Abstract: The present invention relates to a method for operating a first node in a network, the network including a plurality of nodes, the method comprising (a) the first node having a first identifier joining the network by transmitting the first identifier to a second node having a second identifier, (b) the first node generating a first key on the basis of the second identifier (c) the first node authenticating the second node by means of the first key, (d) the first node communicating with a third node if the first and second keys are equal.

Abstract: A security system for a hierarchical network (10) includes L hierarchical levels each corresponding to a security domain level (16), and a plurality of local network nodes (A, B, . . . , Z). A keying material generator (24) generates a set (30) of correlated keying material for each network node. Each set (30) of keying material is composed of L sub-sets (32) of keying material one for each security domain level (16). A set up server (34) distributes the generated sets (30) of keying material to each network node (A, B, . . . , Z) to enable the network nodes (A, B, . . . , Z) to communicate with one another at a security domain of a hierarchical level k by a use of a corresponding sub-set (32) of the security keying material.

Abstract: A wireless patient point-of-care network (20) includes a plurality of medical devices (22, 24, 26) each with a wireless communication interface (46). Each medical device is configured to provide at least one medical service to a patient. A patient identification device (28) is associated with the patient. The patient identification device includes a wireless communication interface (46?, 70) in communication with the wireless communication interfaces (46) of the medical devices. The patient identification device (28) performs a patient identification service that wirelessly associates the medical devices (22, 24, 26) with the patient.

Abstract: There is provided a fall detection and/or prevention system, comprising one or more sensors for detecting characteristics of movement of a user of the fall detection and/or prevention system and for generating corresponding signals; processing means for analyzing the signals from the one or more sensors using a fall detection algorithm to determine if a fall has taken place or is likely to take place; wherein the processing means is further adapted to update said fall detection algorithm based on the result of the analysis of the signals and an indication whether a fall has actually taken place from the user or a third party.

Abstract: A wireless network (2, 150) for monitoring a patient includes a body sensor network (22, 24, 26, 172, 174, 176) that includes one or more wireless sensors (6, 8, 10, 12, 14, 16, 18, 20, 156, 158, 160, 162, 164, 166, 168, 170) operatively connected to the patient that collect and transfer information related to the patient's health to the wireless network (2, 150). A set-up server (4, 154) configures the one or more wireless sensors (6, 8, 10, 12, 14, 16, 18, 20, 156, 158, 160, 162, 164, 166, 168, 170) with keying material before the one or more sensors (6, 8, 10, 12, 14, 16, 18, 20, 156, 158, 160, 162, 164, 166, 168, 170) are deployed to the wireless network (2, 150).

Abstract: There is provided an apparatus for estimating the power used by a user in performing the vertical component of a movement, the apparatus comprising an accelerometer for attachment to a user and for measuring the acceleration experienced by the user; the apparatus further comprising a processor configured to receive the measurements of the acceleration from the accelerometer attached to the user; estimate the vertical accelerations from the received measurements; and estimate the power used from the vertical accelerations.

Abstract: A wireless network for monitoring a patient (10) comprises at least one wearable monitor (12, 70) including a physiological condition sensor (34, 74) coupled to the patient (10) to sense and communicate data related to one physiological function of the patient (10). A first body communication unit (16, 78) interfaces with the at least one wearable monitor (12, 70) to communicate over the patient (10) utilizing a near field capacitive body coupled protocol. A relay system (14, 50 72) includes a second body communication unit (18, 52, 80) that receives data from the at least one wearable monitor (12, 70) and communicates with the first body communication unit (16, 78) utilizing the near field capacitive body coupled protocol. An external communication unit (22) communicates the data to a remote medical monitoring station via a cell phone network or the internet.

Abstract: A medical ad hoc wireless network (10) is deployed in a healthcare medical facility surrounding individual patients and including wireless nodes (A, B, . . . , Z). Before deployment, each node (A, B, . . . , Z) is pre-initialized with a public key certificate (22) and offers a trust and symmetric key distribution service (32). In joining the ad hoc network (10), a node (B) authenticates and registers to one randomly self-chosen node (A) by using certified public keys (20). Such node (A) becomes Trusted Portal (TPA) of the node (B). The node (B) dynamically registers to a new self-chosen TP node when its old TP node leaves the ad hoc network (10). The network (10) supports symmetric key authentication between nodes registered to the same TP node. Additionally, it supports symmetric key authentication between nodes registered to different TP nodes.

Abstract: The present invention relates to a system and corresponding method for a secure end-to-end patient healthcare system which includes wireless medical sensors adapted to be attached to a patient's body and in communication with each other forming a body sensor network within a wireless medical sensor network including one or more body sensor networks; ?-secure keying means incorporated into each wireless medical sensor for enabling secure communications between the wireless medical sensors, and a personal security manager within the body sensor network and in communication with the wireless medical sensors within the body sensor network, the personal security manager providing secure communications with backend services and providing security relationships within the body sensor network by means of the ?-secure keying means, wherein the ?-secure keying means are such that a coalition of no more than ? compromised wireless medical sensors conceals a pairwise key between any two non-compromised wireless medical s

Abstract: The invention relates to a network with a first node (102) comprising first pre-distributed keying material being assigned to the first node before the first node is connected to the network and a second node (104) comprising second pre-distributed keying material being assigned to the second node before the second node is connected to the network. The first node is configured to establish a secure communication (112) to the second node based on the first and second pre-distributed keying materials, without relying on a trust center (108). Pre-distributed keying materials can be replaced in a secure manner with post-deployed keying materials by the network trust center. Nodes can establish further secure communications based on post-deployed keying materials.

