Facilitating trusted pairing of an implantable device and an external device

Patent metadata

Field	Value
Publication number	US-12138463-B2
Application number	US-202318507514-A
Country	US
Kind code	B2
Filing date	Nov 13, 2023
Priority date	Feb 27, 2017
Publication date	Nov 12, 2024
Grant date	Nov 12, 2024

Abstract

Systems, apparatus, methods and computer-readable storage media facilitating trusted pairing between an implantable medical device (IMD) and an external device are provided. In one embodiment, an IMD includes a housing configured to be implanted within a patient, a memory and circuitry within the housing and a processor that executes executable components stored in the memory. The executable components can include: a communication component configured to initiate establishing a telemetry connection with an external device in accordance with a first telemetry protocol based on reception of a request, from the external device, to establish the telemetry connection with the IMD using the first telemetry protocol; and a validation component configured to restrict establishment of the telemetry connection with the external device in accordance with the first telemetry protocol based on reception of validation information from the external device, wherein provision of the validation information is excluded from the first telemetry protocol.

First claim

The invention claimed is:

1. A first device comprising:
a housing;
sensing circuitry, within the housing, configured to obtain sensed physiological data of a patient;
a memory within the housing; and
a processor, within the housing, configured to:
negotiate one or more encryption keys with a second device in accordance with a wireless telemetry protocol in response to receipt of a first request, from the second device, to establish a connection using the wireless telemetry protocol; and
based on not receiving validation information from the second device, the provision of the validation information not defined by the wireless telemetry protocol:
associate an identifier for the second device with a first data in the memory that characterizes the second device as unauthorized to establish the connection in accordance with the wireless telemetry protocol; and
in response to a second request from the second device to establish a connection using the wireless telemetry protocol, and based on the association of the identifier for the second device with the first data in the memory, deny the connection with the second device using the wireless telemetry protocol.

2. The first device of claim 1 , wherein in response to the second request and based on the association of the identifier for the second device with the first data in the memory, the processor is configured to deny the connection with the second device without determining whether validation information is received from the second device in association with the second request.

3. The first device of claim 1 , wherein in response to the second request and based on the association of the identifier for the second device with the first data in the memory, the processor is configured to deny the connection with the second device without negotiating one or more encryption keys.

4. The first device of claim 1 , wherein the processor is configured to associate the identifier for the second device with the first data based on not receiving validation information from the second device within a defined window of time from one of receipt of the first request or transmission of a request for validation information to the second device.

5. The first device of claim 1 , wherein the processor is configured to track a number of times the second device failed to provide the validation information in association with requests to establish connections with the first device in accordance with the wireless telemetry protocol, and associate the identifier for the second device with the first data based on the number of times satisfying a threshold.

6. The first device of claim 1 , wherein the validation information indicates a remote server verified the second device or an entity operating the second device as being authorized to establish the connection with the first device.

7. The first device of claim 1 , wherein the validation information indicates an application of the second device, the application configured for interaction with the first device, determined an entity operating the second device is authorized to employ the second device to establish the connection with the first device.

8. The first device of claim 1 , wherein the validation information comprises an out-of-band signal.

9. The first device of claim 1 , wherein the wireless telemetry protocol comprises a first wireless telemetry protocol, and wherein the validation information comprises a signal received in accordance with a second wireless telemetry protocol.

10. The first device of claim 9 , wherein the first wireless telemetry protocol comprises a non-proprietary telemetry protocol and wherein the second wireless telemetry protocol comprises a proprietary telemetry protocol.

11. The first device of claim 1 , wherein the processor is configured to disassociate the identifier for the second device with the first data in the memory based on receipt of the validation information.

12. The first device of claim 1 , wherein the processor is configured to:
negotiate one or more encryption keys with a third device in accordance with the wireless telemetry protocol in response to receipt of a second request, from the third device, to establish a connection using the wireless telemetry protocol; and
based on receipt of validation information from the third device, the provision of the validation information not defined by the wireless telemetry protocol:
associate the one or more encryption keys and an identifier for the third device with a second data in the memory that characterizes the third device as authorized to establish the connection in accordance with the wireless telemetry protocol;
establish the connection with the third device in accordance with the wireless telemetry protocol; and
transmit the sensed physiological data of the patient to the third device via the established connection.

13. The first device of claim 12 , wherein, based on the association of the one or more encryption keys and the identifier with the second data, the processor is configured to authorize the establishment of future connections with the third device according to the wireless telemetry protocol.

14. The first device of claim 13 , wherein, based on the association of the one or more encryption keys and the identifier with the second data, the processor is configured to authorize the establishment of future connections with the third device according to the wireless telemetry protocol without negotiating new encryption keys or requiring the third device to provide the validation information or new validation information.

15. The first device of claim 1 , wherein the first device comprises a medical device.

16. The first device of claim 15 , wherein the medical device comprises an implantable medical device and the housing is configured to be at least partially implanted within the patient.

17. A method comprising:
negotiating, by a first device, one or more encryption keys with a second device in accordance with a wireless telemetry protocol in response to receipt of a first request, from the second device, to establish a connection using the wireless telemetry protocol; and
based on not receiving validation information from the second device, the provision of the validation information not defined by the wireless telemetry protocol:
associating, by the first device, an identifier for the second device with a first data in the memory that characterizes the second device as unauthorized to establish the connection in accordance with the wireless telemetry protocol; and
in response to a second request from the second device to establish a connection using the wireless telemetry protocol, and based on the association of the identifier for the second device with the first data in the memory, denying, by the first device, the connection with the second device using the wireless telemetry protocol.

18. The method of claim 7 , wherein denying the connection comprises, in response to the second request and based on the association of the identifier for the second device with the first data in the memory, denying the connection with the second device without determining whether validation information is received from the second device in association with the second request.

19. The first device of claim 17 , wherein denying the connection comprises, in response to the second request and based on the association of the identifier for the second device with the first data in the memory, denying the connection with the second device without negotiating

Assignees

• Medtronic Inc

Inventors

• Yoder Matthew R
• Kivi Gary P
• Sanden Richard A
• Zhang Bo
• Dorphy Eric Daniel James

Classifications

• A61N1/37217

  characterised by the communication link, e.g. acoustic or tactile · CPC title

• A61B5/686

  Permanently implanted devices, e.g. pacemakers, other stimulators, biochips (A61B5/6861 takes precedence) · CPC title

• A61B5/0031

  Implanted circuitry · CPC title

• H04W12/0431

  Key distribution or pre-distribution; Key agreement · CPC title

• H04W12/069

  using certificates or pre-shared keys · CPC title