Transmitting medical data records

Patent metadata

Field	Value
Publication number	US-10235535-B2
Application number	US-201514945855-A
Country	US
Kind code	B2
Filing date	Nov 19, 2015
Priority date	Nov 24, 2014
Publication date	Mar 19, 2019
Grant date	Mar 19, 2019

Abstract

The present embodiments relate to a method for transmitting medical data records. The method includes receiving a patient data record from an internal data storage unit, selecting an anonymization setting from a set of predetermined anonymization settings, generating an anonymized patient data record on the basis of the selected anonymization setting or rule, and transmitting the anonymized patient data record to an external data storage unit.

First claim

The invention claimed is:

1. A method for transmitting medical data records, the method comprising:
receiving a patient data record from an internal data storage unit;
automatically selecting an anonymization setting from a set of predetermined anonymization settings based on a geographic location of an external data storage unit, wherein the set of predetermined anonymization settings comprises varying levels of stringency, and wherein a first level of stringency is automatically selected based on a physical location of the external data storage unit being in a first geographic location, and a second level of stringency is automatically selected based on the physical location of the external data storage unit being in a second geographic location;
generating an anonymized patient data record based on the selected anonymization setting; and
transmitting the anonymized patient data record to the external data storage unit.

2. The method as claimed in claim 1 , wherein the anonymized patient data record is stored in the external data storage unit.

3. The method as claimed in claim 1 , wherein the anonymized patient data record comprises a logical link to the selected anonymization setting.

4. The method as claimed in claim 1 , wherein the received patient data record, the anonymized patient data record, or each of the received patient data record and the anonymized patient data record is a digital imaging and communications in medicine (DICOM) file.

5. The method as claimed in claim 1 , further comprising:
embedding the anonymization setting in the anonymized patient data record.

6. The method as claimed in claim 5 , further comprising:
storing the patient data record in an additional non-anonymized patient data record.

7. The method as claimed in claim 6 , further comprising:
generating a mapping between the non-anonymized patient data record and the anonymized patient data record.

8. The method as claimed in claim 5 , further comprising:
storing the anonymized patient data record in the internal data storage unit.

9. The method as claimed in claim 8 , further comprising:
encrypting the anonymized patient data record prior to transmission.

10. The method as claimed in claim 1 , further comprising:
storing the anonymized patient data record in the internal data storage unit.

11. The method as claimed in claim 1 , further comprising:
storing the patient data record, which is anonymized when the anonymized patient data record is generated, in an additional non-anonymized patient data record.

12. The method as claimed in claim 11 , further comprising:
generating a mapping between the non-anonymized patient data record and the anonymized patient data record.

13. The method as claimed in claim 12 , wherein the mapping is stored encrypted.

14. The method as claimed in claim 1 , further comprising:
transferring, by the external data storage unit, a service parameter indicating which services are provided by the external data storage unit.

15. The method as claimed in claim 14 , wherein the anonymization setting is selected based on the service parameter.

16. The method as claimed in claim 1 , further comprising:
encrypting the anonymized patient data record prior to transmission.

17. The method as claimed in claim 1 , wherein the varying levels of stringency comprise at least three levels of stringency.

18. The method as claimed in claim 1 , wherein the first level of stringency removes patient identity data but not image data from the patient data record, and the second level of stringency removes both the patient identity data and the image data from the patient data record.

19. The method as claimed in claim 1 , wherein the first geographic location is a first country, and the second geographic location is a second country.

20. A device for transmitting medical data records, the device comprising:
an internal data storage unit;
a receiving facility for receiving a patient data record from the internal data storage unit;
a selection facility for automatically selecting an anonymization setting from a predetermined set of anonymization settings based on a geographic location of an external data storage unit, wherein the set of predetermined anonymization settings comprises varying levels of stringency, and wherein a first level of stringency is automatically selected based on a physical location of the external data storage unit being in a first geographic location, and a second level of stringency is automatically selected based on the physical location of the external data storage unit being in a second geographic location;
a generation facility for generating an anonymized patient data record based on the selected anonymization setting; and
a transmit facility for transmitting the anonymized patient data record to the external data storage unit.

Assignees

• Gobler Thomas
• Schottlander David
• Ukis Vladyslav
• Siemens Ag

Inventors

• Goβler Thomas
• Schottlander David
• Ukis Vladyslav

Classifications

• G06F17/30917

  Physics · mapped topic

• G16H10/60 Primary

  for patient-specific data, e.g. for electronic patient records · CPC title

• G06F21/6254 Primary

  by anonymising data, e.g. decorrelating personal data from the owner's identification · CPC title

• G06F16/86

  Mapping to a database · CPC title