Secure communication for medical devices

A medical device, comprising:

• a memory;
• and
• one or more processors configured to execute instructions stored in the memory and perform operations comprising:
• discovering a mobile device when the mobile device is within a threshold distance of the medical device,
• sending an authentication request to the mobile device,
• receiving a response to the authentication request that includes one or more authentication factors including at least one of a zero-knowledge password proof, a certificate or a cloud authentication token from the mobile device,
• determining a type of authentication factor that is included in the response,
• authenticating the one or more authentication factors including the at least one of the zero-knowledge password proof, the certificate or the cloud authentication token from the mobile device based on the type of authentication factor included in the response, and establishing communication with the mobile device.

A method for securely communicating between a medical device and an application on a personal device in a secure computing environment, comprising:

• discovering, using a network access device of the medical device, the personal device when the personal device is within a threshold distance of the medical device;
• receiving, by the network access device of the medical device, an access request that identifies the application as the application that manages or controls the medical device after the personal device is discovered;
• in response to receiving the access request, sending, by a processor of the medical device, an authentication request that requests a plurality of authentication factors;
• receiving, by the processor of the medical device, the plurality of authentication factors;
• determining, by the processor of the medical device, a type of authentication factor that is received among the plurality of authentication factors;
• authenticating, by the processor of the medical device, the plurality of authentication factors based on the type of authentication factor;
• establishing, by the processor of the medical device and the application on the personal device, a chain of trust between the medical device and the personal device;
• and
• establishing, by the processor of the medical device and the application on the personal device, a secure communication channel between the medical device and the personal device based on the chain of trust.