secure m2m technology for a healthier and safer...

© CINTERION Wireless Modules GmbH 2011, All rights reserved

Secure M2M Technology for a Healthier and Safer Life Manfred Kube, Director Business Development mHealth

CINTERION Manfred Kube - ETSI TC M2M Workshop, Sophia Antipolis - Day 2: 27 October 2011 - Session 5a

AGENDA

Secure M2M Technology for a Healthier and Safer Life The Potential for Standardized Embedded mHealth

Introduction

Challenges

mHealth and M2M

Major Barriers

Continua Health Alliance

Security

Case Studies


CINTERION 29%

Sierra Wireless

Telit

Motorola

Simcom

Enfora

Other

CINTERION – the leading M2M module supplier

Source: Beecham Research 6/2011

CINTERION – who we are Worldwide leading supplier of industrial cellular

machine-to-machine (M2M) communication modules - GSM, GPRS, EDGE, UMTS, HSPA+

Founded as a business unit of Siemens Communication in 1995 and spun off in 2008

A Gemalto company since 2010

M2M Module Market Shares 2010

1997 1st automotive grade module

2000 1st Compact GSM module

2002 1st GPRS module on the market

2003 1st Java module

2004 1st GSM/GPS module on the market

2005 1st EDGE module on the market

2006 1st HSDPA module on the market

2007 HSDPA with worldwide roaming

2008 Scalability GPRS + EDGE platform

2009 Evolution Products LGA surface mounting

2010 Scalable UMTS & HSPA+ module

2000 2005 2010

2011 Automotive HSPA+ module

CINTERION Product History


Gemalto Products

Gemalto’s secure personal devices are in the hands of billions of individuals enabling users to:

Produced and securely personalized over 1.5 billion devices in 2010

Supplying e-passports to countries with more than 200 million citizens

500 million people use our banking cards

Serving some 450 mobile operators worldwide that connect 2 billion subscribers

30 years experience in designing and producing secure personal devices

Gemalto Product Examples Gemalto Product Achievements

Communicate

Travel

Shop/Bank

Work

www.gemalto.com


M2M – a Proven and Established Technology for mHealth

Payment Industrial Computing

Metering

Remote Monitoring & Control

Automotive Tracking & Tracing

Cellular M2M communication modules

helping enterprises to cut costs and

increase productivity and efficiency


The Challenges for Healthcare


The Challenges for Healthcare

Key Challenge #1: Availability of Healthcare Services

Key Challenge #2: Increase in Chronic Diseases

Key Challenge #3: Ageing Population

Key Challenge #4: Cost of Delivering Healthcare


Summary of Challenges

982M People Aged 65+ by 2020 860M People with long term conditions 1380M People require assistance by

2025

Chronic diseases are growing, population is increasing in

number and age 1,7 Physicians per 1000 people 7% GDP spent on healthcare (Europe) 73% Average public expenditure health 75% Health expenditure for long term

conditions

Healthcare systems under pressure while cost of healthcare is rising

Source: GE, Cinterion Analysis


mHealth and M2M


mHealth – Definition

mHealth

eHealth

Healthcare


The Spectrum of mHealth Devices

Mobile Phones

Feature phones

Text Messaging

Voice

Embedded GSM

Smartphones

Health apps

External wireless sensors

Dedicated devices

Mainly mobile use

Integrated medical sensors

Specialized devices

Stationary & mobile

„Plug and Play“ Dedicated & highly specialized devices

Mainly stationary use

„works out of the box“


Embedded mHealth Application Areas

Prevention Diagnosis Treatment Monitoring

Fitness & Wellness

Portable interconnected devices

Disease and lifestyle awareness and education

Early Diagnosis

Avoid „white coat hypertonia“

Long term monitoring

Record incidents as they occur

Post operative monitoring

Earlier discharge of patients

Remote monitoring solutions

Treatment compliance solutions

Avoid hospitalization and emergency admissions

Doc2patient

Private Semi-Professional Doc2patient

Doc2patient Doc2patient


Embedded GSM technology offers new business opportunities for mHealth

Stand-alone device No connectivity

Application runs only on device

No additional services possible

Device connected to mobile handset via Bluetooth Limited additional

services possible

Paring problems - high adaptation & test efforts

Interfering private space (commercially)

