Patent Description:
It has been proposed to derive a patient's physical/physiological condition by examining the patient's behaviour, habit, physiological parameters, health state, environment and/or life pattern (i.e. data about the patient). Based on the derived condition it is possible to individualise a medical treatment and/or preventive therapy of the patient. For example, visual behaviour of the patient assessed with such method allows to customise cataract surgery treatment by selecting the most suitable ocular implant (intraocular lens) and/or combination of implants for the patient's lifestyle. Such customisation is meant to address the patient's visual needs in the real-life settings and thus the patient's activity cannot be assessed in the clinic or doctor's office. Also, due to limited time and space that can be assigned to each patient in the clinic, it is undesirable to perform such investigation in a clinic, especially when the data on the patient is to be gathered for a long period of time in real life settings during daily routine.

The patient might benefit from continuous observations of the health condition performed with a monitoring device. This may be the case if the patient is in a risk of developing an acute event or rapid deterioration of the health condition, when continuously collected data may hint in advance on the impeding event and may allow to take preventive measures. In a similar usage scenario, continuous observations may help to diagnose the health condition, the patient's adherence to the therapy or medication plan, or help to better fit the therapy to the patient's lifestyle.

For this purpose, devices that are designed to collect such data on patients can be distributed to the patients to be used outside of clinical settings as well as in clinical settings without supervision by the healthcare service provider. With these distributed devices, the data can be gathered while the patient lives his/her daily life. Since the collected data from multiple patients should be evaluated and this evaluation should be patient-specific, it is necessary to be able to link the collected data sets to the patients respectively. The straight-forward technical way of implementing the foregoing is to set a patient identifier (ID) on each of the data collecting devices for each of the patients. The patient IDs might be preconfigured in a device. In each device the collected data is stored together with the patient ID of the respective patient (data is tagged) and then uploaded to a storage database (or a cloud server), where the data can be found using the assigned patient ID.

In certain cases it may be beneficial for the healthcare service provider to outsource the device handling to the third-party device handling organisation (i.e. a distributor). The distributor in this context can be understood as a device handling organisation, which provides the service of managing and distributing devices. The distributor may be a commercial distributor, a pharmacy, a clinic or an individual. The distributor provides services of handling devices, such as configuring and preparing devices, distributing devices to a plurality of clinics or directly to the patients, collecting devices from clinics or directly from patients, resetting and cleaning them for the next patients and the like. The distributor may involve logistics partners to perform device delivery and collection.

Within this service model, an address or an identity of the patient has to be shared with the third party (e.g. the distributor) in order to send the device to the patient. Further, if the third party supports the upload of the collected data to a cloud storage, this party becomes aware of more personal information of the patient based on the data, along with address and identity. On each level of the device distribution chain outside of the clinic there is a risk of the patient's personal data being compromised, copied or tempered. It seems critical in view of personal data privacy and protection to ensure the safety of data along the data and/or data collecting device transit.

<CIT> discloses a removable base of a wearable medical monitor including a mating surface configured to reversibly couple the removable base to a body of the wearable medical monitor.

<CIT> discloses a method for transmitting, storing and sharing data collected by a wearable device. In the document, it is described that data related to one or more measurements obtained by the wearable device configured to be mounted to a body surface of a wearer is received in addition to an input by the wearer of the device, the input selects at least one identification rule that determines whether or how the wearer is identified in connection with the data from the wearable device, the data is stored in a database based, at least in part, on the at least one identification rule, the input from the wearer may also select at least one permission rule that determines whether third parties can access the data from the wearable device, and a third party may be required to provide payment for access to or use of the data according to the at least one permission rule.

It is thus an object of the present disclosure to provide devices facilitating an easy handling by the patient while enhancing data protection.

Preferred embodiments of the present disclosure are provided as defined in the appended claims, by which the protection scope is to be set.

By means of the present disclosure data privacy can be enhanced. Further, there is no need for the patient and the device-handling party (distributor of the devices and/or system described herein) to consent in advance to any data privacy and protection. Thus, data collection and subsequent data evaluation can be improved for the patient, clinic and/or distributor.

