US 12,143,372 B2
System and method for secure remote control of a medical device
James J. Dattolo, Manchester, NH (US); Atlant G. Schmidt, III, Nashua, NH (US); Steven B. Meuse, Londonderry, NH (US); and George W. Marchant, Jr., Goffstown, NH (US)
Assigned to DEKA Products Limited Partnership, Manchester, NH (US)
Filed by DEKA Products Limited Partnership, Manchester, NH (US)
Filed on Jan. 8, 2021, as Appl. No. 17/144,503.
Application 17/144,503 is a continuation of application No. 15/982,737, filed on May 17, 2018, granted, now 10,893,028.
Claims priority of provisional application 62/509,061, filed on May 20, 2017.
Prior Publication US 2021/0136048 A1, May 6, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 29/06 (2006.01); G06F 21/30 (2013.01); G06F 21/60 (2013.01); G16H 40/67 (2018.01); G16H 80/00 (2018.01); H04L 9/06 (2006.01); H04L 9/08 (2006.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01); H04W 12/02 (2009.01); H04W 12/033 (2021.01); H04W 12/041 (2021.01); H04W 12/08 (2021.01); H04L 67/025 (2022.01); H04W 12/03 (2021.01)
CPC H04L 63/0442 (2013.01) [G06F 21/305 (2013.01); G06F 21/606 (2013.01); G16H 40/67 (2018.01); G16H 80/00 (2018.01); H04L 9/0656 (2013.01); H04L 9/0869 (2013.01); H04L 9/3236 (2013.01); H04L 9/3271 (2013.01); H04L 63/10 (2013.01); H04W 12/02 (2013.01); H04W 12/033 (2021.01); H04W 12/041 (2021.01); H04W 12/08 (2013.01); H04L 63/0435 (2013.01); H04L 67/025 (2013.01); H04L 2209/88 (2013.01); H04W 12/03 (2021.01)] 16 Claims
OG exemplary drawing
 
1. A method for securely remotely controlling a medical device with a control device, the medical device and the control device being coupled by a communications system, the control device including a control messaging system and a control communications system, the medical device including a medical device communications system and a medical device control system, the method comprising:
preparing, by the control messaging system, a device-specific message based on a current medical device state of the medical device, the device-specific message being encapsulated in a second communications protocol having a message identification, the message identification being associated with the medical device;
preparing, by the control messaging system, a communications message based on a current control device state, the communications message including a first communications protocol encapsulating the device-specific message and the second communications protocol;
queuing, by the control messaging system, the communications message based on the current control device state;
dequeuing, by the control communications system, the communications message based on a current control device communications state of the control device;
applying, by the control communications system, communications threat control to the communications message by obfuscating clear text data in the communications message to obtain a threat controlled communications message including whitening an input counted string of the clear text data using a linear feedback shift register (LFSR) seed value forming obfuscated clear text data in the communications message;
transmitting, by the control communications system, the threat controlled communications message based on the current control device communications state;
receiving, by the medical device communications system, a message based on a current medical device communications state of the medical device;
verifying, by the medical device communications system, based on the communications threat control and the current medical device state, that the received message is the same as the threat controlled communications message;
deobfuscating, by the medical device communications system, the obfuscated clear text data including dewhitening the whitened input counted string based at least on the LFSR seed value;
queuing, by the medical device communications system, the verified received message;
dequeuing, by the medical device control system, based on the current medical device state, the verified received message; and
controlling, by the medical device control system, the medical device based on the device-specific message included in the verified received message and the current medical device state;
wherein the first communications protocol comprises:
a driver byte;
a header comprising:
a length of payload;
a command;
a subcommand; and
a sequence number;
a payload comprising the communications message; and
a cyclic redundancy check.