DK180493B1 - Device and Method for Providing Safe Data Transfer Via a Non-Secure Communication Protocol - Google Patents

Abstract

A sensor device (2) is disclosed. The sensor device (2) comprises a processor (14), a memory (24), an antenna (6), a power source or a battery, one or more sensing elements (12) configured to provide measurement data and store the measurement data in the memory (24) and a communication unit (16) configured to transfer data from the one or more sensing elements (12) and data stored in the memory to a remote unit (28). The sensor device (2) is configured to encrypt the measurement data before the measurement data is transferred to the remote unit (28).

Description

DK 180493 B1 1 Device and Method for Providing Safe Data Transfer Via a Non-Secure Communication Protocol Field of invention The present invention relates to a device and a method for providing safe data transfer via a non-secure communication protocol. The present invention also relates to a wearable sensor for remote health monitoring. Prior art There has been an increasing use of non-invasive wearable sensors for remote health monitoring because the recent decade has introduced cost-effective and easy-to-use systems. Moreover, modern communication and information technol- ogies offers an efficient and cost-effective solution that allows the individuals to continue to live in their comfortable home environment instead of expensive healthcare facilities. At the same time, these systems allow healthcare personnel to monitor important physiological parameters of the patients in real time, assess health conditions and provide feedback from distant facilities. These sensors may be adapted to monitor various parameters including tempera- ture, heart rate, acceleration and other physiological parameters by using low- cost electronic equipment. The data detected by the sensors is confidential and therefore it is crucial to make sure that security protocols are applied to ensure the security of data flowing between the sensor an any receiver of the data. The prior art solutions, however, require the data is transferred by using a secure connection, in which the data being sent is encrypted by one or more security protocols to ensure the security of data flowing between the sensor and the one or more receivers of the data.

US2016183794 discloses an actively-powered temperature data logger patch with wireless data communication, comprising a microprocessor and a temperature sensor configured to sense a temperature of a target subject. Wireless communi- cation can be carried out by using a transmitter and an antenna. Using this technology, however, requires that the data is transmitted by using a secure communication protocol.

DK 180493 B1 2 US2017093869A1 discloses a method of authentication in an in vivo analyte monitoring system.

The method comprises the steps of receiving a private key by a reader device, wherein the private key is supplied by a sensor control device or a package for the sensor control device, and wherein the sensor control device comprises a sensor and analyte monitoring circuitry and the sensor is adapted to be inserted into the body of a user.

The method moreover comprises the steps of authenticating the private key using a public key stored within the reader device; and if the private key is authenticated, reading sensed analyte data from the sensor control device by the reader device.

The method and system, however, fails to protect data until the data has been sent to a receiver.

Accordingly, the method introduces a risk for either loosing data (if the data cannot be sent) or someone unintendedly accessing the data detected by the monitoring systemUS2011022851A1 discloses a sensor tag system that comprises sensor tags, an encryption key writing device and a measured data reading device that may be owned and managed by a hospital.

The hospital purchases the sensor tags that have no encryption key set from the manufacturer of the sensor tags.

The hospital sets the encryption key on the sensor tag that has been purchased, using the encryption key writing device.

The sensor tag that has the encryption key set is provided to the person to be meaured who is a patient of the hospital.

The person to be measured attaches the sensor tag that has the encryption key set on his body at the right time, following the instruction from the hospital, and measures the biological information.

The person to be measured removes the sensor tag that finished measurement from his body, and hand it in to the hospital.

The hospital reads the encrypted measurement data from the sensor tag that was handed in after measurement, using the measured data reading device.

Subsequently, the encrypted measurement data is decrypted using the decryption key to obtain the measured data in plaintext.

The hospital diagnoses the person to be measured who is the patient, based on the obtained measurement data.

Accordingly, the system introduces a risk that someone unintendedly accessing the encryption key being sent from the encryption key writing device.

Thus, there is a need for a method and an apparatus which enables which elimi- nates the above-mentioned disadvantages of the prior art.

It is an object of the invention to provide a sensor, by means of which data can

DK 180493 B1 3 be safely treated in a safe manner until being transmitted by using a non-secure communication protocol.

It is also an object of the invention to provide a method, by means of which data can be safely treated in a safe manner until being transmitted by using a non- secure communication protocol.

Summary of the invention The object of the present invention can be achieved by a sensor device as defined in claim 1 and by a method as defined in claim 15. Preferred embodiments are defined in the dependent subclaims, explained in the following description and illustrated in the accompanying drawings.

The sensor device according to the invention is a sensor device comprising: a processor, a memory, an antenna, a power source (e.g. a battery, one or more sensing elements configured to provide measurement data and store the meas- urement data in the memory and a communication unit configured to transfer data from the one or more sensing elements and data stored in the memory to a remote unit, wherein the sensor device has a unique identity and a predefined encryption key stored in the sensor device, wherein the sensor device is configured to encrypt the measurement data by using the encryption key before the measurement data is transferred to the remote unit, wherein the sensor device is configured to encrypt the measurement data and hereafter store the encrypted measurement data in the memory before the encrypted measurement data is transferred to the remote unit.

Since all data is encrypted when the data is stored in the memory, it is possible to provide a sensor device, by means of which data can be safely treated in a safe manner until being transmitted by using a non-secure communication proto- col.

The sensor device is configured to encrypt the measurement data and hereafter store the encrypted measurement data in the memory before the encrypted measurement data is transferred to the remote unit.

DK 180493 B1 4 In one embodiment, the memory is an integrated part of the processor.

In another embodiment, the memory is a separate component separated from the processor, wherein the memory is electrically connected to the memory.

In a preferred embodiment, the sensor device is configured to be attached to the skin of a user or alternatively be brought in close proximity to the skin of a user.

It may be an advantage that the distance between the sensor device and the skin is less than 10 mm. In one embodiment, sensor device is configured to be ar- ranged in a position in which the distance between the sensor device and the skin is less than 5 mm. In one embodiment, sensor device is configured to be ar- ranged in a position in which the distance between the sensor device and the skin is less than 2 mm.

The sensor device is configured to wirelessly communicate with the remote unit. Accordingly, the sensor device is configured to wirelessly send encrypted data to the remote unit. This may be done by using a non-secure communication protocol because the data is encrypted.

The processor may be any suitable type processer having any suitable size. It is, however, preferred that a small-sized process is used in order to limit the overall size of the sensor device. In a preferred embodiment, the sensor device is less than 5 mm thick.

The memory may be any suitable type of memory and may have any required size. In a preferred embodiment, the memory is an electronic solid-state comput- er storage medium that can be electrically erased and reprogrammed (e.g. a flash memory). A small-sized memory is preferred in order to limit the overall size of the sensor device. The memory may be an integrated part of the proces- sor. On one embodiment, the memory is, however, a separate component sepa- rated from the processor, wherein the memory is electrically connected to the memory.

The antenna may be any suitable type of antenna. In a preferred embodiment, the sensor device comprises a printed circuit board (PCB) having an integrated antenna. In one embodiment, the antenna may be a PCB trace antenna. Alterna-

DK 180493 B1 tively, the antenna may be a chip antenna The power source of the sensor device may be a battery. The battery may be removable battery. In one embodiment, the battery is a rechargeable battery. In 5 one embodiment, the power source may be an energy harvesting unit (e.g. piezo- mechanical harvesting, radiofrequency energy harvesting, thermoelectric harvest- ing (e.g. using a thermoelectric generator). In one embodiment, the battery is a non-rechargeable battery that cannot be replaced with another battery because the sensor is arranged in a non-openable housing.

In a preferred embodiment, the non-openable housing does not comprise any plugs electrically connected to the battery. In a preferred embodiment, the sensor device comprises a built-in energy har- vesting device. In one embodiment, the built-in energy harvesting device is configured to harvest kinetic energy (e.g. by letting the movement of a magnet induces an electromo- tive force and thus a current in one or more coils of an electromagnetic genera- tor. In one embodiment, the built-in energy harvesting device comprises one or more thermoelectric generators configured to produce electric power by using a tem- perature gradient.

In one embodiment, the built-in energy harvesting device comprises piezoelectric crystals or fibers configured to generate electric power upon being mechanically deformed (e.g. caused by vibrations). In one embodiment, the built-in energy harvesting device comprises one or more antennas configured to harvest energy from (stray) radio waves. The one or more sensing elements are configured to provide measurement data. The sensing elements may include sensing elements for measuring any suitable parameter including temperature, capacitance, acceleration (or vibration) in one

DK 180493 B1 6 or more directions, heart rate, changes in skin redness and electrical conductivity. The communication unit may be any suitable type of communication unit and comprises a transmitting unit configured to wirelessly transmit signals. In one embodiment, the communication unit comprises a receiving unit configured to receive one or more wirelessly sent signals. The remote unit may be a tablet, a smartphone or another device capable of receiving wireless signals sent from the sensor device.