By way of the above, the party handling the device and data would not have means to access the personal data collected by the measurement device, since the required keys are not known. The most convenient way is to store the keys on a separate physical object with a memory and facilitate reading of the required information by the measurement device. Such physical object with the memory can be for example a mounting unit which facilitates attachment of the measurement device to spectacles or to the body of the patient. The keys can be generated randomly and stored on the mounting unit. The mounting unit can be distributed through separate channels, like through the clinic or pharmacy, and/or in the sealed package which does not allow reading of the keys without breaking packaging seals.

In one implementation, an encryption key and a measurement session identifier are stored on the mounting unit, while a decryption key required for data access is securely stored in human-readable but concealed form on a scratchable card/scratchcard. While unauthorised access to the measurement session identifier and encryption key might happen, the unauthorised access to the decryption key cannot be done unnoticed since it would require breaking seals and/or protection layers. With this the unauthorised user is not able to access the data collected on the device without being noticed even provided with physical access to the device. The data can be linked to the patient and decrypted only when needed. For example, when the patient arrives at the clinic for consultation he/she can provide the information for linking and/or decryption, which is stored on the mounting unit or provided in another way along with mounting unit, for example in a human-readable form in the user information sheet supplied with the mounting unit.

In the following, the present disclosure will further be described with reference to exemplary implementations illustrated in the figures, in which:.

It will be apparent to one skilled in the art that the present disclosure may be practiced in other implementations that depart from these specific details.

Those skilled in the art will further appreciate that functions explained herein below may be implemented using individual hardware circuitry, using software functioning in conjunction with one or more processors, e.g. a programmed microprocessor or a general purpose computer, using an Application Specific Integrated Circuit (ASIC) and/or using one or more Digital Signal Processors (DSPs). It will also be appreciated that when the present disclosure is described as a method, it may also be embodied in a computer processor arrangement and a memory arrangement coupled to a processor arrangement, wherein the memory arrangement is encoded with or stores one or more programs or corresponding code to cause the processor arrangement to perform or control the methods disclosed herein when executed by the processor arrangement.

<FIG> illustrates an example of a system for collecting data about a patient and an activity of a patient. The system comprises a wearable activity parameter collecting device <NUM> and one or more mounting units <NUM>.

Referring to <FIG>, the mounting unit <NUM> (exemplifying one or more mounting units <NUM>) is arranged or attached on spectacles as an example of a wearable device. However, the mounting unit <NUM> may be attached to other wearable devices than spectacles. The wearable activity parameter collecting device <NUM> is attached to the mounting unit <NUM>.

Referring to <FIG>, the mounting unit <NUM> has elastic bands. By means of the elastic bands, the mounting unit can be arranged on the spectacles.

In order to ensure that personal (privacy) information of patient data (data about the patient) is sufficiently protected when/after it is collected and transmitted to a storage (cloud) server, an identifier module may be used, which may contain the identifier, unique to the measurement session. In this scenario, the patient receives or leases a device (e.g. wearable activity parameter collecting device <NUM>) from a clinic or a distributor. The patient may obtain in a pharmacy, in the clinic or distributor, one or more initialization modules (e.g. the identifier module) to which an identifier is saved, or the identifier is presented on a surface of the identifier module such that the identifier is both machine and human-readable. The identifier can be referred to herein as a measurement session identifier. In case of more than one identifier modules, the same measurement session identifier may be set to these several modules. Further, in case of more than one identifier modules, the patient may obtain more than one mounting unit. The number of identifier modules may correspond to the number of mounting units. The measurement session identifier may be understood as information (or an identifier) indicating a measurement session. A measurement session may be understood as the time period duration during which the same patient collects data using the wearable activity parameter collecting device <NUM>. This may be independent of whether one or more mounting units <NUM> are used.

The identifier module may be realised as an integrated circuit with an electronic memory which stores the relevant identifiers (measurement session identifier, and/or mounting unit identifier) and keys.

