Secure networked respiratory therapy systems

The present invention relates to a method of uploading therapy data generated by a respiratory therapy device to a remote server via a control device configured to communicate with the respiratory therapy device and to communicate with the remote server. The method comprises receiving, by the control device, the therapy data from the respiratory therapy device and receiving, by the control device, a nonce from the remote server. The Method further comprises sending, by the control device, the nonce to the respiratory therapy device and receiving, by the control device, a signing key from the respiratory therapy device, wherein the signing key is dependent on the nonce and a secret known to the respiratory therapy device and the remote server. Furthermore, the method comprises generating, by the control device, an authorisation code using the therapy data and the signing key, the authorisation code for authenticating the therapy data; and sending, by the control device, the therapy data and the authorisation code to the remote server.