In one embodiment, the sensor device is configured to encrypt the measurement data and hereafter store the encrypted measurement data in the memory before the encrypted measurement data is transferred (wirelessly transmitted) to the remote unit.

It may be an advantage that the sensor device comprises a PCB and that the processor, the memory, the communication unit and the one or more sensing elements are arranged on the PCB. Hereby, it is possible to provide a small-sized sensor device. Moreover, it is possible to provide a cost-efficient sensor device.

It may be advantageous that the one or more sensing elements are configured to measure temperature. It may be beneficial that the one or more sensing ele- ments are configured to measure capacitance.

It may be advantageous that the one or more sensing elements are configured to measure acceleration. In one embodiment, the one or more sensing elements are configured to measure heart rate.

In one embodiment, the one or more sensing elements are configured to measure changes in skin redness.

In one embodiment, the one or more sensing elements are configured to measure electrical conductivity.

Hereby, the sensor device can provide important physiological parameters of patients.

In one embodiment, the one or more sensing elements are configured to measure

DK 180493 B1 7 changes in skin redness and hereby detect the heart rate by counting the subtle changes in skin redness. It may be an advantage that the sensor device comprises a mounting structure by which mounting structure it is possible to mount the sensor device, in a man- ner in which the sensor device is in contact with or in close proximity to the skin of a user. Hereby, it is possible to optimize the position of the sensor device and thus provide a number of reliable measurements by using the sensor device. In close proximity to the skin could be with in a distance less than 10 mm, prefera- ble less than 5 mm such as 0-2 mm. It may be beneficial that the mounting structure comprises an adhesive portion configured to be detachably attached to the skin of a user. Hereby, it is possible to attach the sensor device in a fast and reliable manner. Moreover, the sensor device can be positioned in in positions, in which the sensor device can provide reliable temperature measurements, electric capacitance measurements and acceleration measurements. It may be an advantage that the sensor device comprises a break detector ar- ranged and configured to break if the sensor device is detached form a user. Hereby, it is possible to generate an alert in case that if the sensor device is detached form a user. In one embodiment, the sensor device is configured to automatically generate and transmit one or more alert signals to one or more remote receivers when the break detector breaks.

It is an advantage that the break detector is formed as an electrical wire having a thickness that allows it to break (due to the deformation of the mounting struc- ture, when the sensor device is removed from the skin of a user). Hereby, it is possible to provide a simple, reliable and cost-efficient way of detecting if the sensor device is detached form a user. In one embodiment, the sensor device comprises a deformable mounting struc- ture and a break detector arranged in a position in which deformation of deform- able mounting structure during detachment of the sensor device causes a struc- ture (e.g. an electrical wire or connector) of the break detector to break.

DK 180493 B1 8 It may be advantageous that the sensor device comprises a contact detection unit configured to detect if the sensor device is in contact with and/or or close proxim- ity to the skin of a user. Hereby, the sensor device can detect if the measure- ments are reliable and generate an alert in cast that the received data indicates that the sensor is no longer attached to the skin of the user.

It may be beneficial that the detection unit comprises a capacitive proximity sensor. Hereby, the sensor device can provide useful information that indicates if the sensor device is in contact with or arranged in close proximity to the skin of a user.

In a preferred embodiment the capacitive proximity sensor comprises a sensor plate electrically connected to a current sensor that is electrically connected to an oscillator connected to a direct current (DC) power supply. This type of capacitive proximity sensor is capable of detecting any object because any object has the ability to be electrically charged.

In one embodiment, the detection unit comprises an accelerometer. Hereby, the sensor device is capable of detecting if the user is active. Moreover, the sensor device may detect the posture of the user. Furthermore, the sensor device can detect if the sensor device is moved (e.g. when being detached from the user).

In one embodiment, the accelerometer is single-axis accelerometer. In a pre- ferred embodiment, the accelerometer is a multi-axis accelerometer. In a partic- ular preferred embodiment, the accelerometer is a three-axis accelerometer.

In one embodiment, the detection unit comprises a temperature sensor. Hereby, the sensor device can provide temperature measurements which can be used to detect if the sensor is detached from the user or is in contact with and/or or close proximity to the skin of the user.

In one embodiment the sensor device comprises a control unit configured to bring the sensor device into a power saving mode (sleep mode) when one or more of the measurement data exceeds or goes below a predefined threshold level. Hereby, it is possible to reduce the electricity consumption. In a preferred embod-

DK 180493 B1 9 iment, the sensor device is configured to detect when the sensor is attached to the skin of a user or brought in close proximity to the skin of a user. Hereby, it is possible to use the control unit to bring the sensor device into a power saving mode when the sensor device is not attached to the skin of a user or brought in close proximity to the skin of a user. Accordingly, the sensor device can be oper- ated in a normal mode (that is different from the power saving mode) only when the sensor device is attached to the skin of a user or brought in close proximity to the skin of a user.

In one embodiment, the sensor device comprises a pocket structure configured to receive and contain the electronic components.

In one embodiment, the pocket structure comprises a shield structure arranged to prevent the sensor device from getting in contact with water. Hereby, the sensor device can be applied by a user taking a shower. In one embodiment, the sensor device is disposable (designed for single use) and integrated in a patch (plaster).

In one embodiment, the sensor device is configured to detect the body posture of a user during sleep by using data detected by using the accelerometer. Hereby, the sensor device can be used to perform useful measurement of users during their sleep. By using data detected by using the accelerometer it is possible to determine the orientation of the sensor and thus the posture of the user.

In one embodiment, the sensor device is configured to estimate the body pose, sleep cycle and sleep time, wherein the estimation is based on accelerometer data collected by sensor device.

In one embodiment, the sensor device is configured to estimate the sleep cycle on the basis of movements during sleep, their magnitude and time between the movements.

It is well known from literature that a sleep cycle consists of several stages including: awake, N1, N2, N3 and REM. The different stages are characterised by different movement patterns, which can be recognized by the sensor device.

DK 180493 B1 10 N1: During this short period (lasting several minutes) of relatively light sleep, the heartbeat, respiratory rate, and eye movement activity is decreased, and the muscles relax with occasional twitches. Body movements and active periods, in which the vector magnitude of the measured accelerations is above a predefined threshold T1 are marked and when movements (active periods of a few seconds up to some minutes) are registered with a frequency (within a predefined fre- quency range), the sleep-cycle N1 is registered. N2 is a non-REM sleep is a period of light sleep before one enters the deeper sleep. The heartrate and respiratory rate goes down, and the muscle activity is decreased even further. The body temperature decreases, and eye movements stop. In this stage, there are fewer movements. When movements (active periods of a few seconds up to some minutes) are registered with a predefined frequency (within a predefined frequency range) the sleep-cycle N2 is registered.

N3 is a longer lasting period of deep sleep. It normally occurs during the first half of the night. The heartrate and respiratory rate decreases to their lowest levels during sleep. The muscles are relaxed, and it is difficult to wake up from this stage of sleep. During this stage we normally only see few movements above the threshold T1 and there are long time periods between the active periods. REM is the "rapid eye movements” stage, which occurs about 90 minutes after falling asleep. The eyes move rapidly from side to side behind closed eyelids. Mixed frequency brain wave activity becomes closer to that seen in wakefulness. The respiratory rate increases and becomes more irregular (larger dispersion), and the heart rate and blood pressure increase to near waking levels. Most of the dreaming occurs during REM sleep, although some can also occur in non-REM sleep. The arm and leg muscles become temporarily paralyzed, which prevents you from acting out your dreams. As you age, you sleep less of your time in REM sleep. This is recognized by a period of no movements at all measured (eye- movements not measured). Between sleep stages a smaller period of body-movements often occur which help the system recognize the change of stage. - Sleep pose: With a body mounted sensor device, the pose of the body-part where the sensor device is mounted can be calculated based on the direction of

DK 180493 B1 11 the measured gravitational vector. This enables the sensor device to recognize both whether the person is upright or laying down and whether he is laying on the side, stomach or back. This information is used as a discriminator when estimating sleep time.

- Sleep time: to recognize the exact time of falling asleep can be difficult, and thus an estimation will be based on the amount of movements as well as the body pose. Thus, if the person is laying down and movements are far between, the person has likely fallen asleep.

