Method and apparatus for anonymized display and data export
AssigneePme IP Pty Ltd
InventorsDetlev Stalling, Malte Westerhoff
Life of this patent
Estimating the term…
Abstract
In an embodiment of the present invention, users with the appropriate permission can launch a function inside a system in order to anonymize and export the currently loaded study or studies, or one or more studies identified by a search criteria. The data from the studies that were identified is then anonymized on the system. In an embodiment of the present invention, the data from selected studies is anonymized on a server, and only then transmitted to another network device. In an alternative embodiment of the present invention, the data from selected studies is anonymized on a server, and only then stored to a hard disk or other media.
Claims18
A method of sending anonymized medical diagnostic reports to a remote device comprising:
- providing a host computer comprising a first memory on which is stored a plurality of medical diagnostic reports, the host computer:
- a) receiving a user ID and a patient ID from the remote device, where the patient ID identifies a patient at one or more institutions;
- b) receiving a dialog comprising a selectable option, where the selectable option is configured based on the user ID;
- c) interpreting the selectable option as an instruction to de-identify Patient Identifiable Information (PII);
- d) locating in the first memory a medical diagnostic report containing PII based on the patient ID, where the medical diagnostic report comprises:
- two or more images;
- one or more image series comprising an image set generated according to one or more image set rules;
- one or more first metadata containing PII associated with the two or more images;
- and
- one or more second metadata containing PII associated with the image set, where the one or more first metadata containing PII are not equal to the one or more second metadata containing PII;
- e) computing two or more secure values corresponding to the one or more first metadata containing PII and the one or more second metadata containing PII;
- f) substituting the two or more secure values for the one or more first metadata containing PII and the one or more second metadata containing PII;
- g) generating an anonymized medical diagnostic report comprising:
- the two or more images;
- the one or more image series;
- and
- the two or more secure values;
- and
- h) sending the anonymized medical diagnostic report to the remote device.
A method to anonymize Patient Identifiable Information (PII) comprising:
- providing a host computer adapted to access a plurality of medical diagnostic reports, the host computer:
- a) receiving a user ID and a patient ID from a remote device, where the patient ID identifies a patient at one or more institutions, where the host computer receives a dialog comprising a selectable option, where the selectable option instructs the host computer to de-identify PII, where the selectable option is configured based on the user ID, where the host computer is configured to allow a teaching mode and a presentation mode, where the teaching mode is configured based on the user ID;
- b) locating in a first memory a medical diagnostic report containing PII based on the patient ID, where the medical diagnostic report comprises:
- two or more images;
- one or more image series comprising an image set generated according to one or more image set rules
- one or more first metadata containing PII associated with the two or more images;
- and
- one or more second metadata containing PII associated with the image set, where the one or more first metadata containing PII are not equal to the one or more second metadata containing PII;
- c) computing two or more secure values;
- d) substituting the two or more secure values for the one or more first metadata containing PII, where the teaching mode requires that a study date that forms part of either the one or more first metadata containing PII, and the one or more second metadata containing PII is anonymized, where the presentation mode does not require that the study date that forms part of either the one or more first metadata containing PII, and the one or more second metadata containing PII is anonymized, where the teaching mode requires that a study time that forms part of either the one or more first metadata containing PII, and the one or more second metadata containing PII is anonymized, where the presentation mode does not require that the study time that forms part of either the one or more first metadata containing PII, and the one or more second metadata containing PII is anonymized thereby producing an amended medical diagnostic report;
- and
- d) sending the amended medical diagnostic report with the two or more secure values to the remote device.
Dependencies are inferred from the claim text.