Method, server and communication system for secure delivery of patient's image and consent data

A method for providing access to personal medical data, the method being executed on a server, and comprising:

• receiving only, a code that represents an unencrypted, encoded encodes a user identification (UID) such that the UID is represented in an encoded form, wherein the UID identifies a mobile device and references a public key stored in a data store, the public key and a private key forming an asymmetric key pair, and the UID identifying the mobile device and having a bit length that is less than a bit length of the public key;
• extracting the UID from the received code;
• accessing the data store with only the UID extracted from the received code to obtain the associated public key of the asymmetric key pair;
• encrypting personal medical data using only the public key obtained from the data store to generate encrypted personal medical data;
• and
• sending the encrypted personal medical data to the data store so as to make the encrypted personal medical data accessible by the mobile device.

A method for communication of personal medical data, comprising:

• via a mobile device, navigating a web client of the mobile device to a web service;
• receiving instructions at the mobile device from the web service for the web client to create a user account, the user account comprising an asymmetric key pair formed by a public key and a private key, and a user identification (UID), the UID referencing the public key of the asymmetric key pair stored in a data store;
• storing the private key of the asymmetric key pair and the UID locally on the mobile device;
• at the mobile device, preparing the public key of the asymmetric key pair to be filed in the data store under the UID, acting as key;
• at the mobile device, generating a code that encodes the UID such that the UID is represented in an encoded form, wherein the UID identifies the mobile device and references the public key of the asymmetric key pair, the UID having a bit length that is less than a bit length of the public key;
• transmitting only the generated code in an unencrypted form from the mobile device to a server using a nearfield data transmission;
• at the hospital server, receiving the code;
• at the hospital server, extracting the UID from the received code;
• at the hospital server, accessing a data store using only the UID extracted from the received code to obtain an associated public key of the asymmetric key pair;
• at the hospital server, encrypting personal medical data using only the public key obtained from the data store to generate encrypted personal medical data;
• at the hospital server, sending the encrypted personal medical data to the data store so as to make the encrypted personal medical data accessible by the mobile device;
• via the mobile device, accessing the data store to receive the encrypted personal medical data that were encrypted with the public key;
• and
• at the mobile device, decrypting the received encrypted images with the private key for providing decrypted personal medical data as a result locally on the mobile device.

A hospital server for providing access to personal medical data, said hospital server comprising:

• a code interface configured to receive only a code that represents an unencrypted, encoded user identification (UID) such that the UID is represented in an encoded form, wherein the UID identifies a mobile device and references a public key stored in a data store, the public key and a private key forming, the public key and a private key forming an asymmetric key pair, the UID having a bit length that is less than a bit length of the public key;
• a processor configured to extract the UID from the received code;
• and
• a data store interface configured to access the data store using only UID extracted from the received code to obtain the associated public key of the asymmetric key pair,
• wherein the processor is further configured to use only the public key obtained from the data store to encrypt personal medical data to generate encrypted medical data, and to send the encrypted personal medical data to the data store to make the encrypted personal medical data accessible by the mobile device.

A system for communication of personal medical data between a hospital server and a mobile device, comprising:

• a mobile device with a web client for receiving instructions from a web service;
• a data store in which a public key of an asymmetric key pair has been filed under a patient user identification (UID), acting as key, and in which personal medical data of the patient are stored in an encrypted form, the personal medical data being encrypted with the public key of the asymmetric key pair that is formed by the public key and a private key;
• and
• a hospital server comprising a code interface configured to receive only a code that represents an unencrypted, encoded user identification (UID) such that the UID is represented in an encoded form, wherein the UID identifies a mobile device and references the public key stored in the data store, the UID having a bit length that is less than a bit length of the public key;
• a processor configured to extract the user identification from the received code;
• and
• a data store interface configured to access a data store using only the UID extracted from the received code to obtain the associated public key of the asymmetric key pair,
• wherein the processor is further configured to use only the public key obtained from the data store to encrypt the personal medical data to generate the personal medical data in encrypted form, and to send the personal medical data in encrypted form to the data store to make the encrypted personal medical data in encrypted form accessible by the mobile device.