During an initialization process, the measurement session identifier is read out by the wearable activity parameter collecting device <NUM>. For example, this may be done/performed via contact pads, electromagnetic field communication, using radio-frequencies, optically and/or the like. Then, the wearable activity parameter collecting device <NUM> may collect, e.g. by measurement, the data from the patient and patient's activities. The data is then stored in an internal and/or external memory of the wearable activity parameter collecting device <NUM> together with the measurement session identifier. At a later point of time (e.g. after one or more of such measurement procedures) the data may be uploaded to a cloud server together with the measurement session identifier. The upload may be performed via a wireless network such as cellular networks or via WiFi, Bluetooth, AirPlay, DLNA and/or UPnP interfaces at the distributor and/or clinic. After the upload, the data may be stored and locked on the cloud server. The data can be identified (tagged) and thus distinguished from other data (i.e. data from another patient and/or data from another session of the same patient) by the measurement session identifier.

The data may be stored in such a manner that it is not accessible without knowledge of the measurement session identifier. Authorization to access this data is not given to anyone until the patient explicitly gives his/her consent for processing of the collected data by sharing the identifiers or keys with a service provider. For example, the patient may verbally communicate the measurement session identifier or key to the data user (the healthcare provider or clinic) on the phone inquiry and/or when visiting a clinic for consultation and/or using other secure communication channels between the patient and healthcare service provider. The patient may physically provide the mounting unit / identifier module to the healthcare service provider. This allows the clinic to access the personal data of the patient, analyse it and provide health care services based on this data. In case the correct mounting unit or key is provided, the data is unlocked and linked to a clinic account and/or a patient electronic medical record system of the clinic. The data may be encrypted in the wearable activity parameter collecting device <NUM>, so that the encrypted data cannot be processed until it is unlocked by the patient and the clinic has the consent from the patient.

In this way, the patient is not required to visit the clinic or distributor beforehand for signing consent papers regarding his/her personal data before the patient even starts collecting data, i.e. the measurement session. That is, the wearable activity parameter collecting device <NUM> and/or the one or more chip cards may be provided to the patient before he/she actually gives his/her consent e.g. by visiting a clinic or distributor. The patient may start the measurement session before signing all the consent papers while the data is still protected. Equally, the patient is able to change his mind about his/her willingness to share collected data with a clinic or other party by not providing access key (e.g. measurement session identifier). This can be done at any stage of measurement sessions, even when the data has been completely uploaded to the storage server. Consequently, time and costs for the patient and clinic can be efficiently reduced.

Further, according to the present disclosure, collection of physiological signals, such as vital signs, blood pressure, glucometer, sleep pattern and/or the like can be performed in the home settings, so that the patient does not need to stay longer in the clinic in order to carry out these measurements.

Alternatively, the measurement session identifier can be stored on a separate chip card / identifier module. The identifier module (i.e. chip card) may be inserted into the wearable activity parameter collecting device <NUM> and the wearable activity parameter collecting device <NUM> is then able to access the measurement session identifier. Alternatively, the identifier module may be inserted into the mounting unit <NUM> which can be arranged on the spectacles and is adapted to hold the wearable activity parameter collecting device <NUM>. In this case, the wearable activity parameter collecting device <NUM> is capable of reading out the measurement session identifier from the identifier module inserted into the mounting unit <NUM>. Alternatively, the identifier module may be integrated into the mounting unit <NUM> and it is then sufficient to provide the mounting unit to the patient instead of the identifier module in addition. This simplifies the handling of the system, even by patients with reduced motoric skills, since the identifier module does not have to be inserted and/or applied to the wearable activity parameter collecting device but is pre-installed/integrated in the mounting unit <NUM>.

