Deep dip teardown of tubeless insulin pump
This work addresses hardware security vulnerabilities in personal medical devices, which is incremental as it applies existing teardown methods to a new device.
The paper performs a detailed teardown of the OmniPod wireless tubeless insulin pump, analyzing its mechanical, electronic, and firmware components, and reveals security weaknesses in the device design that could be exploited.
This paper introduces a deep level teardown process of a personal medical device - the OmniPod wireless tubeless insulin pump. This starts with mechanical teardown exposing the engineering solutions used inside the device. Then the electronic part of the device is analysed followed by components identification. Finally, the firmware extraction is performed allowing further analysis of the firmware inside the device as well as real-time debugging. This paper also evaluates the security of the main controller IC of the device. It reveals some weaknesses in the device design process which lead to the possibility of the successful teardown. Should the hardware security of the controller inside the device was well thought through, the teardown process would be far more complicated. This paper demonstrates what the typical teardown process of a personal medical device involves. This knowledge could help in improving the hardware security of sensitive devices.