{"id":6606,"date":"2016-05-10T16:10:00","date_gmt":"2016-05-10T16:10:00","guid":{"rendered":"http:\/\/associatednews.us\/content\/2016\/05\/10\/researchers-hope-this-invention-could-wave-away-medical-data-hacks\/"},"modified":"2016-05-10T16:10:00","modified_gmt":"2016-05-10T16:10:00","slug":"researchers-hope-this-invention-could-wave-away-medical-data-hacks","status":"publish","type":"post","link":"https:\/\/associatednews.us\/content\/researchers-hope-this-invention-could-wave-away-medical-data-hacks\/","title":{"rendered":"Researchers Hope This Invention Could Wave Away Medical Data Hacks"},"content":{"rendered":"<p><span style=\"font-style:italic;font-size:16px\">By  <a class=\"colorbox\" href=\"http:\/\/www.npr.org\/sections\/alltechconsidered\/2016\/05\/10\/476941159\/researchers-hope-this-invention-could-wave-away-medical-data-hacks?utm_medium=RSS&amp;utm_campaign=healthcare\">Jordan Gass-Poor\u00e9<\/a><\/span>  <\/p>\n<div class=\"ftpimagefix\" style=\"float:left\"><a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.npr.org\/sections\/alltechconsidered\/2016\/05\/10\/476941159\/researchers-hope-this-invention-could-wave-away-medical-data-hacks?utm_medium=RSS&amp;utm_campaign=healthcare\"><img decoding=\"async\" width=\"150\" src=\"https:\/\/media.npr.org\/assets\/img\/2016\/05\/06\/20160506-pierson-kotz-wand-eb-015-516548917c9db039c6704b1a964309a43eb42c20-s1100-c15.jpg\" title=\"Dartmouth College researcher Timothy Pierson holds a prototype of Wanda, which is designed to establish secure wireless connections between devices that generate data.\" alt=\"Dartmouth College researcher Timothy Pierson holds a prototype of Wanda, which is designed to establish secure wireless connections between devices that generate data.\"><\/a><\/div>\n<div>\n<div><\/div>\n<div>\n<div>\n<p>Dartmouth College researcher Timothy Pierson holds a prototype of Wanda, which is designed to establish secure wireless connections between devices that generate data. <strong>Eli Burakian\/Dartmouth College<\/strong> <strong>hide caption<\/strong><\/p>\n<\/div>\n<p><strong>toggle caption<\/strong> <span>Eli Burakian\/Dartmouth College<\/span><\/div>\n<\/div>\n<p>Doctors&#8217; scrawls on prescription pads and medical folders are so analog.<\/p>\n<p>These days, they&#8217;re prescribing and keeping track of patients&#8217; records using digital devices connected to wireless networks, sometimes remotely. More medical devices are also becoming increasingly small and wearable; they often connect with a handheld controller or even your smartphone through Bluetooth or Wi-Fi, sometimes <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.npr.org\/sections\/alltechconsidered\/2015\/11\/18\/456217932\/heres-how-an-iphone-helps-one-teen-and-his-mom-manage-diabetes\">sending the data directly to physicians<\/a>.<\/p>\n<p>This convenience, accessibility and cost reduction for our health care comes with risks. A few keystrokes could end in a wrong treatment, for instance \u2014 in 2007, Dick Cheney&#8217;s cardiologist <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.nytimes.com\/2013\/10\/29\/science\/of-fact-fiction-and-defibrillators.html?_r=1&amp;pagewanted=all\">disabled the wireless functionality<\/a> of the former vice president&#8217;s heart defibrillator out of safety concerns.<\/p>\n<p>The overarching and long-growing problem is this: How do we protect the highly personal data flowing through wirelessly connected medical devices?<\/p>\n<p>Enter Wanda, a prototype developed by Dartmouth College doctoral student Timothy Pierson and his team.<\/p>\n<p>Wanda is essentially two antennae attached to a ruler, in a wand-like fashion. The device uses radio waves to establish a secure wireless connection between devices that generate data.<\/p>\n<p>Here&#8217;s <a class=\"colorbox\" rel=\"nofollow\" href=\"https:\/\/thawproject.files.wordpress.com\/2016\/02\/pierson-wanda.pdf\">how it works<\/a>: The user turns on the medical device and the digital device it&#8217;s getting linked to and then points Wanda \u2014 about 11 inches or less away \u2014 at the devices one at a time. Wanda then generates and transmits a secret password to each of the devices, connecting them securely within seconds.