As depicted in <FIG>, the wearable activity parameter collecting device <NUM> may be mounted/attached on/to the mounting unit <NUM>. The mounting unit <NUM> is adapted to be attached to spectacles or other wearable devices. For example, elastic bands or other physical/mechanical/structural holders can be used for attaching the mounting unit <NUM> to spectacles. Magnets or any physical/mechanical/structural holders arranged at either or both of the wearable activity parameter collecting device <NUM> and mounting unit <NUM> may be used to attach the wearable activity parameter collecting device <NUM> to the mounting unit <NUM>. Since the mounting unit <NUM> may be more likely to get in touch with the patient's skin, the mounting unit <NUM> may be disposable for hygienic reasons.

With this structure, the patient having multiple wearable devices such as multiple spectacles is able to install one of a plurality of mounting units to each of the multiple wearable devices such as multiple spectacles. Thus, even when the patient changes the wearable device, he/she merely has to reattach the wearable activity parameter collecting device <NUM> to the mounting unit <NUM> of the wearable device he/she is intending to wear, thereby continuing with the measurement session. Handling of the wearable activity parameter collecting device <NUM> is thereby simplified. At the same time, it can be recognized during the measurements session which of the multiple spectacles is currently used by the patient (by checking to which mounting unit <NUM> the wearable activity parameter collecting unit <NUM> is attached). This can be done by way of a mounting unit identifier which uniquely identifies each of the mounting units and communicating it to the wearable activity parameter collecting device <NUM> along with the measurement session identifier.

For instance, the identifier module may be integrated into the mounting unit <NUM>. The patient may receive or buy a package including plurality of mounting units <NUM> and even spectacles or/and spectacle frames with an integrated mounting unit interface. Each of the mounting units <NUM> may have the same measurement session identifier. Each of the mounting units <NUM> may have a mounting unit identifier different from those of the other mounting units <NUM>. The package may be for single use, since the mounting units <NUM> and spectacles may be disposable. The clinic or the pharmacy or the distributor may sell or provide the package to the patient. The patient may loan the wearable activity parameter collecting device <NUM> (e.g. for multi-use) from the clinic, distributor or pharmacy. The patient may attach the mounting units <NUM> to his/her multiple spectacles, respectively. When the wearable activity parameter collecting device <NUM> is attached to one of mounting units <NUM>, it may read out the measurement session identifier and/or the mounting unit identifier. For example, the wearable activity parameter collecting device <NUM> may read out the measurement session identifier and/or the mounting unit identifier as soon as it is attached to one of mounting units <NUM>.

When the patient changes spectacles, the same measurement session identifier may be read out, but a different mounting unit identifier assigned to the changed mounting unit <NUM>. The data collected by the wearable activity parameter collecting device <NUM> may be stored together (tagged) with the measurement session identifier and/or the respective mounting unit identifiers. In the wearable activity parameter collecting device <NUM> the data with/without the measurement session identifier and/or the mounting unit identifier may be encrypted by using the key (e.g. the measurement session identifier) assigned to the package. The encrypted data may be transmitted to the cloud server. When the clinic obtains a valid consent of the patient and the key from the patient, the clinic may locate, decrypt, download and use the data from the cloud server using the key.

In terms of data protection, the above described system is advantageous. The processes in the system are absolutely patient agnostic and do not require any configuration. Even if a part of or the whole of the package is lost, it can be easily replaced and the risk of leakage of personal data, since no information is included therein which can be used to identify the patient.

<FIG> illustrates a block diagram of an example of a wearable activity parameter collecting device <NUM>.

The wearable activity parameter collecting device <NUM> comprises at least one of a reading interface <NUM>, a transmitting unit <NUM>, a sensing unit <NUM>, a processor <NUM> and a memory device <NUM>.

The reading interface <NUM> is configured to read out a measurement session identifier from a mounting unit <NUM>. The reading interface unit <NUM> is configured to read out an encryption key assigned to the mounting unit <NUM>. The reading interface unit <NUM> is configured to read out a mounting unit identifier from the mounting unit <NUM>.

The transmitting unit <NUM> is configured to transmit the measurement session identifier and data to memory device <NUM>.

The sensing unit <NUM> is adapted to acquire the data. The data includes activity parameters. The activity parameters may be defined as parameters which are related to activities of the patient. In the following, the sensing unit <NUM> will be described in more detail.

