METHOD AND APPARATUS FOR SECURELY COMMUNICATING PERSONAL HEALTH INFORMATION

• US 20100122083A1
• Filed: 11/05/2009
• Published: 05/13/2010
• Est. Priority Date: 11/10/2008
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Gim, Byung-soo, Lee, Kwang-hyeon
• Application Number:
  US12/613,040
• Publication Number:
  US 20100122083A1
• Time in Patent Office: Days
• US Class Current: 713/162
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]

Abstract

A method of securely communicating personal health information between a user terminal and a health care server. The method includes receiving an encryption key from a security key issuing device through a local communication between a user terminal and the security key issuing device; obtaining health information of a user; encrypting the health information by using the encryption key; and transmitting the encrypted health information to a health care server through a network communication between the user terminal and the health care server.

Claims

1. A method of securely communicating between a user terminal and a health care server, the method comprising:

receiving an encryption key from a security key issuing device through a local communication between a user terminal and the security key issuing device;

obtaining health information of a user;

encrypting the health information by using the encryption key; and

transmitting the encrypted health information to a health care server through a network communication between the user terminal and the health care server.

2. The method of claim 1, further comprising:

receiving a decryption key from the security key issuing device through the local communication between the user terminal and the security key issuing device; and

decrypting the encrypted health information received from the health care server by using the decryption key.

3. The method of claim 2, wherein the receiving an encryption key further comprises receiving the encryption key through a local network, which directly connects the user terminal with the security key issuing device, and

the receiving a decryption key further comprises receiving the decryption key through a local network, which directly connects the user terminal with the security key issuing device.

4. The method of claim 2, wherein the receiving an encryption key further comprises receiving the encryption key by reading the encryption key from a portable storage medium, which is connected to the user terminal, and

the receiving a decryption key further comprises receiving the decryption key by reading the decryption key from a portable storage medium, which is connected to the user terminal, and

the portable storage medium, when connected to the security key issuing device, stores at least one of the encryption key and the decryption key, which are read from the security key issuing device.

5. The method of claim 2, wherein the transmitting to the health care server further comprises transmitting the encrypted health information through an internet, which is connected to the user terminal.

6. The method of claim 2, wherein the encrypting the health information further comprises encrypting the encrypted health information by using at least one of a medium access control address of the user terminal and a medium access control address of the health care server, and

the decrypting the encrypted health information further comprises decrypting the decrypted health information by using at least one of a medium access control address of the user terminal and a medium access control address of the health care server.

14. A computer-readable recording medium having recorded thereon a program for executing a method of any one of claims 1 on a computer.

7. A method of securely communicating between a health care server and a user terminal, the method comprising:

receiving a decryption key from a security key issuing device through a local communication between a health care server and the security key issuing device;

receiving encrypted information through a network communication between the health care server and a user terminal; and

decrypting the encrypted information by using the decryption key.

8. The method of claim 7, further comprising:

receiving an encryption key from the security key issuing device through a local communication between the health care server and the security key issuing device; and

encrypting information to be transmitted to the user terminal by using the encryption key.

9. The method of claim 8, wherein the receiving a decryption key further comprises receiving the decryption key through a local network, which directly connects the health care server with the security key issuing device, and

the receiving an encryption key further comprises receiving the encryption key through a local network, which directly connects the health care server with the security key issuing device.

10. The method of claim 8, wherein the receiving a decryption key further comprises receiving the decryption key by reading the decryption key from a portable storage medium, which is connected to the health care server, and

the receiving an encryption key further comprises receiving the encryption key by reading the encryption key from a portable storage medium, which is connected to the health care server, and

the portable storage medium, when connected to the security key issuing device, stores at least one of the encryption key and the decryption key, which are read from the security key issuing device.

11. The method of claim 8, wherein the receiving encrypted information further comprises receiving the encrypted information through an internet, which is connected to the health care server.

12. The method of claim 8, wherein the decrypting the encrypted information further comprises decrypting the decrypted information by using at least one of a medium access control address of the user terminal and a medium access control address of the health care server, and

the encrypting information further comprises encrypting the encrypted information by using at least one of a medium access control address of the user terminal and a medium access control address of the health care server.

13. A method of securely communicating between a user terminal and a health care server, the method comprising:

transmitting an encryption key and a decryption key, which are issued by a security key issuing device to a user terminal and a health care server;

encrypting health information of a user by using the encryption key, wherein the encrypting is performed in the user terminal;

adding a unique identifier of the user to the encrypted health information;

transmitting the unique identifier to the health care server through a network communication;

decrypting the unique identifier by using the decryption key, wherein the decrypting is performed in the health care server; and

recognizing personal information of the user by using the unique identifier.

15. A user terminal, comprising:

a health information obtaining unit, which obtains health information of a user;

a local communicating unit, which receives an encryption key through a local communication between a user terminal and a security key issuing device;

a security key obtaining unit, which obtains the encryption key;

an encrypting unit, which encrypts the health information by using the encryption key; and

a network communicating unit, which transmits the encrypted health information to a health care server through a network communication.

16. The user terminal of claim 15, wherein the local communicating unit receives a decryption key through a local communication between the user terminal and the security key issuing device, and

the security key obtaining unit obtains the decryption key.

17. The user terminal of claim 16, wherein the local communicating unit reads at least one of an encryption key and a decryption key, which are stored in a portable storage medium, and

the security key obtaining unit obtains the at least one key read by the local communicating unit.

18. The user terminal of claim 17, wherein the network communicating unit receives encrypted information from the health care server through a network communication.

19. The user terminal of claim 18, further comprising a decrypting unit decrypting the encrypted information received from the health care server by using the decryption key.

20. A health care server system comprising:

a local communicating unit, which receives a decryption key through a local communication between a health care server and a security key issuing device;

a security key obtaining unit, which obtains the decryption key;

a network communicating unit, which receives encrypted information from a user terminal through a network communication; and

a decrypting unit, which decrypts the encrypted information by using the decryption key.

21. The health care server system of claim 20, wherein the local communicating unit receives an encryption key through local communication between the health care server and the security key issuing device, and

the security key obtaining unit obtains the encryption key.

22. The health care server of claim 21, wherein the local communicating unit reads at least one of an encryption key and a decryption key, which are stored in a portable storage medium, and

the security key obtaining unit obtains the read key.

23. The health care server of claim 22, further comprising an encrypting unit encrypting information to be transmitted to a user by using the encryption key.

24. The health care server of claim 23, wherein the network communicating unit transmits the encrypted information to the user through a network communication.

25. A security key issuing device for secure communication between a user terminal and a health care server, the security key issuing device comprising:

a security key issuing unit, which issues at least one of an encryption key and a decryption key in response to a request from a healthcare service provider or a user;

a security key storage unit, which stores the encryption key and the decryption key together with user information of a user terminal; and

a security key transmitting unit, which transmits the encryption key and the decryption key to the user terminal and a health care server through a local communication.

26. The security key issuing device of claim 25, further comprising a security key recording unit recording the encryption key and the decryption key onto a portable storage medium.