APPARATUS AND METHOD FOR SHARING PERSONAL ELECTRONIC - DATA OF HEALTH

• US 20170177797A1
• Filed: 07/27/2016
• Published: 06/22/2017
• Est. Priority Date: 12/18/2015
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: KURNIAWAN, Agus, Fajri, ABDILLAH, Omar
• Granted Patent: US 10,979,401 B2
• Time in Patent Office: Days
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses

Abstract

A trust management system providing secure communication for storing and sharing personal electronic-data of health (e-health data) and a method thereof are provided. The method includes creating a security policy in accordance with at least one input of a user of the electronic device through a security policy design tool, generating a link for gaining access to the data of health based on the security policy, receiving a transmission request for the data of health using the link from a health data request device, and performing authentication on the transmission request based on the security policy.

Claims

1. An operation method of an electronic device for sharing data of health, the method comprising:

creating a security policy in accordance with at least one input of a user of the electronic device through a security policy design tool;

generating a link for gaining access to the data of health based on the security policy;

receiving a transmission request for the data of health that is transmitted using the link from a health data request device; and

performing authentication on the transmission request based on the security policy.

2. The method of claim 1, wherein the generating of the link comprises encrypting the data of health, to be shared by the link, by using biometric information of at least one of fingerprint, iris or face based on the security policy.

3. The method of claim 1, wherein the link corresponds to at least one of a type of accessible data of health that is selected according to the security policy, a sharing target of the data of health or a sharing period of the data of health.

4. The method of claim 1, wherein the link comprises one of a barcode, a uniform resource locator (URL) address, or a quick response (QR) code.

5. The method of claim 1, further comprising:

transmitting the requested data to the data request device, after performing the authentication on the transmission request.

6. The method of claim 1, further comprising:

controlling to transmit the requested data to the data request device through a remote storage device, after performing the authentication on the transmission request.

7. The method of claim 1, wherein the performing of the authentication on the transmission request comprises:

transmitting a request for performing authentication on the transmission request, to the data request device;

receiving a security identity (ID) according to the authentication, from the data request device; and

verifying the security ID based on the security policy.

8. The method of claim 1, wherein the creating of the security policy comprises:

displaying one or more icons comprising an icon of the security policy design tool that creates a security policy template;

displaying, when the icon of the security policy design tool is selected, items indicating logic attributes and security attributes; and

determining the security policy in accordance with an input of the user of the electronic device for selection and combination of at least one of the items.

9. The method of claim 8, further comprising:

displaying the items and a region for the selection and combination of the items; and

determining the security policy based on at least one item that is dragged to the region or clicked by the user of the electronic device.

10. An electronic device for sharing data of health, the device comprising:

a communication unit configured to;

receive a transmission request for the data of health that is transmitted using the link from the health data request device; and

a control unit configured to;

create a security policy in accordance with at least one input of a user of the electronic device through a security policy design tool,

generate a link for gaining access to the data of health based on the security policy, and

perform authentication on the transmission request based on the security policy.

11. The device of claim 10, wherein the control unit is further configured to create the link, while encrypting the data of health to be shared by the link by using biometric information of at least one of fingerprint, iris or face based on the security policy.

12. The device of claim 10, wherein the link corresponds to at least one of a type of accessible data of health that is selected according to the security policy, a sharing target of the data of health or a sharing period of the data of health.

13. The device of claim 10, wherein the link comprises one of a barcode, a uniform resource locator (URL) address or a quick response (QR) code.

14. The device of claim 10, wherein the communication unit is further configured to transmit the requested data to the data request device, after performing the authentication on the transmission request.

15. The device of claim 10, wherein the control unit is further configured to control to transmit the requested data to the data request device through a remote storage device, after performing the authentication on the transmission request.

16. The device of claim 10,

wherein the communication unit is further configured to:

transmit a request for performing authentication on the transmission request to the data request device, and

receive a security identity (ID) according to the authentication from the data request device, and

wherein the control unit is further configured to verify the security ID based on the security policy applied to the transmission request.

17. The device of claim 10, further comprising a display unit configured to display a user interface (UI),

wherein the display unit is further configured to:

display one or more icons comprising an icon of the security policy design tool that creates a security policy template, and

display items indicating logic attributes and security attributes when the icon of the security policy design tool is selected, and

wherein the control unit is further configured to determine the security policy in accordance with an input of the user of the electronic device for selection and combination of at least one of the items.

18. The device of claim 17,

wherein the display unit is further configured to display the items and a region for the selection and combination of the items, and

wherein the control unit is further configured to determine the security policy based on at least one item that is dragged to the region or clicked by the user of the electronic device.

19. An electronic device requesting data in a network for sharing data of health, the device comprising:

a communication unit configured to;

transmit a transmission request for the data of health to the health data share device, using a link that is created based on a security policy in the health data share device,

receive a request for performing authentication on the transmission request from the health data share device,

request, after receiving the authentication request, a security identity (ID),

receive the security ID,

transmit a request for transmission of the data of health to the health data share device by using the security ID, and

receive the requested data based on the security policy.

20. The device of claim 19, wherein the link comprises one of a barcode, a uniform resource locator (URL) address or a quick response (QR) code.