# US 12,182,877 B1 · Using de-identified healthcare data to evaluate post-healthcare facility encounter treatment outcomes > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,182,877 B1 - Document ID: US12182877B1 - Status: Granted - Kind: B1 - Application number: 18/139,735 - Filed: 2023-04-26 - Granted: 2024-12-31 - Earliest claimed: 2009-07-01 - Assignees: Vigilytics LLC - Applicants: Vigilytics LLC - Inventors: Andrew L. Paris - Web page: https://patentgrep.com/patent/US12182877B1 ## CPC - G06Q 40/08: Insurance - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification} - G16H 10/20: for electronic clinical trials or questionnaires - G16H 10/40: for data related to laboratory analysis, e.g. patient specimen analysis - G16H 15/00: ICT specially adapted for medical reports, e.g. generation or transmission thereof - G16H 40/20: for the management or administration of healthcare resources or facilities, e.g. managing hospital staff or surgery rooms - G16H 50/70: for mining of medical data, e.g. analysing previous cases of other patients - G16H 70/60: relating to pathologies - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/102: {Entity profiles} - G16H 10/60: for patient-specific data, e.g. for electronic patient records - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A computer-implemented method includes producing medical information that characterizes a group of individuals from a set of private data representing pre or post-encounter characteristics of the individuals, wherein the individuals have had encounters with a healthcare facility. The identity of the individuals is unattainable from the produced medical information. The method also includes providing the produced medical information to report the pre or post-encounter characteristics of the group. ## Claims ### Claim 1 A computer-implemented method comprising: receiving, at an encryption server, a request from a user device for medical information that characterizes a first group composed of multiple individuals, wherein at least one of the multiple individuals has not authorized provision of personal medical information at any time; determining based on a privacy-preserving rule that the first group comprises at least a defined minimum number of individuals to prevent an ability to infer an association with the multiple individuals; in response to determining that the first group comprises at least the defined minimum number of individuals, producing, by a processor of the encryption server, request tokens from encrypting a first set of personally identifiable information (PII) associated with the multiple individuals, wherein the first set of PII is provided in the request and wherein each of the request tokens is unique to a corresponding individual of the multiple individuals; comparing, at a data server in communication with the encryption server, the request tokens to tokens generated independently of the request tokens and stored in a database to find matching tokens associated with the medical information to be produced without decrypting the request token, wherein the independently generated tokens are generated by encrypting individual-level PII from a second set of PII associated with a second group of individuals, each of the independently generated tokens being unique to a corresponding individual from the second group and associated with de-identified medical information about the corresponding individual from the second group, the de-identified medical information representing pre- or post-encounter characteristics of the corresponding individual from the second group, the de-identified medical information being stored remotely and seperately from the encryption server, and wherein at least a portion of the independently generated tokens match at least a portion of the request tokens if the portion of the independently generated tokens and the portion of the request tokens correspond to the same individuals; determining based on a second privacy-preserving rule that at least a defined minimum number of matches have been found; determining that identifying data associated with the first group composed of multiple individuals has a minimum variation from identifying data associated with given individuals in previous requests in a predefined period of time; subsequent to determining that at least the defined minimum number of matches have been found and determining that the identifying data associated with the first group composed of multiple individuals has the minimum variation from the identifying data associated with the given individuals in the previous requests, producing the de-identified medical information associated with the independently generated tokens that were matched to the request tokens; and providing the produced de-identified medical information to report characteristics of the first group. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein the provided de-identified medical information is provided in conformity with the Health Insurance Portability and Accountability Act (HIPAA). ### Claim 3 (depends on 1) The computer-implemented method of claim 1, in which the independently generated tokens and the request tokens are similarly encrypted. ### Claim 4 (depends on 1) The computer-implemented method of claim 1, wherein producing the one or more request tokens comprises producing the one or more request tokens in a reproducible manner. ### Claim 5 A system comprising: a computing device comprising: a memory configured to store instructions; and a processor to execute the instructions to perform operations comprising: receiving, at an encryption server, a request from a user device for medical information that characterizes a first group composed of multiple individuals, wherein at least one of the multiple individuals has not authorized provision of personal medical information at any time; determining based on a privacy-preserving rule that the first group comprises at least at defined minimum number of individuals to prevent an ability to infer an association with the multiple individuals; in response to determining that the first group comprises at least the defined minimum number of individuals, producing at the encryption server, request tokens from encrypting a first set of personally identifiable information (PII) associated with the multiple individuals, wherein the first set of PII is provided in the request and wherein each of the request tokens is unique to a corresponding individual of the multiple