Source: https://patents.google.com/patent/US9355273B2/en
Timestamp: 2018-09-25 07:49:31
Document Index: 364449169

Matched Legal Cases: ['§119', 'Application No. 60', 'Application No. 15155354', 'Application No. 2011250762', 'Application No. 2011247850', 'Application No. 2564317', 'Application No. 2564317']

US9355273B2 - System and method for the protection and de-identification of health care data - Google Patents
US9355273B2
US9355273B2 US11945795 US94579507A US9355273B2 US 9355273 B2 US9355273 B2 US 9355273B2 US 11945795 US11945795 US 11945795 US 94579507 A US94579507 A US 94579507A US 9355273 B2 US9355273 B2 US 9355273B2
US20080147554A1 (en )
This application claims priority under 35 U.S.C. §119(e) to U.S. Provisional Patent Application No. 60/875,392, entitled “System and Method for the Protection and De-Identification of Health Care Data” by Andrew E. Kress et al., filed on Dec. 18, 2006, the entire disclosure of which is incorporated herein by reference.
a first set of non-transitory storage devices storing instructions that are operable, when executed by one or more computers, and causes the one or more computers to perform the steps of:
retrieving healthcare data and personally identifiable information of a person;
storing in a second set of non-transitory storage devices, the retrieved healthcare data and personally identifiable information for the person;
identifying a portion of the stored personally identifiable information from the storage device;
extracting the identified portion of the personally identifiable information from the storage device;
encrypting the extracted portion of the personally identifiable information;
inputting, into a keyed hash function, the encrypted portion of the personally identifiable information;
generating, by the keyed hash function, a first output;
inputting the generated first output to a second hash function;
generating, by the second hash function, a second output;
generating an anonymous linking code using the second output;
storing the anonymous linking code in association with the healthcare data for the person.
2. The system of claim 1, wherein the portion of the personally identifying information comprises a predetermined set of one or more personal identifiers, and wherein there is a functional relationship between the generated anonymous linking code and the one or more personal identifiers included in the predetermined set.
a second storage device that receives and store the healthcare data with the appended anonymous linking code; and
a second processor in communication with the second database storage device.
9. A computer-implemented method for protecting and de-identifying healthcare data containing personally identifiable information, the method comprising:
retrieving, by one or more computers, healthcare data and personally identifiable information of a person;
storing, by the one or more computers, in a storage device, the retrieved healthcare data and personally identifiable information for the person;
identifying, by the one or more computers, a portion of the stored personally identifiable information from the storage device;
extracting, by the one or more computer processor, the identified a portion of the personally identifiable information from the storage device;
encrypting, by the one or more computer processor, the extracted portion of the personally identifiable information;
inputting, by the one or more computer processors, the generated first output to a second hash function;
generating, an anonymous linking code using the second output;
10. The method of claim 9, further comprising the step of transmitting the healthcare data with the appended anonymous linking code to a data warehouse.
11. The method of claim 10, wherein the portion of the personally identifying information comprises a predetermined set of one or more personal identifiers, and wherein there is a functional relationship between the generated anonymous linking code and the one or more personal identifiers included in the predetermined set.
12. The method of claim 9, further comprising the step of linking a first healthcare data file with a second healthcare data file by their respective appended anonymous linking codes,
wherein the first and second data files are for a particular person, and
wherein the first and second data files are from different sources or are created at different times.
