'Hackable' Medical Implants the Next Security, Privacy Concern?

A wireless insulin pump

It's like something out of a sci-fi movie.

Imagine a time when hackers hold people hostage through their medical implants. What if, for example, a diabetic's wireless insulin pump is hijacked--and his or her life is in the hands of the hijacker?

According to a fascinating new report, this scenario is not just possible. It could be happening today.

As an increasing percentage of people require wireless medical implants, such as insulin pumps and pacemakers, the devices have become impressively intelligent and sleek. Unfortunately, their security features are still lacking.

This week, security researchers demonstrated that such wireless devices can easily be hacked, using simple over-the-counter hardware, the user manual and public information. In the case of an insulin pump--something that hundreds of thousands of people rely upon--the researchers were able to hack in and control things like insulin dosage and glucose readings. For a diabetic, these changes can be deadly.

"Not all [security] solutions will carry over to medical devices," Anand Raghunathan, one of the lead researchers, told MSNBC.com. "That’s where the innovative thinking needs to be."

Sure, security for things like wireless phones and computers has been all but perfected. But the article pointed out that medical devices will need their own brand of security:

The researchers propose two possible "concept stage" suggestions for security fixes. One way would be to use rolling codes — a cryptography feature already used by garage doors and automotive keyless entry systems.

Another way to make the communication system secure, they say, is to use a technology called body-coupled communication that uses the human skin as a wave guide for wireless communication. This keeps the range of detection very close to the body, decreasing the likelihood of interception. That's just a start.