Authentication of a ventilator

Patent metadata

Field	Value
Publication number	US-11962707-B2
Application number	US-202217454654-A
Country	US
Kind code	B2
Filing date	Jan 5, 2022
Priority date	Nov 19, 2020
Publication date	Apr 16, 2024
Grant date	Apr 16, 2024

Abstract

Method for authenticating at least one ventilator with at least one remote station, wherein the ventilator can connect itself via at least one interface to the remote station, at least one authentication file is stored on the ventilator, the authentication file contains at least one signature code of a signing authority, and a public keycode of the signing authority is known to the remote station, the ventilator sends the authentication file to the remote station when establishing the connection to the remote station, the remote station checks the signature code of the authentication file using the public keycode as to whether the signature code originates from the signing point and the ventilator is authenticated when the remote station recognizes the signature code as originating from the signing authority.

First claim

What is claimed is:

1. A method for authenticating at least one ventilator with at least one remote station, the ventilator being capable of connecting itself via at least one interface to the at least one remote station, wherein the method comprises:
storing at least one authentication file on the ventilator, which authentication file contains at least one signature code of a signing authority, a public keycode of the signing authority being known to the at least one remote station,
sending the authentication file to the at least one remote station by the ventilator when establishing a connection to the at least one remote station, the remote station checking the signature code of the authentication file using the public keycode as to whether the signature code originates from the signing authority, and
authenticating the ventilator when the at least one remote station recognizes the signature code as originating from the signing authority;
transferring therapeutic data from the ventilator to the at least one remote station, and
discarding the transferred therapeutic data by the at least one remote station if the remote station does not recognize the signature code as originating from the signing authority.

2. The method of claim 1 , wherein therapeutic data are transferred from the ventilator to the at least one remote station after and/or during establishment of the connection, the therapeutic data being only processed by the at least one remote station when the ventilator is authenticated.

3. The method of claim 1 , wherein the method further comprises creating by the signing authority the authentication file and adding the signature code to the authentication file using a private key of the signing authority.

4. A system comprising at least one ventilator and at least one remote station, wherein the ventilator is configured to establish a connection to the at least one remote station via at least one interface, the system comprising:
a ventilator having an interface and a hardware component, wherein the hardware component is a mainboard; and having stored thereon:
a public keycode of a signing authority and at least one authentication file wherein the public keycode of the signing authority is known to the at least one remote station,
the ventilator further being configured to send the authentication file to the at least one remote station when establishing a connection to the at least one remote station,
the remote station being configured to check the signature code of the authentication file using the public keycode as to whether the signature code originates from the signing authority, and
the remote station being further configured to authenticate the ventilator when the at least one remote station recognizes the signature code as originating from the signing authority,
the ventilator being further configured to transfer therapeutic data to the at least one remote station; and
the remote station being further configured to discard the transferred therapeutic data if the remote station does not recognize the signature code as originating from the signing authority.

Assignees

• Loewenstein Medical Tech Sa

Inventors

• Bychkov Igor
• Schwaibold Matthias

Classifications

• H04L9/3247 Primary

  involving digital signatures · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/0823 Primary

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• A61M2205/60

  with identification means · CPC title