Method and system for secure data storage and retrieval from cloud based service environment

• US 10,509,768 B2
• Filed: 06/30/2015
• Issued: 12/17/2019
• Est. Priority Date: 06/30/2015
• Status: Active Grant

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Balachandran, Bijesh, Nair, Ranjith
• Primary Examiner(s): Truong, Thanhnga B
• Application Number:
  US14/788,406
• Publication Number:
  US 20170004323A1
• Time in Patent Office: 1,631 Days
• CPC Class Codes: G06F 16/13 File access structures, e.g. distributed indices arrangements of input from, or output to, record carriers G06F3/06
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself

Abstract

A method for secure storage of data and retrieval of desired data from a cloud-based service environment includes receiving the data from a tenant having a unique tenant ID, dynamically extracting data to be indexed from the received data, and creating index information from the extracted data. The index information is encrypted with a tenant private key, the encrypted index information is uploaded into the cloud environment in the form of index files, and a last uploaded index file is queried for in the cloud environment. The encrypted index information of the index file is decrypted with the tenant private key, the decrypted index information is searched for a relevant patient record, and the corresponding desired data is retrieved from the cloud environment. The desired data is rendered onto a client application. The index files are created from the index information in chronological order of receipt of the data.

Claims

1. A method for secure storage of data and retrieval of desired data from a cloud based service environment, the method comprising:

receiving the data from at least one tenant;

dynamically extracting data to be indexed from the received data;

creating, by a microprocessor of the at least one tenant, index information comprising fields related to patient identification from the extracted data independent of further index information stored in the cloud based service environment and in an offline state where a network connection is not available between the microprocessor of the at least one tenant and the cloud based service environment;

encrypting the index information with a tenant private key;

uploading the encrypted index information into the cloud based service environment in the form of index files, wherein each index file is tenant specific, wherein the index file has a threshold, and wherein the threshold comprises at least one of a time period as set by the tenant and a predefined size of the index file;

querying, by a client application residing at a client device, for a last uploaded index file from the cloud based service environment;

decrypting the encrypted index information of the index file with the tenant private key;

searching the decrypted index information for a relevant patient record;

when the relevant patient record is not found, querying for an index file uploaded before the previously searched index file from the cloud based service environment until the relevant patient record is found;

retrieving the corresponding desired data from the cloud based service environment; and

rendering the desired data on to a client application,

wherein the index files are created from the index information in chronological order of receipt of the data.

2. The method of claim 1, wherein the data is protected health information.

3. The method of claim 1, wherein each index file is time stamped.

4. The method of claim 1, wherein the creating of the index information comprises compressing the index information.

5. The method of claim 1, wherein the index file has a flat file structure.

6. The method of claim 1, wherein the corresponding desired data is retrieved from the cloud based service environment using a serial number.

7. The method of claim 1, wherein the tenant has a unique tenant ID.

8. A system for secure storage of data and retrieval of desired data from a cloud based service environment, the system comprising:

a receiver module of a tenant, wherein the receiver module comprises;

a microprocessor; and

a memory coupled to the microprocessor, wherein the microprocessor and the memory are configured to cause the receiver module to;

receive data from the tenant;

create index information comprising fields related to patient identification from the data independent of further index information stored in the cloud based service environment, wherein the creation of the index information occurs in an offline state where a network connection is not available between the receiver module of the tenant and the cloud based service environment;

encrypt the index information with a tenant private key; and

upload the encrypted index information into a cloud based service environment in the form of index files, wherein each index file is tenant specific, wherein the index file has a threshold, wherein the threshold comprises at least one of a time period as set by the tenant and a predefined size of the index file, and wherein the cloud based service environment is configured to store the data and the encrypted index information; and

a client application residing on a client device configured to query, decrypt, retrieve and render the data.

9. The system of claim 8, wherein the client application runs on a web browser.

10. The system of claim 8, wherein the client application comprises a cache memory.