Patent ID: 6874085
Filing Date: 2005-03-29
Classification: H04L

Abstract:
1. A method, comprising: receiving first and second files from a clinic via a network, the first file comprising an encrypted version of a personal data portion of a medical record of a subject, the personal data portion being encrypted using a clinic specified key, the second file comprising a medical data portion of the medical record of the subject, the personal and medical data portions each including an identifier associated with the medical record; receiving a third file from the clinic via the network, the third file including encrypted versions of the clinic specified key, the identifier, and a special key, the encrypted versions of the clinic specified key, the identifier, and the special key being encrypted using the special key; receiving a copy of the special key from a third party via the network; encrypting the copy of the special key received from the third party using the special key; comparing the encrypted copy of the special key received from the third party with the encrypted special key contained in the third file; if the encrypted copy of the special key received from the third party matches the encrypted special key contained in the third file, decrypting the clinic specified key and identifier stored in the third file using the copy of the special key received from the third party; decrypting the encrypted personal data portion of the first file using the clinic specified key decrypted from the first file; retrieving the medical data portion from the second file using the identifier decrypted from the first file; and transmitting the decrypted personal data portion and the retrieved medical data portion to the third party via the network.