Abstract: A system and method for facilitating bi-directional authentication between an external device and an implanted medical device (IMD), wherein a therapy application executing on the external device is operative to communicate with the IMD via wireless telemetry communications. Certified security credentials for respective devices may be provisioned with respect to the therapy application. Upon initiating wireless telemetry communications, respective certified security credentials are mutually verified by the external device and the IMD. Responsive to successful verification, a mutual authentication process may be executed between the external device and the IMD using a respective challenge-response sequence.

Abstract: A scheme for securely transferring a patient data file to an intended recipient regardless of a transfer mode selected by a sender. Encryption system executing at the sender device is operative to encrypt each plaintext data line of a file, one by one, using a symmetric key and a starting IV that is incremented per each line, resulting in corresponding ciphertext lines added to an encrypted file. A hash is generated based on the encrypted file. An encrypted header containing the symmetric key, starting IV and the hash is generated using a public key of the recipient, which is appended to the encrypted file. The encrypted header and associated encrypted file are transmitted to the recipient in any manner. Upon receipt, the recipient decrypts the encrypted header using a private key to obtain the symmetric key, starting IV and the hash, which are used by the recipient to validate and decrypt the encrypted file on a line-by-line basis.

Abstract: A system and method for operating an implanted medical device (IMD) based on a waveform player. In one arrangement, the IMD may comprise a first module operative to effectuate a communication interface with an external device for receiving a plurality of program records for storage in a persistent memory, the program records each comprising a plurality of pulse definitions and a plurality of time interval definitions, wherein a pulse definition comprises a set of pulse characteristics to be applied in a particular time interval. A second module may be communicatively coupled to the first module, the second module including a buffer for containing a runtime image of a selected program record loaded from the persistent memory.