Device connected to external terminal External dedicated

terminal connected via short-range or cable to medical sensors

Independent solution to offer additional services

Fast time to market and limited investment risk

Bulky solution with limited mobility for users

Devices connected via embedded cellular module Compact and

independent solution to offer additional services Fully integrated solution

with built-in connectivity Ease of use, high

mobility, cost and power optimized New and creative

business models possible


Major Barriers to mHealth Adoption


Key Challenges Inhibiting Wide-Spread Adoption of mHealth Today

Key Challenge #1: Business models for reimbursement

Key Challenge #2: Slow uptake of new technologies in the healthcare industry

Key Challenge #3: Market fragmentation

Key Challenge #4: Standards, interoperability & regulatory frameworks

Standards are necessary on the road to success


Continua’s Case


Health & Wellness Chronic Condition Management

Living Independently Longer

C ontinua’s 3 foc us areas

With a second separation and focus on non-regulated and regulated devices to ensure appropriate adoption


Continua Health Alliance

“Our Mission is to establish an eco-system of interoperable personal health systems that empower people & organizations to better manage their health and wellness”

Source: Continua


Disease Management Use Case: Remote Patient Monitoring

A person is required to check their glucose values after each meal The data is delivered to a mobile

device via e.g. Bluetooth (phone or M2M gateway) Note: The M2M module could also be

embedded directly into the sensor The data is then delivered to a

monitoring service via e.g. GPRS

Glucose Meter

Cell Phone / M2M Module

Disease Management Service

WAN Device

Application Hosting Device

PAN Device

Standard PAN IF

- WAN IF

xHR IF

Source: Continua


Security


M2M Security Requirements in mHealth

1 Secure authentication and authorization

2 Secure transmission of data and OTA setup of devices

3 Security of personal data stored in the clouds

4 Secure access to data by authorized persons

Cellular M2M Module with Patient Medical Data

Mobile Network

Internet Health Care Service Center


Security - A Central Need in M2M





Prevent tampering and physical attacks Identification and mapping/matching (device, patient and record ) Encryption of data on the device

Ensuring data integrity and preventing corruption Data encryption to ensure privacy during transmission Secure across interfaces

Encryption of data stored in the cloud Enabling services for multiple parties Changing service from one partner to another

Data retrieval by authorized persons Consent to access and share Record sealing (eg. HIV and anti-retroviral drugs)


Solutions to Address Security Concerns are Available Today





SIM and MIM are mass-personalized secure elements PIN, PUK and Public Key Infrastructure (PKI) Software components (eg. security stack) to handle keys

Encryption of data and algorithms to verify data integrity Cellular Network and secure transmission protocols

Secure storage and digital vaults Trusted Service Manager (TSM)

Certificate issuing and management Key issuing, exchange, distribution and recovery Single Sign-On (SSO) mechanisms across systems


Remote Unit Connectivity Central Server

Solutions should be secure by design and not by hindsight

Mobile Network

“Device” IT Center (ERP, CRM)

Application Server

Internet

001001

110110

Gateway

Wireless Module

110110 110110

Application SW Machine Identity Module

Considerations The technology bricks for ensuring end-to-end security are available today Incidents can lead to loss of revenue and credibility Security should be included by design and not in hindsight


Outlook: GSMA Mobile Health Architecture Proposal

Health Application

Security Management

Identity ManagementConsent Management

Service Management

Authentication Encryption

Patient IDs

Billing IDs

Billing and Cost Management

Service InterfacesMessaging

Records Management

Device IDsIdentity Maps

Device Software Services

Common Web Services

Custom Application Interfaces

Device Communications(IEEE 11073)

Health Messaging Standards (HL7)