Times for thresholds and movement frequencies are different from one person to the next, and is based also on parameters like age and BMI. It may be an advantage that the sensor device is configured to identify the type of physic activity from a predefined list of activities by using data detected by using the accelerometer. Hereby, the sensor device can be used as an effective activity monitoring tool. The data detected by using the accelerometer can be analyzed in order to determine range of motion, motion frequency and other relevant parameters. In one embodiment, data detected by using the accelerometer is analyzed in epochs of a predefined duration (e.g. 5-seconds epochs). Hereafter, each epoch can be estimated to be belonging to a certain activity category. In one embodi- ment, the categories are characterised by intensity, wherein the activity intensity is calculated as the average vector magnitude of the high-pass filtered (e.g. three-dimensional) accelerometer measurements at a predefined sampling fre- quency (e.g. 5-20 HZ, such as 12 Hz) subtracted the noise present on each measurement axis. This is preferably done for each (e.g. 5 second epoch. Hereby, it is possible to achieve a good indication of the intensity of the measurement. Accordingly, the detected intensity can be used to distinguish e.g. slow walking from fast walking.

In one embodiment, the category “resting” is estimated when the sensor is in a horizontal position (meaning that the leg is in a horizontal position) (+- approxi- mately 45 degrees). Higher intensities indicate that the person wearing the sensor device is riding a bike, and signals are further analyzed to check this (see biking). The category “resting” should can be seen as an indication of the patient

DK 180493 B1 12 being sedentary, sitting or laying down. The category “standing” may be defined as a configuration, in which the sensor device is in a vertical position (meaning that the leg is in a vertical position - standing) (+- approximately 45 degrees) and the calculated intensity is lower than a predefined minimum movement threshold (e.g. 0.05-0.5 G such as 0.1 G). This category “standing” should be seen as an indication of the person wearing the sensor device is standing still with only very minor insignificant movements recognized.

The category “light activity” includes configurations, in which all movements in upright (vertical) position are associated with a vector magnitude above a prede- fined movement threshold, but below a predefined training intensity, wherein the movement is not recognized as falling into other categories. This will include epochs where an activity is starting towards the end of the epoch or walking just a few steps before again standing still. Also biking very slowly for shorter periods will fall into this category. The category “biking” is estimated if a repeating pattern is recognized with a frequency above 0.2 Hz, where both legs move all the time and the measured movement are symmetrical. This is recognized based on pattern recognition. Also, the intensity has to be above a predefined measurement threshold. This category should be seen as an indication of the person wearing the sensor device doing a cyclic leg movement for more than 1-2 minutes (with pauses). Smaller biking intervals (trips) below 1 minute are not seen often, and will likely be detected as light activity. The category “walking” is estimated if a repeating pattern with an intensity above the measurement threshold, but below the threshold for training activity as well as a frequency above 0.2 Hz is recognized based on pattern recognition. As one leg at a time takes a step forward, and as the sensor is mounted on one leg, the measured movement has to be asymmetrical, and thus the pattern recognition does not yield biking. This category should be seen as an indication of the person wearing the sensor device walking for a predefined period (e.g. of 5-10 seconds) continuously. Shorter walking intervals (trips) below 3-9 seconds will likely be

DK 180493 B1 13 detected as light activity.

The category “training” is defined as a category used for any walking activity above the training intensity interval for a predefined period (e.g. of 3-9 seconds) continuously (which is not recognized as biking).

This category should be seen as an indication of the person wearing the sensor device is running or doing high intensity training involving the leg. Shorter run- ning intervals (trips) below 3-9 seconds will likely be detected as light activity or walking. Steps taken: During light activity, walking or training the number of steps is recognized based on an analysis in the frequency domain.

In a preferred embodiment, the sensor device is provided with a disposable battery and that the sensor is arranged in a non-openable housing. Hereby, it is meant that the housing is non-openable except through total destruction of one or more housing members. Thus, the disposable battery cannot be exchanged unless the housing of the sensor s destroyed.

The method according to the invention is a method for transferring (wirelessly transmitting) measurement data detected by means of a sensor device compris- ing one or more sensing elements configured to provide measurement data, wherein the method comprises the step of saving measurement data and wire- lessly transmitting the measurement data to a remote unit, wherein the sensor device has a unique identity and a predefined encryption key stored in the sensor device, wherein the method comprises the step of encrypting the measurement data by using the encrypted key before the measurement data is sent to the remote unit. Hereby, it is possible to provide a method, by means of which data can be safely treated in a safe manner until being transmitted by using a non- secure communication protocol.

It may be an advantage that the sensor device comprises a memory (and that the method comprises the step of saving/storing the measurement data in en- crypted form in the memory before sending the measurement data to the remote unit.

In one embodiment, the method comprises the step of detecting temperature

DK 180493 B1 14 and/or capacitance and/or acceleration and/or heart rate and/or changes in skin redness and/or electrical conductivity. It may be an advantage that the method comprises the step of detecting if the sensor device is in contact with a user by using a capacitive proximity sensor and/or an accelerometer and/or a temperature sensor. In one embodiment, the method comprises the step of detecting if the sensor device is in contact with or close proximity to a user by using a capacitive proxim- ity sensor and an accelerometer and a temperature sensor, wherein it is conclud- ed that the sensor device is in contact with or close proximity to a user in case that at least two of the three measurements indicate that the sensor device is in contact with or close proximity to a user.

In one embodiment, the sensor device is configured to be temporarily fixed in proximity of the body of a user (e.g. on the skin of the user).

The sensor device may be configured to monitor health related parameters of physical activity of a user.

In one embodiment the sensor device comprises a PCB comprising at least one sensing element configured to provide measurement data relating to and/or representing physical activity.

The sensor device comprises a memory configured to store sensor measurements in an encrypted format. The sensor comprises a processor configured to encrypt detected measurement data. In one embodiment, the processor is adapted to transfer encrypted measurement data wirelessly. Throughout this document, the measurement data may also be referred to as sensor data, sensitive data or simply data.

In one embodiment, the sensor device comprises an electronic structure that is sealed inside a patch wherein the (thickness of the) patch is in the range 1-6 mm, such as 2-5 mm.

DK 180493 B1 15 In a preferred embodiment, the sensor device comprises a flexible printed circuit that can be adhered to the skin of the user with an adhesive patch material for more than about 24 hours.

The sensor device is preferably configured to wirelessly transfers encrypted data to a cloud system or similar allowing only registered users have access to it. This eliminates the risk of data being copied by unauthorised devices.

The sensor device is an affordable and disposable device that can be attached to the individual for more than about 24 hours without being noticeable. By having a flexible and sealed patch with a thickness up to 4 mm, it is possible to allow the individual to perform daily basis activities without any or with reduced discomfort. In one embodiment, the sensor device comprises a link device configured to establish a link between one or more health personnel and the citizens. Hereby, it is possible to allowing trainers to provide feedback, and target the citizens is required. The sensor device allows for big data management in a secure way even under public connectivity is enabled by using encrypted data at all stages. In one embodiment, a cloud system is applied to store sensitive data from sever- al users in a manner in which the data is encrypted, wherein only users having an access code are able to access to the cloud and will have restricted access ac- cording to their credentials. Such cloud system configuration allows the system to have two different types of users: user A/a first user meant to wear the device and generate the data and a user B/second user meant to access at least some of user A's collected data in order to analyse it, review it, manage it, etc. and provide direct feedback if necessary. The sensor device is described with a set of features but can be complemented with the use of other sensors from other devices and complement the data col- lected in the cloud system. Thus, a second/further device (also being worn by the user) as the one disclosed herein can be used in order to have more precise

DK 180493 B1 16 information about the user, such as specific body posture. In one embodiment, the method comprises the step of managing big data, col- lected using a sensor device according to the invention. This allows analysis and identification of early stage diagnostics. The invention may be used as a tool for health professionals to efficiently follow up with larger patient groups and provide support. The sensor device is designed to register detailed activities like standing, walking, and exercises to slow for existing activity trackers to sense, but which nonetheless are important for the health recovery.

In one embodiment, the method applies a sensor system comprising a sensor device according to the invention a cloud system comprising a back-end, wherein the method comprises the following steps: - applying the sensor device to detect measurement data; - encrypt the measurement data by using the encryption key stored in the sensor device; - sending the encrypted measurement data to the back-end; - applying the back-end to select the encryption key from a list of encryption keys on the basis of the unique identity of the sensor device; - applying the back-end to decrypt the encrypted measurement data from the sensor device by using the selected encryption key. Description of the Drawings The invention will become more fully understood from the detailed description given herein below. The accompanying drawings are given by way of illustration only, and thus, they are not limitative of the present invention. In the accompa- nying drawings: Fig. 1A shows a schematic top view of a sensor device according to the invention; Fig. 1B shows a schematic top view of another sensor device according to the invention; Fig. 1C shows a schematic view of a sensor device according to the inven- tion comprising a PCB sealed inside the sensor device; Fig. 1D shows a diagram of connections between different components in

DK 180493 B1 17 the PCB shown in Fig. 1C; Fig. 2A shows how a sensor device according to the invention transfers data to a cloud system through a remote unit; Fig. 2B shows interaction between two users; Fig. 3A shows the component layout of a cloud system; Fig. 3B shows example of how information provided by sensor devices according to the invention can be provided; Fig. 4A shows a flowchart that illustrates how it can be detected if the sensor device is attached to a user; Fig. 4B shows design of a sensor; Fig. 5 shows a flowchart illustrating how data is encrypted and stored on a memory of a sensor device; Fig. 6A shows a graph illustrating the capacitance detected by a sensor device as function of time; Fig. 6B shows a graph illustrating the temperature detected by a sensor device as function of time; Fig. 6C shows a graph illustrating the activity level detected by a sensor device as function of time; Fig. 7A shows how data is transferred from a sensor device to a cloud system; Fig. 8A shows a sensor device according to the invention attached to the arm of a user and Fig. 8B shows a close-up view of the sensor device shown in Fig. 8A.

