Method, server and communication system for secure delivery of patient's image and consent data

A method for providing access to personal medical data, the method being executed on a hospital server and comprising:

• receiving a first code, encoding a user identification (UID), wherein the UID identifies a patient's mobile device;
• extracting the UID from the received first code;
• accessing a data store with the extracted user identification in order to get an associated public key of an asymmetric key pair;
• using the public key for encrypting personal medical data;
• sending the encrypted personal medical data to the data store so as to make the encrypted personal medical data accessible by the patient's mobile device.

A method for communication of personal medical data, comprising:

• via a patient's mobile device, navigating a web client of the patient's mobile device to a web service;
• receiving instructions at the patient's mobile device from the web service for the web client to create a user account, comprising an asymmetric key pair and a user identification (UID), which references the asymmetric key pair;
• storing the private key of the asymmetric key pair and the UID locally on the patient mobile device;
• at the patient's mobile device, preparing a public key of the asymmetric key pair to be filed in a data store under the UID, acting as key;
• at the patient's mobile device, generating a first code, encoding the UID;
• transmitting the generated first code from the patient's mobile device to a hospital server by using a nearfield data transmission;
• at the hospital server, receiving a first code, encoding a user identification (UID), wherein the UID identifies a patient's mobile device;
• at the hospital server, extracting the UID from the received first code;
• at the hospital server, accessing a data store with the extracted user identification in order to get an associated public key of the asymmetric key pair;
• at the hospital server, using the public key for encrypting personal medical data;
• at the hospital server, sending the encrypted personal medical data to the data store so as to make the encrypted personal medical data accessible by the patient's mobile device;
• via the patient's mobile device, accessing the data store so as to receive the encrypted personal medical data that were encrypted with the public key;
• and
• at the patient's mobile device, decrypting the received encrypted images with the private key for providing decrypted personal medical data as a result locally on the patient's mobile device.

A hospital server for providing access to personal medical data, said hospital server comprising:

• a code interface configured to receive a first code, encoding a user identification (UID), wherein the UID identifies a patient's mobile device;
• a processor configured to extract the user identification from the received first code;
• a data store interface configured to access a data store with the extracted UID in order to get an associated public key of an asymmetric key pair;
• the processor being further configured to use the public key for encrypting personal medical data, and to send encrypted personal medical data to the data store in order to make the encrypted personal medical data accessible by the patient's mobile device.