The processor <NUM> is configured to assign the measurement session identifier to the acquired data. The processor <NUM> may control the other units, applications and/or devices working within/with the wearable activity parameter collecting device <NUM>. The processor <NUM> is configured to encrypt the data with the encryption key. The processor <NUM> may be configured to assign the mounting unit identifier to the data.

The memory device <NUM> may be configured to store the data with the measurement session identifier. The measurement session identifier may be stored in the memory device <NUM> with a link to the data. Alternatively, the measurement session identifier may be inserted into the data and then stored together with the data in the memory device <NUM>. Alternatively, the measurement session identifier may be used as the encryption key for the personal data. The memory device <NUM> may be implemented/realised inside and/or outside of the wearable activity parameter collecting device <NUM>. In case the memory device <NUM> is implemented outside of the wearable activity parameter collecting device <NUM>, it may be arranged in a cloud server to which the data about/on the patient is transmitted. The memory device <NUM> may store the data together with the measurement session identifier and the mounting unit identifier.

<FIG> illustrates a block diagram of an example of the sensing unit <NUM>.

The sensing unit <NUM> may include one or more of a distance sensor <NUM>, an eye monitoring unit <NUM>, a movement sensor <NUM>, an ambient light sensor <NUM>, an orientation sensing unit <NUM>, a position sensing unit <NUM>, a physiological parameter sensing unit <NUM>, an imaging sensor <NUM> and/or an environmental sensor <NUM>. Any information or parameter collected or measured by the sensing unit <NUM> may be regarded as the data about the patient or the activity parameters.

The distance sensor <NUM> may be configured to measure one or more viewing distances. These viewing distances are distances between a user and one or more objects in the viewing direction of the subject (i.e. patient, user or wearer). It is possible that the distance sensor <NUM> may measure the one or more viewing distances actively or passively. Active measurement of the viewing distances may be performed as the distance sensor <NUM> automatically senses objects in a space where the wearable activity parameter collecting device <NUM> is located and measures the viewing distances to the objects. In this case, the viewing distances may be measured without consideration of the user's movements. For passive measurement of the viewing distances, the distance sensor <NUM> may measure a distance in a certain direction depending on the user's movements. In case the distance sensor <NUM> is configured to sense the viewing distances in the direction of the line of sight of the user by way of passive measurement, information of the object to which the user focuses can be acquired. For example, measuring a viewing distance may be performed multiple times to measure distances between the wearable activity parameter collecting device <NUM> and multiple points of the object. The viewing distances to the points in addition to directions to the points would result in information on the object. The information may include a position, a shape, an inclination, a size, a pose and/or a type/kind of the object. Alternatively, the information may include or be a topography around or about the object. It is possible that the visual activity can be derived from the information.

The eye monitoring unit <NUM> may be configured to detect the subject's eye direction relative to the distance measuring sensor's direction, e.g. viewing direction. The eye monitoring unit <NUM> may be configured to monitor parameters related to the visual activity and/or health status of one or both eyes. The eye monitoring unit <NUM> may sense at least one of movements of eyes, size of the pupils, blinking activity, tear film quality or change of the lens shape of the user. The eye monitoring unit <NUM> may determine an accommodation effort using at least one of a vergence derived from the sensed movements of the eyes, the size of the pupils and the change of the lens shape. When human eyes focus on an object, they perform coordinated adjustments in vergence, shape of the lens to change optical power and, correspondingly, focal length and pupil size. For example, monitoring of positions of both eyes can allow detection of the vergence, which is a simultaneous movement of both eyes in the opposite direction. Eyes move towards each other while focusing on near objects and move away of each over while focusing on distant objects. Changes of the shape of the lens can be monitored by tracking the reflections of the probing light from surfaces of the lens (for example, by analysing Purkinje reflections, such as P3 and P4). When focusing on a near object, pupils constrict in order to minimize image blurring. Pupil size can be measured with imaging or any other suitable method. The system can detect the accommodation by detection of pupil size changes. During the detection of the accommodation from pupil size, the system may compensate effects to the size of the pupil due to brightness which may be measured with the context sensors, such as ambient light sensor. The eye monitoring unit <NUM> or the processor <NUM> may calculate the viewing distance of the user based on the determined accommodation effort. The viewing distance can be defined as a distance to a point where the user is looking at. By tracking the accommodation effort using any of the mentioned features or a combination of two of more of them: vergence, lens shape change, pupil size, the system can track viewing distances that a user is using.

