A Miniature Biomedical Implant Secured by Two-Factor Authentication with Emergency Access

📋 论文概要

本文提出了一种针对微型植入式医疗设备的安全方案，采用双因子认证与紧急访问机制，解决设备在互联网连接下面临的隐私和生命关键治疗安全挑战。通过将标准密码学与物理不可克隆函数（PUF）等硬件安全原语结合，实现了轻量级且高安全性的认证。

💡 主要创新点

• 提出了适用于微型植入设备的双因子认证协议，结合硬件PUF和密码学密钥，抵御物理和远程攻击。
• 设计了紧急访问通道，允许授权医生在患者无法配合时安全访问设备，同时防止未授权访问。
• 实现了低功耗、小面积的安全硬件架构，满足植入式设备的严苛约束。

🏷 关键词

📄 原文摘要

*Equally Credited Authors (ECAs) The advancement of miniature implantable medical devices (IMDs) has made remarkable progress toward creating minimally invasive and broadly accessible therapeutic and monitoring solutions for various complex health conditions [1,2]. However, a critical challenge associated with this trend is ensuring the security of IMDs, which handle highly private data and life-critical therapies. This challenge is greatly amplified by the increasing need for Internet connectivity to remotely access IMDs by patients and doctors. While the adoption of standard cryptography with pre-shared keys (PSKs) [3] addresses many issues in the wireless channel, two major challenges specific to IMDs remain: 1) in emergencies, the responders may not have access to the server storing the PSK and thus cannot program the implant; 2) if the doctor’s account is compromised, e.g., through phishing [4], and the

👥 作者与机构

Wei Wang*, Yumin Su*, Huan-Cheng Liao, Yiwei Zou, Tian Qiu, Kaiyuan Yang

Rice University, Houston, TX