In step 608 of method 600, the application layer signals the control layer of the DSDN capable router to dynamically provision a limited access network or subnetwork, for example with a secure channel and/or with a secure subnetwork, in the patient's home and outside the patient's home. That is a subnetwork is formed between two remote networks such that they operate as a single network, in this example as a medical network which includes an insulin pump in a patient's home and a medical facility or monitoring service, for example at a doctor's office, that monitors and send and transmits data to the insulin pump. This medical network may also include a medical cloud service, similar to that shown in FIG. 2, and the manufacturer of the medical device. This greatly reduces the attack surface of the insulin pump and provides important information to a medical monitoring service or doctor's office.

In step 610 of method 600, the insulin pump connects to the patient's doctor's office and/or the medical monitoring service, and potentially the manufacture of medical device. One example of step 610 is the insulin pump connecting to the patient's doctor's office such that the doctor may have real time information about the patient, to a medical monitoring service such that the patient may be monitored 24 hours a day, and to the manufacturer of the insulin pump such that any patches or updates may be timely provided, all over a secure network formed by the DSDN systems and method described herein.

In step 612 of method 600, the application layer provides context to the user, e.g., the patient, and any associated device. Providing context to the user may be providing information regarding the device's endpoints, traffic limitations, etc.