Powerless security for Cardiac Implantable Medical Devices: Use of Wireless Identification and Sensing Platform. (1st April 2018)

• Record Type: Journal Article
• Authors: Ellouze, Nourhene; Rekhis, Slim; Boudriga, Noureddine; Allouche, Mohamed
• Is Part Of: Journal of network and computer applications. Volume 107(2018)
• Page Start: 1
• Page End: 21
• Publication Date: 2018-04-01
• Subjects: Wireless attacks -- Security attacks -- Cardiac Implantable Medical Devices -- Radio Frequency Identification -- Wireless Identification and Sensing Platform -- Energy harvesting solution; Microcomputers -- Periodicals; Computer networks -- Periodicals; Application software -- Periodicals; Micro-ordinateurs -- Périodiques; Réseaux d'ordinateurs -- Périodiques; Logiciels d'application -- Périodiques; Application software; Computer networks; Microcomputers; Periodicals; 004.05; 004
• DOI: 10.1016/j.jnca.2018.01.009
• Languages: English
• ISSNs: 1084-8045

Abstract

Abstract: Implantable Medical Devices are therapeutic devices designed to be surgically implanted into the body of a patient to continuously monitor his/her physiological parameters and automatically execute the suitable therapeutic functions when a chronic disorder is detected. Because of their therapeutic and life-saving benefits, cardiac IMDs, such as Pacemakers and Cardiac Defibrillators, are increasingly being used by patients to treat cardiac arrhythmia. Using an external programmer, cardiac IMDs are wirelessly configured and diagnosed by healthcare professionals. Nevertheless, the use of wireless networks to remotely access to these medical devices has shown important security concerns. In particular, it has been stated that lethal attacks can be launched on these devices. In this paper, we propose a powerless security solution to protect cardiac IMDs against security threats. We firstly identify and classify the main security attacks threatening IMDs, then we extend the IMD architecture by introducing a Radio Frequency Identification (RFID) system. Thanks to the use of a Radio Frequency energy harvesting solution, we design a powerless mutual authentication protocol between the IMD and the programmer allowing the prevention against battery depletion attacks. We also implement a technique for the dynamic biometric keys extraction from electrocardiogram signals collected at both sides (the programmer and the IMD), allowing a secure generation and distribution of master keys between the IMD and the programmer. A discussion about the main properties offered by the proposed solution and a simulation is conducted to evaluate its efficiency in protecting cardiac IMDs.