Secure communication link between medical apparatuses of a data-management device

Patent metadata

Field	Value
Publication number	US-12047417-B2
Application number	US-202117474959-A
Country	US
Kind code	B2
Filing date	Sep 14, 2021
Priority date	Mar 28, 2019
Publication date	Jul 23, 2024
Grant date	Jul 23, 2024

Abstract

Implementations relate to a method for establishing an end-to-end encrypted data communication link between a portable medical apparatus and a data-management device. The method comprises at least the following steps: out-of-band transmission of a public key from the medical apparatus to the data-management device, wherein the transmission does not take place via Bluetooth; setting up an encrypted Bluetooth data communication link between the medical apparatus and the data-management device; transmitting a public key from the data-management device to the medical apparatus via the Bluetooth link that has been set up; calculating a combined key on the data-management device and on the medical apparatus; setting up an end-to-end encrypted link between the medical apparatus and the data-management device using the combined key, such as a symmetrical, key.

First claim

The invention claimed is:

1. A method for establishing a secure data communication link between a medical apparatus and a data management device, wherein the data management device and the medical apparatus each comprise a Bluetooth unit, and wherein the method comprises the following steps:
out-of-band transmitting of a public key of a pair of keys from the medical apparatus and of device information from the medical apparatus to the data management device, with the transmitting not taking place via Bluetooth;
setting up of an established and encrypted Bluetooth data communication link between the medical apparatus and the data management device, wherein the step of setting up of an encrypted Bluetooth data communication link is based on a Just Works principle or use of a Just Works link;
transmitting of a public key of a pair of keys of the data management device from the data management device to the medical apparatus via the established and encrypted Bluetooth link;
calculating a combined key on the data management device from the transmitted public key of the medical apparatus and a secret key of the pair of keys of the data management device;
calculating the same combined key on the medical apparatus from the transmitted public key of the data management device and a secret key of the pair of keys of the medical apparatus; and
setting up an end-to-end encrypted link between the medical apparatus and the data management device using the combined key with end-to-end encrypted data being transmitted over the established and encrypted Bluetooth link.

2. A method according to claim 1 , wherein the out-of-band transmission of the public key takes place by means of near field communication.

3. A method according to claim 1 , wherein the out-of-band transmission of the public key takes place by means of a camera of the data management device for optically detecting the public key as displayed by the medical apparatus.

4. A method according to claim 1 , wherein the out-of-band transmission of the public key takes place by means of a camera of the data management device, for optically recording the public key arranged on the medical apparatus or on its surface.

5. A method according to claim 1 , wherein the public key and the secret key are dynamically generated as a pair of keys by at least one of the medical apparatus and the data management device.

6. A method according to claim 1 , wherein the establishment of the Bluetooth link operates according to the Just Works principle and a Diffie-Hellman or a Diffie-Hellmann-Merkle key exchange takes place for the encryption.

7. A method according to claim 6 , wherein the Bluetooth link is a Bluetooth LE link, established with the Bluetooth LE Secure Connection Just Works, and in order to exchange keys, and when the Bluetooth LE Secure Connection Just Works is established, an Elliptic-Curve Diffie-Hellman (ECDH) P-256 is used, with a permanent key with a length of 128 bits being determined from the shared key calculated by the ECDH.

8. A method according to claim 1 , further comprising validating or authenticating the end-to-end encrypted Bluetooth link after the end-to-end encrypted Bluetooth link has been set up, and storing the combined key in the medical apparatus and the data management device.

9. A method according to claim 2 , wherein the medical apparatus is activated by a near field communication signal of the data management device and switched from a power saving mode or standby mode to an operating mode.

10. A method according to claim 9 , wherein the pair of keys of the medical apparatus consisting of a public key and a secret key are dynamically generated in the medical apparatus after switching to an operating mode, and wherein this pair of keys is used to set up the end-to-end encrypted Bluetooth link.

11. A method according to claim 3 , wherein the medical apparatus comprises a display on which the public key of the medical apparatus and the device information is displayable in the form of a graphic representation so that the graphic representation can be captured by the camera of the data management device, wherein the graphic representation is a barcode, a QR code, an arrangement of alphanumeric characters or another graphic representation.

12. A method according to claim 11 , wherein the medical apparatus comprises operating elements which enable a user to force the display of the graphic representation.

13. A method according to claim 11 , wherein the public key and the graphic representation are generated dynamically.

14. A method according to claim 1 wherein the medical apparatus is selected from the group comprising: an infusion apparatus, an injection apparatus, or other device for subcutaneous administration of drugs, a blood sugar measuring device, another measuring device for measuring physiological parameters or combinations thereof.

15. A system comprising at least one medical apparatus and a data management device, wherein the data management device has an app installed, in which measured physiological values and/or therapy parameters can be saved, entered and/or processed,
wherein data can be exchanged between the data management device and the at least one medical apparatus via a wireless Bluetooth link,
and wherein the Bluetooth link is configured to be securely established with additional end-to-end encryption by the at least one medical apparatus and the data management device communicating to carry out at least the following steps:
out-of-band transmitting of a public key of a pair of keys from the medical apparatus and of device information from the medical apparatus to the data management device, with the transmitting not taking place via Bluetooth;
setting up of an established and encrypted Bluetooth data communication link between the medical apparatus and the data management device, wherein the step of setting up of an encrypted Bluetooth data communication link is based on a Just Works principle or use of a Just Works link;
transmitting of a public key of a pair of keys of the data management device from the data management device to the medical apparatus via the established and encrypted Bluetooth link;
calculating a combined key on the data management device from the transmitted public key of the medical apparatus and a secret key of the pair of keys of the data management device;
calculating the same combined key on the medical apparatus from the transmitted public key of the data management device and a secret key of the pair of keys of the medical apparatus; and
setting up an end-to-end encrypted link between the medical apparatus and the data management device using the combined key with end-to-end encrypted data being transmitted over the established and encrypted Bluetooth link.

16. A system according to claim 15 , wherein the system comprises a smartphone, an insulin injection device or an insulin infusion device and a blood glucose meter, and wherein an encrypted link can be established from the smartphone to each of the further devices by means of near field communication.

17. A system according to claim 16 , wherein the medical apparatus comprises a continuous or quasi-continuous blood glucose measuring device.

18. A system according to claim 16 , wherein links from the smartphone to the additional apparatuses of the system are established by means of near field communication.

19. A system according to claim 15 wherein the medical apparatus is selected from the group comprising: an infusion apparatus, an injection apparatus, or other devi

Assignees

• Ypsomed Ag

Inventors

• Labudde Marc
• Lindegger Stefan
• Leuzinger Thomas
• Zenger Mathias
• Wyss Adrian

Classifications

• G16H40/67

  for remote operation · CPC title

• G16H20/17

  delivered via infusion or injection · CPC title

• H04W12/50

  Secure pairing of devices · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title