# US 11,998,692 B2 · Secure networked respiratory therapy systems

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,998,692 B2
- Document ID: US11998692B2
- Status: Granted
- Kind: B2
- Application number: 18/162,343
- Filed: 2023-01-31
- Published: 2023-08-10
- Granted: 2024-06-04
- Earliest claimed: 2016-11-03
- Assignees: ResMed Limited
- Applicants: ResMed Inc.
- Inventors: Brian Hickey; Christopher John Roberts; Chinmayee Somaiya; Wendall Eric Trull; Luke Anthony Tucker; Amila Jeewaka Fernando
- Web page: https://patentgrep.com/patent/US11998692B2

## CPC

- A61M 16/022: {Control means therefor}
- A61M 16/024: {including calculation means, e.g. using a processor}
- A61B 5/0002: {Remote monitoring of patients using telemetry, e.g. transmission of vital signals via a communication network (endoradiosondes A61B5/07)}
- A61B 5/087: Measuring breath flow
- A61B 5/6814: {Head}
- A61M 16/0066: {Blowers or centrifugal pumps}
- A61M 16/0069: {the speed thereof being controlled by respiratory parameters, e.g. by inhalation}
- A61M 16/107: {in the inspiratory path}
- A61M 16/16: Devices to humidify the respiration air {(A61M16/1045 takes precedence)}
- G16H 20/40: relating to mechanical, radiation or invasive therapies, e.g. surgery, laser therapy, dialysis or acupuncture
- G16H 40/67: for remote operation
- H04L 9/0841: {involving Diffie-Hellman or related key agreement protocols}
- H04L 9/085: {Secret sharing or secret splitting, e.g. threshold schemes}
- H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords}
- H04L 9/3236: {using cryptographic hash functions}
- H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)}
- H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)}
- H04L 63/123: {received data contents, e.g. message integrity}
- H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)}
- H04W 12/03: Protecting confidentiality, e.g. by encryption
- H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W 12/06: Authentication
- H04W 12/106: Packet or message integrity
- H04W 12/50: Secure pairing of devices
- A61B 5/4833: {Assessment of subject's compliance to treatment}
- A61M 16/06: Respiratory or anaesthetic masks
- A61M 16/0666: {Nasal cannulas or tubing (devices for improving normal breathing through the nose A61F5/08; nose filters A62B23/06; outside holding devices A61M25/02)}
- A61M 16/1055: {bacterial}
- A61M 16/109: {the humidifying liquid or the beneficial agent}
- A61M 2016/0027: {pressure meter}
- A61M 2016/003: {with a flowmeter}
- A61M 2016/0039: {in the inspiratory circuit}
- A61M 2205/17: with redundant control systems
- A61M 2205/3334: Measuring or controlling the flow rate
- A61M 2205/3553: remote, e.g. between patient's home and doctor's office
- A61M 2205/3561: local, e.g. within room or hospital
- A61M 2205/3584: using modem, internet or Bluetooth®
- A61M 2205/3592: using telemetric means, e.g. radio or optical transmission
- A61M 2205/502: User interfaces, e.g. screens or keyboards
- A61M 2205/52: with memories providing a history of measured variating parameters of apparatus or patient
- A61M 2205/60: with identification means
- A61M 2205/6009: for matching patient with his treatment, e.g. to improve transfusion security
- A61M 2205/6018: providing set-up signals for the apparatus configuration
- A61M 2205/6072: Bar codes
- A61M 2205/7518: bacterial
- A61M 2209/01: Remote controllers for specific apparatus
- G06K 19/06028: {using bar codes}
- G06K 19/06037: {multi-dimensional coding}
- G16H 10/60: for patient-specific data, e.g. for electronic patient records
- H04L 2209/80: Wireless
- H04L 2209/88: Medical equipments
- Y02A 90/10: Information and communication technologies [ICT] supporting adaptation to climate change, e.g. for weather forecasting or climate simulation
- A61M: DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY (introducing media into or onto the bodies of animals A61D7/00; means for inserting tampons A61F13/26; devices for administering food or medicines orally A61J; containers for collecting, storing or administering blood or medical fluids A61J1/05); DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY (surgery A61B; chemical aspects of surgical articles A61L); DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR {(Electrotherapy, e.g. producing anaesthesia by the use of alternating or intermittent currents A61N1/36021)}
- A61B: DIAGNOSIS; SURGERY; IDENTIFICATION (usefulness limited to only animals A61D)
- G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- G06K: GRAPHICAL DATA READING (image or video recognition or understanding G06V); PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- Y02A: TECHNOLOGIES FOR ADAPTATION TO CLIMATE CHANGE

## Abstract

Methods and apparatus provide communications among respiratory therapy device (“TD”), server and intermediary (e.g., a control device (“CTLD”) for the therapy device) to improve security. More secure communication channel(s) may be established using shared secrets derived with different channels. The communications may include transmitting therapy data from TD to server for authentication. The CTLD may receive the data and a nonce from a server. The CTLD receives from the TD a signing key dependent on the nonce and a secret shared by TD and server. The CTLD generates an authorisation code with received therapy data and the key for authentication of the data by the server upon its receipt of the code and data. The server computes (1) a key from the nonce and the secret known to TD, and (2) another authorisation code from received therapy data and the key. Data authentication may involve comparing received and computed codes.

