Secure storage and retrieval of sensitive information

Patent metadata

Field	Value
Publication number	US-12079370-B2
Application number	US-202318377478-A
Country	US
Kind code	B2
Filing date	Oct 6, 2023
Priority date	Aug 12, 2020
Publication date	Sep 3, 2024
Grant date	Sep 3, 2024

Abstract

Techniques for storing health data can include a multi-node data structure. A data node, a category node, and an institution node of a multi-node data structure can be generated in accordance with a configuration file. The data node can include health data and can be identified by a first unique data identifier and encrypted using a first cryptographic key. The category node can include the first unique data identifier and the first cryptographic key. The category node can be identified by a second unique data identifier and encrypted using a second cryptographic key. The institution node can include the second unique data identifier and the second cryptographic key. The institution node can be identified by a third unique data identifier and encrypted using a third cryptographic key. The data node, the category node, and the institution node can be shared with a service provider.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
generating a data node of a multi-node data structure in accordance with a configuration file, the data node identified by a first unique data identifier and encrypted using a first cryptographic key, the data node comprising health data;
generating a category node of the multi-node data structure in accordance with the configuration file, the category node comprising the first unique data identifier and the first cryptographic key, the category node identified by a second unique data identifier and encrypted using a second cryptographic key;
generating an institution node of the multi-node data structure in accordance with the configuration file, the institution node comprising the second unique data identifier and the second cryptographic key, the institution node identified by a third unique data identifier and encrypted using a third cryptographic key; and
sharing the data node, the category node, and the institution node with a service provider.

2. The computer-implemented method of claim 1 , wherein the multi-node data structure is usable for other systems to query health data represented by the multi-node data structure.

3. The computer-implemented method of claim 1 , further comprising dynamically generating a set of queries based at least in part on the configuration file, and wherein generating the data node in accordance with the configuration file comprises executing at least one query of the set of queries to collect a set of health data to populate the data node.

4. The computer-implemented method of claim 3 , wherein the configuration file identifies one or more required ranges corresponding to the set of health data.

5. The computer-implemented method of claim 1 , further comprising determining that each of generating the data node, generating the category node, and generating the institution node was successful.

6. The computer-implemented method of claim 5 , further comprising, after determining that each of generating the data node, generating the category node, and generating the institution node was successful, sending the third unique data identifier and the third cryptographic key to an electronic health record system associated with a health institution.

7. The computer-implemented method of claim 1 , further comprising:
receiving a request to share health data with a health institution; and
responsive to the request, sending the third unique data identifier and the third cryptographic key to an electronic health record system associated with the health institution.

8. The computer-implemented method of claim 7 , wherein sending the third unique data identifier and the third cryptographic key to the electronic health record system comprises sending without sending other unique data identifiers or other cryptographic keys.

9. The computer-implemented method of claim 1 , wherein the third unique data identifier comprises a hash that represents data of the institution node including the second unique data identifier and the second cryptographic key.

10. The computer-implemented method of claim 1 , further comprising generating the third unique data identifier by hashing data representing the second unique data identifier and the second cryptographic key.

11. The computer-implemented method of claim 1 , wherein the institution node is a first institution node, the method further comprises generating a second institution node of the multi-node data structure in accordance with the configuration file, the second institution node comprising the second unique data identifier and the second cryptographic key, the second institution node identified by a fourth unique identifier and encrypted using a fourth cryptographic key.

12. The computer-implemented method of claim 1 , wherein the institution node is a first institution node, the category node is a first category node, and the data node is a first data node, and wherein the method further comprises:
generating a second data node of the multi-node data structure in accordance with the configuration file, the second data node identified by a fourth unique identifier and encrypted using a fourth cryptographic key;
generating a second category node of the multi-node data structure in accordance with the configuration file, the second category node comprising (i) the first unique data identifier, (ii) the first cryptographic key, (iii) the fourth unique identifier, and the (iv) the fourth cryptographic key, the second category node identified by a fifth data identifier and encrypted using a fifth cryptographic key; and
generating a second institution node of the multi-node data structure in accordance with the configuration file, the second institution node comprising (i) the second unique data identifier, (ii) the second cryptographic key, (iii) the fifth data identifier, and (iv) the fifth cryptographic key, the second institution node identified by a sixth unique data identifier and encrypted using a sixth cryptographic key.

13. The computer-implemented method of claim 12 , further comprising deleting the first institution node and the first category node.

14. The computer-implemented method of claim 13 , further comprising sending a deletion request to the service provider to delete the first institution node and the first category node from storage of the service provider.

15. A system, comprising:
a memory comprising computer-executable instructions; and
one or more processors in communication with the memory and configured to access the memory and execute the computer-executable instructions to at least:
generate a data node of a multi-node data structure in accordance with a configuration file, the data node identified by a first unique data identifier and encrypted using a first cryptographic key, the data node comprising health data;
generate a category node of the multi-node data structure in accordance with the configuration file, the category node comprising the first unique data identifier and the first cryptographic key, the category node identified by a second unique data identifier and encrypted using a second cryptographic key;
generate an institution node of the multi-node data structure in accordance with the configuration file, the institution node comprising the second unique data identifier and the second cryptographic key, the institution node identified by a third unique data identifier and encrypted using a third cryptographic key; and
share the data node, the category node, and the institution node with a service provider.

16. The system of claim 15 , wherein sharing the data node, the category node, and the institution node with the service provider comprises syncing the data node, the category node, and the institution node with the service provider before syncing the institution node.

17. The system of claim 16 , wherein syncing of the data node and the category node occurs prior to syncing of the institution node.

18. One or more non-transitory computer-readable media comprising computer-executable instructions that, when executed by one or more processors, cause the one or more processors to perform operations, comprising:
generating a data node of a multi-node data structure in accordance with a configuration file, the data node identified by a first unique data identifier and encrypted using a first cryptographic key, the data node comprising health data;
generating a category node of the multi-node data structure in accordance with the configuration file, the category node comprising the

Assignees

• Apple Inc

Inventors

• Gonzalez Cervantes Pablo Antonio
• Randhava Mohan Singh
• Pozas Trevino Jorge F
• Mussell Samuel A
• Pinol Catadau Isaac
• Myers Steven A
• Zhang Dongsheng
• Ahmad Suhail
• Jiang Zhengjun
• Sierra Yannick L
• Jadidi Amir H

Classifications

• H04L9/14

  using a plurality of keys or algorithms · CPC title

• H04L9/0866

  involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics · CPC title

• H04L9/0825

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title

• G16H10/60 Primary

  for patient-specific data, e.g. for electronic patient records · CPC title

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title