claim 7 , wherein based on association of the one or more encryption keys and the identifier with the second data, the processor is configured to ignore information communicated to the first device by the second device other than the validation information.

9. The first device of claim 7 , wherein the processor is configured to disassociate the one or more encryption keys and the identifier from the second data based on failure to receive the validation information.

10. The first device of claim 9 , wherein the processor is configured to disassociate the one or more encryption keys and the identifier from the second data based on failure to receive the validation information within a defined window of time following reception of the request.

11. The first device of claim 1 , wherein, based on the association of the one or more encryption keys and the identifier with the first data, the processor is configured to authorize the establishment of future connections with the second device according to the wireless telemetry protocol.

12. The first device of claim 11 , wherein, based on the association of the one or more encryption keys and the identifier with the first data, the processor is configured to authorize the establishment of future connections with the second device according to the wireless telemetry protocol without negotiating new encryption keys or requiring the second device to provide the validation information or new validation information.

13. The first device of claim 1 , wherein the processor is configured to disassociate the one or more encryption keys and the identifier from the first data based on reception of the validation information or new validation information in association with a new request to remove the second device from the first data, wherein the new validation information is not defined by the wireless telemetry protocol.

14. The first device of claim 1 , wherein the processor is configured to track a number of times the second device failed to provide the validation information in association with requests to establish connections with the first device in accordance with the wireless telemetry protocol, and associate the identifier with a second data of the memory based on the number of times exceeding a threshold amount, wherein the second data characterizes the second device as unauthorized to establish future connections with the first device in accordance with the wireless telemetry protocol.

15. The first device of claim 14 , wherein the processor is configured to ignore future requests from the second device to establish the connections with the first device in accordance with the wireless telemetry protocol based on association of the identifier for the second device with the second data.

16. The first device of claim 1 , wherein the validation information comprises a unique out-of-band signal.

17. The first device of claim 1 , wherein the first device comprises a medical device.

18. The first device of claim 17 , wherein the medical device comprises an implantable medical device and the housing is configured to be at least partially implanted within the patient.

19. A method comprising:
negotiating, by a first device, one or more encryption keys with a second device in accordance with a wireless telemetry protocol in response to receipt of a request, from the second device, to establish a connection using the wireless telemetry protocol; and
based on receipt of validation information from the second device, the provision of the validation information not defined by the wireless telemetry protocol:
associating, by the first device, the one or more encryption keys and an identifier for the second device with a first data in a memory of the first device that characterizes the second device as authorized to establish the connection in accordance with the wireless telemetry protocol;
establishing, by the first device, the connection with the second device in accordance with the wireless telemetry protocol; and
transmitting, by the first device, physiological data of a patient sensed by the first device to the second device via the established connection.

20. A non-transitory computer-readable storage medium comprising program instructions that, when executed by a processor of a first device, cause the first device to:
negotiate one or more encryption keys with a second device in accordance with a wireless telemetry protocol in response to receipt of a request, from the second device, to establish a connection using the wireless telemetry protocol; and
based on receipt of validation information from the second device, the provision of the validation information not defined by the wireless telemetry protocol:
associate the one or more encryption keys and an iden

Assignees

• Medtronic Inc

Inventors

• Yoder Matthew R
• Kivi Gary P
• Sanden Richard A
• Zhang Bo
• Dorphy Eric D

Classifications

• A61N1/37252 Primary

  Details of algorithms or data aspects of communication system, e.g. handshaking, transmitting specific data or segmenting data · CPC title

• A61B5/0031

  Implanted circuitry · CPC title

• A61B5/686

  Permanently implanted devices, e.g. pacemakers, other stimulators, biochips (A61B5/6861 takes precedence) · CPC title

• A61N1/37217

  characterised by the communication link, e.g. acoustic or tactile · CPC title

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title