Data encryption in medical devices with limited computational capability

A system comprising:

• a first device including:
• medical hardware configured to perform a medical function on a human or animal body and generate medical data related to the medical function,
• an interface to receive and transmit data over a short-range communication link, and
• processing hardware configured to generate a dynamic encryption key, encrypt the medical data using the dynamic encryption key, and transmit the encrypted medical data via the short-range communication link;
• the system further comprising:
• a second device including:
• an interface to receive and transmit data over the short-range communication link, and
• processing hardware configured to generate the dynamic encryption key, receive the encrypted medical data via the short-range communication link, and decrypt the medical data using the dynamic encryption key;
• wherein each of the first device and the second device stores a shared static encryption key and a respective different device identifier, and wherein each of the first device and the second device generates the dynamic encryption key using the shared static encryption key and the device identifiers of the first device and the second device.

A method for generating dynamic encryption keys in medical devices, the method comprising:

• retrieving, by processing hardware, an identifier of a medical device and a pre-stored static key;
• receiving, via a short-range wireless communication link, an encrypted identifier of a peer device;
• decrypting, by processing hardware, the encrypted identifier using the pre-stored static key to determine an identifier of the peer device;
• generating, by processing hardware, a dynamic encryption key using the identifier of a medical device and the identifier of the peer device;
• performing a medical function by medical hardware, the medical function being associated with medical data;
• exchanging the medical data with the peer device via the wireless communication link, including applying the dynamic encryption key to the medical data.