System and method for secure relayed communications from an implantable medical device

An implantable medical device, comprising:

• an implantable battery;
• a wireless radio frequency digital communication radio transceiver;
• a physiological interface adapted to at least one of analyze a physiological signal, produce a physiological stimulation, produce a motion or displacement, infuse a drug, and analyze a biological sample;
• and
• at least one programmable automated electronic processor configured to:
• communicate through the wireless radio frequency digital communication radio transceiver over a physical channel with a proximate relay device,
• control communications through the relay device to establish cryptographically secure communications with each of a plurality of different endpoints each having a respective associated security certificate,
• authenticate each respective different endpoint associated security certificate according to a public key infrastructure hierarchy management system comprising at least a certificate revocation list downloaded to the implantable medical device through the wireless radio frequency digital communication radio transceiver and a validity period,
• respond to a request initiated from a respective one of the plurality of different endpoints, to open a new cryptographically secure communication session with the respective one of the plurality of different endpoints, the request being conveyed in at least one message received through the wireless radio frequency digital communication radio transceiver, and
• initiate a new cryptographically secure communication session with a respective one of the plurality of different endpoints, the new cryptographically secure communication session communicating at least one message comprising medical data to or from the physiological interface, the request being conveyed in at least one message transmitted through the wireless radio frequency digital communication radio transceiver.

A method of controlling an implantable medical device, comprising:

• providing:
• a wireless radio frequency digital communication radio transceiver;
• a physiological interface adapted to at least one of receive a physiological signal, produce a physiological stimulation, produce a motion or displacement, infuse a drug, and acquire a biological sample;
• at least one programmable automated electronic processor;
• an implantable power supply;
• communicating through the wireless radio frequency digital communication radio transceiver over a physical channel with a relay device, and through the relay device to establish a cryptographically secure tunneling protocol communication with each of a plurality of different endpoints on a public network, the plurality of different endpoints each having a respective associated endpoint security certificate, to implement a public key infrastructure;
• responding to a request initiated from a respective one of the plurality of different endpoints, to open a cryptographically secure tunneling protocol communication session according to the public key infrastructure with the respective one of the plurality of different endpoints for communication of medical data associated with the physiological interface, the request being conveyed in at least one message received through the physical channel by the wireless radio frequency digital communication radio transceiver, and
• verifying the respective associated endpoint security certificate of the respective one of the plurality of different endpoints, with respect to at least a certificate revocation list and certificate validity period, prior to transmitting private data or accepting received data as valid.