Rice University researchers propose touch-to-access security for implanted devices
Pacemakers, insulin pumps, defibrillators and other implantable medical devices often have wireless capabilities that allow emergency workers to monitor patients. But these devices have a potential downside: They can be hacked.
Researchers at Rice University have come up with a secure way to dramatically cut the risk that an implanted medical device (IMD) could be altered remotely without authorization.
Their technology would use the patient’s own heartbeat as a kind of password that could only be accessed through touch.
Rice electrical and computer engineer Farinaz Koushanfar and graduate student Masoud Rostami will present Heart-to-Heart, an authentication system for IMDs, at the Association for Computing Machinery’s Conference on Computer and Communications Security in Berlin in November. They developed the technology with Ari Juels, former chief scientist at RSA Laboratories, a security company in Cambridge, Mass.
IMDs generally lack the kind of password security found on a home Wi-Fi router because emergency medical technicians often need quick access to the information the devices store to save a life, Rostami said. But that leaves the IMDs open to attack.
“If you have a device inside your body, a person could walk by, push a button and violate your privacy, even give you a shock,” he said. “He could make (an insulin pump) inject insulin or update the software of your pacemaker. But our proposed solution forces anybody who wants to read the device to touch you.”
The system would require software in the IMD to talk to the “touch” device, called the programmer. When a medical technician touches the patient, the programmer would pick up an electrocardiogram (EKG) signature from the beating heart. The internal and external devices would compare minute details of the EKG and execute a “handshake.” If signals gathered by both at the same instant match, they become the password that grants the external device access.
“The signal from your heartbeat is different every second, so the password is different each time,” Rostami said. “You can’t use it even a minute later.”
He compared the EKG to a chart of a financial stock. “We’re looking at the minutia,” Rostami said. “If you zoom in on a stock, it ticks up and it ticks down every microsecond. Those fine details are the byproduct of a very complex system and they can’t be predicted.”
A human heartbeat is the same, he said. It seems steady, but on closer view every beat has unique characteristics that can be read and matched. “We treat your heart as if it were a random number generator,” he said.
The system could potentially be used with the millions of IMDs already in use, Koushanfar said. “To our knowledge, this is the first fully secure solution that has small overhead and can work with legacy systems,” she said. “Like any device that has wireless access, we can simply update the software.”
The Latest Bing News on:
- Black Friday smartwatch deals: the top Apple Watch, Wear OS and Fitbit saleson November 27, 2020 at 5:55 pm
It features all-day heart rate tracking, sleep tracking ... best multi-sport watch you can buy" thanks to its unbeatable outdoor sports tracking, accurate biometrics, and solidly built design. Its ...
- Genesis GV70 Will Let Drivers Start Car with Biometric Fingerprint Recognitionon November 27, 2020 at 1:22 pm
The newest version of the Genesis GV70 will reportedly use fingerprint recognition to deliver a slew of smart driving features ...
- 2022 Genesis GV70 will debut with innovative biometrics and rear-seat detection technologyon November 27, 2020 at 4:19 am
It seems the 2022 Genesis GV70 will offer more than just unprecedented luxury and good looks. According to the Korean Car Blog, the newest GV70 will feature an in-vehicle fingerprint-activated ...
- Binah.ai biometrics for COVID-19 detection deployed to Hello Kitty Land in Tokyoon November 24, 2020 at 1:27 pm
Facial recognition from Israeli startup Binah.ai has been deployed to Tokyo’s Hello Kitty Land, as part of a health monitoring system for employees based on video footage, The Jerusalem ...
- How Whoop Plays a Role in The Golfer's Workout Weekon November 20, 2020 at 1:36 pm
A WHOOP devotee, he knows firsthand that your pre-golf workout has never been so consequential. WHOOP transforms it into something much more meaningful by monitoring your fitness and performance, ...
- Field Trip Health Ltd. and WHOOP announce partnership to measure effect of psychedelic ...on November 20, 2020 at 1:43 am
Field Trip, which is opening Field Trip Health centers across North America and Europe for the delivery of psychedelic therapies, plans to conduct an observational study to assess whether Field Trip’s ...
