Identity-based secure medical device communications

A system comprising:

• a plurality of medical devices, wherein a medical device of the plurality of medical devices comprises:
• a trusted processor comprising:
• a secure data store storing a master secret key and a master public key;
• a secret key generator configured to:
• generate a device identifier-specific secret key using the master secret key and an identifier uniquely associated with the medical device;
• and
• store the device identifier-specific secret key in the secure data store;
• and
• a cryptography subsystem configured to:
• receive encrypted data;
• and
• generate decrypted data using the encrypted data and the device identifier-specific secret key;
• wherein the trusted processor is configured to prohibit output, from the trusted processor, of the device identifier-specific secret key and the master secret key;
• and
• a setup system comprising computer-readable memory and one or more computer processors, wherein the setup system is configured to:
• generate the master secret key and the master public key;
• and
• provision the master secret key and the master public key to the trusted processor of each of the plurality of medical devices.