Encryption and Distribution of Health-related Data

• US 20150149362A1
• Filed: 02/04/2015
• Published: 05/28/2015
• Est. Priority Date: 02/04/2015
• Status: Abandoned Application

• Current Assignee: Staggs PLLC
• Original Assignee: vitaTrackr, Inc
• Inventors: Baum, Brian, Calem, Mark, Hezmall, Howard Patterson
• Application Number:
  US14/614,394
• Publication Number:
  US 20150149362A1
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06Q 2220/10 Usage protection of distributed data files
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16Z 99/00 Subject matter not provided for in other main groups of this subclass
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06

Abstract

System and methods to reversibly encrypt health-related personally identifiable information (PII) are described allowing the distribution of health-related information to multiple subscribers while remaining under the control of patient consent directives.

Claims

1. A networked health-related information distribution system comprising:

a marketplace engine, wherein the marketplace engine is configured to;

remove PII data from health-related information;

distribute non-PII health-related information to one or more data destinations, wherein the data destinations are each associated with a data destination identifier;

a high-reliance platform configured to;

accept, via a secure communications channel, the PII data from the marketplace engine;

encrypt and store the PII data;

provide, via the secure communications channel, a storage identifier to the marketplace engine.

2. The method of claim 1, wherein the high-reliance platform further comprises a cryptography module configured to:

receive, over a secure communications data path, PII data from the high-reliance platform;

encrypt PII data using cryptographic keys that remain inside the cryptography module;

return, over a secure communications data path, encrypted PII data to the high-reliance platform.

3. The method of claim 2, wherein cryptography module encrypts PII using Advanced Encryption Standard symmetric-key algorithm.

4. The method of claim 1, wherein the high-reliance platform is further configured to send audit information over a secure communications channel to the high-reliance platform.

5. The method of claim 1, wherein the high-reliance platform further comprises circuitry capable of detecting tampering and wherein the circuitry disables the high-reliance platform in the event tampering is detected.

6. The method of claim 1, wherein PII data is retrieved by the marketplace engine using the one or more of the data destination identifiers associated with the storage identifier.

7. A method of distributing health-related information on a network comprising:

removing, by a marketplace engine, PII data from health-related information;

distributing, by the marketplace engine, non-PII health-related information to one or more data destinations on the network, wherein the data destinations receiving the non-PII health-related information are each associated with a data destination identifier;

sending, by the marketplace engine via a secure communications channel, the PII data to a high-reliance platform;

encrypting, by a cryptography module, the PII data;

providing, by the high-reliance platform via the secure communications channel, a storage identifier to the marketplace engine.

8. The method of claim 7, wherein the encrypting by the cryptography module further comprises:

receiving PII data over a secure communications data path from the high-reliance platform; and

returning encrypted PII data over a secure communications data path to the high-reliance platform.

9. The method of claim 8, wherein the cryptography module uses an Advanced Encryption Standard symmetric-key algorithm.

10. The method of claim 7, wherein the method of distributing health-related information on a network further comprises sending, by the high-reliance platform, audit information over a secure communications channel to the marketplace engine.

11. The method of claim 7, wherein the method of distributing health-related information on a network further comprises:

detecting, by high-reliance platform circuitry, tampering of the high-reliance platform circuitry; and

redirecting, by the high-reliance platform, requests from the marketplace engine after tampering is detected.

12. The method of claim 7, wherein the method of distributing health-related information on a network further comprises:

retrieving, by the marketplace engine, the PII data using the one or more of the data destination identifiers associated with the storage identifier.