The eye monitoring unit <NUM> may monitor progression of eye diseases, such as dry eye disease/symptom. In one implementation, the eye monitoring unit <NUM> may sense at least one of the blinking frequency, blinking completeness and blinking regularity, and derive metrics related to the severity of dry eye disease. A system may be configured to provide the patient with the corrective feedback to change his/her behaviour in order to reduce risks.

The movement sensor <NUM> may be configured to measure movements of the subject's body. In the present example, the movement sensor <NUM> may or may not comprise an inertial measurement unit, an accelerometer and/or a gyroscope, and may or may not further comprise different sensors like a magnetometer, an altimeter, a pedometer or a geopositioning device, for example. The movements including displacements of the wearable activity parameter collecting device <NUM> may be measured by the movement sensor <NUM>.

The ambient light sensor <NUM>, which may be extended by using an additional colour sensor, may be configured to measure ambient light and/or light intensity and/or spectral content in the subject's viewing direction. The ambient light sensor <NUM> may be incorporated in or may incorporate an ultraviolet light sensor.

The orientation sensing unit <NUM> may be configured to determine orientations of the wearable activity parameter collecting device <NUM>. The orientation sensing unit <NUM> may be configured to measure angles of the wearable activity parameter collecting device <NUM> relative to an origin point. The angles may be defined to include a vertical angle (vertical orientation) and/or a horizontal angle (horizontal orientation). The origin point may be defined in different ways. As one example, a position of the wearable activity parameter collecting device <NUM> when it is powered on may be the origin point. Or it may be possible that the user sets the origin point manually, e.g. by pressing a button or providing a control command to the wearable activity parameter collecting device <NUM>. The origin point may be derived statistically from a set of points. The origin point may be defined in relation to an absolute coordinate system, like the earth magnetic and/or gravitational field. The origin point may be construed as an origin of a <NUM>-dimensional coordinates system. In these examples, a forward direction of the wearable activity parameter collecting device <NUM> at the origin point may be utilized as a base line for measuring the horizontal and/or vertical orientations. The orientation sensing unit <NUM> may be implemented as or comprise at least one of an accelerometer, a gyroscope sensor, a magnetometer, an altimeter and a compass.

The position sensing unit <NUM> may be adapted to measure at least one coordinate of the wearable activity parameter collecting device <NUM> in space. The position sensing unit <NUM> may include at least one of geolocation systems such as the global positioning system (GPS), GLONASS or GNSS sensors, an indoor positioning system and a hybrid positioning system. Elevation as well can be measured from the position sensing unit <NUM> with an altimeter. The position sensing unit <NUM> may be adapted to measure positions of the wearable activity parameter collecting device <NUM> relative to an origin point. The origin point may be defined in the same manner as described above. The position can be derived indirectly by sensing motions of the wearable activity parameter collecting device <NUM> and performing position estimation based on motions (e.g. dead reckoning/path integration).

The physiological parameter sensing unit <NUM> may measure physiological parameters of the patient. The physiological parameters may include vital signs, body temperature, blood pressure, blood content, blood flow and dynamics, heart rate, blood oxygenation, concentration of blood glucose and/or other analytes, sleep pattern and/or the like.

The imaging sensor <NUM> may obtain images of the patient and/or patient surrounding to characterize the patient's environment and/or patient's facial expressions and/or activities.

