Rice University researchers propose touch-to-access security for implanted devices
Pacemakers, insulin pumps, defibrillators and other implantable medical devices often have wireless capabilities that allow emergency workers to monitor patients. But these devices have a potential downside: They can be hacked.
Researchers at Rice University have come up with a secure way to dramatically cut the risk that an implanted medical device (IMD) could be altered remotely without authorization.
Their technology would use the patient’s own heartbeat as a kind of password that could only be accessed through touch.
Rice electrical and computer engineer Farinaz Koushanfar and graduate student Masoud Rostami will presentHeart-to-Heart, an authentication system for IMDs, at the Association for Computing Machinery’s Conference on Computer and Communications Security in Berlin in November. They developed the technology with Ari Juels, former chief scientist at RSA Laboratories, a security company in Cambridge, Mass.
IMDs generally lack the kind of password security found on a home Wi-Fi router because emergency medical technicians often need quick access to the information the devices store to save a life, Rostami said. But that leaves the IMDs open to attack.
“If you have a device inside your body, a person could walk by, push a button and violate your privacy, even give you a shock,” he said. “He could make (an insulin pump) inject insulin or update the software of your pacemaker. But our proposed solution forces anybody who wants to read the device to touch you.”
The system would require software in the IMD to talk to the “touch” device, called the programmer. When a medical technician touches the patient, the programmer would pick up an electrocardiogram (EKG) signature from the beating heart. The internal and external devices would compare minute details of the EKG and execute a “handshake.” If signals gathered by both at the same instant match, they become the password that grants the external device access.
“The signal from your heartbeat is different every second, so the password is different each time,” Rostami said. “You can’t use it even a minute later.”
He compared the EKG to a chart of a financial stock. “We’re looking at the minutia,” Rostami said. “If you zoom in on a stock, it ticks up and it ticks down every microsecond. Those fine details are the byproduct of a very complex system and they can’t be predicted.”
A human heartbeat is the same, he said. It seems steady, but on closer view every beat has unique characteristics that can be read and matched. “We treat your heart as if it were a random number generator,” he said.
The system could potentially be used with the millions of IMDs already in use, Koushanfar said. “To our knowledge, this is the first fully secure solution that has small overhead and can work with legacy systems,” she said. “Like any device that has wireless access, we can simply update the software.”
The Latest on: Heartbeat biometric
- UK oversight bodies probe government data set ethics and biometric strategy on February 18, 2019 at 10:44 am
“Successive Science and Technology Committees have repeatedly raised concerns about the governance of biometrics and forensics by the Home Office. Both are at the heart of our courts system and its vi... […]
- United States : IBM Helps Organizations Monitor Their Workers' Safety with Watson IoT on February 15, 2019 at 12:11 pm
The hamon shirt, made from silver conductive fibers, collects a wearer's biometric data, including heart rate, body temperature and location, as well as environmental data such as humidity, temperatur... […]
- Fingerprint Cards introduces enrollment demo for biometric payment cards on February 13, 2019 at 9:05 am
The Swedish biometrics firm worked with UX design specialists BlockZero ... we were building an experience that had the consumer at the heart from the start.” “Our consumer research and trial feedback ... […]
- IBM Watson IoT wants to improve field worker safety with wearables, but could it backfire? on February 13, 2019 at 8:55 am
IBM envisions wearable technologies capable of monitoring biometric attributes (including heart rate and body temperature), along with environmental attributes (such as height/location, humidity, temp... […]
- IBM Helps Organizations Monitor Their Workers' Safety with Watson IoT on February 13, 2019 at 8:10 am
The hamon® shirt, made from silver conductive fibers, collects a wearer's biometric data, including heart rate, body temperature and location, as well as environmental data such as humidity ... […]
- Introducing Eight Sleep’s new biometric-monitoring smart bed on February 13, 2019 at 5:00 am
In addition to the ultimate heating and cooling system, the mattress is equipped with piezoelectric sensors that deliver advanced health monitoring of biometrics such as sleep stages, heart rate, resp... […]
- SMK Electronics and CAARESYS Partner on Connected Car Biometrics on February 11, 2019 at 12:57 pm
The new sensors will also be able to distinguish adults from children and monitor the heart and breath rate of every passenger ... to know and monitor passenger status through the use of biometric sen... […]
- Ugandan Police strengthen the fight against crime with Gemalto Automated Biometric Identification System and LiveScan technology on February 10, 2019 at 11:35 pm
Biometric information is securely submitted to the CABIS over ... Gemalto’s solutions are at the heart of modern life, from payment to enterprise security and the internet of things. We authenticate p... […]
- SMK Electronics and CAARESYS Partner to Develop Biometric Sensor Technology on February 7, 2019 at 10:07 pm
The first, a driver or passenger monitoring system, incorporates a contact-free biometric sensor to measure heart and respiration rates, and heart-rate variability. The second includes a seatbelt remi... […]
- DoD awards TwoSense $2.42 million contract for behavioral biometric authentication on February 7, 2019 at 3:00 am
(One of the techniques in its system-as-a-service arsenal is ballistocardiography, which graphically represents the muscle movements caused by blood as it’s ejected into vessels by the heart.) […]
via Google News and Bing News