Patient privacy de-identification in firewall switches forming VLAN segregation
OwnerTat Wai Chaninventor
Life of this patent
Estimating the term…
Abstract
The present disclosure relates to enabling users to logging access information associated with their license via a virtual network. In one example of the present disclosure, user data associated with a user having an account on a virtual network is obtained. Access control list associated with an identified application pid from an application database is then obtained, the identified application pid having been previously purchased by the user and the identified application being selected by the user from a user device. An application programming interface of the virtual network is then invoked to publish the transaction associated with the identified application pid to a central log storage.
Claims10
An computer-implemented network dataflow monitoring system, comprising data inspection software, whitelist and blacklist filters, and a set of user-specified patient identifiers, having software components for performing the steps of:
- obtaining, by the computer, user data associated with a user having an account on a first virtual network (VLAN);
- obtaining, by the computer, access control list (ACL) associated with an identified application pid from a application database, the identified application pid having been previously authorized for access by the user and the identified application pid being accessed by the user from a user device;
- detecting, by the computer, no occurrence of the user-specified patient identifiers in the user data;
- in response to detecting no occurrence of the user-specified patient identifiers in the user data:
- a. routing the user data to a first VLAN;
- detecting, by the computer, an occurrence of the user-specified patient identifiers in the user data;
- in response to detecting the occurence of the user-specified patient identifiers in the user data:
- b. routing the user data by masking the user-specified patient identifiers to a second de-identified VLAN;
- c. routing the user-specified patient identifiers to a third encrypted VLAN;
- and invoking, by the computer, an application programming interface (API) of the virtual network to publish the transaction associated with the identified application pid to a central log storage hosted on a second virtual network (VLAN), wherein a network segregation on a managed switch logically separates the first VLAN from the second VLAN, the second VLAN being encrypted with an encryption key that the user does not have access to.
A non-transitory computer-readable medium storing instructions that, when executed by a processing resource, cause the processing resource to perform the steps comprising:
- obtaining user data associated with a user having an account on a virtual network;
- enabling a user to select an identified application pid from a user device, the identified application pid having been previously purchased by the user;
- obtaining access control list associated with the identified application pid;
- and invoking, in response to the selection of the identified application pid by the user, an API of the social network to publish the transaction associated with the identified application pid to a central log storage.
Dependencies are inferred from the claim text.