The environmental sensor <NUM> may measure parameters of environments surrounding the patient, such as air or water temperature, air/atmospheric pressure, air humidity, air quality and/or pollutants concentration, etc. The environmental sensor <NUM> may incorporate the ambient light sensor <NUM>.

<FIG> illustrates a block diagram of an example of the mounting unit <NUM>.

According to the example of <FIG>, the mounting unit <NUM> may include at least one of an interface unit <NUM>, an interlocking unit <NUM> and an identifier module (or chip card) <NUM>.

The interface unit <NUM> may be configured to pass a measurement session identifier to the wearable activity parameter collecting device <NUM>. The interface unit <NUM> may be configured to pass an encryption key to the wearable activity parameter collecting device <NUM>. The interface unit <NUM> may include a conductive pad or an antenna or an optical label. The conductive pad is adapted to pass a mounting unit identifier, the measurement session identifier, the encryption key and/or the decryption key by using an electric signal. The antenna is adapted to pass the mounting unit identifier, the measurement session identifier, the encryption key and/or the decryption key by means of electromagnetic field communication and/or radio waves. The optical label is adapted to pass the mounting unit identifier, the measurement session identifier, the encryption key and/or the decryption key by using an optical and/or imaging signal. The optical label may have the form of barcode or two-dimensional barcode.

The interlocking unit <NUM> may be adapted to hold the wearable activity parameter collecting device <NUM> to be attached to the mounting unit <NUM>. The interlocking unit <NUM> may include a magnet or a physical/mechanical/structural holder which may itself be adapted to hold the wearable activity parameter collecting device <NUM>.

The identifier module (or chip card) <NUM> may store the measurement session identifier and/or mounting unit identifier. The measurement session identifier and/or mounting unit identifier may be saved in the identifier module <NUM> or be presented on a surface of the identifier module <NUM> (or of the mounting unit <NUM> when the identifier module <NUM> is not detachable from the mounting unit <NUM>). In case there is more than one identifier modules, the same measurement session identifier may be assigned to these multiple identifier modules. However, different mounting unit identifiers may be assigned to the respective identifier modules/chip cards. The functions of the identifier module <NUM> can be built-in into the mounting unit(s) <NUM>.

<FIG> illustrates examples of interfaces for establishing a connection between the mounting unit <NUM> and the wearable activity parameter collecting device <NUM>.

Referring to <FIG>, one or more contacts/conductive pads/connectors may be used as the interface for linking the mounting unit <NUM> to/with the wearable activity parameter collecting device <NUM>. An electrical signal containing the mounting unit identifier, measurement session identifier, encryption key and/or decryption key may be delivered to the wearable activity parameter collecting device <NUM> via the one or more conductive pads. When the one or more conductive pads are used, the wearable activity parameter collecting device <NUM> may have one or more corresponding connectors as a counter part of the contacts/conductive pads/connectors implemented in the mounting unit <NUM>, and which can be referred as the reading interface <NUM>.

Referring to <FIG>, one or more antennas may be used as the interface for linking the mounting unit <NUM> with the wearable activity parameter collecting device <NUM>. A radio signal containing the mounting unit identifier, measurement session identifier, encryption key and/or decryption key may be delivered to the wearable activity parameter collecting device <NUM> via the one or more antennas by means of electromagnetic field communication and/or using radio waves. When the one or more antennas are used, the wearable activity parameter collecting device <NUM> may have one or more corresponding antennas as a counter part of the antenna implemented in the mounting unit <NUM>, and which can be referred as the reading interface <NUM>.

<FIG> illustrates an arrangement with an optical label or optical active element as an electronic ink, liquid crystal display and/or one or plurality of light emitting diodes to communicate the encryption key and/or measurement session identifier.

The wearable activity parameter collecting device <NUM> is able to read out the information using optical sensors (e.g. ambient light sensor <NUM>, imaging sensor <NUM> or environmental sensor <NUM>) and configure accordingly. The optical communication channel has the advantage of potentially being concealed in the non-transparent packaging during transportation.

