Wearable cardioverter defibrillator (WCD) system using security NFC tag for requests of data from memory
A wearable cardioverter defibrillator (WCD) system includes a processor, a memory, a wireless communication module (DWCM), and an NFC tag that stores information for how an accessing device may access the DWCM wirelessly. An accessing device such as a defibrillator configurator with an NFC reader may read the NFC tag of the WCD system, if it has adequate permission to do so. Upon so reading, the accessing device will know how to address the DWCM wirelessly, and thus install or update configuration data, software updates, or request memory downloads from operations. The use of the NFC tag requires close proximity, which hampers both inadvertently programming the wrong WCD system, plus a WCD system being attacked maliciously.
1. A wearable cardioverter defibrillator (WCD) system configured to wirelessly exchange data with an accessing device distinct from the WCD system, the accessing device provided in a peripheral housing and including, within the peripheral housing, a Near Field Communications (NFC) reader configured to transmit a wireless interrogation wave and to receive a backscatter wave transmitted responsive to the interrogation wave, the backscatter wave including encoded access data, a peripheral processor configured to generate validation data from the encoded access data, and an accessing wireless communication module (AWCM) configured to transmit the validation data, the WCD system comprising:
an electrode;
a support structure configured to be worn by a patient so as to support the electrode to make electrical contact with a body of the patient;
an energy storage module configured to store an electrical charge;
a discharge circuit coupled to the energy storage module, the discharge circuit controllable to discharge the stored electrical charge via the electrode through the patient;
a defibrillator memory configured to store a program;
an NFC tag having a tag memory with access data stored in the tag memory, the NFC tag configured to receive the wireless interrogation wave transmitted the NFC reader, the NFC tag further configured to transmit wirelessly the backscatter wave responsive to the received interrogation wave transmitted by the NFC reader, the backscatter wave encoding the access data;
a defibrillator wireless communication module (DWCM) configured to receive wirelessly the validation data transmitted by the AWCM; and
a defibrillator processor cooperating with the DWCM, the defibrillator processor configured to:
run the stored program so as to generate a certain decision to shock or not shock,
store in the defibrillator memory action data relating to at least one of the certain decision and inputs received from a user interface for thus running the program,
determine that the received validation data has been generated from the backscattered encoded access data,
cause the DWCM to transmit wirelessly a portion of the action data responsive to determining that the received validation data has been generated from the backscattered encoded access data, and
control the discharge circuit to thus discharge the electrical charge via the electrode responsive to the certain decision being to shock.
2. The WCD system of claim 1 , in which
the NFC tag is configured to receive the wireless interrogation wave from the NFC reader when the peripheral housing is at a distance of at most 10″ from the NFC tag.
3. The WCD system of claim 1 , in which
the validation data includes the access data or a hash of the access data.
4. The WCD system of claim 1 , in which
the DWCM includes a network address, and
the validation data includes the network address.
5. The WCD system of claim 1 , in which
the backscattered encoded access data is encrypted.
6. The WCD system of claim 1 , in which
the tag memory is further configured to store a tag password, and
the NFC tag is further configured to not backscatter the encoded access data unless the interrogation wave also encodes the tag password.
7. The WCD system of claim 6 , in which
the WCD system further comprises a serial number, and
the tag password is or is related to the serial number.
8. The WCD system of claim 1 , in which
the DWCM further comprises a network address, and
the DWCM does not transmit the network address in response to a query signal by the AWCM.
9. The WCD system of claim 1 , further comprising:
a sensor configured to sense a physiological parameter of the patient, and
in which the action data further includes a value of the physiological parameter.
10. The WCD system of claim 1 , in which
the action data further includes an identifying number that identifies the patient.
11. The WCD system of claim 1 , further comprising:
a power source, and in which
the action data further includes a level of energy of the power source.
12. The WCD system of claim 1 , in which
the NFC tag is further configured to receive an other wireless interrogation wave from an other NFC reader, to decode updated tag data from the other wireless interrogation wave, and to store the updated tag data in the tag memory in lieu of the access data.
13. The WCD system of claim 1 , in which
the NFC tag is further configured to receive an other wireless interrogation wave from the NFC reader, to decode updated tag data from the other wireless interrogation wave, and to store the updated tag data in the tag memory in lieu of the access data.
14. The WCD system of claim 1 , in which
the DWCM is further configured to receive wirelessly from the AWCM updated tag data, and
the defibrillator processor is further configured to store the updated tag data in the tag memory in lieu of the access data.
15. The WCD system of claim 1 , further comprising:
a defibrillator housing, the defibrillator processor and the NFC tag being located within the defibrillator housing; and
a service port in the defibrillator housing that has a contact node electrically coupled with the defibrillator processor, and
in which the defibrillator processor is further configured to store in the tag memory in lieu of the access data updated tag data received via the contact node.
16. The WCD system of claim 1 , in which
the defibrillator memory is further configured to store back-up data, and
the defibrillator processor is further configured to store in the tag memory in lieu of the access data the back-up data that is stored in the defibrillator memory.
17. The WCD system of claim 16 , in which
the DWCM is further configured to have received wirelessly the back-up data stored in the defibrillator memory.
18. The WCD system of claim 16 , further comprising:
a defibrillator housing, the defibrillator processor and the NFC tag being located within the defibrillator housing; and
a service port in the defibrillator housing that has a contact node electrically coupled with the defibrillator processor, and
in which the defibrillator processor is further configured to have received via the contact node the back-up data that can be stored in the defibrillator memory.
19. The WCD system of claim 1 , in which
the AWCM is further configured to transmit a request for the portion of the action data,
the DWCM is further configured to receive wirelessly the request transmitted by the AWCM, and
the defibrillator processor is configured to cause the DWCM to transmit the portion of the action data responsive to the received request.
20. The WCD system of claim 19 , in which
the action data is transmitted only if the request is received by the DWCM before a timeout period tracked by the DWCM expires after the backscatter wave is transmitted.