Securing Implantable Medical Devices against cyberspace attacks

We provide in this paper a novel Cyber Physical System (CPS) architecture to protect and supervise Implantable Medical Devices, and increase the network quality of service. Powerless mutual authentication and privacy protocols between the IMD and the CPS gateway, and between the CPS gateway and physicians are proposed, to shield the IMDs against battery depletion attacks and to reduce to the maximum possible the energy overhead induced by security measures. The proposed protocols allows also to enforce privacy and protection from eavesdropping and replay attacks. It uses biometric key extraction mechanisms from the electrocardiogram signal, which is simultaneously collected by the IMD and the CPS gateway. Using the AVISPA tool, we formally validate the proposed protocols.