Abstract: When installing and maintaining a wireless sensor network in a medical or factory environment, distribution of keying material to sensor nodes (18) is performed by a key material box (KMB) (12), such as a smartcard or the like. The KMB (12) has a random seed stored to it during manufacture, and upon activation performs an authentication protocol with a sensor node (18) to be updated or installed. The KMB (12) receives node identification information, which is used in conjunction with the random seed to generate keying material for the node (18). The KMB (12) then encrypts the keying material for transmission to the node (18), and transmits over a wired or wireless communication link in a secure manner. The node (18) sends an acknowledgement message back the KMB (12), which then updates the nodes status in look-up tables stored in the KMB (12).

Abstract: In a distributed revocation method, it is individually decided at each of a plurality of autonomous device nodes of a distributed network whether a suspect autonomous device node or suspect distributed key of the distributed network should be removed from the distributed network. A voting session is conducted at which the individual decisions of the plurality of autonomous device nodes are combined to decide whether the suspect autonomous device node or suspect distributed key should be removed from the distributed network. The suspect autonomous device node or suspect distributed key is removed from the distributed network responsive to the voting session deciding in favor of removal.

Abstract: A measurement device (14) includes a measuring unit (42) for obtaining health related parameters of a patient (12), and a body-coupled communication unit (40) for sending at least measurement results. An identification device (20), associated with the patient, includes a body-coupled communication unit (26) for receiving and sending out the measurement results. A gateway device (72) includes a body-coupled communication unit (78) for receiving patient's measurement results. Additionally, a hierarchical relational deployment model (100) facilitates grouping wireless devices in a healthcare environment into subgroups based on relationships between the devices, and a hierarchical key pre-distribution scheme (110) permits distribution of unique keying material for security domains of respective groups of devices, prior to deploying the devices in a healthcare network.

Abstract: A wireless patient point-of-care network (20) includes a plurality of medical devices (22, 24, 26) each with a wireless communication interface (46). Each medical device is configured to provide at least one medical service to a patient. A patient identification device (28) is associated with the patient. The patient identification device includes a wireless communication interface (46, 70) in communication with the wireless communication interfaces (46) of the medical devices. The patient identification device (28) performs a patient identification service that wirelessly associates the medical devices (22, 24, 26) with the patient.

Abstract: A wireless network for monitoring a patient (10) comprises at least one wearable monitor (12, 70) including a physiological condition sensor (34, 74) coupled to the patient (10) to sense and communicate data related to one physiological function of the patient (10). A first body communication unit (16, 78) interfaces with the at least one wearable monitor (12, 70) to communicate over the patient (10) utilizing a near field capacitive body coupled protocol. A relay system (14, 50 72) includes a second body communication unit (18, 52, 80) that receives data from the at least one wearable monitor (12, 70) and communicates with the first body communication unit (16, 78) utilizing the near field capacitive body coupled protocol. An external communication unit (22) communicates the data to a remote medical monitoring station via a cell phone network or the internet.

Abstract: A secure wireless network (2) includes a network (22, 24, 26) that includes one or more wireless nodes (7, 8, 10, 12, 14, 16, 18, 20). A list (5) includes security metadata, which describes access rights or groups of access rights granted to an entity within the wireless network (2) or groups of entities within the wireless network (2).

Abstract: The medical communication system comprises a plurality of medical identification devices (12). Each identification device (12) is attached to one particular patient (14). A registration processor generates a unique patient identification data that is stored in an electronic patient identification code memory (54). Each identification device (12) includes an intra-body wireless communication device (16) which transmits the patient's identification on the patient's body. A medical device (22), which is linked to the patient (14) to measure a vital function, periodically automatically receives the patient's identification code to continually ensure association to a correct patient.

Abstract: A wireless network (2, 150) for monitoring a patient includes a body sensor network (22, 24, 26, 172, 174, 176) that includes one or more wireless sensors (6, 8, 10, 12, 14, 16, 18, 20, 156, 158, 160, 162, 164, 166, 168, 170) operatively connected to the patient that collect and transfer information related to the patient's health to the wireless network (2, 150). A set-up server (4, 154) configures the one or more wireless sensors (6, 8, 10, 12, 14, 16, 18, 20, 156, 158, 160, 162, 164, 166, 168, 170) with keying material before the one or more sensors (6, 8, 10, 12, 14, 16, 18, 20, 156, 158, 160, 162, 164, 166, 168, 170) are deployed to the wireless network (2, 150).

Abstract: A security system for a hierarchical network (10) includes L hierarchical levels each corresponding to a security domain level (16), and a plurality of local network nodes (A, B, . . . , Z). A keying material generator (24) generates a set (30) of correlated keying material for each network node. Each set (30) of keying material is composed of L sub-sets (32) of keying material one for each security domain level (16). A set up server (34) distributes the generated sets (30) of keying material to each network node (A, B, . . . , Z) to enable the network nodes (A, B, . . . , Z) to communicated with one another at a security domain of a hierarchical level k by a use of a corresponding sub-set (32) of the security keying material.

Abstract: A system for securely synchronizing medical devices and providing message integrity with timeliness and uniqueness (10) includes a plurality of medical wireless devices (121, 122, . . . , 12n). The medical devices (121, 122, . . . , 12n) communicate wirelessly with one another. Each message (M) includes a data portion and a timestamp. Each medical device (121, 122, . . . , 12n) includes a sensor (14) which is attached to a patient to monitor a common vital sign. The medical devices (121, 122, . . . , 12n) are synchronized when the sensor (16) of each medical device detects a peak of the vital sign function. At this moment, internal clocks of each medical device (121, 122, . . . 12n) are zeroed and each internal timer starts counting time. Thus, the medical devices are loosely synchronized at approximately the same time. Each generated message (M) is timestamped with a sent time (TSEND) generated by a time count.

