Back to results
US 10,257,174 B2Granted
Methods and systems for providing secure and auditable transfer of encrypted data between remote locations
AssigneeMedicom Technologies Inc.
InventorsMichael Rosenberg, Malcolm Benitz, Chase Ballard, Jason Suttles, Chris Woodlief
Life of this patent
Estimating the term…
Abstract
Methods and systems for directly and securely transferring encrypted medical data between two remote locations, such as an imaging site and a diagnostic site, without storing the medical data on an intermediary server, and only storing audit information on the intermediary server, thereby allowing a direct transfer of medical data between the two remote sites, and without relying on the intermediary server for storage of the medical data.
Claims20
A system for transferring data in a secure manner, comprising:
- a web socket server coupled to a communication network;
- a computing device coupled to the communication network, the computing device configured to request data from the web socket server;
- a first endpoint device coupled to the communication network, and configured to transmit a first endpoint characteristic to the web socket server;
- and
- a second endpoint device coupled to the communication network, and configured to transmit a second endpoint characteristic to the web socket server,
- wherein the web socket server is configured to perform a comparison of the first endpoint characteristic and the second endpoint characteristic,
- wherein, in a case where the web socket server determines that the first endpoint device provides a lower latency than the second endpoint device based on the comparison, the web socket server initiates a communication channel between the computing device and the first endpoint device to transfer the data,
- wherein, in a case where the web socket server determines that the second endpoint device provides a lower latency that the first endpoint device based on the comparison, the web socket server initiates a communication channel between the computing device and the second endpoint device to transfer the data, and
- wherein the web socket server is further configured to periodically close and subsequently open the communication channel, wherein the communication channel does not need to be re-initiated after being closed,
- wherein the first endpoint device is configured to transmit a first encryption key to the second device,
- wherein the second endpoint device is configured to transmit a second encryption key to the first device after the second device receives the first encryption key,
- wherein the first endpoint device is configured to encrypt the data after receiving the second encryption key, and
- wherein the web socket server is configured to store a first audit data related to the first endpoint device and a second audit data related to the second endpoint device, wherein neither the first endpoint device, the second endpoint device, or the web socket server can access the first audit data and the second audit data without a third encryption key.
10 more elements
A system of securely transmitting medical data directly between two remote locations, comprising:
- a web socket server coupled to a communication network;
- a medical provider device coupled to the communication network, the medical provider device configured to request a data package from the web socket server;
- a first picture archiving and communication system (PACS) coupled to the communication network, and configured to transmit a first PACS characteristic to the web socket server;
- and
- a second PACS coupled to the communication network, and configured to transmit a second PACS characteristic to the web socket server,
- wherein the first PACS and second PACS include mirrored data,
- wherein the web socket server is configured to perform a comparison of the first PACS characteristic and the second PACS characteristic,
- wherein, in a case where the web socket server determines that the first PACS device provides a higher throughput than the second PACS device based on the comparison, the web socket server initiates a communication channel between the medical provider device and the first PACS device to transfer the data package,
- wherein, in a case where the web socket server determines that the second PACS device provides a higher throughput that the first PACS device based on the comparison, the web socket server initiates a communication channel between the medical provider device and the second PACS device to transfer the data package, and
- wherein the web socket server is further configured to periodically close and subsequently open the communication channel, wherein the communication channel does not need to be re-initiated after being closed,
- wherein the first PACS is configured to encrypt a data package using encryption keys to generate an encrypted data package,
- wherein the second PACS is configured to receive the encrypted data package from the first PACS, the second PACS further configured to decrypt the encrypted data package using the encryption keys, and
- wherein the web socket server is configured to store a first audit data related to the first PACS and a second audit data related to the second PACS, wherein neither the first PACS, the second PACS, or the web socket server can access the first audit data and the second audit data without an audit data encryption key.
10 more elements
A system of securely transmitting data directly between two remote locations, comprising:
- a web socket server coupled to a communication network;
- a medical provider device coupled to the communication network, the medical provider device configured to request an encrypted data package from the web socket server;
- a first picture archiving and communication system (PACS) coupled to the communication network, and configured to transmit a first PACS characteristic to the web socket server;
- and
- a second PACS coupled to the communication network, and configured to transmit a second PACS characteristic to the web socket server,
- wherein the first PACS and second PACS include mirrored data,
- wherein the web socket server is configured to perform a comparison of the first PACS characteristic and the second PACS characteristic,
- wherein, in a case where the web socket server determines that the first PACS device provides a higher latency or a higher throughput than the second PACS device based on the comparison, the web socket server initiates a communication channel between the medical provider device and the first PACS device to transfer the encrypted data package,
- wherein, in a case where the web socket server determines that the second PACS device provides a higher latency or higher throughput that the first PACS device based on the comparison, the web socket server initiates a communication channel between the medical provider device and the second PACS device to transfer the encrypted data package,
- wherein the web socket server is further configured to periodically close and subsequently open the communication channel, wherein the communication channel does not need to be re-initiated after being closed,
- wherein the web socket server is configured to periodically close and subsequently open the communication channel on with a random frequency,
- wherein the first PACS is further configured to generate a first encryption key and transmit the first encryption key to the second PACS, and
- wherein the second PACS is further configured to generate a second encryption key and transmit the second encryption key to the first PACS,
- wherein the second PACS is further configured to decrypt the encrypted data package using the first encryption key and the second encryption key, and
- wherein the web socket server is configured to store a first audit data related to the first PACS and a second audit data related to the second PACS, wherein neither the first PACS, the second PACS, or the web socket server can access the first audit data and the second audit data without a third encryption key.
12 more elements
Dependencies are inferred from the claim text.