“classic” Electronic Health Record

Mobile-only Health Record

Fault Management Configuration ManagementProvisioning, Deployment, Upgrading

Service Costs Transaction Costs Customer Billing vs. Insurer Billing vs. Other

Record SealingConsent to Share

Com

mun

icat

ions

NetworksCoverage Bandwidth

Iden

tity

& A

cces

s

Ser

vice

Decision Support Knowledge Base Care Pathways Service Directories

Personal Health Record

Dat

a &

R

ecor

ds

Data Standards

Clinical Coding(SNOMED, LOINC, ICD-10)Data / Cloud

Storage

Patient

Medical Device

Mobile Module

Personal Health Record

Data Storage and Analytic's

Clinician’s EHR

Not hosted by mobile service

providerEmbedded mHealth Clinician

Mobile Network

Clinician

Medical Device

Mobile Module

Embedded mHealth

Information Services

Administration Services

Administrators

Mobile Module

Information Receiver only

Patient

Patient

PayerNetwork Operator

mHealth IntegrationGateway

(Built using open standards)

-

Cinterion is working with the GSMA to establish an Architecture Proposal for mHealth that will ensure security and interoperability


Case Studies


M2M-based mHealth Devices are Applied in Many Fields of Health Care

…


Aera CT Heart Monitoring M2M-based heart arrhythmia monitoring Rapidly detects heart arrhythmias during

normal day-to-day activities and over long periods of time

Sends detailed diagnostic data via cellular networks and the Internet

24/7 monitoring and improved detection and visibility of arrhythmia events

Authorized caregivers can securely view patient data at anytime, from anywhere in the world

Powered by Cinterion MC75i module

TZ Medical


Aerotel Wireless Home Telehealth System


Aerotel Web-Based Personal Health Portal


Ms. Brown's blood-pressure reading and transmission devices.

'I was constantly going to the doctor,' said Carolyn Brown of the Bronx, N.Y. 'Now they can tell right away if I am in trouble.'

Remote-Monitoring Technology Leads Heart Patients to Take Their Readings at Home From the Wall Street Journal, July 27, 2010


Aerotel Case Study: “Do-It-Yourself House Call” What are the Benefits?

Detect changes and intervene before the patient has to be hospitalized. Instead of constantly going to the doctor, the monitoring service can detect

immediately if the patient has a problem. Faster evaluation of suspected heart failures. 30% reduction in hospitalization for heart-failure patients, a study showed. Cost savings: $6,300 for a Medicaid heart patient's typical hospital stay vs. a

$626 wireless monitoring system.


Philips Respironics System One

Sleep Disordered Breathing – A chronic disease with significant co-morbidity and management challenges

• Prevalence: 5% adults

• Majority undiagnosed: ~80%

• A care cycle approach

• Compliance challenges

• Reimbursement constraints


CPAP Therapy

Obstructive Sleep Apnea

Obstructive Sleep Apnea


Internet

Seamless care team access anytime/anywhere

Streamlined, collaborative care management

Automatic data collection

Timely intervention & remote management

Best Embedded Mobile End-to-End Service

GSMA Embedded Mobile Competition


Efficacy issues: AHI, LL, Periodic Breathing, CA

Compliance achieved

Compliance issues

Prescription changed

Note from Dr.

Encore Data Management and Reporting Management by exception


C0000000276C8

` C0000000276C8

Modem activation and management


Modems activation and management


Key success factors for Philips-Cinterion solution Modular wireless solution to enable fast time to market (and speeds up medical approval process) Complete system offering, providing end-to-end services and solutions Partner approach taking into account all value chain players and providing

respective business models and benefits Ease of use due to preconfigured connectivity to service centers or health

care service providers Miniaturization of medical equipment for mobile monitoring

Technology is not enough – management of complex value chain and processes is necessary


For more information, visit Cinterion M2M World…

www.cinterion.com/m2m-world


… or come and see our demo downstairs!

Manfred Kube [email protected]

secure m2m technology for a healthier and safer...

Documents