Detailed description of the invention Referring now in detail to the drawings for the purpose of illustrating preferred embodiments of the present invention, a sensor device 2 of the present invention is illustrated in Fig. 1A.

Fig. 1A illustrates a schematic top view of a sensor device 2 according to the invention.

The sensor device 2 comprises a PCB 4 and a break detector 8 formed as a wire.

The sensor device 2 moreover comprises a mounting structure 10 configured to be detachably attached to the skin of a user.

The mounting struc- ture 10 seals the PCB 4 and hereby protect the PCB against water.

Therefore, the sensor device 2 can be worn when taking a shower without effecting the ability of

DK 180493 B1 18 performing the sensor measurements that the sensor device 2 is configured to carry out. The break detector 8 is integrated in the mounting structure 10 and thus ar- ranged in such a manner that it will break due to the deformation of the mount- ing structure 10 if the sensor device 2 is removed from the user. The sensor device is configured to detect data indicative og activity, lifestyle, and certain predetermined parameters of the individual (user) that wears the sensor device 2. The sensor device 2 is configured to collect and wirelessly transmit encrypted data. In a preferred embodiment, the sensor device 2 is flexible and disposable. It may be an advantage it the thickness of the sensor device 2 has a thickness that does not exceed 4 mm thick.

The sensor device 2 may preferably comprise a patch configured to communicate (two-way communication) wirelessly with a storage facility such as a database either directly or through the use of a remote monitoring unit, preferably a smartphone or tablet via Bluetooth Classic, Bluetooth Low Energy, or another suitable wireless communications protocol.

The data transmitted by the sensor device 2 is encrypted according to one or more industry standard encryption formats. The stored data may preferably be analysed and presented to a user through different formats that may differ ac- cording to the user’s credentials and purpose and meant to give feedback in order to improve a user's health.

The sensor device 2 may be attached to the skin of a user in different positions. The sensor device 2 may be configured to be attached to the skin of a user at a position either 5 to 20 cm above the knee on the inner, front, or outer side of the thigh, on the foot, or on the inner, front or outer side of the lower part of the leg. Other possible locations could e.g. be on the upper body being e.g. the upper stomach, the chest, or the back. The sensor device 2 may be can be adhered with a pressure-sensitive adhesive (PSA) designed to form a temporary bond, so it can be worn for a longer period of time e.g. for more than about 24hours and be removed when desired. The sensor device 2 may be a single use and disposable

DK 180493 B1 19 device.

The PSA is an adhesive that does not damage the skin when the sensor device 2 needs to be removed.

The sensor device 2 is configured to determine if the sensor device 2 is attached or detached to the body of the user.

The sensor device 2 comprises a mechanical break detector 8 configured to provide information in case that the sensor device 2 is detached from a user.

The sensor device 2 may comprise a mechanical break detector 8 formed as a metal wire or connector that closes a circuit having an end structure that is attached to an input port of the processor (or processing unit or integrated cir- cuit, IC) of the sensor device 2, wherein the opposite end structure is attached to an IC power-supply pin: either ground or the positive supply voltage pin (Vcc) of the IC, respectively.

If the patch is detached, the wire 3 will break, which enables device 1 to measure directly that the connection is broken and store the event that the patch has been detached.

Fig. 1B illustrates a schematic top view of another sensor device 2 according to the invention.

The sensor device 2 comprises a mounting structure 10 formed as a band configured to be worn around the ankle or wrist.

Only a portion of the band is shown in Fig. 1B.

Thus, the band may be longer hereby enabling the user to wear it round the ankle or wrist.

The sensor device 2 comprises a PCB 4 comprising an antenna 6 integrated therein as a PCB trace antenna 6. The PCB comprises a processor 12 electrically connected to the antenna 6, a memory 24 and a sensor element 12. The sensor device 2 may comprise a plurality of sensor elements 12 even though only a single sensing element 12 is shown.

The processor 14 is configured to process data (including encrypting data) received from the sensor element 12. At the same time, the processor 14 function as a communication unit (shown in Fig. 1C) that is configured to wirelessly transmit signals to a remote receiver.

Fig. 1C illustrates a schematic view of a sensor device 2 according to the inven- tion comprising a PCB sealed inside the sensor device 2. The sensor device 2 comprises a mounting structure (not shown). The sensor device moreover com- prises a PCB 4 provided with an antenna 6 integrated therein as a PCB trace

DK 180493 B1 20 antenna 6. The PCB further comprises a processor 14 electrically connected to the antenna 6 by means of a connector 18” ad a memory 24 connected to the pro- cessor 14 by means of a connector 18. The processor 14 comprises a communi- cation unit 16 configured to wirelessly transmit encrypted data to a remote unit. The PCB comprises a sensor element 12 electrically connected to the processor 14 by means of a connector 18’. The sensor device 2 may comprise a plurality of sensor elements 12 even though only a single sensing element 12 is shown. The processor 14 is configured to process data (including encrypting data) received from the sensor element 12. The processor 14 function as a communication unit (shown in Fig. 1C) that is configured to wirelessly transmit signals to a remote receiver. The processor 14 is device is configured to encrypt the measurement data before the measurement data is transferred to the remote unit.

The PCB containing the sensing element 12 may be sealed inside the sensor device 2. Direct contact with the skin of a user may be an advantage. According- ly, the sensor device 2 may preferably comprise a mounting structure comprising an adhesive portion adapted to be attached to the skin of a user. In a preferred embodiment, the processor 14 is electrically connected to at least two different sensing elements 12 (even though even one is shown in Fig. 1C). In one embodiment, the processor 14 is electrically connected to a temperature sensor and a multi-axis accelerometer. It is preferred that the sensor device 2 is flexible. This may be achieved by producing the PCB in a flexible printing material like a polyimide film (e.g. “Kapton” or "FR-4”), It may be an advantage that the thickness of the PCB is 0.4 mm or less. The PCB 4 may be sealed by using a silicone material, a medical grade silicone with shore value of A30-A80, or a plastic material. The PCB 4 may be located on the top of a layer of medical tape with PSA that hereby will give the final form of the sensor device 2. The purpose of the medical tape arranged below the PCB 4 of the sensor device 2 is to fix the sensor device 2 firmly to the skin of a user and to transport moisture away from below the sensor device 2.

DK 180493 B1 21 In one embodiment, the sensor device 2 comprises a top patch layer configured to protect the skin and sensor device 2 against moisture as well as fixing the sensor device 2 more firmly.

The sensor device 2 is configured to generate measurement data that indicates the type of activity by analysing the type of movement performed by the user.

The processor 14 is configured to analyse the sensor signal detected by an accel- erometer 12 and identifies the type of activity.

The processor 14 is configured to encrypt and store the encrypted measurement data in the memory 24. Accord- ingly, later the encrypted measurement date can be transmitting wirelessly to a remote unit through the antenna 6. Fig. 1D illustrates a diagram of connections between different components (the antenna 6, the sensing element 12, the processor 14, the communication unit 16 and the memory 24) of the PCB shown in Fig. 1C.

The processor 14 receives measurement data from the sensor element 12. The processor 14 encrypt the received measurement data that is stored in encrypted form in the memory (24). Encrypted data is also received by the processor from the memory 24. The pro- cessor 16 is connected to the communication unit 16 that is capable of wirelessly transmitting encrypted data to a remote unit and preferably to receive wireless information sent by an external device by using the antenna 6. In a preferred embodiment, the sensor device 2 comprises a sealed PCB arranged in the sensor device 2. The PCB contains at least one sensing element 12 that is connected to processor 14. When a digital signal is generated in the sensing element 12, that signal is sent to the processor 14, which will process and identi- fy the type of data.

The processor 14 encrypts the data and sends the encrypted data to the memory (e.g. a flash type memory) 24. All sensing elements 12 are configured to generate digital signals and are connected to the processor 14. Both the processor 14 and the memory 24 can have input and/or output circuitry, which allows for the transfer of digital data between the processor 14 and the memory 24. Thus, memory 24 will collect data over a specific predetermined amount of time encrypted data representing the user's activity.

