Advanced Neuromodulation Systems, Inc.

Greg Creek

Daran DeShazo

Scott DeBates

Jagatkumar V Shah

Scott Debates

Luis Ortiz Hernandez

James Nagle

Robert Nobles

Steve Gray

A system and method for facilitating device and application authentication between an external device and an implanted medical device (IMD), wherein a therapy application executing on the external device is operative to communicate with the IMD via wireless telemetry communications. A device authentication parameter may be decomposed into two key components, wherein one component may be stored in a cloud key vault and the other component may be distributed to the external device as an obfuscated portion embedded in the therapy application. Upon receiving the therapy application, the external device is operative to separately retrieve both key components and reconstitute the original authentication parameter therefrom, which may be presented to the IMD for authentication.

Split key architecture for facilitating authentication between an implanted medical device and an external device

A system and method for operating an implanted medical device (IMD) based on a waveform player. In one arrangement, the IMD may comprise a first module operative to effectuate a communication interface with an external device for receiving a plurality of program records for storage in a persistent memory, the program records each comprising a plurality of pulse definitions and a plurality of time interval definitions, wherein a pulse definition comprises a set of pulse characteristics to be applied in a particular time interval. A second module may be communicatively coupled to the first module, the second module including a buffer for containing a runtime image of a selected program record loaded from the persistent memory. A waveform player provided as part of the second module is operative to interpret the runtime image to generate control signals to drive an output driver circuit for applying pulse characteristics to a select set of electrodes according to the pulse definitions of the selected program record.

System and method for operating an implantable pulse generator for neuromodulation

Embodiments provide methods of conducting operations with an implantable medical device (IMD) and an external controller device for performing authentication operations. In some embodiments, the method comprises: generating or storing an authentication data structure in the external controller device for over-the-air communication between the external device and the IMD, wherein the authentication data structure is generated by: (1) removing attribute fields from a first digital certificate and adding a public key of the external controller device to form an intermediate data structure; (2) creating a digital signature of the first intermediate data structure using a second digital certificate of an issuing certificate authority (CA); and (3) forming the authentication data structure by combining the intermediate data structure, the created digital signature, a public key of the issuing CA, and a digital signature of the public key of the issuing CA created using a third digital certificate of a root CA.

Compressed PKI methods for machine-to-machine authentication in bandwidth-constrained medical devices

A scheme for securely transferring a patient data file to an intended recipient regardless of a transfer mode selected by a sender. Encryption system executing at the sender device is operative to encrypt each plaintext data line of a file, one by one, using a symmetric key and a starting IV that is incremented per each line, resulting in corresponding ciphertext lines added to an encrypted file. A hash is generated based on the encrypted file. An encrypted header containing the symmetric key, starting IV and the hash is generated using a public key of the recipient, which is appended to the encrypted file. The encrypted header and associated encrypted file are transmitted to the recipient in any manner. Upon receipt, the recipient decrypts the encrypted header using a private key to obtain the symmetric key, starting IV and the hash, which are used by the recipient to validate and decrypt the encrypted file on a line-by-line basis.

Growing community of inventors

Prosper, TX, United States of America

Greg Creek