individuals; comparing, at a data server in communication with the encryption server, the request tokens to tokens generated independently of the request tokens and stored in a database to find matching tokens associated with the medical information to be produced without decrypting the request token, wherein the idependently generated tokens are generated by encrypting individual-level PII from a second set of PII associated with a second group of individuals, each of the independently generated tokens being unique to a corresponding individual from the second group and associated with de-identified medical information about the corresponding individual from the second group, the de-identified medical information representing pre- or post-encounter characteristics of the corresponding individual from the second group, the de-identified medical information being stored remotely from the encryption server, and wherein at least a portion of the independently generated tokens match at least a portion of the request tokens if the portion of the independently generated tokens and the portion of the request tokens correspond to the same individuals; determining based on a second privacy-preserving rule that at least a defined minimum number of matches that have been found; determining bsed on a second privacy-preserving rule that at least a defind minimum number of matches have been found; 'determining that identifying data associated with the first group composed of multiple individuals has a minimum variation from identifying data associated with given individuals in a previous requests in a predefined period of time; subsequent to the determining that at least the defined minimum number of matches have been found and determining that the identifying data associated with the first group composed of multiple individuals has the minimum variation from the identifying data associated with the given individuals in the previous requests, producing the de-identified medical information associated with the independently generated tokens that were matched to the request tokens; and providing the produced de-identified medical information to report characteristics of the first group. ### Claim 6 (depends on 5) The system of claim 5, wherein the provided de-identified medical information is provided in conformity with the Health Insurance Portability and Accountability Act (HIPAA). ### Claim 7 (depends on 5) The system of claim 5, in which the independently generated tokens and the request tokens are similarly encrypted. ### Claim 8 (depends on 5) The system of claim 5, wherein producing the one or more request tokens comprises producing the one or more request tokens in a reproducible manner. ### Claim 9 One or more computer readable storage devices storing instructions that are executable by a processing device, and upon such execution cause the processing device to perform operations comprising: receiving, at an encryption server, a request from a user device for medical information that characterizes a first group composed of multiple individuals, wherein at least one of the multiple individuals has not authorized provision of personal medical information at any time; determining based on a privacy-preserving rule that the first group comprises at least a defined minimum number of individuals to prevent an ability to infer an association with the multiple individuals; in response to determining that the first group comprises at least the defined minimum number of individuals, producing, by a processor of the encryption server, request tokens from encrypting a first set of personally identifiable information (PII) associated with the multiple individuals, wherein the first set of PII is provided in the request and wherein each of the request tokens is unique to a corresponding individual of the multiple individuals; comparing, at a data server in communication with the encryption server, the request tokens to tokens generated independently of the request tokens and stored in a database to find matching tokens associated with the medical information to be produced without decrypting the request token, wherein the idependently generated tokens are generated by encrypting individual-level PII from a second set of PII associated with a second group of individuals, each of the independently generated tokens being unique to a corresponding individual from the second group and associated with de-identified medical information about the corresponding individual from the second group, the de-identified medical information representing pre- or post-encounter characteristics of the corresponding individual from the second group, the de-identified medical information being stored remotely from the encryption server, and wherein at least a portion of the independently generated tokens match at least a portion of the request tokens if the portion of the independently generated tokens and the portion of the request tokens correspond to the same individuals; determining based on a second privacy-preserving rule that at least a defined minimum number of matches have been found; determining that identifying data associated with the first group composed of multiple individuals has a minimum variation from identifying data associated with given individuals in previous requests in a predefined period of time; subsequent to determining that at least the defined minimum number of matches have been found and determining that the identifying data associated with the first age group composed of multiple individuals has the minimum variation from the identifying data associated with the given individuals in the previous requests, producing the de-identified medical information associated with the independently generated tokens that were matched to the request tokens; and providing the produced de-identified medical information to report characteristics of the first group. ### Claim 10 (depends on 9) The computer readable storage devices of claim 9, wherein the provided de-identified medical information is provided in conformity with the Health Insurance Portability and Accountability Act (HIPAA). ### Claim 11 (depends on 9) The computer readable storage devices of claim 9, in which the independently generated tokens and the request tokens are similarly encrypted. ### Claim 12 (depends on 9) The computer readable storage devices of claim 9, wherein producing the one or more request tokens comprises producing the one or more request tokens in a reproducible manner.