- OpenBCI Unveils Galea, A New Platform that Brings Next Generation Biometrics to Mixed Realityon November 20, 2020 at 1:37 am
PRNewswire/ -- OpenBCI, a Brooklyn-based neurotechnology company today announced a new hardware and software platform called Galea, which combines mixed reality (XR) headsets with state-of-the-art ...
- Researchers Use Biometric Wristbands to Measure Health Effects of Psychedelicson November 19, 2020 at 1:37 pm
Toronto-based Field Trip Health will be using WHOOP’s biometric wristband to measure the biometric effects of psychedelic therapies ...
- Can biometric wearables capitalize on worries over machine vision for COVID-19 detection?on November 18, 2020 at 9:10 am
Just as concerns and skepticism grow about systems using facial recognition as a tool to help spot fevers in a crowd, more medical wearables research and biometric products are coming to light.
- Zepp Launches a Premium Partner in Wellnesson November 17, 2020 at 4:30 am
To help you easily understand your biometrics, the Zepp Z features the PAI™ Health Assessment System  converts your health data into an intuitive single value after processing heart rate, activity ...
The Latest Google Headlines on:
The Latest Bing News on:
Contract for the Web
- NBA rumors: Real Madrid's Gabriel Deck leaving for the NBA?on November 27, 2020 at 3:23 am
Real Madrid lost star guard Facu Campazzo to the NBA (the Denver Nuggets to be specific) and there is a reported possibility that this may also happen with another player of the team. According to ...
- UFCW ignores strike vote by West Virginia Kroger workers, pushes through sellout agreementon November 26, 2020 at 5:07 pm
The contract rammed through by the United Food and Commercial Workers would impose lower wages and higher health care costs onto essential workers in the middle of the COVID-19 pandemic.
- General Dynamics Information Technology Awarded $241 Million Multi-Cloud Contract by Centers for Medicare and Medicaid Serviceson November 25, 2020 at 8:05 am
PRNewswire/ -- General Dynamics Information Technology (GDIT), a business unit of General Dynamics (NYSE:GD), announced today it has been awarded a ...
- Comodo and Multi-Visions (Canada) Enter into Distribution Agreement for North Americaon November 24, 2020 at 8:50 am
News Direct--Comodo, the world’s leader of next-generation cybersecurity announced a distribution partnership with Multi-Visions (Canada) for North America. Together Comodo an ...
- Industry Pro Newsletter: A SAG-AFTRA/AEA Agreement, the Long Road to Recovery, and Introducing Stage Mag from BroadwayWorld!on November 23, 2020 at 8:13 am
Happy Thanksgiving week to our readers in the United States! With continued news about the development of an effective vaccine and the conversation turning to how the vaccine will be deployed globally ...
- Orange Business Services Forms Global Strategic Collaboration Agreement with Amazon Web Services to Accelerate Customers’ Innovation in the Cloudon November 23, 2020 at 6:01 am
Orange Business Services has announced a global strategic collaboration agreement with Amazon Web Services (AWS) to help enterprises accelerate their digital transformation and leverage the benefits ...
- The significance of the Regional Economic Partnership Agreementon November 20, 2020 at 1:24 pm
Massimiliano Calì examines the significance of the Regional Economic Partnership Agreement, the world's largest trading bloc.
- CIA makes awards for intelligence community's next massive cloud contracton November 20, 2020 at 12:02 pm
The CIA takes the next step in its own and the intelligence community’s commercial cloud computing journey with the award of its so-called C2E contract that could be worth billions in totality.
- Accenture Federal Services Wins Federal Retirement Thrift Investment Board Contract to Improve Retirement Outcomes for Civil Service and Military 401Kon November 19, 2020 at 1:59 pm
Accenture was awarded the Recordkeeping Services Acquisition contract by the Federal Retirement Thrift Investment Board.
- What the World’s Largest Trade Agreement Means for Fashionon November 19, 2020 at 4:14 am
Who are the industry’s big winners and losers as a result of this week’s signing of the Regional Comprehensive Economic Partnership (RCEP)?