13. The method of claim 9, wherein the keyed hash function is a keyed SHA-256 hash function.
14. The method of claim 9, wherein the second hash function is a SHA-256 hash function.
US20080147554A1 true US20080147554A1 (en) 2008-06-19
US9355273B2 true US9355273B2 (en) 2016-05-31
DE102008057910B4 (en) * 2008-11-18 2010-10-07 P&L Edv Systeme Gmbh Patient management system with intelligent interface device for transmission of medical data
US20170255751A1 (en) * 2014-09-15 2017-09-07 Geetha Sanmugalingham System and method for collection, storage and management of medical data
EP1321883A3 (en) 2001-12-05 2004-02-04 Medical Radar International AB Method for determining the post-launch performance of a product on a market
US20060179073A1 (en) 2003-03-20 2006-08-10 Shinya Kimura Information management system
EP0732014B1 (en) 1993-11-30 2003-05-28 Anonymity Protection In Sweden Ab Apparatus and method for storing data
EP0884670B1 (en) 1997-06-14 2002-04-03 International Computers Ltd. Secure database
A. Ohrm and L. Ohno-Machado, Using Boolean reasoning to anonymize databases, Artificial intelligence in Medicine, vol. 15, 1999, DD. 235-254, Elsevier Science B.V.
A. Ohrn and L. Ohno-Machado, Using Boolean reasoning to ananymize databases, Artificial Intelligence in Medicine, vol. 15, 1999, pp. 235-254, Elsevier Science B.V.
Amstutz, Management, Computers, and Market Simulation, Applications of Management Sciences In Marketing, 1970.
Bobrowski, Mastering Oracle7 & Client-Server Computing, 1994.
C. Quantin, et al. How to ensure data security of an epidemiological follow up: quality assessment of an anonymous record linkage procedure, International Journal of Medical Informatics, Elsevier Scientific Publishers, Shannon, IR, vol. 49, No. 1, Mar. 1998, pp. 117-122, XP004149470, ISSN: 1386-5056.
Claycamp et al., Simulation Techniques in the Analysis of Marketing Strategy, Applications of the Sciences in Marketing Management (NO DATE).
Dalenius, Tore, and Steven Reiss, Data Swapping-a Technique for Disclosure Control (NO DATE).
Denning, Field Encryption and Authentication (NO DATE).
Djordjevic (Oracle Identity and Security Management (NO DATE).
European Search Report dated Oct. 30, 2015 for corresponding European Patent Application No. 15155354.2, 7 pages.
Final Rejection mailed Jun. 10, 2009 for U.S. Appl. No. 11/122,589.
Final Rejection mailed Nov. 12, 2009 for U.S. Appl. No. 11/122,565.
H. Bouzelat, C. Quantin and L. Dusserre, Extraction and Ananymity Protocol of Medical File, Proceedings of the American Medical Informatics Association Annual Fall Symposium, 1996, pp. 323-327, AMIA, Inc.
Hauser et al., Application of the "Defender" Consumer Model. Marketing Science, vol. 3, No. 4, 1984.
Herting, Robert and Barnes, Mike, Large Scale Database Scrubbing Using Object Oriented Software Components. Journal of the American Medical Informatics Association, 1998.
HMS PxDx, Health Market Science, A Health Market Science Targeting Solution, 2 pgs., www.healthmarketscience.com.
International Search Report mailed Feb. 6, 2007 in International Application No. PCT/US05/16094, 2 pages.
K. Kahl, G. Dickson, J. Kebisek and M. Powell, Bar code tracking system enhances record- and film-handling productivity, Top Health Rec Manage, vol. 12, No. 3, Mar. 1992, 1 pg., St. Joseph's Hospital, Milwaukee, WI, PubMed-indexed for Medline.
Kotler, Computer Simulation in the Analysis of New-Product Decisions (NO DATE).
Meax, Eleanor, Encrypting Personal Identifiers. Health Services Research 29:2, Jun. 1994.
National Institute of Standards and Technology (NIST), "Secure Hash Standard" Federal Information Processing Standards Publication 180-2 (+ Change Notice to include SHA-224), Aug. 1, 2002; pp. i-iv and 1-79.
Non-Final Rejection mailed Apr. 23, 2009 for U.S. Appl. No. 11/122,565.
Non-Final Rejection mailed Apr. 27, 2009 for U.S. Appl. No. 11/122,564.
