Back to results
US 12,225,114 B2Granted
Method and system for digital health data encryption
AssigneeOrangeDot, Inc.
InventorsJoshua Carver, Puneet Thapliyal, Alex Boisvert
Life of this patent
Estimating the term…
Abstract
A system for data encryption includes any or all of: a set of items, a set of keys, and a server. A method for data encryption includes any or all of: encrypting items, sharing items, and reading items. The method can optionally additionally or alternatively include any or all of: performing a registration process, creating items, restricting access of users and/or supplementary systems to items, and/or any other suitable processes.
Claims16
A method comprising:
- at a first user device associated with a first user of a digital health platform:
- creating a set of data items, wherein creating the set of data items comprises dividing a dataset received at the first user device into the set of data items;
- producing a set of encrypted data items by encrypting each data item with a unique item key associated with the respective data item;
- producing a set of encrypted item keys by encrypting each unique item key with a public encryption key, wherein an encryption key-pair for the public encryption key is stored at a first server, remote from the first user device, wherein the public encryption key is associated with a designated recipient, wherein the encryption key-pair is encrypted, wherein the encryption key-pair can only be decrypted by a master key stored at a second user device associated with the designated recipient and inaccessible to the first server;
- producing a signature, wherein producing the signature comprises signing at least one of an encrypted item key of the set of encrypted item keys or an encrypted data item of the set of encrypted data items with a private signing key of the first user;
- and
- uploading the set of encrypted data items and the set of encrypted item keys to the first server;
- at the first server:
- verifying the signature;
- after verifying the signature, adding an entry to an audit log;
- and
- producing a decrypted duplicate of each of the encrypted data items, thereby forming a set of decrypted duplicates, wherein the set of decrypted duplicates is stored in persistent memory;
- and
- each time a user accesses information stored at the first server, recording an entry comprising the user and the information accessed by the user in the audit log.
11 more elements
A system comprising:
- a first computer comprising a first server, wherein the first server comprises:
- a set of encrypted data items stored at the first server;
- a set of encrypted public-private encryption key-pairs stored at the first server;
- and
- a set of keys stored at the first server, wherein the set of keys comprises an unencrypted public encryption key and an encrypted private encryption key;
- a client application corresponding to a digital health platform executing on each of a set of user devices associated with a set of users of the digital health platform, wherein the client application is configured to store a master encryption key at each user device, wherein each master encryption key is capable of decrypting an encrypted public-private encryption key-pair of the set of encrypted public-private encryption key-pairs, and wherein the client application is further configured to store a master signing key at each user device of the set of user devices;
- a second server, wherein data items can be sent from the first server to the second server, wherein data items cannot be sent from the second server to the first server, wherein the second server stores decrypted copies of data items determined at the first server, and wherein the second server stores decrypted copies of data items in persistent memory;
- and
- an audit log configured to record an entry each time a user of the set of users accesses information from the first server.
6 more elements
Dependencies are inferred from the claim text.