Wellysis S-Patch Ex, User Manual, Page: 28 / 39

28
10.2 Sensitive information stored and transmitted
10.2.1 Information storing
- Only the ECG and HR data of the user is collected via the bio-processor.
None of personal information nor sensitive data of the user is collected from
the S-Patch Ex device and mobile application.
-
In each testing session, ECG data will be stored in the device’s external flash.
Before writing data to the flash, the raw data will be encrypted by AES-CCM/
SHA256 algorithm.
10.2.2 Information transmission
- ECG/HR data together with device’s battery status will be transferred to the
mobile application via BLE secure connection.
- Data will only be transmitted from S-Patch device to the mobile application
when there is a request from user.
- AES-CCM encryption and CRC 32-bit checksum will be applied to ensure the
security and the integrity of data during transmission.
10.3 Security Controls
Control ID Control Name Description
SC001
Out of band (OOB)
Implementation
Secured BLE communication between mobile
applications and S-Patch Ex device.
SC002
BLE secure pairing
mode
Use mode 1 and level 4 for secure pairing of mobile
applications and the S-Patch Ex device. Use just works
"BLE secure pairing" with strong key pairing and with
ECDSA authentication.
SC003
Dynamic MAC
address
To prevent tracking of device by changing the MAC
address dynamically.
SC004
Complex
credentials/PIN
Use complex credentials/PIN to avoid MITM attack
between the mobile applications and the S-Patch Ex
device.
SC005
Disable discovery
mode
Disable discovery mode in S-Patch Ex device after
certain period of no inputs from the mobile application.
SC006
Limiting profile and
services
Limit the unknown/unwanted profiles in services to
avoid DoS attack in the S-Patch Ex device.
SC007 Disable JTAG
Disable JTAG that are used for debugging purpose. If it
is enabled, hacker may get all the data from the flash
memory of S-Patch Ex device.
SC008
AES + 256-bit
standards
encryption
Encrypt data that are exchanged between mobile
applications and S-Patch Ex device.
SC009
CRC 32-bit
Checksum
Integrity check for all data at rest and in transit.
SC010 Hashing
Hashing is used in password security and ECDSA
algorithm verification.
SC011 Input validation
Input validation to restrict the malicious data and
command like ID validation, length validation, CRC
validation etc.