Security and privacy issues in implantable medical devices: A comprehensive survey.
Bioengineering is a field in expansion. New technologies are appearing to provide a more efficient treatment of diseases or human deficiencies. Implantable Medical Devices (IMDs) constitute one example, these being devices with more computing, decision making and communication capabilities. Several research works in the computer security field have identified serious security and privacy risks in IMDs that could compromise the implant and even the health of the patient who carries it. This article surveys the main security goals for the next generation of IMDs and analyzes the most relevant protection mechanisms proposed so far. On the one hand, the security proposals must have into consideration the inherent constraints of these small and implanted devices: energy, storage and computing power. On the other hand, proposed solutions must achieve an adequate balance between the safety of the patient and the security level offered, with the battery lifetime being another critical parameter in the design phase.
Department of Computer Science, Universidad Carlos III de Madrid, Avda. Universidad 30, 28911 Leganés, Madrid, Spain; Center for Biomedical Technology, Technical University of Madrid (UPM), Campus Montegancedo, 28223 Pozuelo de Alarcón, Madrid, Spain. Electronic address: carmen.camara@ctb.upm.es.
Carmen
C
Camara
Department of Computer Science, Universidad Carlos III de Madrid, Avda. Universidad 30, 28911 Leganés, Madrid, Spain. Electronic address: pperis@inf.uc3m.es.
Pedro
P
Peris-Lopez
Department of Computer Science, Universidad Carlos III de Madrid, Avda. Universidad 30, 28911 Leganés, Madrid, Spain. Electronic address: jestevez@inf.uc3m.es.
Juan E
JE
Tapiador
D016494:Computer Security / Q000295:instrumentation*; D003219:Confidentiality; D004867:Equipment Design; D019544:Equipment Failure Analysis; D004869:Equipment Safety / Q000379:methods; D004864:Equipment and Supplies; D061214:Patient Safety; D019736:Prostheses and Implants; D017751:Safety Management / Q000458:organization & administration*
Implantable medical devices; Privacy; Security; Survey; m-Health