<\/p>\n<p>Many Wi-Fi networks that transmit personal data aren&#8217;t secure connections \u2014 and cybercriminals make more money <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.npr.org\/sections\/alltechconsidered\/2015\/02\/13\/385901377\/the-black-market-for-stolen-health-care-data\">hacking a person&#8217;s medical information<\/a> than from stealing their credit card details, says <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.cs.dartmouth.edu\/~dfk\/\">David Kotz<\/a>, a Dartmouth computer science professor who leads the <a class=\"colorbox\" rel=\"nofollow\" href=\"https:\/\/thaw.org\/\">Trustworthy Health and Wellness<\/a> project. It&#8217;s developing a technology platform that secures and protects personal health information.<\/p>\n<p>Plus, putting these devices in the hands of patients and relying on them to establish Wi-Fi networks is fraught with difficulties. Some patients don&#8217;t have the technical know-how; others have a medical condition that poses a challenge. Most people, however, just create security passwords for their Wi-Fi networks that can easily be hacked, Pierson says.<\/p>\n<p>This could lead to a data breach that may compromise the security of a patient&#8217;s records, or even the patient&#8217;s health if, for instance, their wireless heart pacemaker or dialysis machine is hacked. Internet security experts have warned for years that these devices are open to data theft and remote control <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.npr.org\/templates\/story\/story.php?storyId=88188848\">by hackers<\/a> \u2014 and the equipment to do so cost less than $20 in 2011, when a <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.wired.com\/2011\/08\/medical-device-security\/\">researcher hacked<\/a> into his insulin pump and altered the settings.<\/p>\n<p>Wanda&#8217;s major appeal is its ability to generate a targeted, strong pass code that connects a medical device in essence without the patient&#8217;s involvement. Researchers elsewhere have tried similar hypothetical approaches, but they require extra equipment to be included in the medical device, Pierson says.<\/p>\n<p>Some of these ideas suggest that a secret password can be created by using a speaker and a microphone to send sound waves to devices, or by simultaneously shaking devices equipped with accelerometers that detect motion and orientation to establish a secure wireless connection.<\/p>\n<p>Try shaking a treadmill or a refrigerator, Pierson says. &#8220;We haven&#8217;t seen anything like [Wanda] on the market,&#8221; he adds.<\/p>\n<p>Pierson says he and his colleagues envision possibilities for Wanda beyond health care, especially as more of our household items get connected to the Internet. But for now, the team&#8217;s focus is on Wanda&#8217;s ability to protect sensitive patient data in a medical setting.<\/p>\n<p>Wanda for now is only a prototype. Pierson says it has been received well by volunteer testers who have expressed interest in purchasing the device if and when it hits the market. A release date hasn&#8217;t been scheduled because Pierson and his team are still in the process of filing for a patent.<\/p>\n<p>The <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.help.senate.gov\/\">Senate health committee<\/a> has been working <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.help.senate.gov\/chair\/newsroom\/press\/senate-health-committee-passes-7-more-bipartisan-bills-in-innovation-agenda\">on legislation<\/a> that may help spur these kinds of devices through federal regulatory approvals. The lawmakers have set data security as a priority in their latest <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.help.senate.gov\/chair\/newsroom\/press\/senate-health-committee-kicks-off-its-biomedical-innovation-agenda-passing-7-bills-with-bipartisan-support\">biomedical innovation agenda<\/a>.<\/p>\n<p><strong><a class=\"colorbox\" rel=\"nofollow\" href=\"https:\/\/blockads.fivefilters.org\/\">Let&#8217;s block ads!<\/a><\/strong> <a class=\"colorbox\" rel=\"nofollow\" href=\"https:\/\/github.com\/fivefilters\/block-ads\/wiki\/There-are-no-acceptable-ads\">(Why?)