Secure software update for internet-connected medical devices

1 . A system, comprising:

a firewall device;

an Internet-connected device communicatively coupled to the firewall device and at least one network; and

a medical device communicatively coupled to the firewall device, the medical device comprising:

at least one hardware computer processor;

a display configured to show a graphical user interface (GUI); and

at least one non-transitory storage device encoded with a plurality of instructions that, when executed by the at least one hardware computer processor perform a method for securely updating software stored by the at least one non-transitory storage device by:

receiving a notification from the firewall device that a software update for the medical device is available;

receiving a user input via the GUI to perform the software update;

determining whether the medical device is in a patient use state; and

in response to receiving the user input to perform the software update and determining that the medical device is not in a patient use state, sending a request to the firewall device to establish a bidirectional data transfer communication link between the medical device and the Internet-connected device,

wherein the firewall device and the Internet-connected device are configured to isolate the medical device from the at least one network.

2 . The system of claim 1 , wherein the Internet-connected device is configured to:

check whether new software is available for the medical device; and

download, via the at least one network, software from a secure data server, the software update for the medical device when new software is available for the medical device.

3 . The system of claim 2 , wherein the Internet-connected device is configured to check whether new software is available for the medical device by issuing a request to the secure data server to determine whether the new software is available.

4 . The system of claim 2 , wherein the Internet-connected device is configured to check whether new software is available for the medical device by receiving an indication from the secure data server that the new software is available.

5 . The system of claim 2 , wherein the Internet-connected device is further configured to:

verify data integrity of the software update.

6 . The system of claim 5 , wherein the Internet-connected device is further configured to:

validate the software update for data tampering.

7 . The system of claim 5 , wherein the Internet-connected device is further configured to:

notify the firewall device that the software update is available for the medical device when the data integrity of the software update is verified and/or the software update is validated for data tampering.

8 . The system of claim 1 , wherein the firewall device is configured to:

receive, from the Internet-connected device that the software update for the medical device is available; and

notify the medical device that the software update for the medical device is available.

9 . The system of claim 8 , wherein the firewall device is further configured to:

receive a request from the medical device to establish the bidirectional data transfer communication link between the medical device and the Internet-connected device; and

establish the bidirectional data transfer communication link between the medical device and the Internet-connected device in response to receiving the request.

10 . The system of claim 1 , wherein determining whether the medical device is in a patient use state is performed by determining whether the medical device is in an idle state during which it is safe to perform the software update.

11 . The system of claim 1 , wherein the method for securely updating software comprises:

downloading information associated with the software update via the bidirectional data transfer communication link.

12 . The system of claim 11 , wherein the method for securely updating software further comprises:

verifying data integrity of the information associated with the software update and/or validating one or more signatures associated with the information associated with the software update.

13 . The system of claim 12 , wherein the method for securely updating software further comprises:

updating the software stored by the at least one non-transitory storage device in response to verifying data integrity of the information associated with the software update and/or validating one or more signatures associated with the information associated with the software update.

14 . The system of claim 13 , wherein the method for securely updating software comprises:

providing on the GUI an indication of a status of the updating the software.

15 . The system of claim 1 , wherein

the firewall device and the Internet-connected device are integrated into a single component, and

the single component is partitioned to separate components of the firewall device and components of the Internet-connected device.

16 . The system of claim 1 , wherein the medical device comprises a controller for a cardiac support system.

17 . The system of claim 16 , wherein the cardiac support system includes a heart pump.

18 . A method of securely updating software for a medical device, the method comprising:

receiving, by the medical device from a firewall device, an indication that a software update for the medical device is available;

receiving, by a display configured to show a graphical user interface (GUI), a user input to perform the software update;

determining whether the medical device is in a patient use state; and

in response to receiving the user input to perform the software update and determining that the medical device is not a patient use state, sending a request to the firewall device to establish a bidirectional data transfer communication link between the medical device and an Internet-connected device, wherein the firewall device and the Internet-connected device are configured to isolate the medical device from at least one network communicatively coupled to the Internet-connected device.