Abstract: Techniques for managing secure communication certificates for medical devices in a clinical environment are provided. A short-lived, limited-use token may be uniquely assigned to a medical device. The medical device can self-provision a secret key and corresponding public key based on a unique identifier in the token. The medical device generates a certificate signing request (“CSR”) that includes the public key, and sends the CSR and the token to a verification system that serves as an intermediary between medical devices and a certificate authority. The intermediary may only send the CSR to the certificate authority (“CA”) for a certificate if the intermediary is able to validate the token.

Abstract: The present disclosure is directed managing the operation of devices using identity-based cryptography. These techniques may include provisioning a master public key to each system that will communicate with a medical device using device-identifier specific cryptography. A master secret key is provisioned in a trusted processor of the medical device, and the medical device provisions its own device identifier-specific secret key using the master secret key. This setup facilitates several management features, including automatic initial configuration, signed logging, signed backup files, and secure binding of medication containers to the medical device.

Abstract: The present disclosure is directed to managing device authorization through the use of digital signature thresholds. Individual components of a device, or individual devices in a network environment, are associated with separate secret shares from which a digital signature can be derived. The digital signature may be used to authorize performance of a function. A threshold number of such secret shares are used in order to derive the digital signature. Therefore, an authorization process that relies on digital signature verification to determine that a function is authorized will do so if a threshold number of secret shares are available at authorization time.