# US 12,225,141 B2 · System and method for secure relayed communications from an implantable medical device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,225,141 B2 - Document ID: US12225141B2 - Status: Granted - Kind: B2 - Application number: 18/602,035 - Filed: 2024-03-12 - Published: 2024-06-27 - Granted: 2025-02-11 - Earliest claimed: 2013-03-15 - Assignees: Poltorak Technologies LLC - Applicants: Poltorak Technologies LLC - Inventors: Alexander I Poltorak - Web page: https://patentgrep.com/patent/US12225141B2 ## CPC - H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]} - G16H 40/67: for remote operation - H04L 9/006: {involving public key infrastructure [PKI] trust models (network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 63/0272: {Virtual private networks} - H04L 63/04: {for providing a confidential data exchange among entities communicating through data packet networks} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04W 12/033: of the user plane, e.g. user's traffic - A61B 5/0006: {ECG or EEG signals} - G16H 20/17: delivered via infusion or injection - G16H 20/30: relating to physical therapies or activities, e.g. physiotherapy, acupressure or exercising - H04L 2209/80: Wireless - H04L 2209/88: Medical equipments - H04W 12/33: using wearable devices, e.g. using a smartwatch or smart-glasses - H04W 12/43: using shared identity modules, e.g. SIM sharing - Y02D 30/70: in wireless communication networks - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - A61B: DIAGNOSIS; SURGERY; IDENTIFICATION (usefulness limited to only animals A61D) - Y02D: CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE ## Abstract The present invention provides systems and methods for supporting encrypted communications with a medical device, such as an implantable device, through a relay device to a remote server, and may employ cloud computing technologies. An implantable medical device is generally constrained to employ a low power transceiver, which supports short distance digital communications. A relay device, such as a smartphone or WiFi access point, acts as a conduit for the communications to the internet or other network, which need not be private or secure. The medical device supports encrypted secure communications, such as a virtual private network technology. The medical device negotiates a secure channel through a smartphone or router, for example, which provides application support for the communication, but may be isolated from the content. ## Claims ### Claim 1 A communication device, comprising: a transceiver configured to communicate according to a virtual private network protocol through an insecure communication router; an automated processor, configured to: retrieve a first security certificate from a local memory; check a validity of the first security certificate based on communications through the insecure communication router; establish a first virtual private network with a first remote server through the insecure communication router, having an endpoint and encryption dependent on the valid first security certificate; invalidate the first security certificate based on the validity check; retrieve a second security certificate through the insecure communication router independent of the first remote server; store the second security certificate in the memory; check a validity of the second security certificate based on communications through the insecure communication router; and establish a second virtual private network with a second remote server through the insecure communication router, having an endpoint and encryption dependent on the second security certificate; and a communication interface configured to communicate data with the transceiver. ### Claim 2 (depends on 1) The communication device according to claim 1, wherein the transceiver comprises a wireless radio frequency personal area network transceiver. ### Claim 3 (depends on 1) The communication device according to claim 1, wherein the validity of retrieved security certificates is checked using secure communications through the transceiver with a certificate revocation authority. ### Claim 4 (depends on 1) The communication device according to claim 1, wherein the security certificates are X.509 certificates. ### Claim 5 (depends on 1) The communication device according to claim 1, wherein the automated processor is configured to employ only one active security certificate at a time. ### Claim 6 (depends on 1) The communication device according to claim 1, further comprising a housing configured to house the radio transceiver, the automated processor, and a self-contained power supply configured to supply operative power to the transceiver and the automated processor. ### Claim 7 (depends on 6) The communication device according to claim 6, wherein the communication interface is configured to communicate medical sensor data through the virtual private networks. ### Claim 8 (depends on 6) The communication device according to claim 6, wherein the communication interface is configured to produce a physiological stimulation or infuse a drug. ### Claim 9 (depends on 1) The communication device according to claim 1, wherein the communication interface is configured to communicate with at least one of a cardiac pacemaker, a defibrillator, a neurological stimulator, a pain control stimulator, a bladder control stimulators, a hearing aid, an insulin pump, and a drug infusion pump. ### Claim 10 (depends on 1) The communication device according to claim 1, wherein the automated processor is further configured to implement a Kerberos-type cryptographic authentication protocol. ### Claim 11 (depends on 1) The communication device according to claim 1, wherein the automated processor is further configured to communicate a digital token through the radio frequency communication transceiver. ### Claim 12 A communication device, comprising: a transceiver configured to communicate through an insecure router with a selected remote server according to a virtual private network protocol dependent on a server-specific security certificate; an automated processor, configured to: retrieve the server-specific security certificate from a local memory; check a validity of the server-specific security certificate based on communications through the insecure router independent of the selected remote server; invalidate the server-specific security certificate based on the validity check; establish a virtual private network with the selected remote server dependent on the server-specific security certificate; a self-contained power source, configured to power the radio frequency communication transceiver and the automated processor; a data communication interface; and a housing, configured to contain the transceiver, the automated processor, and the self-contained power source. ### Claim 13 (depends on 12) The communication device according to claim 12, wherein the transceiver comprises a wireless radio frequency personal area network transceiver, and the insecure router comprises an internet protocol router. ### Claim 14 (depends on 12) The communication device according to claim 12, wherein the validity of server-specific security certificates is checked using secure communications through the transceiver with a certificate revocation authority. ### Claim 15 (depends on 12) The communication device according to claim 12, wherein the communication device is configured permit only a single concurrent active server-specific security certificate. ### Claim 16 (depends on 12) The communication device according to claim 12, further comprising a physiological sensor within the housing, configured to supply data to the data communication interface. ### Claim 17 (depends on 12) The communication device according to claim 12, wherein the data communication interface is configured to control a physiological stimulator. ### Claim 18 (depends on 12) The communication device according to claim 12, wherein the data communication interface is configured to communicate with at least one of a cardiac pacemaker, a defibrillator, a neurological stimulator, a pain control stimulator, a bladder control stimulators, a hearing aid, an insulin pump, and a drug infusion pump. ### Claim 19 (depends on 12) The communication device according to claim 12, wherein the automated processor is further configured to implement a Kerberos-type cryptographic authentication protocol with the selected remote server. ### Claim 20 A communication method, comprising: providing a housing surrounding a self-contained power supply, a memory, at least one automated processor, and a transceiver configured to communicate according to a virtual private network protocol through an insecure communication router; retrieving a server-specific security certificate from the memory, the server-specific security certificate defining a communication endpoint and encryption key; checking a validity of the server-specific security certificate based on communications through the insecure communication router independent of the specific server; invalidating the server-specific security certificate based on the validity check; upon invalidating the server-specific security certificate, receiving a new server-specific security certificate specifying a different specific server; establishing a virtual private network with the different specific server through the transceiver and insecure communication router; and communicating data from a communication interface through the virtual private network.