Wireless Drug Control: Could Remote Drug Delivery Devices Be Hacked?

With the advent of personalized medicine, advances in diagnostics and the miniaturization of sensors and control systems for delivering drugs automatically, the Remote Intelligent Drug Delivery System (RIDDS) may soon be a reality. Such devices, implanted under the skin, would remove the inconvenience of manual drug delivery. By connecting a RIDDS to a wireless medical control centre wirelessly patients with physical disabilities, learning difficulties, or who are otherwise unable to give themselves medication could benefit.

RIDDS device will have inbuilt sensors to monitor biomarkers of a patient's symptoms, pulse rate, or blood oxygen levels, for instance. Wireless control will allow healthcare workers to monitor the patient's health as well as device behavior. They could adjust medication frequency or levels as necessary based either on direct patient observation or sensor outputs. However, one aspect of RIDDS deployment that is yet to be addressed is security.

YanYan Wang and Carey Thaldorf at the University of Central Florida, in Orlando, USA, and colleague John Haynes of Charles Darwin University, Darwin, Australia, outline the security risks of RIDDS in a forthcoming issue of IJBET, and present some possible countermeasures.

They point out that any wireless communications technology is open to various security issues, which may fall under the generic umbrella of hacking, or cracking, including eavesdropping, jamming, and tampering. A hacker could intercept and alter transmitted data, they might steal personal information, or someone with malicious intent might spoof the sensor outputs of a RIDDS. It is not beyond the bounds of possibility to imagine that such a person, having hijacked the RIDDS connection might trigger commands to release medication inappropriately and so harm or even kill a patient.

"We have raised security concerns in relation to RIDDS, especially in the context of medical sensor networks, because, among other reasons, a failure to do so could risk the privacy and possibly the life of a patient," the researchers say. "The dilemma in RIDDS makes adoption of the technologies intimidating," they add. The team concludes that, "Security mechanisms for RIDDS must be fully considered prior to the widespread deployment of such delivery systems."