SYSTEMS, METHODS, APPARATUSES, AND COMPUTER PROGRAM PRODUCTS FOR PROVIDING NETWORK-ACCESSIBLE PATIENT HEALTH RECORDS

• US 20130006865A1
• Filed: 06/29/2011
• Published: 01/03/2013
• Est. Priority Date: 06/29/2011
• Status: Abandoned Application

• Current Assignee: Mckesson Financial Holdings Limited (McKesson Corp.)
• Original Assignee: Mckesson Financial Holdings Limited (McKesson Corp.)
• Inventors: Spates, Rick
• Application Number:
  US13/172,340
• Publication Number:
  US 20130006865A1
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

Methods, apparatuses, and computer program products are provided for providing network-accessible patient health records. A method may include generating a patient health record document. The method may further include obtaining a set of one or more symmetric keys from a health record trust entity. The method may additionally include encrypting at least a portion of the patient health record document with the obtained set of symmetric keys. The method may also include causing the encrypted patient health record document to be published to a location on a network. The published encrypted patient health record document may have a resource identifier enabling the published encrypted patient health record document to be accessed over the network. Corresponding systems, apparatuses and computer program products are also provided.

Claims

1. A method for providing network-accessible patient health records, the method comprising:

receiving, at a health record trust entity, a request from a service provider for a set of one or more symmetric keys for decrypting at least a portion of a published patient health record document;

accessing, by a processor, a set of one or more symmetric keys held by the health record trust entity corresponding to the published patient health record document; and

providing a subset of the accessed set of symmetric keys to the service provider in response to the request.

2. The method of claim 1, further comprising:

determining an identity of the service provider;

determining access permissions for patient health records granted to the service provider; and

determining the subset of the accessed set of symmetric keys based at least in part on the determined access permissions.

3. The method of claim 1, further comprising:

encrypting the subset of the accessed set of symmetric keys with a public-key certificate of the service provider; and

wherein providing the subset of the accessed set of symmetric keys to the service provider comprises providing the encrypted subset of the accessed set of symmetric keys to the service provider.

4. The method of claim 1, wherein the patient health record document comprises a plurality of sections, and wherein the accessed set of one or more symmetric keys includes a symmetric key corresponding to each respective section of the patient health record document.

5. The method of claim 4, further comprising:

determining the subset of the accessed set of symmetric keys based at least in part on a key map mapping the accessed set of symmetric keys to corresponding sections of the patient health record document.

6. The method of claim 1, wherein the published patient health record document is accessible over a network using a resource identifier.

7. The method of claim 1, further comprising, prior to receiving the request for the set of symmetric keys:

receiving, from a second service provider, a request for a set of one or more symmetric keys for encrypting at least a portion of the patient health record document, the second service provider being the publisher of the patient health record document;

in response to the request, generating the set of symmetric keys for encrypting the patient health record document; and

providing the requested set of symmetric keys for encrypting the patient health record document to the second service provider to enable the second service provider to encrypt at least a portion of the patient health record document prior to publishing the patient health record document.

8. The method of claim 7, wherein the patient health record document comprises a plurality of sections, and wherein generating the set of symmetric keys for encrypting the patient health record document comprises generating a symmetric key corresponding to each respective section of the plurality of sections, the method further comprising:

generating a key map mapping the generated set of symmetric keys to respective corresponding sections of the patient health record document; and

storing the generated key map to facilitate responding to a request for symmetric keys for decrypting the patient health record document.

9. The method of claim 7, wherein the symmetric keys for encrypting at least a portion of the patient health record document are the same as the accessed set of symmetric keys for decrypting at least a portion of the patient health record document.

10. The method of claim 7, wherein the symmetric keys for encrypting at least a portion of the patient health record document are different from, but correspond to the accessed set of symmetric keys for decrypting at least a portion of the patient health record document.

11. The method of claim 1, further comprising:

providing a patient portal enabling a patient to define access permissions for patient health record documents associated with the patient; and

wherein providing the subset of the accessed set of symmetric keys to the service provider in response to the request comprises providing a subset of the accessed set of symmetric keys determined based at least in part upon access permissions defined for the service provider via the patient portal.

12. An apparatus for providing network-accessible patient health records, the apparatus comprising at least one processor, wherein the at least one processor is configured to cause the apparatus to at least:

receive, at a health record trust entity, a request from a service provider for a set of one or more symmetric keys for decrypting at least a portion of a published patient health record document;

access a set of one or more symmetric keys held by the health record trust entity corresponding to the published patient health record document; and

provide a subset of the accessed set of symmetric keys to the service provider in response to the request.

13. The apparatus of claim 12, wherein the at least one processor is configured to further cause the apparatus to:

determine an identity of the service provider;

determine access permissions for patient health records granted to the service provider; and

determine the subset of the accessed set of symmetric keys based at least in part on the determined access permissions.

14. The apparatus of claim 12, wherein the at least one processor is configured to further cause the apparatus to:

encrypt the subset of the accessed set of symmetric keys with a public-key certificate of the service provider; and

provide the subset of the accessed set of symmetric keys to the service provider by providing the encrypted subset of the accessed set of symmetric keys to the service provider.

