Secure communication for medical devices

A system for providing secure communication, comprising:

• a medical device configured to provide or administer a medical treatment to a patient;
• a server configured to generate a digital certificate that includes a secure element public key and one or more device identifiers in response to authenticating a medical application;
• and
• a personal device including:
• a secure element configured to generate an application key pair that includes a secure element private key and the secure element public key and perform cryptographic operations,
• a memory configured to store the medical application, and
• one or more processors configured to perform operations of at least one of the medical application or the secure element that execute within a trusted environment, the operations comprising:
• generating the application key pair that includes the secure element private key and the secure element public key using the secure element to obtain the digital certificate,
• providing an application authentication request that includes the one or more device identifiers and the secure element public key to the server,
• obtaining, from the server, the digital certificate that includes the secure element public key and the one or more device identifiers,
• providing the digital certificate to the medical device, and
• establishing a secure communication channel between the personal device and the medical device using the digital certificate;
• wherein the medical device is further configured to verify the digital certificate that is provided from the medical application using a server public key, the secure element public key and the one or more device identifiers.

A method for securely communicating between a medical device and an application on a personal device in a secure computing environment, comprising:

• generating, by the application and using a secure element, a key pair including a secure element private key and a secure element public key to obtain a digital certificate, the application being stored within a trusted environment of the personal device;
• storing, by the application and within the secure element, the secure element private key;
• sending, by the application and to a server, an application authentication request including the secure element public key and one or more device identifiers;
• verifying, by the server, the application authentication request;
• generating, by the server, the digital certificate;
• obtaining, by the application, the digital certificate from the server;
• digitally signing, by the application and using the secure element public key, one or more sensitive payloads that include a command to administer or provide treatment to a patient;
• and
• providing, by the application, the one or more digitally signed sensitive payloads that include the command to administer or provide treatment to the patient to the medical device.

A method for secure communication, comprising:

• generating, by an application that is stored within a trusted environment of a personal device and using a secure element, a key pair including a secure element private key and a secure element public key;
• storing, by the application and within the secure element, the secure element private key;
• encrypting, by the application using the secure element private key, one or more pairing secrets used by the application for communicating with a medical device or a server;
• storing, by the application, the one or more encrypted pairing secrets in an untrusted environment;
• decrypting, by the application, the encrypted pairing secrets using the secure element private key;
• and
• deleting, by the application, the decrypted pairing secrets after the application has used the decrypted pairing secrets.