<\/a><\/p>\n<p>Source:: <a href=\"http:\/\/www.npr.org\/sections\/alltechconsidered\/2016\/05\/10\/476941159\/researchers-hope-this-invention-could-wave-away-medical-data-hacks?utm_medium=RSS&amp;utm_campaign=healthcare\" class=\"colorbox\" title=\"Researchers Hope This Invention Could Wave Away Medical Data Hacks\" rel=\"nofollow\">http:\/\/www.npr.org\/sections\/alltechconsidered\/2016\/05\/10\/476941159\/researchers-hope-this-invention-could-wave-away-medical-data-hacks?utm_medium=RSS&amp;utm_campaign=healthcare<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<div class=\"ftpimagefix\" style=\"float:left\"><a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.npr.org\/sections\/alltechconsidered\/2016\/05\/10\/476941159\/researchers-hope-this-invention-could-wave-away-medical-data-hacks?utm_medium=RSS&amp;utm_campaign=healthcare\"><img decoding=\"async\" width=\"150\" src=\"https:\/\/media.npr.org\/assets\/img\/2016\/05\/06\/20160506-pierson-kotz-wand-eb-015-516548917c9db039c6704b1a964309a43eb42c20-s1100-c15.jpg\" title=\"Dartmouth College researcher Timothy Pierson holds a prototype of Wanda, which is designed to establish secure wireless connections between devices that generate data.\" alt=\"Dartmouth College researcher Timothy Pierson holds a prototype of Wanda, which is designed to establish secure wireless connections between devices that generate data.\"><\/a><\/div>\n<div>\n<div><\/div>\n<div>\n<div>\n<p>Dartmouth College researcher Timothy Pierson holds a prototype of Wanda, which is designed to establish secure wireless connections between devices that generate data. <strong>Eli Burakian\/Dartmouth College<\/strong> <strong>hide caption<\/strong><\/p>\n<\/div>\n<p><strong>toggle caption<\/strong> <span>Eli Burakian\/Dartmouth College<\/span><\/div>\n<\/div>\n<p>Doctors&#8217; scrawls on prescription pads and medical folders are so analog.<\/p>\n<p>These days, they&#8217;re prescribing and keeping track of patients&#8217; records using digital devices connected to wireless networks, sometimes remotely. More medical devices are also becoming increasingly small and wearable; they often connect with a handheld controller or even your smartphone through Bluetooth or Wi-Fi, sometimes <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.npr.org\/sections\/alltechconsidered\/2015\/11\/18\/456217932\/heres-how-an-iphone-helps-one-teen-and-his-mom-manage-diabetes\">sending the data directly to physicians<\/a>.<\/p>\n<p>This convenience, accessibility and cost reduction for our health care comes with risks. A few keystrokes could end in a wrong treatment, for instance \u2014 in 2007, Dick Cheney&#8217;s cardiologist <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.nytimes.com\/2013\/10\/29\/science\/of-fact-fiction-and-defibrillators.html?_r=1&amp;pagewanted=all\">disabled the wireless functionality<\/a> of the former vice president&#8217;s heart defibrillator out of safety concerns.<\/p>\n<p>The overarching and long-growing problem is this: How do we protect the highly personal data flowing through wirelessly connected medical devices?<\/p>\n<p>Enter Wanda, a prototype developed by Dartmouth College doctoral student Timothy Pierson and his team.<\/p>\n<p>Wanda is essentially two antennae attached to a ruler, in a wand-like fashion. The device uses radio waves to establish a secure wireless connection between devices that generate data.<\/p>\n<p>Here&#8217;s <a class=\"colorbox\" rel=\"nofollow\" href=\"https:\/\/thawproject.files.wordpress.com\/2016\/02\/pierson-wanda.pdf\">how it works<\/a>: The user turns on the medical device and the digital device it&#8217;s getting linked to and then points Wanda \u2014 about 11 inches or less away \u2014 at the devices one at a time. Wanda then generates and transmits a secret password to each of the devices, connecting them securely within seconds.<\/p>\n<p>Many Wi-Fi networks that transmit personal data aren&#8217;t secure connections \u2014 and cybercriminals make more money <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.npr.org\/sections\/alltechconsidered\/2015\/02\/13\/385901377\/the-black-market-for-stolen-health-care-data\">hacking a person&#8217;s medical information<\/a> than from stealing their credit card details, says <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.cs.dartmouth.edu\/~dfk\/\">David Kotz<\/a>, a Dartmouth computer science professor who leads the <a class=\"colorbox\" rel=\"nofollow\" href=\"https:\/\/thaw.org\/\">Trustworthy Health and Wellness<\/a> project. It&#8217;s developing a technology platform that secures and protects personal health information.