Over-the-Air Updates
Remote, network-delivered software or firmware updates to a fielded medical device.
Definition
Over-the-Air (OTA) updates are software or firmware updates delivered to a fielded medical device over a network - Wi-Fi, cellular, or hospital-managed channel - rather than via local USB, service visit, or operator manual upgrade. A robust OTA system includes cryptographic signing of update packages, integrity verification on the device, secure boot validation, A/B (or dual-bank) partitioning to support rollback, audit logging, and version reporting back to the manufacturer.What this means in practice
OTA is the operational backbone of patchability. Most MedTech failures in this area are not in the cryptographic primitives but in the operational details - handling power loss mid-update, recovering from a corrupted partition, communicating status to clinicians, and giving hospitals control over the maintenance window.Examples
- A hospital-managed Wi-Fi network delivers a critical cybersecurity patch to a fleet of infusion pumps overnight, ensuring they remain protected against newly discovered vulnerabilities without requiring manual intervention.
- Following a detected bug in the patient monitoring software, the manufacturer pushes an OTA firmware update to address the issue, which devices download and install during a pre-scheduled maintenance window approved by the clinical team.
- An implanted cardiac device receives a periodic software enhancement via a secure cellular connection to its home monitor, improving battery life algorithms and reporting capabilities without the need for a clinic visit.
- •No rollback path - a single bad update bricks the fleet.
- •Updates that require clinical downtime without a hospital-controlled maintenance window.
- •Skipping signature verification 'because we control the update server' - trust the signature, not the server.
Frequently asked questions
Related terms
Grouped by themeEditor's picks
· Hand-selected related conceptsThe designed-in ability to deploy security updates to a fielded medical device in a timely, controlled, and verifiable manner.
FDA's framework for ongoing vulnerability monitoring, risk assessment, and remediation of medical device cybersecurity issues after a device is on the market.
The bundle of cybersecurity artifacts a sponsor includes in a 510(k), De Novo, PMA, or HDE submission for a cyber device.
The federal statute that gives FDA explicit premarket authority over cybersecurity for cyber devices.
More in Cybersecurity
· Same categoryA chain-of-trust mechanism that ensures only cryptographically signed firmware and software can run on a device.
AAMI/ANSI standard establishing requirements for medical-device cybersecurity activities throughout the lifecycle.
AAMI Technical Information Report providing MedTech-specific guidance on cybersecurity risk management.
AAMI Technical Information Report on post-market security risk management for medical device manufacturers, the operational companion to TIR57.
Where this term appears across MedTech Terms.
Latest in MedTech
Sources
3 sourcesEvery citation below opens the original document. Each is graded against our source-tier hierarchy so you can see what rests on binding law versus commentary.
- 1FDA Cybersecurity Guidance (Sept 2023)Tier 2 VerifiedFDAfda.gov
- 2NIST SP 800-193 Platform Firmware Resiliency GuidelinesTier 2 VerifiedNISTcsrc.nist.gov
- 3MDCG Cybersecurity GuidanceTier 2 VerifiedMDCGhealth.ec.europa.eu
Inline markers like [1] jump to the matching reference above.