Wearable cardioverter defibrillator (WCD) system using security NFC tag for requests of data from memory
A wearable cardioverter defibrillator (WCD) system includes a processor, a memory, a wireless communication module (DWCM), and an NFC tag that stores information for how an accessing device may access the DWCM wirelessly. An accessing device such as a defibrillator configurator with an NFC reader may read the NFC tag of the WCD system, if it has adequate permission to do so. Upon so reading, the accessing device will know how to address the DWCM wirelessly, and thus install or update configuration data, software updates, or request memory downloads from operations. The use of the NFC tag requires close proximity, which hampers both inadvertently programming the wrong WCD system, plus a WCD system being attacked maliciously.
1. A method to authenticate a user of an accessing device of a wearable cardioverter defibrillator (WCD) comprising a support structure configured to be worn by a patient, a power source, an energy storage module configured to be charged from the power source to store an electrical charge, a discharge circuit coupled to the energy storage module, the discharge circuit controllable to discharge the electrical charge through the patient while the support structure is worn by the patient, a defibrillator memory configured to store a program, and a defibrillator processor configured to run the stored program to generate a shock decision, to store in the defibrillator memory action data relating to at least one of the shock decision and inputs for running the program, and to control the discharge circuit to discharge the electrical charge responsive to the shock decision being a decision to shock, the method comprising:
reading data encoded on the WCD using the accessing device, wherein the encoded data includes access data for the WCD;
sending the access data to a secure web site to determine if the user of the accessing device has permission to communicate with the WCD;
receiving permission information from the secure website in response to sending the access data;
operating with the WCD using the accessing device when the received permission information indicates that the user of the accessing device has permission to operate with the WCD, wherein operating with the WCD includes providing configuration data to the defibrillator memory; and
delivering the electrical charge as therapy to the patient based on the configuration data stored in the defibrillator memory responsive to the decision to shock.
2. The method of claim 1 , wherein the user of the accessing device is unable to operate with the WCD when the received permission information indicates that the user of the accessing device does not have permission to operate with the WCD.
3. The method of claim 1 , further comprising communicating updated configuration data to the WCD when the received permission information indicates that the user of the accessing device has permission to operate with the WCD.
4. The method of claim 1 , wherein the access data includes a serial number for the WCD, and the serial number is used by the secure website to determine if the user of the accessing device has permission to operate with the WCD.
5. The method of claim 1 , further comprising:
decoding the encoded data read with the accessing device prior to sending the access data to the secure website.
6. The method of claim 1 , wherein the permission information includes a security key, and further comprising communicating with the WCD via a secure communication link using the security key.
7. The method of claim 1 , further comprising receiving a prompt to exchange validation data with the secure website before receiving the permission information.
8. The method of claim 1 , wherein the user of the accessing device is a clinician.
9. The method of claim 1 , wherein the configuration data comprises a configuration setting for the WCD specific to the patient.