## Claims

### Claim 1

A method of uploading therapy data generated by a respiratory therapy device to a remote server via a control device configured to communicate with the respiratory therapy device and to communicate with the remote server, the method comprising:
receiving, by the control device, the therapy data from the respiratory therapy device;
receiving, by the control device, a nonce from the remote server;
sending, by the control device, the nonce to the respiratory therapy device;
receiving, by the control device, a signing key from the respiratory therapy device, wherein the signing key is dependent on the nonce and a secret known to the respiratory therapy device and the remote server;
generating, by the control device, an authorisation code using the therapy data and the signing key, the authorisation code for authenticating the therapy data; and
sending, by the control device, the therapy data and the authorisation code to the remote server.

### Claim 2 (depends on 1)

The method of claim 1, wherein the authorisation code is a hashed message authorisation code.

### Claim 3 (depends on 1)

The method of claim 1, wherein the signing key is further dependent on an offset into the shared secret, the offset being received from the remote server by the control device.

### Claim 4 (depends on 1)

The method of claim 1, wherein the nonce is a pseudo-random number.

### Claim 5 (depends on 1)

The method of claim 1, wherein the control device receives the signing key securely from the respiratory therapy device by decrypting the signing key using a symmetric key that is known to the respiratory therapy device.

### Claim 6

A control device comprising:
a memory, and
a processor,
wherein the memory contains program instructions that when, executed by the processor, control the control device to upload therapy data generated by a respiratory therapy device to a remote server, wherein the program instructions control the control device to:
receive the therapy data from the respiratory therapy device;
receive a nonce from the remote server;
send the nonce to the respiratory therapy device;
receive a signing key from the respiratory therapy device, wherein the signing key is dependent on the nonce and a secret known to the respiratory therapy device and the remote server;
generate an authorisation code using the therapy data and the signing key, the authorisation code for authenticating the therapy data; and
send the therapy data and the authorisation code to the remote server.

### Claim 7

A method of authenticating therapy data generated by a respiratory therapy device, the method comprising:
receiving the therapy data and a first authorisation code;
computing a signing key from a nonce and a secret that is known to the respiratory therapy device;
computing a second authorisation code from the received therapy data and the signing key; and
authenticating the therapy data by comparing the first authorisation code with the second authorisation code.

### Claim 8 (depends on 7)

The method of claim 7, further comprising sending an offset to the respiratory therapy device, wherein the signing key is dependent on the offset.

### Claim 9 (depends on 7)

The method of claim 7, wherein the authorisation code is a hashed message authorisation code.

### Claim 10 (depends on 7)

The method of claim 7, further comprising sending the nonce to the respiratory therapy device.

### Claim 11 (depends on 7)

The method of claim 7, wherein the nonce is a pseudo-random number.

### Claim 12

A server comprising:
a memory, and
a processor,
wherein the memory contains program instructions that, when executed by the processor, control the server to authenticate therapy data generated by a respiratory therapy device, wherein the program instructions control the server to:
receive the therapy data and a first authorisation code;
compute a signing key from a nonce and a secret that is known to the respiratory therapy device;
compute a second authorisation code from the received therapy data and the signing key; and
authenticate the therapy data by comparing the first authorisation code with the second authorisation code.

### Claim 13

A method of uploading therapy data generated by a respiratory therapy device to a remote server, the method comprising:
receiving, by the respiratory therapy device, a nonce from the remote server;
computing, by the respiratory therapy device, a signing key from the nonce and a secret known to the remote server;
generating, by the respiratory therapy device, an authorisation code using the therapy data and the signing key, the authorisation code for authenticating the therapy data; and
sending, by the respiratory therapy device, the therapy data and the authorisation code to the remote server.

### Claim 14 (depends on 13)

The method of claim 13, wherein the authorisation code is a hashed message authorisation code.

### Claim 15 (depends on 13)

The method of claim 13, wherein the signing key is further dependent on an offset into the shared secret, the offset being received from the remote server by the respiratory therapy device.

### Claim 16 (depends on 13)

The method of claim 13, wherein the nonce is a pseudo-random number.

### Claim 17 (depends on 13)

The method of claim 13, wherein the respiratory therapy device receives the nonce via a control device configured to communicate with the remote server.

### Claim 18 (depends on 17)

The method of claim 17, wherein the respiratory therapy device receives the nonce from the control device by decrypting the nonce using a symmetric key that is known to the control device.

### Claim 19 (depends on 13)

The method of claim 13, wherein the respiratory therapy device sends the therapy data and the authorisation code via a control device configured to communicate with the remote server.

### Claim 20 (depends on 19)

The method of claim 19, wherein the control device sends the therapy data and the authorisation code to the control device by encrypting the therapy data and the authorisation code using a symmetric key that is known to the control device.

### Claim 21

A respiratory therapy device comprising:
a pressure generator adapted to couple with a patient interface and to supply a flow of air at positive pressure to the patient interface;
a memory, and
a processor,
wherein the memory contains program instructions that, when executed by the processor, control the respiratory therapy device to upload therapy data generated by the respiratory therapy device to a remote server, wherein the program instructions control the respiratory therapy device to:
receive a nonce from the remote server;
compute a signing key from the nonce and a secret known to the remote server;
generate an authorisation code using the therapy data and the signing key, the authorisation code for authenticating the therapy data; and
send the therapy data and the authorisation code to the remote server.