SYSTEMS AND METHODS FOR MAINTAINING AND PROCESSING PROPRIETARY OR SENSITIVE DATA IN A CLOUD-HYBRID APPLICATION ENVIRONMENT

• US 20160048645A1
• Filed: 08/18/2015
• Published: 02/18/2016
• Est. Priority Date: 08/18/2014
• Status: Active Grant

• Current Assignee: Optum Incorporated (UnitedHealth Group Incorporated)
• Original Assignee: Optum Incorporated (UnitedHealth Group Incorporated)
• Inventors: Webb, Joseph Arvel, Bennion, David, McCune, Eric Kemp, Smith, Brent Udell
• Granted Patent: US 10,446,268 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/25 Integrating or interfacing systems involving database management systems
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 40/08 Insurance
• CPC Class Codes: G16H 40/20 for the management or administration of healthcare resources or facilities, e.g. managing hospital staff or surgery rooms
• CPC Class Codes: G16H 70/00 ICT specially adapted for the handling or processing of medical references
• CPC Class Codes: G16H 70/60 relating to pathologies

Abstract

Systems, methods, and apparatuses for maintaining and processing proprietary or sensitive data using an application implemented in a split/hybrid-cloud system are described. The split/hybrid system utilizes cloud and local platforms, while complying with customer security concerns and HIPAA security standards. Configuration of the application occurs in a cloud platform whereas processing of proprietary or sensitive data occurs within a customer'"'"'s local computing environment. The customer may create their own unique application configuration that is stored in the cloud platform and that is delivered back to the customer as a package that includes both the unique application configuration as well as general application configuration requirements. The customer may implement the package within one or more local computing environments while managing the application from a single site that is separated from proprietary or sensitive data.

Claims

1. A system for processing and managing proprietary data in a hybrid environment, comprising:

a cloud environment including generalized application data and customer provided application configuration data, the application data governing general configuration of an application and how the application processes material; and

a local execution environment in communication with the cloud environment, the local execution environment storing sensitive data;

a configuration capsule received by the local execution environment from the cloud environment, the configuration capsule including;

configuration capsule ID and versioning data;

the customer provided application configuration data; and

the generalized application data, the generalized application data being application creator provided, the generalized application data including;

rule configuration data;

generalized application configuration data;

rules engine binary; and

a contextual data library.

2. The system of claim 1, wherein the cloud environment includes user interface configuration data implementable within the local execution environment.

3. The system of claim 1, wherein the local execution environment includes a proprietary data manager configured to control access by the application to the sensitive data.

4. The system of claim 1, wherein the contextual data library is a knowledge base of data used to support rule execution by the application.

5. The system of claim 1, wherein previous configuration capsule data is stored within the cloud environment, the previous configuration data corresponding to configuration capsules previously implemented within the local execution environment.

6. The system of claim 1, wherein configuration capsules may be transmitted from the cloud environment to customer local execution environments at once, each of the configuration capsules containing unique configuration specific to the customer that receives the configuration capsule.

7. The system of claim 1, wherein the application performs at least one of clinical content editing or analysis of structural correctness of data transmissions according to data stored within the configuration capsule.

8. A method for processing and managing proprietary data in a hybrid environment, comprising the steps of:

receiving, by a cloud environment, application creator and customer generated configuration data;

creating, by the cloud environment, a configuration capsule, the configuration capsule including the application creator and customer generated configuration data; and

transmitting, by the cloud environment, the configuration capsule to a local execution environment of the customer, the configuration capsule being executable within the local execution environment with locally stored sensitive data.

9. The method of claim 8, wherein creating the configuration capsule includes compiling rule engine binary and a contextual data library, the rule engine binary and contextual data library being created by the application creator.

10. The method of claim 8, wherein receiving the configuration data includes receiving, by the cloud environment, application creator generated user interface configuration data.

11. The method of claim 8, further comprising the step of:

encrypting, by the cloud environment, the configuration capsule prior to transmitting the configuration capsule to the local execution environment.

12. The method of claim 8, wherein transmitting the configuration capsule includes use of the Internet.

13. The method of claim 8, wherein the configuration capsule data is executed to perform at least one of clinical content editing or analysis of structural correctness of data transmissions.

14. The method of claim 8, further comprising the step of:

storing, by the cloud environment, previously generated configuration capsule data, the previously generated configuration capsule data being previously transmitted to the local execution environment.

15. An apparatus for processing and managing proprietary data comprising:

a processor; and

a memory device including instructions operable to be executed by the processor to perform a set of actions, configuring the processor;

receive a configuration capsule for a cloud environment, the configuration capsule including application creator and customer generated configuration data; and

execute rules within the configuration capsule to perform at least one of clinical content editing or analysis of structural correctness of data transmissions by accessing sensitive data locally stored in a database.

16. The apparatus of claim 15, wherein receiving the configuration capsule includes receiving the configuration capsule via the Internet.

17. The apparatus of claim 15, wherein the processor is further configured to:

retrieve a previously generated configuration capsule from the cloud environment, the previously generated configuration capsule being previously received by no longer stored by the apparatus.

18. The apparatus of claim 15, wherein the processor is further configured to:

generate a user interface using rules stored within the received configuration capsule, the rules being application creator generated.

19. The apparatus of claim 15, wherein the processor is further configured to:

control access by an application to the locally stored sensitive data by using rules stored within the configuration capsule.

20. The apparatus of claim 15, wherein the configuration capsule includes rule engine binary and a contextual data library, the rule engine binary and contextual data library being application creator generated.