Proximity-based Access Control for Implantable Medical Devices

Abstract

We propose a proximity-based access control scheme for implantable medical devices (IMDs). Our scheme is based on ultrasonic distance-bounding and enables an implanted medical device to grant access to its resources only to those devices that are in its close proximity. We demonstrate the feasibility of our approach through tests in an emulated patient environment. We show that, although implanted, IMDs can successfully verify the proximity of other devices with high accuracy. We propose a set of protocols that support our scheme, analyze their security in detail and discuss possible extensions. We make new observations about the security of implementations of ultrasonic distance-bounding protocols. Finally, we discuss the integration of our scheme with existing IMD devices and with their existing security measures.

People

Dr. Kasper Bonne Rasmussen

Doctoral Student (2006 – 2011)

Professor, University of Oxford

Prof. Srdjan Čapkun

Group Leader

BibTex

@INPROCEEDINGS{rasmussen2009proximity-based,
	isbn = {978-1-60558-352-5},
	doi = {10.1145/1653662.1653712},
	year = {2009-11},
	booktitle = {Proceedings of the 16th ACM Conference on Computer and Communications Security (CCS '09)},
	type = {Conference Paper},
	author = {Rasmussen, Kasper Bonne and Castelluccia, Claude and Heydt-Benjamin, Thomas S. and Capkun, Srdjan},
	abstract = {We propose a proximity-based access control scheme for implantable medical devices (IMDs). Our scheme is based on ultrasonic distance-bounding and enables an implanted medical device to grant access to its resources only to those devices that are in its close proximity. We demonstrate the feasibility of our approach through tests in an emulated patient environment. We show that, although implanted, IMDs can successfully verify the proximity of other devices with high accuracy. We propose a set of protocols that support our scheme, analyze their security in detail and discuss possible extensions. We make new observations about the security of implementations of ultrasonic distance-bounding protocols. Finally, we discuss the integration of our scheme with existing IMD devices and with their existing security measures.},
	keywords = {access control; distance bounding; medical devices; secure pairing; ultrasonic communication},
	language = {en},
	address = {New York, NY},
	publisher = {Association for Computing Machinery},
	title = {Proximity-based Access Control for Implantable Medical Devices},
	PAGES = {410 - 419},
	Note = {16th ACM Conference on Computer and Communications Security 2009 (CCS 2009); Conference Location: Chicago, IL, USA; Conference Date: November 9-13, 2009}
}

Research Collection: 20.500.11850/569353