A medical apparatus for a patient comprises an external system configured to transmit one or more transmission signals, each transmission signal comprising at least power or data; and an implantable system configured to receive the one or more transmission signals from the external system. The apparatus can be configured to treat a patient and/or record patient data. Methods of treating a patient and recording patient data are also provided.

Systems, apparatus, methods and computer-readable storage media that facilitate monitoring the integrity of telemetry connectivity between an implantable device and an external device are provided. In one embodiment, an implantable device includes a monitoring component that monitors advertisement signal information identifying an amount of advertisement signals transmitted to the external device within a defined time period, and telemetry session information identifying an amount of the telemetry sessions that are established between the external device and the implantable device within the defined time period. A connectivity assessment component of the implantable device further determines whether a telemetry connectivity problem exists between the external device and the implantable device based on a degree of miscorrelation between the advertisement signal information and the telemetry session information.

Embodiments described herein relate to implantable medical devices (IMDs) and methods for use therewith. Such a method includes, during each of a plurality of message alert periods during which a communication capability of the IMD is enabled, determining whether a valid message is detected. In response to determining that no valid message was detected during a message alert period, the communication capability of the IMD is temporarily disable for a disable period. A length of the disable period may be increased in response to no valid message being detected during two consecutive message alert periods. A length of the disable period may be dependent on an operational mode of the IMD, such that the length of the disable period differs for different operational modes. The IMD may also enter a noise state, and remain in the noise state until the IMD receives a specified number of valid messages.

Systems, apparatus, methods and non-transitory computer readable media facilitating telemetry data communication security between an implantable device and an external clinician device are provided. An implantable device can include a security component configured to generate security information based on reception of a clinician telemetry session request from the clinician device via a first telemetry communication protocol. The security information can include a session identifier and a first session key, and the clinician telemetry session request can include a clinician device identifier associated with the clinician device. The implantable device can further include a communication component configured to establish a clinician telemetry session with the clinician device using a second telemetry communication protocol based on determining that a connection request, received via the second telemetry communication protocol, was transmitted by the clinician device based on inclusion of the clinician device in the connection request.

A system and method for facilitating remote care management involving a patient having an implantable medical device (IMD). Upon establishing a remote care session between a patient controller device and a clinician programmer, wherein the clinician and the patient are remotely located with respect to each other, input from the patient or the clinician may be received via a user interface control associated with a particular functionality or aspect of the remote care session, including audiovisual (AV) communications, remote therapy programming, and related context. Responsive to the user input, a dialog interface is effectuated at one of the patient controller device and/or the clinician programmer. A user characterization label is received via the dialog interface from the user, wherein the user characterization label is indicative of a subjective assessment of the particular functionality of the remote care session, which may be used in generating user-labeled data pertaining thereto.

A communication platform at least partially implements secure communications between a medical device and a trusted authority (TA) service provider. The secure communications prevent access to the secure communications by the communication platform while permitting access to the secure communications at the medical device and/or at the trusted authority service provider.

An implantable electrical stimulating device and system provides for a remote determination of the identity of the person in whom the stimulating device is implanted. The stimulating device may be a pacemaker, a defibrillator, another medical device or a non-medical device. The bases for the remote identification are (1) the comingling of (A) biologic identification information of the person linked to the stimulating device, and (B) information pertaining to a physiologic parameter (e.g. heart rate information) of that person, and (2) the modulation of the physiologic parameter by external information. Embodiments of the invention in which the stimulating device is external to the person are possible. By utilizing the apparatus providing for the remote identification of a person plus stimulating device, one aspect of secure communication—that based on reliable mutual identification of each participant in a communication—is achieved.

In one embodiment, a method of programming an implantable medical device (IMD) to provide therapeutic operations for a patient, comprises: conducting a first communication session between the IMD with an external programming device when network connectivity for a remote server for medical device management is not available for the external programming device; receiving programming data by the IMD from the external programming device to provide therapeutic operations according to at least one instance of settings data during the first communication session, wherein the at least one instance of settings data is validated by a temporary key; conducting a second communication session between the IMD with an external device when network connectivity to the remote server for medical device management is available for the external device; and replacing validation data signed using the temporary key with the received validation data.

In one embodiment, a method of programming an implantable medical device (IMD) to provide therapeutic operations for a patient, comprises: receiving first programming data by the IMD from the external programming device to provide therapeutic operations according to at least one instance of settings data during a first communication session; receiving second programming data by the IMD from the external programming device to define limitations of reprogramming during one or more subsequent offline programming sessions; conducting a second communication session between the IMD with an external programming device when network connectivity is not available; receiving third programming data by IMD from the external programming device to provide therapeutic operations according to at least one instance of settings data during the second communication session; and determining whether the third programming data is permitted according to limitations defined by the second programming data.

Embodiments described herein relate to implantable medical devices (IMDs) and methods for use therewith. Such a method includes, during each of a plurality of message alert periods during which a communication capability of the IMD is enabled, determining whether a valid message is detected. In response to determining that no valid message was detected during a message alert period, the communication capability of the IMD is temporarily disable for a disable period. A length of the disable period may be increased in response to no valid message being detected during two consecutive message alert periods. A length of the disable period may be dependent on an operational mode of the IMD, such that the length of the disable period differs for different operational modes. The IMD may also enter a noise state, and remain in the noise state until the IMD receives a specified number of valid messages.