Systems, devices, and methods for authentication in an analyte monitoring environment
Systems, devices, and methods are provided that allow the authentication of devices within analyte monitoring systems. The analyte monitoring systems can be in vivo systems and can include a sensor control device with a sensor and accompanying circuitry, as well as a reader device for communicating with the sensor control device. The analyte monitoring systems can interface with a trusted computer system located at a remote site. Numerous techniques of authentication are disclosed that can enable the detection of counterfeit components, such as a counterfeit sensor control device.
1. A method of authentication in an in vivo analyte monitoring system, the method comprising:
retrieving a private key, by a reader device, from product packaging comprising a readable or scannable element representative of the private key, wherein the analyte monitoring system includes a sensor control device comprising a sensor and analyte monitoring circuitry, wherein the sensor is adapted to be inserted into the body of a user, and wherein the product packaging is external to the sensor control device;
attempting to authenticate the private key using a public key stored within the reader device;
if the reader device determines that the private key is authentic and if the sensor has been inserted into the body of the user, then:
receiving, with the reader device, information indicative of an analyte level of the user from the sensor control device; and
displaying the information indicative of the analyte level on a display of the reader device; and
if the reader device determines that the private key is not authentic, then preventing operation of the reader device with the sensor control device.
2. The method of claim 1 , further comprising, in response to determining that the private key is not authentic, displaying a message on the display of the reader device indicating that the sensor control device is not authorized for use.
3. The method of claim 1 , wherein the readable or scannable element is a barcode, wherein retrieving the private key by the reader device comprises scanning the barcode on the product packaging with an optical scanner of the reader device, and wherein the barcode is representative of the private key.
4. The method of claim 3 , wherein the barcode is a QR code.
5. The method of claim 1 , wherein the readable or scannable element is an radio frequency identification (RFID) label, wherein retrieving the private key by the reader device comprises scanning the product packaging with an near field communication (NFC) component of the reader device, and wherein the RFID label is configured to provide information representative of the private key in response to an NFC scan.
6. The method of claim 1 , wherein the readable or scannable element comprises a printed indicia representative of the private key, and wherein the method further comprises prompting the user to manually input the printed indicia representative of the private key into the reader device.
7. The method of claim 1 , wherein the reader device is a smart phone, a tablet, a smart glass, or a smart glasses.
8. The method of claim 1 , wherein the product packaging is a container for the sensor control device.
9. The method of claim 1 , wherein the product packaging is a container for an inserter configured to place the sensor control device on a user's body such that at least a portion of the sensor is in contact with a body fluid of the user.
10. The method of claim 1 , further comprising communicating, by the reader device, with the sensor control device over a local wireless communication path using a near field communication (NFC) protocol.
11. The method of claim 1 , further comprising communicating, by the reader device, with the sensor control device over a local wireless communication path using a radio frequency identification (RFID) protocol.
12. The method of claim 1 , further comprising communicating, by the reader device, with the sensor control device over a wireless communication path according to a wireless communication protocol.
13. The method of claim 1 , wherein the reader device comprises location determining hardware configured to determine a current location of the reader device, the method further comprising:
determining a current location of the reader device;
retrieving an identifier from the product packaging;
sending the current location of the reader device and the retrieved identifier to a trusted computer system; and
determining, by the trusted computer system, whether the reader device is authorized to operate with the sensor control device in the current location.
14. The method of claim 13 , the method further comprising terminating operation between the reader device and the sensor control device in response to a determination that the reader device is not authorized to operate with the sensor control device in the current location.
15. The method of claim 14 , further comprising displaying a message on a display of the reader device indicating that the sensor control device is not authorized for use in the current location.
16. The method of claim 13 , wherein the identifier comprises a serial number of the sensor control device.