Back to results
US 12,701,407 B2Granted
Secure data translation using a low-energy wireless communication link
AssigneeWonderhealth, LLC
InventorsKenneth Hill, Katherine S. Hill
Life of this patent
Estimating the term…
Abstract
Disclosed are various embodiments for providing access control to the sensitive data, such as personal medical history. A first client device executes an application that ingests input data entered by a user via a user interface of the first client device, encrypts at least a first portion of the input data using a first cryptographic key, and transmits the encrypted input data over a low-power wireless private area network (WPAN), such as a Bluetooth Low-Energy (BLE) WPAN, for example. A second client device executing a second application receives the encrypted input data transmitted over the low-power WPAN by the first client device and use the first cryptographic key to decrypt the encrypted input data.
Claims17
A system for use in a healthcare environment for securely communicating information between a healthcare patient user account and a healthcare provider user account, the system comprising:
- a first client device associated with the healthcare patient user account, the first client device comprising at least one hardware processor, at least one memory device, and a display for rendering a user interface;
- a second client device associated with the healthcare provider user account, the second client device comprising at least one hardware processor, at least one memory device, and a display for rendering a second user interface, wherein the second client device comprises a reader device;
- a first application executable in the first client device, the first application comprising program instructions that, when executed, cause the first client device to:
- ingest input data entered by a user via the user interface, the ingested input data comprising healthcare information in association with the healthcare patient user account;
- store the ingested input data in the memory device;
- access input data from the memory device;
- render a first cryptographic key in the display through the user interface, the first cryptographic key being generated locally on the first client device or being received from a remote service over a network;
- encrypt at least a first portion of the accessed input data using the first cryptographic key into a first set of encrypted payload data messages, the first set comprising one or more encrypted payload data messages;
- generate a machine-readable identifier that provides access to the first set of encrypted payload data messages, the machine-readable identifier being rendered on the user interface of the first client device;
- receive an encrypted initiate transfer payload message transmitted over a first low-power WPAN from the second client device executing a second application comprising program instructions, wherein the second application comprises additional program instructions that, when executed, enable the second client device to interpret the machine-readable identifier to access the first set of encrypted payload data messages;
- use the first cryptographic key to decrypt the encrypted initiate transfer payload message, the decrypted initiate transfer payload message including information that notifies the first client device that a communication session with the second client device has commenced;
- transmit the first set of encrypted payload data messages over the first low-power wireless private area network (WPAN) to the second client device associated with the healthcare provider user account, wherein use of the first low-power WPAN provides an additional layer of security beyond a level of security provided by the encryption.
9 more elements
A system for use in a healthcare environment for securely communicating information between a healthcare patient and a healthcare provider, the system comprising:
- a first client device associated with the healthcare patient, the first client device comprising at least one processor, at least one memory device and a user interface;
- an application executable in the first client device, the application comprising program instructions that, when executed, cause the first client device to:
- receive one or more encrypted payload data messages that have been transmitted over a first low-power wireless private area network (WPAN) by a second client device associated with the healthcare provider, said one or more encrypted payload data messages including input data entered by a user into the second client device via a user interface of the second client device, the input data comprising information relating to the healthcare patient, wherein use of the first low-power WPAN provides an additional layer of security beyond a level of security provided by the encryption;
- use a first cryptographic key to decrypt said one or more encrypted payload data messages;
- use the first cryptographic key to encrypt a first acknowledgement message;
- and
- transmit the encrypted first acknowledgement message over the first low-power WPAN.
4 more elements
A computer-implemented method for use in a healthcare environment for securely communicating information between a healthcare patient and a healthcare provider, comprising:
- ingesting, by a first client device, input data entered into the first client device by a user via a user interface, the ingested input data comprising information relating to the healthcare patient, the first client device being associated with the healthcare patient;
- storing, by the first client device, the ingested input data in the memory device;
- accessing, by the first client device, the input data from the memory device;
- rendering, by the first client device, a first cryptographic key in the display through the user interface, the first cryptographic key being generated locally on the first client device or being received from a remote service over a network;
- receiving, by a second client device, an out-of-band transfer of the first cryptographic key, wherein receipt of the first cryptographic key does not utilize a network;
- encrypting, by the first client device, at least a first portion of the accessed input data using the first cryptographic key into a first set of one or more encrypted payload data messages;
- receiving an encrypted initiate transfer payload message transmitted over a first low-power wireless private area network (WPAN) from the second client device executing a second application comprising program instructions;
- using the first cryptographic key to decrypt the encrypted initiate transfer payload message, the decrypted initiate transfer payload message including information that notifies the first client device that a communication session with the second client device has commenced;
- and
- transmitting, by the first client device, the first set of one or more encrypted payload data messages over the first low-power wireless private area network (WPAN) to the second client device associated with the healthcare provider, wherein use of the first low-power WPAN provides an additional layer of security beyond a level of security provided by the encryption.
7 more elements
Dependencies are inferred from the claim text.