Method and System for Secure Interoperability between Medical Devices

Patent metadata

Field	Value
Publication number	US-2023108034-A1
Application number	US-202218064536-A
Country	US
Kind code	A1
Filing date	Dec 12, 2022
Priority date	Jun 19, 2020
Publication date	Apr 6, 2023
Grant date	—

Abstract

A method for secure interoperability between an electronic device and a medical device has been developed. The method includes executing a control application configured to provide communication between the electronic device and medical device, receiving user authentication data from an authentication service, receiving a key identifier from the medical device via an untrusted connection, and transmitting a message with an identifier of the user, the user authentication data, the key identifier, an identifier of the control application, and a cryptographic signature to an authorization service. The method further includes receiving a medical device cryptographic key from the authorization service only in response to successful verification of the message to enable at least one of control communication and data communication between the control application and the medical device.

First claim

What is claimed is:

1 . A method for secure medical device interoperability comprising:
executing, with a processor in an electronic device controlled by a user, a control application configured to communicate with a medical device operated by the user; receiving, with the electronic device, user authentication data generated in response to a user authentication process; establishing an untrusted connection between the electronic device and the medical device; receiving, with the electronic device, a key identifier from the medical device through the untrusted connection; transmitting, with the electronic device, a message containing data corresponding to an identifier of the user, the user authentication data, the key identifier, an identifier of the control application, and a cryptographic signature of the message to an authorization service, the cryptographic signature being generated using a secret key stored in a memory of the electronic device; receiving, with the electronic device, a medical device cryptographic key from the authorization service only in response to successful verification of the message that authorizes the user and the control application; and establishing a trusted connection between the electronic device and the medical device using the medical device cryptographic key to enable at least one of control communication and data communication between the control application and the medical device.

2 . The method of claim 1 , the user authentication process further comprising:
receiving, with the electronic device, authentication input data from the user, the authentication input data not being provided to the control application; transmitting, with the electronic device, an authentication request corresponding to the authentication input data to an authentication service; and receiving, with the control application, the user authentication data as a user authentication token from the authentication service, the user authentication token being received in response to a successful authentication of the user based on the authentication request.

3 . The method of claim 2 , wherein the user authentication token contains the identifier of the user and the user authentication data.

4 . The method of claim 1 , the generating of the cryptographic signature further comprising:
generating the cryptographic signature as a hashed message authentication code (HMAC) corresponding to the identifier of the user, the user authentication data, the key identifier, and the identifier of the control application, using the secret key and a cryptographically secure hash function.

5 . The method of claim 1 , wherein the medical device cryptographic key is a public key corresponding to a private key stored in a memory of the medical device.

6 . The method of claim 5 , the establishing of the trusted connection between the electronic device and the medical device further comprising:
generating, with the control application, a control application public key and corresponding control application private key; transmitting, the control application public key to the medical device; and performing a key exchange protocol to establish the trusted connection between the control application and the medical device based on the control application public key, the control application private key, the public key and the private key of the medical device.

7 . The method of claim 1 , wherein the medical device cryptographic key is a shared-secret cryptographic key that is identical to a shared-secret key cryptographic stored in a memory of the medical device.

8 . The method of claim 1 , wherein the electronic device is a smartphone.

9 . The method of claim 1 , wherein the medical device is selected from the group consisting of an insulin pump, a continuous glucose meter, a spot blood glucose meter, and an electronic medication delivery device.

10 . A method for secure medical device interoperability comprising:
executing, with a processor in an electronic device controlled by a user, a control application configured to communicate with a medical device operated by the user; establishing an untrusted connection between the electronic device and the medical device; receiving, with the electronic device, a key identifier from the medical device through the untrusted connection; transmitting, with the electronic device, a message containing data corresponding to the key identifier, an identifier of the control application, and a cryptographic signature of the message to an authorization service, the cryptographic signature being generated using a secret key stored in a memory of the electronic device; receiving, with the electronic device, a medical device cryptographic key from the authorization service only in response to successful verification of the message that authorizes the control application; and establishing a trusted connection between the electronic device and the medical device using the medical device cryptographic key to enable at least one of control communication and data communication between the control application and the medical device.

11 . A method for secure medical device interoperability comprising:
receiving, with an authorization service, a message from an electronic device that seeks authorization to control a medical device, the message containing data corresponding to an identifier of a user, user authentication data, a key identifier corresponding to a device cryptographic key stored in a memory of a medical device, an identifier of a control application executed by the electronic device, and a cryptographic signature of the message; verifying, with the authorization service, authorization of the control application based on the identifier of the control application and verification of the cryptographic signature for the message using a first cryptographic key stored in the memory of the authorization service, the first cryptographic key being associated with the identifier of the control application; verifying, with the authorization service, authorization of the user based on the data corresponding to the identifier of the user and the user authentication data using a second cryptographic key stored in a memory of the authorization service, the second cryptographic key being associated with an authentication service; and transmitting, with the authorization service, a device cryptographic key that corresponds to the key identifier to the electronic device to enable the electronic device to establish a trusted connection with the medical device only in response to a successful verification of authorization for the control application and a successful verification of authorization for the user.

12 . The method of claim 11 , the verifying of the cryptographic signature further comprising:
generating, with the authorization service, a hashed message authentication code (HMAC) corresponding to the identifier of the user, the user authentication data, the key identifier, and the identifier of the control application using the first cryptographic key and a cryptographically secure hash function; and verifying, with the authorization service, that the HMAC matches the cryptographic signature in the message.

13 . The method of claim 11 , the verifying authorization of the user further comprising:
receiving, with the authorization service, an authentication token generated by an authentication service in the message as the user authentication data; and verifying, with the second cryptographic key, the authentication token to verify that the control application executed by the electronic device is oper

Assignees

• Roche Diabetes Care Inc

Inventors

• Fischer Christoph
• Gejdos Igor
• Kelsey Christopher

Classifications

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title

• H04L9/3242

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title

• H04L9/0822

  using key encryption key · CPC title

• H04L63/062

  for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819) · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title