<\/p>\n<p>Plus, putting these devices in the hands of patients and relying on them to establish Wi-Fi networks is fraught with difficulties. Some patients don&#8217;t have the technical know-how; others have a medical condition that poses a challenge. Most people, however, just create security passwords for their Wi-Fi networks that can easily be hacked, Pierson says.<\/p>\n<p>This could lead to a data breach that may compromise the security of a patient&#8217;s records, or even the patient&#8217;s health if, for instance, their wireless heart pacemaker or dialysis machine is hacked. Internet security experts have warned for years that these devices are open to data theft and remote control <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.npr.org\/templates\/story\/story.php?storyId=88188848\">by hackers<\/a> \u2014 and the equipment to do so cost less than $20 in 2011, when a <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.wired.com\/2011\/08\/medical-device-security\/\">researcher hacked<\/a> into his insulin pump and altered the settings.<\/p>\n<p>Wanda&#8217;s major appeal is its ability to generate a targeted, strong pass code that connects a medical device in essence without the patient&#8217;s involvement. Researchers elsewhere have tried similar hypothetical approaches, but they require extra equipment to be included in the medical device, Pierson says.<\/p>\n<p>Some of these ideas suggest that a secret password can be created by using a speaker and a microphone to send sound waves to devices, or by simultaneously shaking devices equipped with accelerometers that detect motion and orientation to establish a secure wireless connection.<\/p>\n<p>Try shaking a treadmill or a refrigerator, Pierson says. &#8220;We haven&#8217;t seen anything like [Wanda] on the market,&#8221; he adds.<\/p>\n<p>Pierson says he and his colleagues envision possibilities for Wanda beyond health care, especially as more of our household items get connected to the Internet. But for now, the team&#8217;s focus is on Wanda&#8217;s ability to protect sensitive patient data in a medical setting.<\/p>\n<p>Wanda for now is only a prototype. Pierson says it has been received well by volunteer testers who have expressed interest in purchasing the device if and when it hits the market. A release date hasn&#8217;t been scheduled because Pierson and his team are still in the process of filing for a patent.<\/p>\n<p>The <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.help.senate.gov\/\">Senate health committee<\/a> has been working <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.help.senate.gov\/chair\/newsroom\/press\/senate-health-committee-passes-7-more-bipartisan-bills-in-innovation-agenda\">on legislation<\/a> that may help spur these kinds of devices through federal regulatory approvals. The lawmakers have set data security as a priority in their latest <a class=\"colorbox\" rel=\"nofollow\" href=\"http:\/\/www.help.senate.gov\/chair\/newsroom\/press\/senate-health-committee-kicks-off-its-biomedical-innovation-agenda-passing-7-bills-with-bipartisan-support\">biomedical innovation agenda<\/a>.<\/p>\n<p><strong><a class=\"colorbox\" rel=\"nofollow\" href=\"https:\/\/blockads.fivefilters.org\/\">Let&#8217;s block ads!<\/a><\/strong> <a class=\"colorbox\" rel=\"nofollow\" href=\"https:\/\/github.com\/fivefilters\/block-ads\/wiki\/There-are-no-acceptable-ads\">(Why?)<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[47],"tags":[],"class_list":["post-6606","post","type-post","status-publish","format-standard","hentry","category-health"],"_links":{"self":[{"href":"https:\/\/associatednews.us\/content\/wp-json\/wp\/v2\/posts\/6606","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/associatednews.us\/content\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/associatednews.us\/content\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/associatednews.us\/content\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/associatednews.us\/content\/wp-json\/wp\/v2\/comments?post=6606"}],"version-history":[{"count":0,"href":"https:\/\/associatednews.us\/content\/wp-json\/wp\/v2\/posts\/6606\/revisions"}],"wp:attachment":[{"href":"https:\/\/associatednews.us\/content\/wp-json\/wp\/v2\/media?parent=6606"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/associatednews.us\/content\/wp-json\/wp\/v2\/categories?post=6606"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/associatednews.us\/content\/wp-json\/wp\/v2\/tags?post=6606"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}