# US 2021/0083884 A1 · System and method for secure relayed communications from an implantable medical device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0083884 A1 - Document ID: US20210083884A1 - Status: Published application - Kind: A1 - Application number: 17/099,756 - Filed: 2020-11-16 - Published: 2021-03-18 - Earliest claimed: 2013-03-15 - Assignees: Poltorak Technologies LLC - Applicants: Poltorak Technologies LLC - Inventors: Alexander I. Poltorak - Web page: https://patentgrep.com/patent/US20210083884A1 ## CPC - H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]} - G16H 40/67: for remote operation - H04L 9/006: {involving public key infrastructure [PKI] trust models (network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 63/0272: {Virtual private networks} - H04L 63/04: {for providing a confidential data exchange among entities communicating through data packet networks} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04W 12/033: of the user plane, e.g. user's traffic - A61B 5/0006: {ECG or EEG signals} - G16H 20/17: delivered via infusion or injection - G16H 20/30: relating to physical therapies or activities, e.g. physiotherapy, acupressure or exercising - H04L 2209/80: Wireless - H04L 2209/88: Medical equipments - H04W 12/33: using wearable devices, e.g. using a smartwatch or smart-glasses - H04W 12/43: using shared identity modules, e.g. SIM sharing - Y02D 30/70: in wireless communication networks - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - A61B: DIAGNOSIS; SURGERY; IDENTIFICATION (usefulness limited to only animals A61D) - Y02D: CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE ## Abstract The present invention provides systems and methods for supporting encrypted communications with a medical device, such as an implantable device, through a relay device to a remote server, and may employ cloud computing technologies. An implantable medical device is generally constrained to employ a low power transceiver, which supports short distance digital communications. A relay device, such as a smartphone or WiFi access point, acts as a conduit for the communications to the internet or other network, which need not be private or secure. The medical device supports encrypted secure communications, such as a virtual private network technology. The medical device negotiates a secure channel through a smartphone or router, for example, which provides application support for the communication, but may be isolated from the content. ## Claims ### Claim 1 A communication device, comprising: a transceiver; a physiological sensor or medical device communication interface; a memory; a self-contained power source; and at least one automated processor, configured to: at least one of receive data from the physiological sensor or provide control data to the medical device; download a security credential list into the memory; determine a remote server; establish a virtual private network through an intermediate device communicating over the Internet with the remote server, selectively dependent on the stored security credential list, and authenticating respective endpoints using device-level authentication and mutual cryptographic handshaking; and communicate over the virtual private network using payload data authentication, integrity verification, and encryption, with protection against replay. ### Claim 2 (depends on 1) The communication device according to claim 1, wherein the intermediate device is a smartphone. ### Claim 3 (depends on 1) The communication device according to claim 1, wherein the transceiver comprises a Bluetooth transceiver. ### Claim 4 (depends on 1) The communication device according to claim 1, wherein the self-contained power source comprises an energy harvesting power source. ### Claim 5 (depends on 1) The communication device according to claim 1, wherein the medical device comprises a drug infusion pump. ### Claim 6 (depends on 1) The communication device according to claim 1, wherein the medical device comprises an electrophysiological stimulator. ### Claim 7 (depends on 1) The communication device according to claim 1, wherein the security credential list comprises a certificate revocation list of a public key infrastructure key hierarchy management system. ### Claim 8 (depends on 1) The communication device according to claim 1, wherein the at least one automated processor is further configured to: determine a second remote server; verify that the second remote server has valid security credentials with respect to the security credential list; and establish a virtual private network through an intermediate device communicating over the Internet with the second remote server, if the second remote server has verified valid security credentials. ### Claim 9 (depends on 1) The communication device according to claim 1, wherein the at least one automated processor is further configured to: determine that the remote server has invalid security credentials with respect to the security credential list; and prevent establishment of the virtual private network. ### Claim 10 A communication method, comprising: providing a transceiver, a physiological sensor or medical device communication interface, a memory, a self-contained power source, and at least one automated processor; at least one of receiving data from the physiological sensor or providing control data to the medical device; downloading a security credential list into the memory; establishing, by the at least one automated processor, a virtual private network through an intermediate device communicating over the Internet with a remote server, selectively dependent on the stored security credential list, and authenticating respective endpoints using device-level authentication and mutual cryptographic handshaking; and communicating over the virtual private network using payload data authentication, integrity verification, and encryption, with protection against replay. ### Claim 11 (depends on 10) The method according to claim 10, wherein the intermediate device is a smartphone. ### Claim 12 (depends on 10) The method according to claim 10, wherein the transceiver comprises a Bluetooth transceiver. ### Claim 13 (depends on 10) The method according to claim 10, wherein the self-contained power source comprises an energy harvesting power source, further comprising harvesting environmental energy to power the at least one automated processor. ### Claim 14 (depends on 10) The method according to claim 10, wherein the medical device comprises a drug infusion pump, further comprising infusing the drug in response to a command communicated over the virtual private network. ### Claim 15 (depends on 10) The method according to claim 10, wherein the medical device comprises an electrophysiological stimulator, further comprising actuating the stimulating in response to a command communicated over the virtual private network.. ### Claim 16 (depends on 10) The method according to claim 10, wherein the security credential list comprises a certificate revocation list of a public key infrastructure key hierarchy management system. ### Claim 17 (depends on 10) The method according to claim 10, further comprising: determining a second remote server; verifying that the second remote server has valid security credentials with respect to the security credential list; and establishing a virtual private network through an intermediate device communicating over the Internet with the second remote server, if the second remote server has verified valid security credentials. ### Claim 18 (depends on 10) The method to claim 10, further comprising: determining that the first remote server has invalid security credentials with respect to the security credential list; and preventing establishment of the virtual private network. ### Claim 19 A communication device, comprising: a transceiver; an interface, configured to at least one of receive information from a sensor, and generate a control signal for an output device; and at least one automated processor, configured to: identify a remote server based on a secure authenticated transmission, the remote server identity being updatable by remote communications; verify the remote server against a security credential list; perform a key exchange with the remote server, selectively dependent on the verification of the remote server against a security credential list; communicate through the transceiver with the verified remote server communicate with payload data authentication, integrity verification, and encryption, with protection against replay. ### Claim 20 (depends on 19) The communication device according to claim 19, wherein the communication of the payload data is conducted through a virtual private network established between the communication device and the remote server by authenticating respective endpoints using device-level authentication and mutual cryptographic handshaking.