Abstract: A system (10) automatically configures and sets up an ad hoc wireless medical network (40). Wireless peer devices (221, 222, . . . , 22n) each includes a peer BCC interface module (241, 242, . . . , 24n) for authenticating a patient and transmitting device identification of a selected peer device (221, 222, . . . , 22n), and a short-range network interface module (301, 302, . . . , 30n) for setting up communication connection between the peer devices (221, 222, . . . , 22n). An active identification device (28), which is linked to the patient (14), authenticates each selected peer device (221, 222, . . . , 22n) and automatically associates each selected peer device (221, 222, . . . , 22n) with the patient (14). A patient BCC interface module (36), coupled with the patient (14), transmits network parameters from the active identification device (28) to the peer devices (221, 222, . . . , 22n).

Abstract: A wireless sensor network for wirelessly monitoring a medical subject includes a plurality of sensor nodes (22, 24, 26, 122, 124, 126). Each sensor node includes a wireless transceiver (46) for sending and receiving wireless messages, a sensor (40, 42, 130, 132, 140, 142) monitoring a characteristic of the medical subject, and a processor (50). The processor is programmed to at least perform an authentication method including: (i) acquiring sensor data via the sensor for a predetermined time (76) responsive to receiving a wireless trigger message; (ii) storing an association code (60, 150, 152, 160, 162) computed from the acquired sensor data; and (iii) authenticating a subsequently received wireless message containing an association code tag by comparing the association code tag with the stored association code. The processor further attaches the stored association code as the association code tag in messages sent to other sensors.

Abstract: A user interface (20, 20?, 20?, 20?? for providing authenticated access to medical equipment, data, or records includes a dynamic display (30, 30??) that selectively shows user options. A touchscreen overlay (40) aligned with the dynamic display identifies a touch location on, in, or adjacent the dynamic display. A fingerprint reader (50, 50?, 50?, 50?? is triggered by the touchscreen overlay and acquires a fingerprint at the touch location. User authentication, access control and logging are performed based on identifying and authenticating the fingerprint.

Abstract: A device (A) is described, which is capable of being operated within a network comprising a touch interface (2) which is adapted to detect that a user (3) touches the touch interface (2) and simultaneously touches a touch interface (6) of another device (B) capable of being operated within a network, and a communication unit (1) adapted to communicate with a communication unit (5) of the other device (B) via a communication network established between the device (A) and the other device (B) when detecting that the user touches the touch interface (2) of the device (A) and simultaneously touches the touch interlace (6) of the other device (B).

Abstract: A medical communication system (10) comprises peer devices (44, 46) which provide medical services which are used for patient monitoring, patient management or other medical procedures involving patients and/or clinicians. A mobile device (12) includes a short-range interface device (22) for discovering peer devices (44, 46) and associated peer devices services (66). A positioning component (14) determines a location of the mobile device (12). An identification component (60) reads a patient identification device (48) and a clinician identification device (50) and identifies a patient (32) and a clinician (30) at the location of the mobile device (12). A visibility manager (120) limits information and services available to the mobile device (12) to current context relevant information and services which are based at least on one of the identity of the patient (32), the identity of the clinician (30), and the identified mobile device location.

Abstract: A patient monitoring system (8) monitors physiological functions of a plurality of patients (12). Each clinician (10) and each patient (12) has an associated identification device (20, 22), which each includes an identification code corresponding to respective clinician and patient. Each identification device (20, 22) includes a respective body-coupled communication device (24, 26) for communicating the identification code to a medical device (14). The clinician (10) activates the medical device (14) which includes a body-coupled communication device (40) including an ID reader (42). The ID reader (42) scans the area to detect whether the clinician identification is present. After the clinician's identification code is read, the medical device (14) is ready to take measurements. The clinician (10) takes the medical device (14) to the patient (12). The ID reader (42) scans the area to detect the patient identification code.

Abstract: System for use in a hospital, comprising a configuration management system (KMS) and a location system, where a current operating mode of medical devices in signal connection with the configuration management system is determined by the KMS from predetermined operating settings stored in a memory.

Abstract: In a tracking method for tracking a local wireless device in a medical facility having a medical facility network (10), the local wireless device (50, 51, 52), which is not connected with the medical facility network (10), is detected based on local wireless communication. (54, 55, 56, 58) between the local wireless device and at least one nearby network device (12, 14, 16) that is connected with the medical facility network. A location of the local wireless device within the medical facility is estimated based on the local wireless communication and information indicative of a location of the at least one nearby network device.

Abstract: A medical ad hoc wireless network (10) is deployed in a healthcare medical facility surrounding individual patients and including wireless nodes (A, B, . . . , Z). Before deployment, each node (A, B, . . . , Z) is pre-initialized with a public key certificate (22) and offers a trust and symmetric key distribution service (32). In joining the ad hoc network (10), a node (B) authenticates and registers to one randomly self-chosen node (A) by using certified public keys (20). Such node (A) becomes Trusted Portal (TPA) of the node (B). The node (B) dynamically registers to a new self-chosen TP node when its old TP node leaves the ad hoc network (10). The network (10) supports symmetric key authentication between nodes registered to the same TP node. Additionally, it supports symmetric key authentication between nodes registered to different TP nodes.

Abstract: Wireless medical apparatus (3) having a transceiver unit (23), an indicating device (27) and an input device (25) and having a function for automatic integration of the medical apparatus (3) into the nearest patient network (13) Allocation of the medical apparatus (3) can be effected by a method in which the apparatus is integrated into the nearest patient network after enabling of the apparatus The patient network can be in the form of a personal area network