Secure networked respiratory therapy systems

A control device comprising:

• a memory, and
• a processor,
• wherein the memory contains program instructions that when, executed by the processor, control the control device to upload therapy data generated by a respiratory therapy device to a remote server, wherein the program instructions control the control device to:
• receive the therapy data from the respiratory therapy device;
• receive a nonce from the remote server;
• send the nonce to the respiratory therapy device;
• receive a signing key from the respiratory therapy device, wherein the signing key is dependent on the nonce and a secret known to the respiratory therapy device and the remote server;
• generate an authorisation code using the therapy data and the signing key, the authorisation code for authenticating the therapy data;
• and
• send the therapy data and the authorisation code to the remote server.

A method of authenticating therapy data generated by a respiratory therapy device, the method comprising:

• receiving the therapy data and a first authorisation code;
• computing a signing key from a nonce and a secret that is known to the respiratory therapy device;
• computing a second authorisation code from the received therapy data and the signing key;
• and
• authenticating the therapy data by comparing the first authorisation code with the second authorisation code.

A server comprising:

• a memory, and
• a processor,
• wherein the memory contains program instructions that, when executed by the processor, control the server to authenticate therapy data generated by a respiratory therapy device, wherein the program instructions control the server to:
• receive the therapy data and a first authorisation code;
• compute a signing key from a nonce and a secret that is known to the respiratory therapy device;
• compute a second authorisation code from the received therapy data and the signing key;
• and
• authenticate the therapy data by comparing the first authorisation code with the second authorisation code.

A method of uploading therapy data generated by a respiratory therapy device to a remote server, the method comprising:

• receiving, by the respiratory therapy device, a nonce from the remote server;
• computing, by the respiratory therapy device, a signing key from the nonce and a secret known to the remote server;
• generating, by the respiratory therapy device, an authorisation code using the therapy data and the signing key, the authorisation code for authenticating the therapy data;
• and
• sending, by the respiratory therapy device, the therapy data and the authorisation code to the remote server.

A respiratory therapy device comprising:

• a pressure generator adapted to couple with a patient interface and to supply a flow of air at positive pressure to the patient interface;
• a memory, and
• a processor,
• wherein the memory contains program instructions that, when executed by the processor, control the respiratory therapy device to upload therapy data generated by the respiratory therapy device to a remote server, wherein the program instructions control the respiratory therapy device to:
• receive a nonce from the remote server;
• compute a signing key from the nonce and a secret known to the remote server;
• generate an authorisation code using the therapy data and the signing key, the authorisation code for authenticating the therapy data;
• and
• send the therapy data and the authorisation code to the remote server.