Encryption and distribution of health-related data

• US 20150161413A1
• Filed: 02/16/2015
• Published: 06/11/2015
• Est. Priority Date: 02/16/2015
• Status: Abandoned Application

• Current Assignee: Staggs PLLC
• Original Assignee: vitaTrackr, Inc
• Inventors: Calem, Mark, Hezmall, Howard Patterson, Baum, Brian
• Application Number:
  US14/623,198
• Publication Number:
  US 20150161413A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06

Abstract

System and methods to reversibly encrypt commercially sensitive data associated with the exchange of health-related information are described allowing the distribution of health-related information to multiple subscribers while remaining under the control of patient consent directives.

Claims

1. A networked health-related information distribution system comprising:

a marketplace engine, wherein the marketplace engine is configured to;

accept posting data describing available health-related information from a data source;

accept needs data describing desired data from a data destination,

provide, to the data destination, information describing available relevant health-related information;

a high-reliance platform configured to;

accept, via a secure communications channel, commercially sensitive data from the marketplace engine;

encrypt and store the commercially sensitive data;

provide, via the secure communications channel, a storage identifier to the marketplace engine.

2. The method of claim 1, wherein the high-reliance platform further comprises a cryptography module configured to:

receive, over a secure communications data path, commercially sensitive data from the high-reliance platform;

encrypt commercially sensitive data using cryptographic keys that remain inside the cryptography module;

return, over a secure communications data path, encrypted commercially sensitive data to the high-reliance platform.

3. The method of claim 2, wherein cryptography module encrypts commercially sensitive data using Advanced Encryption Standard symmetric-key algorithm.

4. The method of claim 1, wherein the high-reliance platform is further configured to send audit information over a secure communications channel to the high-reliance platform.

5. The method of claim 1, wherein the high-reliance platform further comprises circuitry capable of detecting tampering and wherein the circuitry disables the high-reliance platform in the event tampering is detected.

6. The method of claim 1, wherein commercially sensitive data is retrieved by the marketplace engine using the one or more of the data destination identifiers associated with the storage identifier.