15. The apparatus of claim 12, wherein the patient health record document comprises a plurality of sections, and wherein the accessed set of one or more symmetric keys includes a symmetric key corresponding to each respective section of the patient health record document.

16. The apparatus of claim 15, wherein the at least one processor is configured to further cause the apparatus to:

determine the subset of the accessed set of symmetric keys based at least in part on a key map mapping the accessed set of symmetric keys to corresponding sections of the patient health record document.

17. The apparatus of claim 12, wherein the published patient health record document is accessible over a network using a resource identifier.

18. The apparatus of claim 12, wherein the at least one processor is configured to further cause the apparatus, prior to receiving the request for the set of symmetric keys, to:

receive, from a second service provider a request for a set of one or more symmetric keys for encrypting at least a portion of the patient health record document, the second service provider being the publisher of the patient health record document;

generate the set of symmetric keys for encrypting at least a portion of the patient health record document in response to the received request; and

provide the requested set of symmetric keys for encrypting at least a portion of the patient health record document to the second service provider to enable the second service provider to encrypt at least a portion of the patient health record document prior to publishing the patient health record document.

19. The apparatus of claim 18, wherein the at least one processor is configured to further cause the apparatus to:

generate a key map mapping the generated set of symmetric keys to respective corresponding sections of the patient health record document; and

store the generated key map to facilitate responding to a request for symmetric keys for decrypting the patient health record document

20. The apparatus of claim 12, further comprising at least one memory storing instructions that when executed by the at least one processor cause the apparatus to:

receive, at the health record trust entity, the request from the service provider for the set of one or more symmetric keys for decrypting at least a portion of a published patient health record document;

access the set of one or more symmetric keys held by the health record trust entity corresponding to the published patient health record document; and

provide the subset of the accessed set of symmetric keys to the service provider in response to the request.

21. A computer program product for providing network-accessible patient health records, the computer program product comprising at least one non-transitory computer-readable storage medium having computer-readable program instructions stored therein, the computer-readable program instructions comprising:

program instructions configured to receive, at a health record trust entity, a request from a service provider for a set of one or more symmetric keys for decrypting at least a portion of a published patient health record document;

program instructions configured to access a set of one or more symmetric keys held by the health record trust entity corresponding to the published patient health record document; and

program instructions configured to provide a subset of the accessed set of symmetric keys to the service provider in response to the request.

22. A method for providing network-accessible patient health records, the method comprising:

using a resource identifier to access a published encrypted patient health record document from a location on a network;

obtaining a set of one or more symmetric keys from a health record trust entity, the set of symmetric keys being held by the health record trust entity; and

decrypting, by a processor, at least a portion of the patient health record document with the obtained set of symmetric keys.

23. The method of claim 22, wherein obtaining the set of one or more symmetric keys from the health record trust entity comprises:

authenticating an identity of a service provider to the health record trust entity;

receiving an encrypted set of one or more symmetric keys from the health record trust entity, the encrypted set of symmetric keys being encrypted based on a public-key certificate of the service provider; and

using a private key of the service provider to decrypt the received encrypted set of symmetric keys.

24. The method of claim 22, wherein the published encrypted patient health record comprises a plurality of encrypted sections, each encrypted section corresponding to a different symmetric key, and wherein:

obtaining the set of one or more symmetric keys comprises obtaining a set of one or more symmetric keys corresponding to a subset of the plurality of encrypted sections which a service provider requesting the symmetric keys from the health record trust entity has permission to access; and

decrypting at least a portion of the patient health record document comprises decrypting one or more encrypted sections of the patient health record document corresponding to the obtained set of symmetric keys.

25. The method of claim 24, wherein decrypting one or more encrypted sections of the patient health record document comprises decrypting one or more encrypted sections of the patient health record document corresponding to the obtained set of symmetric keys based on a key map mapping the obtained symmetric keys to respective sections of the patient health record document, the key map being received from one of the health record trust entity or a second service provider.

26. The method of claim 22, wherein access to the location from which the encrypted patient health record is accessed is not controlled by the health record trust entity.

27. The method of claim 22, further comprising:

receiving notification of publication of the encrypted patient health record; and

wherein using a resource identifier to access the published encrypted patient health comprises accessing the published encrypted patient health record responsive to the received notification.

28. The method of claim 22, further comprising:

generating a patient health record document;

obtaining a set of one or more symmetric keys for encrypting the generated patient health record document from the health record trust entity;

encrypting at least a portion of the generated patient health record document with the obtained set of symmetric keys for encrypting the generated patient health record document; and

causing the encrypted generated patient health record document to be published to a location on a network, the published encrypted generated patient health record document having a resource identifier enabling the published encrypted generated patient health record document to be accessed over the network.

29. The method of claim 28, wherein a set of one or more symmetric keys configured to decrypt the encrypted generated patient health record document are held by the health record trust entity.

30. The method of claim 28, wherein:

generating the patient health record document comprises generating a patient health record document comprising a plurality of sections;

obtaining the set of one or more symmetric keys for encrypting comprises obtaining a set of symmetric keys for encrypting including a symmetric key corresponding to each respective section of the generated patient health record document; and

encrypting at least a portion of the generated patient health record document comprises encrypting each section of the generated patient health record with its corresponding obtained symmetric key for encrypting.