SECURE PATIENT INFORMATION HANDLING

• US 20130006867A1
• Filed: 06/30/2011
• Published: 01/03/2013
• Est. Priority Date: 06/30/2011
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Dove, Bryan, Nolan, Sean, Gillotte, John C., Siddiqui, Khan M., White, Steven J., Pathak, Sayan D., Singh, Siddhartha K.
• Application Number:
  US13/172,885
• Publication Number:
  US 20130006867A1
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]

Abstract

The description relates to secure patient information handling. One example can receive encrypted patient data from a first entity. The example can receive a request to view the encrypted patient data from a second entity. The request can include a conditional access code and the example can validate the conditional access code. In an instance where the conditional access code is valid, the example can retrieve an encryption key for the encrypted patient data. The example can decrypt at least a portion of the encrypted patient data to produce decrypted patient data. The example can provide at least some of the decrypted patient data to the second entity.

Claims

1. At least one computer-readable storage medium having instructions stored thereon that, when executed by a computing device, cause the computing device to perform acts, comprising:

receiving encrypted patient data from a first entity;

receiving a request to view the encrypted patient data from a second entity, wherein the request includes a conditional access code;

validating the conditional access code;

in an instance where the conditional access code is valid, retrieving an encryption key for the encrypted patient data;

decrypting at least a portion of the encrypted patient data to produce decrypted patient data; and

,

providing at least some of the decrypted patient data to the second entity.

2. The computer-readable storage medium of claim 1, wherein the validating comprises validating the conditional access code with the first entity.

3. The computer-readable storage medium of claim 1, further comprising separating the received encrypted patient data into image data and non-image data and uploading the image data to a remote storage resource and maintaining the non-image data locally.

4. The computer-readable storage medium of claim 1, wherein the retrieving comprises retrieving the encryption key from the first entity.

5. The computer-readable storage medium of claim 1, wherein the encrypted patient data comprises anonymized image data, and wherein the providing comprises recombining decrypted image data with corresponding non-image metadata.

6. The computer-readable storage medium of claim 1, wherein the receiving encrypted patient data includes receiving a checksum of the encrypted data from the first entity and subsequent to the decrypting calculating another checksum and verifying data integrity by comparing the checksum and the another checksum prior to the providing.

7. The computer-readable storage medium of claim 1, wherein the retrieving, the decrypting, and the providing are performed on a computing resource without storing the decrypted patient data or the encryption key on a disc of the computing resource.

8. The computer-readable storage medium of claim 1, further comprising rendering the decrypted patient data and wherein the rendering and the providing are performed on a just-in-time basis for the rendered decrypted patient data.

9. A method, comprising:

receiving chunks of patient image data in random order;

determining a logical order for the chunks; and

,

uploading the chunks for storage according to the logical order.

10. The method of claim 9, wherein the receiving comprises receiving encrypted chunks.

11. The method of claim 9, further comprising encrypting the received chunks.

12. The method of claim 9, wherein the logical order comprises a sequential order.

13. The method of claim 9, wherein the logical order is selected to facilitate downloading of the chunks.

14. The method of claim 9, wherein the logical order distinguishes key frames of the patient image data from non-key frames of the patient image data and wherein the uploading comprises uploading the key frames in sequential order separately from the non-key frames.

15. At least one computer-readable storage medium having instructions stored thereon that, when executed by a computing device, cause the computing device to perform acts, comprising:

detecting an instance when a patient uploads patient information to a personal health account of the patient;

monitoring copying of image data of the patient information to a remote entity health data storage; and

,

copying non-image metadata of the patient information to a local metadata repository that references the image data in the remote entity health data storage.

16. The computer-readable storage medium of claim 15, wherein the monitoring comprises causing the copying of the image data to the remote entity health data storage.

17. The computer-readable storage medium of claim 15, wherein the monitoring comprises causing a notice to be associated with the copied image data indicating that the copied image data was provided by the patient.

18. The computer-readable storage medium of claim 17, wherein the causing comprises overlaying the notice on the copied image data.

19. The computer-readable storage medium of claim 17, wherein the causing comprises placing the notice with the copied non-image metadata.

20. The computer-readable storage medium of claim 15, further comprising responsive to the detecting, performing anonymization of the image data prior to the image data copying.