This data can be sent to a database such as a cloud system (see Fig. 3A), through a remote moni- toring unit, e.g. as shown in Fig. 2A, where the data will be stored, and be acces-

DK 180493 B1 22 sible for a registered user. In order to make the transfer possible, the processor 14 can manage and process the collected data in the memory 24 and can furthermore send it wirelessly via a communication unit 16 (comprising a transceiver) and an antenna 6 to the re- mote monitoring unit. Any suitable communication protocol such as Bluetooth can be applied to carry out the communication. The PCB of the sensor device 2 may comprise input and/or output circuitry adapted to output and receive as input certain data signals that can be received by a transceiver connected between the antenna 6 and the processor 14. Addi- tionally, when the collected (and encrypted) data is sent to the cloud system 26 (see Fig. 2A, Fig. 2B or Fig. 3A) or through the interaction with the remote moni- toring unit this one can be as far away as the wireless connection enables. The transmitter and receiver may be embodied by a suitable transceiver. Fig. 2A illustrates how a sensor device 2 (having a PCB 4) according to the inven- tion transfers data in form of wireless signals 20 to a cloud system 26 through a remote unit 28. The remote unit 28 may be a smartphone, a tablet or another device capable of receiving the wireless signals 20. The remote unit 28 sends wireless signals 20’ to the cloud system 26. It should be noted that the communi- cation between the remote unit 28 and the cloud system 26 may be carried out by using a wired connection. Fig. 2B illustrates interaction between a first user 32 and a second user 32’. In one embodiment, support is provided for two different types of users. Fig. 2B shows an overview of how the two groups differ in their use of the sensor device

2. The first user type 32 is meant to wear the sensor device 2 and generate data. This user 32, will set up a profile through the use of a remote unit 28, such as a smartphone or tablet, that holds an external device (e.g. a personal digital assis- tant remote) 30, such as an app, providing e.g. information consisting of name; age; weight; height; and mobility level, parameter assessed using a mobility scale from well-functioning to support needed. User type 32 will e.g. also set up the account with a personal password and will be able to access her/his own generated data as a viewer. A second type of user,

DK 180493 B1 23 user 32’, is possible. User 32’, won't generate data through the sensor device 2 but can have access to the personal data through a display unit 34, such as a personal computer, that has access to a relevant electronic network, such as the internet, and will set the personal goals that user 32 should achieve.

In one embodiment, user 32’ is allowed to be in charge of the health progress of user 32. Thus, user 32’ may be in charge of more than one user 32. This implies that user 32’ may have access to the collected data by the sensor device 2 from more than one user 32. By having access to more than one user's collected data, and comparing the results, user 32’ can identify common patterns in the activities and behaviours of the monitored users and actively give personalised feedback. This allows for the management of collected data in a safe environment and user 32' can manage big amounts of data using one platform. User 32' can e.g. be part of a health care organization, an insurance company, or other organizations in need of monitoring the health progress of more than one individual.

In one embodiment, both user 32 and 32' have access to see the collected data of user 32 in different visualisation modes such as graphs, a table, or other visualisation types. The comparison and management of different user's collected data allows for big data management.

Fig. 3A illustrates the component layout of a cloud system 26. The cloud system 26 comprises a back-end 38, a front-end 40, and a database 36. Overall, the cloud system 26 can store sensitive data collected by the use of a sensor device 2 in an encrypted manner. When the data is first transferred from the sensor device 2 through a remote monitoring unit (see Fig. 2B), the data is encrypted to secure safety of sensitive data passed through an insecure connection. When a user wants to access to the data, the user this will e.g. be provided with a specific code that will give the user access to the data according to the user's credentials.

In one embodiment, a platform is provided to create a database. Once the data is transferred to the cloud system 26, the encrypted data is de-encrypted by the back-end 38 as described previously and stored in the encrypted database 36. The collected data stored in the database 36 may consist of metadata and sensor measurements.

DK 180493 B1 24 The monitored sensor data may be used to estimate relevant physical activity parameters for each user. In one embodiment, the cloud system 26 works in the following manner. When the sensitive data from the user is collected with the use of the sensor device 2 and transferred through the use of a remote monitoring unit, the data is trans- ferred to the back-end 38 of the cloud system 26. When received at the back-end 38, the data is decrypted and transferred to a secure encrypted database 36. For processing purposes, the data needs to be transferred to a frontend 40, in order to display and manage the data using a display unit 34, such as a personal com- puter, that has access to a relevant electronic network, such as the Internet. As described, the sensitive data is always encrypted to ensure safety, so both back- end 38 and front-end 40 will contain the data encrypted and only users with an access code will be able to access the system.

The front-end 40 can present the collected data and receive detailed input through the use of a display unit 34 that has access to a relevant electronic network such as the internet. The back-end 38 is responsible for providing an application interface or similar for accessing and storing data into the underlying data storage database 36.

A user can also access the data collected through the use of a remote monitoring unit (see Fig. 2B) such as a smartphone or tablet using a relevant electronic network such as the internet. The external device (remote monitoring unit) 30 will communicate directly with the back-end 38. If the user has access to the collected data through the front-end 40, thus by the use of a relevant electronic network such as the Internet, the user can be able to manage the collected sensitive data that the user has access to depending on the user's credentials.

Referring to the sensitive data collected in the cloud system 26, all information is encrypted to protect the user’s privacy. In one embodiment, when a user wants to access the collected data, the user has a secure two-factor login to the system, which will enable the user to view the data in the secure front-end 40. Thus, allowing the decryption of specific data for viewing.

DK 180493 B1 25 In one embodiment, the sensor device 2 is configured to ensure that transmission to the remote monitoring unit of the collected data is activated when the sensor device 2 interacts wirelessly with a personal digital assistant remote (see Fig. 3A and Fig. 3B). This may be achieved by using an app called "SENS motion”, that is active in the background of the remote monitoring unit 28, preferably being a smartphone or tablet with access to the relevant electronic network, such as the Internet. This process does not require wires or pairing between the sensor device 2 and the personal digital assistant remote 30.

As the sensitive data collected by means of the sensor device 2 is encrypted as it is saved to the memory (internal storage) 24, the transmitted data will still be encrypted and thus safe from external and/or non-registered or unauthorised persons even if the connection as shown in Fig. 2A is public or not safe.

The method of data encryption could be, but is not limited to, a public private cryptographic key encryption scheme. This allows for the private key to only be known by the cloud system 26 while the public key is transferred over the wire- less connection and used for the encryption of data on the sensor device 2 (therefore it is significant that the sensor device 2 comprises a receiver (part of the communication unit 16 shown in Fig. 1C, Fig. 1D).

The remote monitoring unit 28 that may comprise a personal digital assistant remote may be configured to automatically give access to the relevant electronic network for any reachable device via Bluetooth or the like. Once the sensor device 2 has access to the relevant electronic network, the data is transferred and stored on a cloud system 26, which will transmit back to the sensor device 2 a command or request to delete the transmitted data from the memory 24.

In one embodiment, the method of data transferring data combines different features such as, the wearable detection by sensing elements 12, encryption of the data, and the use of a personal digital assistant remote 30, such as the app called "SENS motion”, leads to a transfer without need of pairing or secure con- nection.

In one embodiment, the method makes it possible to identify a user that is send-

DK 180493 B1 26 ing data.

This identification may be based on a unique ID of the sensor device 2, and thus, facilitates the process of storing the data into the cloud system 26. As mentioned, the data transferred from the sensor device 2 may be encrypted when it is transferred and only decrypted after transfer as it is stored into the secure database 36 within the cloud system 26. Following this procedure, the transfer method is protected from a possible external injection of fake data or extraction of sensitive data.

Fig. 3B illustrates example of how information provided by sensor devices accord- ing to the invention can be provided.

A first user applies an external device (a personal digital assistant remote) 30 to receive information.

The external device 30 comprises a display 42. The first user may have first a set of goals set by another user, accessible through a menu 44. The first user can also see the different activities A, B, C, d that are being monitored and the progress accom- plished in real time compared to the daily goals set by the second user.

The number of activities A, B, C, D displayed may vary according to the number of activities that the second user wants to monitor for the first user.

The first user can receive motivational feedback 46 depending on how the daily performance reaches or progresses towards the set goals.

The typically monitored and displayed data include, but not limited to, the time spent, number of repeti- tions and motion intensity in a number of activity categories such as walking, standing, cycling, or doing a number of different exercises like sitting down standing up or static strength exercises like leg press, etc.

Data is both available as an overview of the performance over a defined period of time and at a specific point in time on a second to second level.

Fig. 3B illustrates an example of the display of information is shown through a personal digital assistant remote 30 such as an app running on a smartphone or a tablet, as well as the visualization through a display unit 34, such as a computer, where the comparison takes place.