Non-Final Rejection mailed Feb. 9, 2010 for U.S. Appl. No. 11/122,589.
Non-Final Rejection mailed Oct. 27, 2008 for U.S. Appl. No. 11/122,589.
Office Action dated Sep. 24, 2014 from Australian Patent Application No. 2011250762, 3 pages.
Office Action in Australian Application No. 2011247850, mailed Sep. 4, 2014, 4 pages.
Office Action in Canadian Application No. 2564317, mailed Aug. 20, 2013, 3 pages.
Office Action in Canadian Application No. 2564317, mailed Jul. 28, 2014, 3 pages.
Pfleeger, Security in Computing (NO DATE).
Physicians Treating Patients by Diagnostic Treatement Code ICD9, From Direct Medical Data, 1 pg., www.DMDdata.com.
Quantin, C., et al., Irreversible Encryption Method by Generation of Polynomials. Medical Informatics, vol. 21, No. 2, 1996.
R. J. Anderson, A security policy model for clinical information systems, Security and Privacy, 1996, Proceedings, 1996 IEEE Symposium on Oakland, CA, USA May 6-8, 1996 (May 6, 1996), pp. 30-43, XP010164923, ISBN: 0-8186-7417-2.
Rao et al., Forecasting with a Repeat Purchase Diffusion Model, Management Science vol. 34, No. 6, 1988.
S. Chaudhuri, et al: An overview of Data Warehousing and OLAP Technology, Sigmod Record, Sigmod, New York, NY, US, vol. 26, No. 1, Mar. 199, (Mar. 1997), pp. 65-74, XP002193792, ISSN: 0163-5808.
Scheuren et al., "HIPAA Certification for SDI's De-Identification Technology" Washington D.C. Jun. 4, 2007; pp. 1-24.
Tanenbaum A., "Computer Networks 3rd Edition", Prentice-Hall Inc., 1996-BOOK.
Technology and Informatics 68, Medical Informatics Europe '99 (NO NAME).
Trusted Oracle7 Release 7.1, Discussion Forum Thread, Jan 16, 2007.
U.S. Appl. No. 11/122,581, filed Dec. 31, 2008 Non-Final Office Action.
U.S. Appl. No. 11/122,581, filed Jan. 21, 2010 Amendment and Request for Continued Examination (RCE).
U.S. Appl. No. 11/122,581, filed May 29, 2009 Response to Non-Final Office Action.
U.S. Appl. No. 11/122,581, filed Sep. 2, 2009 Final Office Action.
U.S. Appl. No. 11/122,589, filed Aug. 13, 2010 Non-Final Office Action.
U.S. Appl. No. 11/122,589, filed Feb. 14, 2011 Amendment and Request for Continued Examination (RCE).
U.S. Patent and Trademark Officer, Office Action for U.S. Appl. No. 09/665,752, Dec. 16, 2005, 4 pgs.
Ullman, Pfleeger, Principles of Database Systems, 2d Ed. pp. 216-219; Security in Computing, pp. 327-334, 364-365 (NO DATE)-WON'T UPLOAD.
Ullman, Principles of Database Systems, 2d Ed. pp. 216-219, 1982.
V.M. Brannigan and B. R. Beier, Patient privacy in the era of medical computer networks: a new paradigm for a new technology, Proceedings of the Eighth World Congress on Medical Informatics, vol. 8, No. 8, Jul. 23, 1995, Jul. 27, 1995, pp. 640-643, XP009040274, Vancouver, British Columbia, Canada, ISSN: 1569-6332.
Vector One: Prescriber Extract (VOPEX), 2 pgs., Verispan, www.ehealthlist.com.
VOPEX, Vector One: Prescriber Extract, SDI, 1 pg., SDI Healthcare Profiling Solutions Group, www.ehealth.com.
Wohlmacher and Pharow, Applications in Health Care Using Public-Key Certificates and Attribute Certificates.
US20080147554A1 (en) 2008-06-19 application