# US 11,121,877 B2 · Secure transmission of electronic health records via blockchain

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,121,877 B2
- Document ID: US11121877B2
- Status: Granted
- Kind: B2
- Application number: 16/417,272
- Filed: 2019-05-20
- Published: 2020-11-26
- Granted: 2021-09-14
- Earliest claimed: 2019-05-20
- Assignees: The Quantum Group, Inc.; Noel J. Guillama
- Applicants: The Quantum Group Inc.
- Inventors: Noel J. Guillama; Chester Heath; Carl R. Larsen
- Web page: https://patentgrep.com/patent/US11121877B2

## CPC

- H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)}
- G16H 10/60: for patient-specific data, e.g. for electronic patient records
- H04L 9/0637: {Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]}
- H04L 9/0643: {Hash functions, e.g. MD5, SHA, HMAC or f9 MAC}
- H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage}
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/3297: {involving time stamps, e.g. generation of time stamps}
- H04L 63/123: {received data contents, e.g. message integrity}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- H04L 2209/88: Medical equipments
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA

## Abstract

The present disclosure provides a method for securely transmitting electronic healthcare records between computing devices in communication. A request is received to access a database of electronic health records, checking for an authorization requirement, and generating a token associated with the authorization requirement and the received request. The token corresponds to a block in a Blockchain. The block includes a cryptographic hash of a previous block, a timestamp, and transaction data related to the received request, and the at least one authorization requirement. The token can be sent to allow access to at least one electronic health record in the database of electronic health records.

## Claims

### Claim 1

A method for securely transmitting electronic healthcare records between a plurality of computing devices in communication with each other, comprising:
receiving, at a first computing device, a request from a second computing device to access at least one electronic health record in a database of electronic health records, wherein the request from the second computing device is based on accessing de-identified data of the at least one electronic health record, wherein the database of electronic health records is stored at a remote memory module, wherein the database of electronic health records comprises de-identified data accessible by the plurality of computing devices;
sending, from the first computing device, at least one authorization requirement to the second computing device;
detecting, at the first computing device, that the at least one authorization requirement has been provided by the second computing device;
based on detecting that the at least one authorization requirement has been provided, generating, at the first computing device, a token associated with the at least one authorization requirement and the received request, wherein the token provides a decryption key for the encrypted identifiable data,
wherein the token corresponds to a block in a Blockchain, the block including a cryptographic hash of a previous block, a timestamp, and transaction data related to the received request and the at least one authorization requirement;
retrieving, by the first computing device, identifiable data from the remote memory module, wherein the identifiable data corresponds to the received request;
encrypting, by the first computing device, the identifiable data;
sending the token to the second computing device from the first computing device to access the at least one electronic health record; and
sending, from the first computing device, the encrypted identifiable data to the second computing device.

### Claim 2 (depends on 1)

The method of claim 1, wherein the at least one authorization requirement comprises a payment request based on the received request.

### Claim 3 (depends on 2)

The method of claim 2, wherein detecting that the at least one authorization requirement has been provided comprises:
receiving, at the first computing device, a payment from the second computing device, wherein the payment corresponds to the payment request.

### Claim 4 (depends on 3)

The method of claim 3, wherein the method further comprises sending, via the first computing device, the payment to a user associated with the at least one electronic health record.

### Claim 5 (depends on 1)

The method of claim 1, wherein each electronic health record in the database of electronic health records is automatically generated upon receiving health information from a user.

### Claim 6 (depends on 5)

The method of claim 5, wherein generating each electronic health record is based on the received health information and comprises access restrictions.

### Claim 7

A system for securely transmitting electronic healthcare records between a plurality of computing devices in communication with each other, comprising:
one or more processors; and
a memory coupled to the processors comprising instructions executable by the processors, the processors being operable when executing the instructions to:
receive, at a first computing device, a request from a second computing device to access at least one electronic health record in a database of electronic health records, wherein the request from the second computing device is based on accessing de-identified data of the at least one electronic health record, wherein the database of electronic health records is stored at a remote memory module, wherein the database of electronic health records comprises de-identified data accessible by the plurality of computing devices;
send, from the first computing device, at least one authorization requirement to the second computing device;
detect, at the first computing device, that the at least one authorization requirement has been provided by the second computing device;
based on detecting that the at least one authorization requirement has been provided, generate, at the first computing device, a token associated with the at least one authorization requirement and the received request, wherein the token provides a decryption key for the encrypted identifiable data,
wherein the token corresponds to a block in a Blockchain, the block including a cryptographic hash of a previous block, a timestamp, and transaction data related to the received request and the at least one authorization requirement;
retrieve, by the first computing device, identifiable data from the remote memory module, wherein the identifiable data corresponds to the received request;
encrypt, by the first computing device, the identifiable data;
send the token to the second computing device from the first computing device to access the at least one electronic health record; and
send, from the first computing device, the encrypted identifiable data to the second computing device.

### Claim 8 (depends on 7)

The system of claim 7, wherein the at least one authorization requirement comprises a payment request based on the received request.

### Claim 9 (depends on 8)

The system of claim 8, wherein detecting that the at least one authorization requirement has been provided comprises:
receiving, at the first computing device, a payment from the second computing device, wherein the payment corresponds to the payment request.

### Claim 10 (depends on 9)

The system of claim 9, wherein executing the instructions further comprises:
send, via the first computing device, the payment to a user associated with the at least one electronic health record.

### Claim 11 (depends on 7)

The system of claim 7, wherein each electronic health record in the database of electronic health records is automatically generated upon receiving health information from a user.

### Claim 12 (depends on 11)

The system of claim 11, wherein generating each electronic health record is based on the received health information and comprises access restrictions.