<FIG> illustrates an example of the patient and data paths. The patient receives a blank wearable activity parameter collecting device <NUM> from a device handling party, e.g. distributor, clinic or pharmacy, etc. (step S1). The patient obtains an identifier module <NUM>, which may be the package of one or more mounting units <NUM> with integrated identifiers (step S2). The patient arranges the mounting unit <NUM> on the spectacles and attaches it to the wearable activity parameter collecting device <NUM>. The wearable activity parameter collecting device <NUM> reads out the measurement session identifier and encryption key, collects relevant patient data, stores and/or encrypts it using the measurement session identifier and encryption key, correspondingly (step S3). At the end of the measurement session the patient returns the wearable activity parameter collecting device <NUM> with the stored encrypted data to the device handling party and keep the identifier modules <NUM> and/or mounting unit <NUM> (step S4). The data is uploaded to the storage server (cloud) in the encrypted form using the distributor infrastructure, for example, a wireless network (step S5a). The wearable activity parameter collecting device <NUM> may have the capability to upload data directly on the server without the need of the additional infrastructure. In this way data may be already uploaded to the storage server (cloud) before it reaches the distributor (step S5b). On a visit to clinic, the patient brings the identifier module <NUM> and/or mounting unit <NUM> with the key required for accessing the data or communicates the key to the healthcare service provider (step S6). Using the measurement session identifier and/or decryption key the personal data of the patient can be accessed, decrypted, processed and analysed to customise the healthcare service for the patient. In case the decryption key is provided on the media, separately from the mounting unit <NUM> with the encryption key, the patient may have to communicate the decryption key only. In one implementation, a package may contain a paper sheet with patient information and a human-readable decryption key. The returned wearable activity parameter collecting device <NUM> is reset by the device handling party (distributor), cleaned and prepared for the next patient (step S7).

Alternatively, the patient might be asked to communicate to the healthcare service provider (data user) the decryption key and/or measurement session identifier before starting the session. In this arrangement the healthcare service provider might be able to follow the progress of personal data collection if the wearable activity parameter collecting device <NUM> has the capability to upload data to the storage server directly (step S5b). This also ensures that the patient has not forgotten to communicate the decryption key and measurement session identifier to the healthcare service provider.

<FIG> shows an example of a mounting units package obtained by a patient. Several mounting units <NUM> in this example are equipped with a near field radio communication interface depicted with antennas and configured to communicate information to the wearable activity parameter collecting device <NUM>. Each of the mounting units <NUM> communicates the same measurement session identifier and encryption key, but an individual mounting unit identifier. Spectacles with an embedded mounting unit can be provided. The mounting unit <NUM> of the spectacles communicates the same measurement session identifier and encryption key, but an individual mounting unit/spectacles identifier. The patient is also provided with the text sheet with an authorisation/decryption key in human-readable and/or machine-readable forms initially concealed by a scratchable opaque covering layer. In order to reveal the (authorisation) key and access data on the cloud, the patient or healthcare service provider may remove the covering layer.

By way of the technique described herein, it is possible to effectively provide personal sensitive data protection. Further, processes for handling collected data can be simplified, which results in improved efficiency.

It will be understood that the embodiments described above are merely exemplary and that the principles of the present disclosure may be practiced in other implementations.

Claim 1:
A wearable activity parameter collecting device (<NUM>) for being detachably mounted to a wearable device via a mounting unit (<NUM>), the wearable activity parameter collecting device (<NUM>) comprising:
a sensing unit (<NUM>) adapted to acquire data, wherein the data includes activity parameters;
a reading interface unit (<NUM>) adapted to read out a measurement session identifier indicating a measurement session from the mounting unit (<NUM>);
a processor (<NUM>) adapted to assign the measurement session identifier to the acquired data; and
a transmitting unit (<NUM>) adapted to transmit the measurement session identifier and the acquired data to a memory device (<NUM>),
characterised in that
the reading interface unit (<NUM>) is further adapted to read out an encryption key assigned to the mounting unit (<NUM>), and
wherein the processor (<NUM>) is further adapted to encrypt the data with the encryption key.