The information will differ from a first user 32 to a second user 32’ (shown in Fig. 2B), as user 32 has restricted access being shown only the data generated by user 32. User 32 is meant to log in to the system through a back-end 38 with the personal digital assistant remote 30 and user 32' is meant to log in to the system through a front-end 40 with a display

DK 180493 B1 27 unit 34. As seen in Fig. 3B, the display for user 32’ through a display unit 34 can allow the comparison and management of sensitive data for more than one user 32. Thus, user 32’, can compare easily the performance of the various (first type of) users between each other as well as with each user individual goals. The comparison may e.g. contain the different user 32's name 50 with each daily performance 52, during every relevant day of the week, and a summary 54 section that user 32’ can use to detect the user 32 most in need of active feedback.

Fig. 4A illustrates a flowchart that illustrates how it can be detected if the sensor device is attached to a user. It can be seen that a sensor calibration is carried out as the first step after the initial state. Hereafter, each of the sensing elements determines if the measurement data (sensor signal 1, sensor signal 2 and senor signal 3) is in a predefined range. This predefined range is selected in such a manner that the sensor device is assumed to be attached to the skin of a user. If two or more of the sensor signals are within a predefined range, it is concluded that the sensor is attached to the skin of a user. On the other hand, if less than two of the sensor signals are within a predefined range, it is concluded that the sensor is not attached to the skin of a user. In one embodiment, sensor signal 1 is measured by an accelerometer (e.g. a multi-axis accelerometer). If no accelerations are measured for a longer time period, it indicates that the sensor device is detached from the user. In a pre- ferred embodiment, sensor signal 2 is measured by a capacitive proximity sensor that is capable of detecting if the sensor device is in contact with or arranged in close proximity to the skin of a user. In one embodiment, sensor signal 3 is measured by a temperature sensor. If the temperature is no longer within a predefined temperature interval (e.g. 25-30°C, e.g. approximately 27°C) or if the temperature suddenly decreases, it indicates that the sensor device is removed from the user. Fig. 4B illustrates design of a sensor device. The sensor device comprises a ground terminal 56 and a common collector voltage (Vcc) terminal. Fig. 5 illustrates a flowchart illustrating how data is encrypted and stored on a

DK 180493 B1 28 memory of a sensor device. The sensing elements provides digital inputs (data) to the processor. These data are encrypted by the processor and hereafter stor- age in the memory. Hereafter the processer waits for the next data epoch form the sensing elements. The flowchart shows a method for handling accelerometer data. When the accelerometer sensor has stored a number of movements, it interrupts the processer waking this com- ponent from its sleep to prepare for the transfer of sensor data. Data is directly received by the processor and will hereafter be processed and encrypted be stored in the memory (e.g. Flash).

Accordingly, this aspect defines a method which, once the sensor is mounted, enable data to only be stored based on the actual dynamic range of the accelera- tions. If the movements are powerful, the full dynamic range of the data signal is required to digitally represent the motion measured. If, however, movements are slower and thus measured acceleration dynamics lower, a significant data com- pression / reduction is achieved by only storing the relevant dynamic range of the signal — the signal difference from one measurement to the next. E.g. if the full range is -8G to 8G represented by 10 bit per accelerometer axis (3 axis) and the actual signal dynamics during a relevant epoch time frame (e.g. 5 seconds) is only within a -1G to 1G window, each signal (axis) can be represented by only 7 bits instead of 10, meaning a 30% reduction of the data stored. Fewer data to store also entails fewer data to transmit saving power consumption and band- width. If no, or little, dynamic accelerations (e.g. below a set acceleration thresh- old window) are identified by the accelerometer then the processor will complete- ly stop the process of encrypting and storing the data in the storage thereby entering a power saving sleep-mode. The accelerometer will ‘wake up’ the pro- cessor again when future movement is detected by the Accelerometer outside the set threshold window.

Fig. 6A illustrates a graph illustrating the capacitance detected by a sensor device as function of time. During a first time-period (dismounted sensor mode) I a low capacitance is detected, indicating that the sensor is not in contact with the skin of a user or in close proximity to the user. During a second time-period (mounted sensor mode) II a higher capacitance is detected, indicating that the sensor is now in contact with the skin of a user or in close proximity to the user. During a

DK 180493 B1 29 third time-period (dismounted sensor mode) I' a low capacitance is detected, indicating that the sensor is not in contact with the skin of a user or in close proximity to the user. During a fourth time-period IV a slightly higher capacitance is detected, indicating that the sensor is moved to another surface.

Fig. 6B illustrates a graph illustrating the temperature 64 detected by a sensor device as function of time T. During a first time-period (dismounted sensor mode) I a varying low temperature is detected, indicating that the sensor is not in contact with the skin of a user or in close proximity to the user. During a second time-period (mounted sensor mode) II a higher rather constant temperature is detected, indicating that the sensor is now in contact with the skin of a user or in close proximity to the user. During a third time-period (dismounted sensor mode) I’ an increasing low temperature is detected, indicating that the sensor is not in contact with the skin of a user or in close proximity to the user.

Fig. 6C illustrates a graph illustrating the activity level 60 detected by a sensor device as function of time T. During a first time-period (dismounted sensor mode) I a close-to-zero activity level is detected, indicating that the sensor is not in contact with the skin of a user or in close proximity to the user. During a second time-period (mounted sensor mode) II a higher varying activity level is detected, indicating that the sensor is now in contact with the skin of a user. During a third time-period (sleeping mode) III a lower varying activity level is detected, indicat- ing that the user is wearing the sensor device is sleeping or is basically not mov- ing. During a fourth time-period (mounted sensor mode) II’ a higher varying activity level is detected, indicating that the sensor is now in contact with the skin of a user. Fig. 7A illustrates how data is transferred from a sensor device to a cloud system. he method of securely identifying a sensor and securely transferring data from the sensor is as follows. The cloud system and sensors have a shared global encryption key GK, required to be able to identify a sensor. Each sensor has a static identity number SID, a random identity number RID that changes periodi- cally e.g. every 30 minutes, a unique encryption key SK, and a unique key AC- CESSKEY. The cloud system knows the corresponding SK and ACCESSKEY of all sensors based on their SID. A sensor will wirelessly broadcast its combined

DK 180493 B1 30 identity (SID, RID) encrypted with GK allowing a remote monitoring unit to discover a sensor but is unable to establish its identity and track it. GK (SID, RID) is sent to the cloud system which has the GK and can extract (SID, RID). It will provide an authentication payload consisting of (ACCESSKEY, RID) encrypted with SK that must be sent to the sensor to be allowed to connect. The sensor will decrypt this payload and verify the correct (ACCESSKEY, RID). This payload is valid only until the sensor invalidates a RID. All data between sensor and cloud system is encrypted with the SK thus the remote monitoring unit is unable to intercept it.

Fig. 7B illustrates a sensor device 2 comprising a mounting structure comprising a pocket structure 92 configured to receive, contain and prevent the electronic components of the sensor device 2 from getting in contact with water 96. Accord- ingly, the sensor device 2 can be applied by a user taking a shower. The pocket structure 92 comprises an overlapping portion 94. Fig. 8A illustrates a sensor device 2 according to the invention attached to the arm of a user. The sensor device 2 is attached to the skin 80 of a user. Fig. 8B illustrates a close-up view of the sensor device 2 shown in Fig. 8A. the sensor device 2 comprises a contact detection unit 66 comprising three sensing elements: a capacitive proximity sensor 86, an accelerometer 88 and a tempera- ture sensor 90. These sensors 86, 88, 90 are provided on a PCB 4 of the sensor device 2. The capacitive proximity sensor 86 can provide information enabling assessment of whether the sensor device 2 is mounted on the skin 80 of a user or not by detecting a measured change in the capacitance. The capacitance proximi- ty sensor 86 comprises a sensor plate 68 arranged close to the end surface of the sensor device 2. A current sensor 82 is electrically connected to the sensor plate. The current sensor 82 is connected to an output terminal 74 and to an oscillator 70 that is electrically connected to a power supply 72. The sensor device 2 is attached to the skin 8 by means of an adhesive portion 78. Hereby a dielectric portion 84 is provided between the sensor plate 68 and a user (a theoretic capacitor plate indicated by a dotted rectangle). The capacitive proximity sensor 86 detects that the capacitance of the sensor plate 68 increase when being near to the skin 80 of the user or other surfaces

DK 180493 B1 31 containing water or metal.

The capacitance measured will stay fairly constant with smaller variations within a certain dynamic range while the sensor is mount- ed.

If the capacitance decrease, the sensor device 2 could potentially be in the process of being dismounted.

This would trigger a further analysis on whether the sensor device 3 is really being dismounted or not.

The same would result from a certain increase in measured capacitance resulting from the sensor device 2 being mounted.

To detect whether the sensor device 2 is mounted or not, these dynamics can be modelled e.g. using neural network machine learning using a large number of sample data for sensors known to be worn or not.

