Page 38 - Mobility Management, September/October 2021

Security
LUCI’s software has been designed using security best practices for both our onboard and cloud software. We’ve built in the ability to push security updates over-the-air to LUCI via a cryptographically verified process if we find security issues that need to be patched in the future.
Security starts by making sure the driver is safe regardless of connectivity. LUCI’s core functions of collision avoidance, drop-off protection and tip protection work entirely onboard LUCI and require no connection
to the cloud. This means LUCI isn’t affected by MyLUCI updates, random network outages, or other loss of connectivity. For your safety and security, drive settings can’t be modified while your wheelchair is moving. LUCI drive settings can only be changed while in the LUCI Setup Mode. To get into this mode the driver must press a button on the LUCI Dashboard locally, chair motion is locked out, and the chair must be restarted for changes to take effect.
We take your data security just as seriously. To this end, we’ve taken many steps to ensure data security including:
• No personally identified data is stored on LUCI units locally. All local information is deidentified.
• Even though day-to-day communications between LUCI and the cloud don’t include identified data, we transmit deidentified and encrypted data via a secure connection to MyLUCI.
• The MyLUCI portal is HIPAA- secure and kept up-to-date by our team.
Going further, LUCI’s communication of data to the cloud requires multi-factor authentication. Each driver’s individual Wheelchair Key serves as an extra layer of protection. Your LUCI unit will not send data to the MyLUCI app unless your personal Wheelchair Key is present.
Adding this extra layer of hardware security wasn’t something we were required to do...it was just the right thing to do.