Utilizing signed credentials for secure communication with an implantable medical device

An implantable medical device (IMD), comprising:

• a transceiver configured to receive a credential from an external instrument (EI), the credential signed utilizing a private key, wherein the IMD and EI do not have access to the private key, the credential including an IMD identifier (ID) and at least one of a time to live (TTL) indicator or an EI ID;
• memory to store program instructions, a public key and an IMD ID uniquely associated with the IMD;
• a processor configured to execute the program instructions;
• at least one of a circuit or the processor configured to authenticate the credential using the public key;
• and
• wherein the processor is further configured to perform the following:
• verifying the at least two of the TTL indicator, the IMD ID, and the EI ID;
• and
• establishing a secure communications session with the EI based on the verifying and authenticating.

A method for establishing secure communications with an external instrument (EI), the method comprising:

• receiving a credential at the EI from a certification authority server, the credential signed utilizing a private key, wherein the IMD and EI do not have access to the private key, the credential including an IMD identifier (ID), and at least one of a time to live (TTL) indicator or an EI ID;
• establishing a wireless non-secure connection between the EI and an implantable medical device (IMD);
• transmitting the credential to the IMD over the wireless non-secure connection;
• and
• establishing a secure communications session with the EI based on authentication of the credential and verification of the at least two of the TTL indicator, the IMD ID, and the EI ID.

A system, comprising:

• an external instrument that comprises:
• memory to store program instructions and an EI identifier (ID) uniquely identifying the external instrument;
• a transceiver configured to communicate with an implantable medical device (IMD);
• a communications interface configured to receive a credential from a certification authority server, the credential signed utilizing a private key that is maintained at the certification authority server remote from the IMD and remote from the EI, wherein the IMD and EI do not have access to the private key, the credential including an IMD identifier (ID) and at least one of a time to live (TTL) indicator or an EI ID;
• a processor that, when executing the program instructions, is configured to perform the following:
• establishing a wireless non-secure connection between the EI and the IMD;
• transmitting the credential to the IMD over the wireless non-secure connection;
• and
• establishing a secure communications session with the EI based on authentication of the credential and verification of the at least two of the TTL indicator, the IMD ID, and the EI ID.