The model could e.g. be based on the representation of sensor data as a histogram of the distribution of sensor values, constructed based on a sliding window approach.

Bayesian models or simple thresholds could also be used in the same way based on mathematical models of the sensor dynamics (e.g. linear or non-linear distribution of sensor values in the histogram as well as the mean value for a certain number of meas- urements.

The temperature sensor 90 measures the surface temperature a few millimetres above the skin 80, at the area in which the sensor device 2 is mounted.

By mod- elling the dynamics of the temperature signal, the processor can detect irregulari- ties resulting from the sensor device 2 being dismounted.

When mounted, the temperature is usually a bit above about 27°C when the user is indoor.

The temperature may vary a lot if the user also stays outside, work out, or e.g. sleeps with one leg inside or outside the blanket at night.

If the sensor device 2 is not mounted, the temperature tends to be rather constant, with only smaller and fairly slow variations in temperature.

When the sensor device 2 is being mounted or dismounted, a fast temperature change will be accepted.

By checking for fast temperature variations, whether the temperature is fluctuating as would normally be the case when mounted or fairly constant as dismounted will give an indication on whether the sensor device 2 is mounted or not.

To detect whether the sensor device 2 is mounted or not, these dynamics can e.g. be modelled using neural network machine learning using a large number of sample data for sensors known to be worn or not.

DK 180493 B1 32 The model could e.g. be based on the representation of measurement data (sen- sor data) as a histogram of the distribution of sensor values constructed or based on a sliding window approach.

Bayesian models or simple thresholds could also be used in the same way based on mathematical models of the sensor dynamics (e.g. linear or non-linear distribution of sensor values in the histogram as well as the mean value for a certain number of measurements). The dynamics of a normal persons wear cycle for accelerometer measurements consist of a minimum of activity, even at night there is still activity as the person turns in bed during a normal sleep cycle and even due to the small accelerations due to the blood circulating the veins.

These dynamics may be used as a parame- ter when measuring whether the sensor device is mounted or has been dis- mounted.

If the sensor device 2 is subject to no, few, or smaller accelerations or the sensor device 2 is being flipped or rotated in the gravity field, this is likely a result of the sensor being dismounted.

On the other hand, if the sensor device is subject to several (repeating) amount of smaller accelerations, the sensor device 2 is likely mounted.

The frequency response can furthermore be calculated to check wheth- er the movements resemble human motion like standing (smaller movements), walking (motion between about 0.3 and about 1.8 Hz), running (motion between about 1.8 Hz and about 5 Hz), cycling (between about 0.5 and about 5 Hz). Examples of the dynamics of the sensors are shown in Fig. 6A, Fig. 6B and Fig 6C and may in some embodiments be modelled using statistical Bayesian models, neural networks machine learning or simple signal thresholds.

Neural networks can be trained using sensor signals from known data sources, e.g. data from an accelerometer known to be worn.

Bayesian models will require a good mathemat- ical representation of the sensor signal when worn or not.

Simple thresholds governing whether the signal or signal dynamics is higher or lower than a set value are easy to implement, but will require calibration of sensor values, while having a hard time detecting more complex signal characteristics.

It is possible to combine data from two or more of these sources to calculate whether the sensor is mounted or not.

This is in some embodiments done through the algorithm described with reference to Fig. 2A.

The dynamics of each

DK 180493 B1 33 signal is analysed over a period of time with given intervals on the cloud based backend. E.g. if the accelerations recorded suggest that the sensor device 2 has been dismounted, the signal from the temperature and/or capacitive sensor is analysed to check whether the dynamics of these sensors also resemble a dis- mounted or mounted sensor device 2. This feature is enabled since the processor is the link between the sensing ele- ment(s) and the memory. Accordingly, the processor can enter into a special sleep mode and will only wake-up again when interrupted by the accelerometer (when activity is detected). When the accelerometer is exposed to accelerations above a certain threshold window, an interrupt is sent to the processor, waking it up to process the data from the accelerometer.

Additionally, the processor is at least in some embodiments configured to identify different activities from the collected data down to a second to second level, e.g.

using a sliding window algorithm approach. Such activities include sleep patterns, walking, running, cycling, sitting, lying down among others. Thus, if sensor device 2 is combined with a second sensor device, other postural activities can be identi- fied, such as sitting, and body posture. The posture of the body part where the sensor device 2 is mounted can be calculated based on accelerometer data, as the position of the sensor device 2 on the body of a first user is known and the gravitational vector pulling 1G of constant accelerations towards the ground. This allows for the calculation of the body posture during sleep based on the posture of the data of the sensor device 2.

Allowing a second to second indication of the posture such as but not limited to laying on back, left side, right side or stomach. This data allows for detailed analysis of sleeping patterns by registering a vector magnitude of movements in different body postures.

In some embodiments, sensor device 2 is used in combination with other sensors meant to monitor other parameters than the exposed. For example, for monitor- ing the effect of physical activity during a specific amount of time while monitor- ing other parameters like blood pressure that doesn’t require constant monitor- ing.

DK 180493 B1 34

DK 180493 B1 35 List of reference numerals 2 Sensor 4 Printed circuit board 6 Antenna 8 Break detector Mounting structure 12 Sensing element 14 Processor 10 16 Communication unit (transceiver/transmitter) 18, 18’, 18” Connector 20, 20’ Wireless signal 22 Electronic component 24 Memory 26 Cloud system 28 Remote unit 30 External device 32, 32’ User 34 Display unit 36 Database 38 Back-end 40 Front-end 42 Display 44 Menu 46 Feedback 48 Activity 50 Name 52 Performance 54 Summary 56 Ground 58 Common Collector Voltage (Vcc) 60 Activity level 62 Temperature 64 Capacitance (e.g. measured in Pico Farad)

DK 180493 B1 36 66 Contact detection unit (e.g. a capacitive proximity sensor) 68 sensor plate 70 Oscillator 72 Power supply 74 Output (DC) 76 Theoretic capacitor plate 78 Adhesive portion 80 Skin 82 Current sensor 84 Dielectric portion 86 Capacitive proximity sensor 88 Accelerometer 90 Temperature sensor 92 Pocket structure 94 Overlapping portion 96 Water T Time I, I Dismounted sensor mode II, IT’ Mounted sensor mode III Sleeping mode IV Sensor moved to another surface

Claims (18)

