Establishing a secure communication link

Patent metadata

Field	Value
Publication number	US-12088634-B2
Application number	US-202218061855-A
Country	US
Kind code	B2
Filing date	Dec 5, 2022
Priority date	Jan 31, 2019
Publication date	Sep 10, 2024
Grant date	Sep 10, 2024

Abstract

This disclosure is directed to devices, systems, and techniques for establishing a secure connection between two or more devices. In some examples, a device is configured for wireless communication. The device comprises signal reception circuitry configured to receive communications transmitted according to at least a first communication protocol, communication circuitry configured for wireless communication according to at least a second communication protocol, and processing circuitry electrically coupled to the signal reception circuitry and the communication circuitry. The processing circuitry is configured to receive, via the signal reception circuitry, a first signal according to the first communication protocol. In response to receiving the first signal, the processing circuitry is further configured to transmit, via the communication circuitry, a second signal according to the second communication protocol and establish a secure link according to the second communication protocol.

First claim

What is claimed is:

1. A first device comprising:
signal reception circuitry configured to receive communications transmitted according to a first communication protocol;
communication circuitry configured to send communications and receive communications according to a second communication protocol different than the first communication protocol;
and processing circuitry configured to:
receive, at a first time from one or more second devices via the signal reception circuitry, a signal according to the first communication protocol;
transmit, at a second time via the communication circuitry based on receiving the signal, a set of information including a challenge and an encryption key to the one or more second devices according to the second communication protocol at a first power magnitude, wherein the first power magnitude is less than a second power magnitude, wherein the encryption key is a device key that is encrypted and transmitted together with the challenge, wherein the challenge is not encrypted, and wherein the second time occurs after the first time;
receive, at a third time from the one or more second devices via the communication circuitry based on transmitting the set of information including the challenge and the encryption key, the challenge according to the second communication protocol, wherein the challenge is encrypted, and wherein the third time occurs after the second time;
decrypt the challenge;
verify the challenge by comparing the decrypted challenge with the transmitted challenge; and
establish, via the communication circuitry based on verifying the challenge, a secure link between the first device and the one or more second devices according to the second communication protocol at the second power magnitude, wherein at least one of the first device or the one or more second devices comprises an implantable medical device (IMD) configured to be implanted within a patient and at least one other of the first device or the one or more second devices comprises an external device.

2. The first device of claim 1 , wherein the first device is not configured to send communications according to the first communication protocol.

3. The first device of claim 1 , wherein the first power magnitude is less than about 150 nanowatts (nW).

4. The first device of claim 1 , wherein the first communication protocol includes a magnetic induction communication protocol, a radio frequency (RF) communication protocol, or a tissue conductance communication (TCC) protocol.

5. The first device of claim 1 , wherein the second communication protocol comprises a Bluetooth® Low Energy (BTLE) protocol having a reduced power mode and a normal power mode, wherein signals transmitted according to the second communication protocol operating in the reduced power mode are transmitted at the first power magnitude, and wherein signals transmitted according to the second communication protocol operating in the normal mode are transmitted at the second power magnitude.

6. The first device of claim 1 , wherein the signal is a first signal, wherein the encryption key is a first encryption key, and wherein the processing circuitry is further configured to:
in response to receiving the signal at the first time, transmit, via the communication circuitry at a fourth time, a second signal including a set of advertisements according to the second communication protocol, wherein the fourth time occurs between the first time and the second time;
in response to transmitting the second signal including the set of advertisements, receive, from the one or more second devices at a fifth time, a first set of random data according to the second communication protocol, wherein the fifth time occurs between the fourth time and the second time;
generate a second set of random data;
transmit, at the second time, the second set of random data to the one or more second devices at the first power magnitude with the challenge and the first encryption key;
calculate, based on the first set of random data, the second set of random data, and the first encryption key, a second encryption key; and
decrypt the challenge using the second encryption key,
wherein to establish the secure link, the processing circuitry is configured to transmit, to the one or more second devices, a verification signal which confirms that the challenge is verified.

7. The first device of claim 6 , wherein the second encryption key comprises an advanced encryption standard (AES) key, and wherein the second encryption key defines a size of 128 bits.

8. The first device of claim 6 , wherein in response to receiving the first signal, the first device is configured to transmit the second signal including the set of advertisements for a period of time lasting up to a time limit of 30 seconds.

9. The first device of claim 6 , wherein the first signal comprises a wake-up signal for the first device according to the first communication protocol, and wherein based on receiving the first signal, the processing circuitry is configured to transition the communication circuity from a relatively lower energy consumption mode to a relatively higher energy consumption mode.

10. The first device of claim 9 , wherein to transition the communication circuitry from the relatively lower energy consumption mode to the relatively higher energy consumption mode, the processing circuitry configured to increase a rate in which the first device transmits advertisements from a first advertisement rate to a second advertisement rate.

11. The first device of claim 10 , wherein the first advertisement rate is greater than twenty advertisements per hour and less than sixty advertisements per hour, and wherein the second advertisement rate is greater than one advertisement per second.

12. The first device of claim 10 , wherein the first advertisement rate is zero advertisements per second, and wherein the second advertisement rate is greater than one advertisement per second.

13. The first device of claim 1 , wherein the signal comprises:
a plurality of primary portions, wherein each primary portion of the plurality of primary portions defines a first frequency value and a first duration; and
a plurality of secondary portions, wherein each secondary portion of the plurality of secondary portions defines a second frequency value and a second duration, wherein the plurality of primary portions and the plurality of secondary portions are interleaved such that one primary portion occurs between two consecutive secondary portions and one secondary portion occurs between two consecutive primary portions, and
wherein the processing circuitry is further configured to:
in response to receiving the signal, authenticate the signal by matching at least one of the first frequency value, the second frequency value, the first duration, and the second duration to known values stored by the device.

14. The first device of claim 1 , wherein the signal transmitted according to the first communication protocol includes a transmission range of less than about 20 centimeters (cm).

15. The first device of claim 1 , wherein the first power magnitude is within a range from −50 decibels with reference to one milliwatt (dBm) to −10 dBm, and wherein the second power magnitude is 0 dBm.

16. The first device of claim 1 , wherein the first device comprises an implantable medical device (IMD) implanted within a patient.

17. The first device of claim 1 , wherein the first device comprises an IMD implanted within a patient, and wherein each second device of the one or more second devices compris

Assignees

• Medtronic Inc

Inventors

• Yoon Hyun J
• Zhang Bo
• Ecker Robert M
• Wyszynski Ryan D
• Green Joseph C
• Peichel David J
• Shields Sudar
• Wine Nicholas C
• Thwaites Drew J

Classifications

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• H04W52/0229

  where the received signal is a wanted signal · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title

• H04L63/105

  Multiple levels of security · CPC title