Abstract: The invention relates to a node (100) for a network such as a wireless control network or the like. In this network, each node (100) comprises a identifier (104) and keying material (102), means for authenticating (112) the node's identifier based on the node's keying material and means for checking (114) the access control rights of the node in a distributed manner based on the node's multidimensional identity and access rights corresponding to the node's identity. Additionally, the invention allows the node to generate a common key with any other node in the first keying first network that can be used to enable further material identifier secure communications.

Abstract: A wireless sensor network for wirelessly monitoring a medical subject includes a plurality of sensor nodes (22, 24, 26, 122, 124, 126). Each sensor node includes a wireless transceiver (46) for sending and receiving wireless messages, a sensor (40, 42, 130, 132, 140, 142) monitoring a characteristic of the medical subject, and a processor (50). The processor is programmed to at least perform an authentication method including: (i) acquiring sensor data via the sensor for a predetermined time (76) responsive to receiving a wireless trigger message; (ii) storing an association code (60, 150, 152, 160, 162) computed from the acquired sensor data; and (iii) authenticating a subsequently received wireless message containing an association code tag by comparing the association code tag with the stored association code. The processor further attaches the stored association code as the association code tag in messages sent to other sensors.

Abstract: The present invention relates to a method for identifying and/or, authenticating, and/or authorizing a first radio station in a radio network, comprising the steps of (a) at the first radio station, transmitting to a second radio station a first radio station identifier computed from a set of identity parameters based on the identity of the first radio station, comprising at least one identity parameter, (b) at the first radio station, transmitting at least one identity parameter from the set of identity parameters, (c) at the second radio station, comparing an authentication identifier computed on the basis of the transmitted identity parameter to the first radio station identifier for enabling a subsequent communication between the first and second radio stations.

Abstract: The invention relates to a system and method for wirelessly monitoring a patient (4), the system comprising a medical sensor (1) for collecting medical data and a coupling interface (2) for coupling with a monitor (3). The medical sensor (1) is attached to the patient's (4) body, and the medical data collected by the medical sensor (1) is transmitted to the coupling interface (2) via body-coupled communication (5). Preferably, the collected medical data is streamed to the coupling interface (2) via body-coupled communication (5). This way, a secure and reliable system and method for wireless patient monitoring are achieved which only require little power.

Abstract: A patient monitoring system (8) monitors physiological functions of a plurality of patients (12). Each clinician (10) and each patient (12) has an associated identification device (20, 22), which each includes an identification code corresponding to respective clinician and patient. Each identification device (20, 22) includes a respective body-coupled communication device (24, 26) for communicating the identification code to a medical device (14). The clinician (10) activates the medical device (14) which includes a body-coupled communication device (40) including an ID reader (42). The ID reader (42) scans the area to detect whether the clinician identification is present. After the clinician's identification code is read, the medical device (14) is ready to take measurements. The clinician (10) takes the medical device (14) to the patient (12). The ID reader (42) scans the area to detect the patient identification code.

Abstract: A device for transmitting in multiple coupling modes has a transmission module (11), at least one periphery module (18), and an antenna (16, 17) for each of the multiple coupling modes. Further, in a method of switching between multiple coupling modes, switching is conducted between at least polling and listening phases of first and second coupling modes. The device and the method enable a seamless switching between e.g. a near field communication and a body coupled communication. Such a coupling or switching is particularly useful for performing secure transactions whereby through body coupled communication a body-worn tag is interrogated which provides a secure code for a transaction initiated through near field communication with a transaction terminal.

Abstract: To improve the power efficiency of a monitoring system, especially for worn devices, the present invention provides a monitoring system (300) comprising a physiological signal monitor (310) configured to monitor at least one physiological signal; a processor (320) configured to receive the output signal of the physiological signal monitor and detect an abnormal occurrence of at least one physiological signal; and a movement detection sub-system (330) coupled to receive the output signal of the processor and configured to monitor the movement of a target body, based on the output signal of the processor, for detecting the abnormal situation. The power consumption of the whole system can be decreased by using the monitoring result of physiological signals as a trigger for the movement detection sub-system.

Abstract: A method, wireless system and a wireless device are described. The method, system and device provide multidimensional identification, authentication, authorization and key distribution providing secure communications at a deepest common security domain.

Abstract: A system for securely synchronizing medical devices and providing message integrity with timeliness and uniqueness (10) includes a plurality of medical wireless devices (121, 122, . . . , 12n). The medical devices (121, 122, . . . , 12n) communicate wirelessly with one another. Each message (M) includes a data portion and a timestamp. Each medical device (121, 122, . . . , 12n) includes a sensor (14) which is attached to a patient to monitor a common vital sign. The medical devices (121, 122, . . . , 12n) are synchronized when the sensor (16) of each medical device detects a peak of the vital sign function. At this moment, internal clocks of each medical device (121, 122, . . . , 12n) are zeroed and each internal timer starts counting time. Thus, the medical devices are loosely synchronized at approximately the same time. Each generated message (M) is timestamped with a send time (TSEND) generated by a time count.

Abstract: The invention relates in general to a network and to a method for initializing a trust center link key. According to an embodiment of the invention, a network is provided with a new node (106) comprising node specific cryptographic keying material, wherein the new node is configured to specify an cryptographic key based on the node specific cryptographic keying material, a first node (102) requiring the cryptographic key for a network security initialization and means (108) for providing a missing cryptographic key to the first node from a storage different to the new node, wherein the missing cryptographic key is equal to the cryptographic key.