PIPAC: Patient infusion pattern based access control scheme for wireless insulin pump system

Hei, Xiali; Du, Xiaojiang; Lin, Shan; Lee, Insup

doi:10.1109/infcom.2013.6567115

Cited by 76 publications

(38 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The "shield" has been prototyped for a cardiac device to mitigate some of the security problems, but it has not been tested for wearable medical devices, such as insulin pumps. Anomalous detection is also a promising technique that could be used in combination with other security mechanisms to prevent unauthorized access, as shown by Hei et al [13]. They proposed to use past glucose trends to detect anomalous behaviours.…”

Section: Countermeasuresmentioning

confidence: 99%

On the Feasibility of Cryptography for a Wireless Insulin Pump System

Marin

Singelée

Yang

et al. 2016

Proceedings of the Sixth ACM Conference on Data and Application Security and Privacy

View full text Add to dashboard Cite

This paper analyses the security and privacy properties of a widely used insulin pump and its peripherals. We eavesdrop the wireless channel using Commercial Off-The-Shelf (COTS) software-based radios to intercept the messages sent between these devices; fully reverse-engineer the wireless communication protocol using a black-box approach; and document the message format and the protocol state-machine in use. The upshot is that no standard cryptographic mechanisms are applied and hence the system is shown to be completely vulnerable to replay and message injection attacks. Furthermore, sensitive patient health-related information is sent unencrypted over the wireless channel.Motivated by the results of our attacks, we study the feasibility of applying cryptography to protect the data transmitted over the air and prevent unauthorized access to the insulin pump. We present a solution based on AES in combination with an updated message format optimized for energy consumption. We implement our solution on a 16-bit micro-controller and evaluate its security properties and energy requirements. Finally, we discuss potential strategies for further reducing the energy consumption.

show abstract

Section: Countermeasuresmentioning

confidence: 99%

On the Feasibility of Cryptography for a Wireless Insulin Pump System

Marin

Singelée

Yang

et al. 2016

Proceedings of the Sixth ACM Conference on Data and Application Security and Privacy

View full text Add to dashboard Cite

show abstract

“…For basal rate prediction, we only needs a small record set that includes all the patterns since the patterns are seldom changed. Here, we slightly change our model showed in [27]. We add Temp (temporary) Basal Amount, Temp Basal Type, Temp Basal Duration as features.…”

Section: The Detection Model For Abnormal Basal Ratementioning

confidence: 99%

“…In another previous work [17], we proposed a novel Biometric-Based two-level Secure Access Control scheme for IMDs when the patient is in emergency situations (such as a coma). Literature [27] proposed a novel patient infusion patterns based access control scheme (PIPAC) for wireless insulin pumps. This scheme employs a supervised learning approach to learn normal patient infusion patterns and calculates a safety range for the total dose in a time window.…”

Section: Related Workmentioning

confidence: 99%

Patient Infusion Pattern based Access Control Schemes for Wireless Insulin Pump System

Hei

Lin

et al. 2015

IEEE Trans. Parallel Distrib. Syst.

Self Cite

View full text Add to dashboard Cite

Wireless insulin pumps have been widely deployed in hospitals and home healthcare systems. Most of them have limited security mechanisms embedded to protect them from malicious attacks. In this paper, two attacks against insulin pump systems via wireless links are investigated: a single acute overdose with a significant amount of medication and a chronic overdose with a small amount of extra medication over a long time period. They can be launched unobtrusively and may jeopardize patients' lives. It is very urgent to protect patients from these attacks. We propose a novel personalized patient infusion pattern based access control scheme (PIPAC) for wireless insulin pumps. This scheme employs supervised learning approaches to learn normal patient infusion patterns in terms of the dosage amount, rate, and time of infusion, which are automatically recorded in insulin pump logs. The generated regression models are used to dynamically configure a safe infusion range for abnormal infusion identification. This model includes two sub models for bolus (one type of insulin) abnormal dosage detection and basal abnormal rate detection. The proposed algorithms are evaluated with real insulin pump. The evaluation results demonstrate that our scheme is able to detect the two attacks with a very high success rate.

show abstract

“…A number of security solutions were proposed in the literature to control access to IMDs: the proximity‐based access control scheme , the rolling code technique proposed in , and the support vector machine (SVM)‐based access control schemes proposed in and .…”

Section: Securing Imds: State Of the Artmentioning

confidence: 99%

Security of implantable medical devices: limits, requirements, and proposals

Ellouze

Allouche

Ahmed

et al. 2013

Security Comm Networks

View full text Add to dashboard Cite

Implantable medical devices (IMDs) are surgically implanted into a human body to collect physiological data and perform medical therapeutic functions. They are increasingly being used to improve the quality of life of patients by treating chronic ailments such as cardiac arrhythmia, diabetes, and Parkinson's disease. However, recent research has demonstrated the deficiency of wireless IMDs in enforcing security and privacy, and discussed the impact of these attacks on the patient's safety and efficacy of medical treatments. This paper provides an overview of the main vulnerabilities of IMDs. It also reviews the recent research on IMD security and privacy, and discusses their advantages and limitations. In this paper, we also describe the main requirements for improving security of IMDs and identify and discuss a set of research challenges for designing the next generation of secure wireless IMDs. Copyright © 2013 John Wiley & Sons, Ltd.

show abstract

PIPAC: Patient infusion pattern based access control scheme for wireless insulin pump system

Cited by 76 publications

References 9 publications

On the Feasibility of Cryptography for a Wireless Insulin Pump System

On the Feasibility of Cryptography for a Wireless Insulin Pump System

Patient Infusion Pattern based Access Control Schemes for Wireless Insulin Pump System

Security of implantable medical devices: limits, requirements, and proposals

Contact Info

Product

Resources

About