Back to results
US 12,223,093 B2Granted
Systems and methods for processing electronic images across regions
AssigneeHeartFlow, Inc.
InventorsRazik Yousfi, Leo Grady, Nathalie D'Amours
Life of this patent
Estimating the term…
Abstract
Systems and methods are disclosed for preserving patient privacy while transmitting health data from one geographic region to another geographic region for data analysis. One method includes receiving patient-specific health data including patient privacy information at a first region; removing the patient privacy information from the patient-specific health data to generate anonymous health data; storing the patient privacy information at the first region; and transmitting the anonymous health data to a second region for analysis.
Claims20
A computer-implemented method of processing electronic images while transferring data across regions, the method comprising:
- removing, using a processor physically located in a first region, first patient-identifiable information from patient-specific data to generate a first set of de-identified data, based on a first geographic region specific privacy standard;
- storing, using the processor physically located in the first region, the first patient-identifiable information within the first region;
- transmitting, using the processor physically located in the first region, the first set of de-identified data to a remote data analysis server physically located in a second region for a patient-specific computation based on the first set of de-identified data;
- generating, using the remote data analysis server physically located within the second region, a model of a patient based on the first set of de-identified data and conducting the patient-specific computation through the generated model;
- determining, using the remote data analysis server physically located within the second region, a patient-specific blood flow computation in the patient based on the generated model and a mass or a volume of a myocardial tissue of the patient;
- receiving, by the processor physically located in the first region, analyzed de-identified data from the remote data analysis server physically located in the second region;
- and
- identifying a patient associated with the generated model by determining, using the processor physically located in the first region, first patient-identifiable information associated with the analyzed de-identified data based on the first patient-identifiable information stored within the first region and the patient-specific blood flow computation stored in a permanent storage at the second geographic region, wherein the first patient privacy information is inaccessible within the second geographic region.
5 more elements
A system for processing electronic images while transferring data across regions, the system comprising:
- at least one data storage device physically located within a first region and storing instructions for providing cross-border data transfer while preserving first data anonymization;
- and
- at least one processor physically located within the first region and configured to execute the instructions to perform operations comprising:
- removing, using a processor physically located in a first region, first patient-identifiable information from patient-specific data to generate a first set of de-identified data, based on a first geographic region specific privacy standard;
- storing, using the processor physically located in the first region, the first patient-identifiable information within the first region;
- transmitting, using the processor physically located in the first region, the first set of de-identified data to a remote data analysis server physically located in a second region for a patient-specific computation based on the first set of de-identified data;
- generating, using the remote data analysis server physically located within the second region, a model of a patient based on the first set of de-identified data and conducting the patient-specific computation through the generated model;
- determining, using the remote data analysis server physically located within the second region, a patient-specific blood flow computation in the patient based on the generated model and a mass or a volume of a myocardial tissue of the patient;
- receiving, by the processor physically located in the first region, analyzed de-identified data from the remote data analysis server physically located in the second region;
- and
- identifying a patient associated with the generated model by determining, using the processor physically located in the first region, first patient-identifiable information associated with the analyzed de-identified data based on the first patient-identifiable information stored within the first region and the patient-specific blood flow computation stored in a permanent storage at the second geographic region, wherein the first patient privacy information is inaccessible within the second geographic region.
8 more elements
A non-transitory computer readable medium for use on a computer system containing computer-executable programming instructions that execute operations for processing electronic images while transferring data across regions, the operations comprising:
- removing, using a processor physically located in a first region, first patient-identifiable information from patient-specific data to generate a first set of de-identified data, based on a first geographic region specific privacy standard;
- storing, using the processor physically located in the first region, the first patient-identifiable information within the first region;
- transmitting, using the processor physically located in the first region, the first set of de-identified data to a remote data analysis server physically located in a second region for a patient-specific computation based on the first set of de-identified data;
- generating, using the remote data analysis server physically located within the second region, a model of a patient based on the first set of de-identified data and conducting the patient-specific computation through the generated model;
- determining, using the remote data analysis server physically located within the second region, a patient-specific blood flow computation in the patient based on the generated model and a mass or a volume of a myocardial tissue of the patient;
- receiving, by the processor physically located in the first region, analyzed de-identified data from the remote data analysis server physically located in the second region;
- and
- identifying a patient associated with the generated model by determining, using the processor physically located in the first region, first patient-identifiable information associated with the analyzed de-identified data based on the first patient-identifiable information stored within the first region and the patient-specific blood flow computation stored in a permanent storage at the second geographic region, wherein the first patient privacy information is inaccessible within the second geographic region.
5 more elements
Dependencies are inferred from the claim text.