DK 180493 B1 PatentkravDK 180493 B1 Patent claim 1. En sensoranordning (2) omfattende: - en processor (14), - en hukommelse (24), - en antenne (6), - en strgmkilde (f.eks. et batteri), - et eller flere sensorelementer (12) indrettet til at tilvejebringe maledata og lagre måledataene i hukommelsen (24) og - en kommunikationsenhed (16) indrettet til at overføre data fra det ene eller de flere sensorelementer (12) og data lagret i hukommelsen til en fjernenhed (28), hvor sensoranordningen (2) har en unik identitet (ID), hvor sensoranordningen (2) er indrettet til at kryptere måledataene ved hjælp af krypteringsnøglen (K), før måledataene overføres til fjernenheden (28), kendetegnet ved, at sensoranordningen (2) har en foruddefineret krypteringsnøgle (K) lagret i sensoranordningen (2) og er indrettet til at kryptere måledataene og herefter lagre de krypterede måledata i hukommelsen (24), før de krypterede måledata overføres til fjernenheden (28).A sensor device (2) comprising: - a processor (14), - a memory (24), - an antenna (6), - a power source (eg a battery), - one or more sensor elements (12) arranged to provide measurement data and store the measurement data in the memory (24) and - a communication unit (16) arranged to transmit data from the one or more sensor elements (12) and data stored in the memory to a remote unit (28), where the sensor device ( 2) has a unique identity (ID), wherein the sensor device (2) is arranged to encrypt the measurement data by means of the encryption key (K), before the measurement data is transferred to the remote unit (28), characterized in that the sensor device (2) has a predefined encryption key (K) stored in the sensor device (2) and is arranged to encrypt the measurement data and then store the encrypted measurement data in the memory (24) before the encrypted measurement data is transferred to the remote unit (28). 2. En sensoranordning (2) ifølge krav 1, kendetegnet ved, at det ene eller de flere sensorelementer (12) er indrettet til at måle temperatur og/eller kapacitans og/eller acceleration og/eller hjertefrekvens og/eller ændringer i hudrødhed og/eller elektrisk ledningsevne.A sensor device (2) according to claim 1, characterized in that the one or more sensor elements (12) are arranged to measure temperature and / or capacitance and / or acceleration and / or heart rate and / or changes in skin redness and / or electrical conductivity. 3. En sensoranordning (2) ifølge et af de foregående krav, kendetegnet ved, at sensoranordningen (2) omfatter en monteringsstruktur (10), med hvilken monteringsstruktur (10) det er muligt at montere sensoranordningen (2) på en måde, hvorpå sensoranordningen (2) er i kontakt med eller tæt på huden (80) hos en bruger (32, 32").A sensor device (2) according to any one of the preceding claims, characterized in that the sensor device (2) comprises a mounting structure (10), with which mounting structure (10) it is possible to mount the sensor device (2) in a manner in which the sensor device (2) is in contact with or close to the skin (80) of a user (32, 32 "). 4. En sensoranordning (2) ifølge krav 3, kendetegnet ved, atA sensor device (2) according to claim 3, characterized in that DK 180493 B1 monteringsstrukturen (10) omfatter en klæbende del (78) indrettet til at blive aftageligt fastgjort til huden (80) af en bruger (32, 32).The mounting structure (10) comprises an adhesive part (78) adapted to be removably attached to the skin (80) by a user (32, 32). 5. En sensoranordning (2) ifølge krav 4, kendetegnet ved, at sensoranordningen (2) omfatter en bruddetektor (8), der er anbragt og indrettet til at brydes, hvis sensoranordningen (2) tages af en bruger (32, 32").A sensor device (2) according to claim 4, characterized in that the sensor device (2) comprises a break detector (8) arranged and arranged to be broken if the sensor device (2) is taken by a user (32, 32 "). . 6. En sensoranordning (2) ifølge et af de foregående krav, kendetegnet ved, at sensoranordningen (2) omfatter en kontaktdetekteringsenhed, der er indrettet til at detektere, om sensoranordningen (2) er i kontakt med eller i nærheden af huden (80) af en bruger (32, 32).A sensor device (2) according to any one of the preceding claims, characterized in that the sensor device (2) comprises a contact detecting unit adapted to detect whether the sensor device (2) is in contact with or in the vicinity of the skin (80). by a user (32, 32). 7. En sensoranordning (2) ifølge krav 6, kendetegnet ved, at detekteringsenheden omfatter en kapacitiv nærhedsføler (82).A sensor device (2) according to claim 6, characterized in that the detection unit comprises a capacitive proximity sensor (82). 8. En sensoranordning (2) ifølge krav 6 eller 7, kendetegnet ved, at detektionsenheden omfatter et accelerometer (88).A sensor device (2) according to claim 6 or 7, characterized in that the detection unit comprises an accelerometer (88). 9. En sensoranordning (2) ifølge et af kravene 6-8, kendetegnet ved, at detekteringsenheden omfatter en temperatursensor (90).A sensor device (2) according to any one of claims 6-8, characterized in that the detection unit comprises a temperature sensor (90). 10. En sensoranordning (2) ifølge et af de foregående krav, kendetegnet ved, at sensoranordningen (2) omfatter en lommestruktur (92) indrettet til at modtage og indeholde de elektroniske komponenter (6, 12, 14, 24).A sensor device (2) according to any one of the preceding claims, characterized in that the sensor device (2) comprises a pocket structure (92) arranged to receive and contain the electronic components (6, 12, 14, 24). 11. En sensoranordning (2) ifølge et af de foregående krav, kendetegnet ved, at sensoranordningen (2) er engangs (designet til engangsbrug) og integreret i et plaster.A sensor device (2) according to one of the preceding claims, characterized in that the sensor device (2) is disposable (designed for single use) and integrated in a patch. 12. En sensoranordning (2) ifølge et af de foregående krav 8-11, kendetegnet ved, at sensoranordningen (2) er indrettet til at detektere kropsholdning og/eller aktivitet og/eller søvntid og/eller søvncyklusser for enA sensor device (2) according to one of the preceding claims 8-11, characterized in that the sensor device (2) is arranged to detect posture and / or activity and / or sleep time and / or sleep cycles for a DK 180493 B1 bruger (32, 32") under søvn ved hjælp af data detekteret ved hjælp af accelerometeret (88).DK 180493 B1 uses (32, 32 ") during sleep using data detected by the accelerometer (88). 13. En sensoranordning (2) ifølge et af de foregående krav 8-12, kendetegnet ved, at sensoranordningen (2) er indrettet til at identificere en eller flere parametre, der indikerer typen og/eller niveauet for fysik aktivitet fra en foruddefineret liste over aktiviteter ved hjælp af data, detekteret ved hjælp af accelerometeret (88).A sensor device (2) according to any one of the preceding claims 8-12, characterized in that the sensor device (2) is arranged to identify one or more parameters indicating the type and / or level of physical activity from a predefined list of activities using data detected by the accelerometer (88). 14. En sensoranordning (2) ifølge et af de foregående krav, kendetegnet ved, at sensoranordningen (2) er forsynet med et ikke-genopladeligt batteri, og at sensoren (2) er anbragt i et ikke-oplukkeligt hus.A sensor device (2) according to one of the preceding claims, characterized in that the sensor device (2) is provided with a non-rechargeable battery and that the sensor (2) is arranged in a non-openable housing. 15. En fremgangsmåde til overførsel af måledata, der er detekteret ved hjælp af en sensoranordning (2), der omfatter et eller flere sensorelementer (12) indrettet til at tilvejebringe måledata, hvor fremgangsmåden omfatter trinnet med at lagre måledata og trådløs sende måledataene til en fjernenhed (28), hvor sensoranordningen (2) har en unik identitet (ID), hvor fremgangsmåden omfatter trinnet at kryptere måledataene ved anvendelse af — krypteringsnøglen (K), før måledataene sendes til fjernenheden (28), kendetegnet ved, at sensoranordningen (2) omfatter en foruddefineret krypteringsnøgle (K), der er lagret i sensoranordningen (2) og en hukommelse (24), og at fremgangsmåden omfatter trinnet atl lagre måledataene i krypteret form i hukommelsen (24) inden måledataene sendes til fjernenheden (28).A method of transmitting measurement data detected by a sensor device (2) comprising one or more sensor elements (12) arranged to provide measurement data, the method comprising the step of storing measurement data and wirelessly transmitting the measurement data to a remote unit (28), the sensor device (2) having a unique identity (ID), the method comprising the step of encrypting the measurement data using - the encryption key (K), before the measurement data is sent to the remote unit (28), characterized in that the sensor device (2) ) comprises a predefined encryption key (K) stored in the sensor device (2) and a memory (24), and that the method comprises the step of storing the measurement data in encrypted form in the memory (24) before the measurement data is sent to the remote unit (28). 16. En fremgangsmåde ifølge krav 15, kendetegnet ved, at fremgangsmåden omfatter trinnet at detektere temperatur og/eller kapacitans og/eller acceleration og/eller hjertefrekvens og/eller ændringer i hudrødhed og/eller elektrisk ledningsevne.A method according to claim 15, characterized in that the method comprises the step of detecting temperature and / or capacitance and / or acceleration and / or heart rate and / or changes in skin redness and / or electrical conductivity. 17. En fremgangsmåde ifølge et af kravene 15-16, kendetegnet ved, at fremgangsmåden omfatter trinnet at detektere, om sensoranordningen (2)A method according to any one of claims 15-16, characterized in that the method comprises the step of detecting whether the sensor device (2) DK 180493 B1 er i kontakt med eller tæt på huden (80) af en bruger (32, 32') ved at anvende en kapacitiv nærhedsføler (82) og/eller et accelerometer (88) og/eller en temperatursensor (90).DK 180493 B1 is in contact with or close to the skin (80) of a user (32, 32 ') using a capacitive proximity sensor (82) and / or an accelerometer (88) and / or a temperature sensor (90). 18. En fremgangsmåde, der anvender et sensorsystem omfattende en sensoranordning (2) ifølge et af kravene 1-14 og et cloud-system (26) omfattende en backend (38), kendetegnet ved, at fremgangsmåden omfatter følgende trin: - anvendelse af sensoranordningen (2) til at detektere måledata; - kryptere måledataene ved hjælp af krypteringsnøglen (K), der er lagret i sensoranordningen (2); - afsendelse af de krypterede måledata til backenden (38); - anvendelse af backenden (38) til at vælge krypteringsnøglen (K) fra en liste over en-kryptionsnøgler (K) på basis af sensoranordningens (2) unikke identitet (ID); - anvendelse af backenden (38) til at dekryptere de krypterede måledata fra sensoranordningen (2) ved at anvende den valgte krypteringsnøgle (K).A method using a sensor system comprising a sensor device (2) according to any one of claims 1-14 and a cloud system (26) comprising a backend (38), characterized in that the method comprises the following steps: - using the sensor device (2) to detect measurement data; - encrypt the measurement data by means of the encryption key (K) stored in the sensor device (2); - sending the encrypted measurement data to the backend (38); using the backend (38) to select the encryption key (K) from a list of one-encryption keys (K) based on the unique identity (ID) of the sensor device (2); using the backend (38) to decrypt the encrypted measurement data from the sensor device (2) using the selected encryption key (K).