Systems and methods providing centralized encryption key management for sharing data across diverse entities
AssigneeDatavant, Inc.
InventorsJoseph R. Austin, Shahir Kassam-Adams
Life of this patent
Estimating the term…
Abstract
A method and apparatus provide centralized encryption key management for sharing data across diverse entities. In particular, the present invention relates to a universal and regulatory compliant system and method for sharing personal data records across diverse entities while maintaining unique identifiers at each entity for protecting the identity of any particular person. The present invention enables multiple organizations to be able to share their respective disparate data in a manner in which the disparate personal data records can be aggregated and manipulated by a single entity without putting the personal data records at risk.
Claims11
A system for managing universally shareable personal health data in compliance with legal and regulatory requirements, comprising:
- a key management system comprising a server, a telecommunication network, and a storage device for storing a plurality of site level encryption keys and business rules, operable to:
- register two or more entities for sharing the personal health data;
- determine legal and regulatory requirements associated with the business rules for the two or more entities;
- determine two or more unique encryption keys of the plurality of site level encryption keys for each of the two or more entities based on the legal and regulatory requirements;
- transmit the two or more unique encryption keys associated with each client device of the at least one of the two or more entities, each client device comprising a processor;
- compile a distributed software engine for each of the two or more entities for facilitating secure sharing of the personal health data between the two or more entities;
- and
- wherein the distributed software engine comprises an encryption token, a source client device encryption key that is unique to the source client device, at least one destination client device encryption key that is unique to the destination client device, and a processing template to be used for the facilitating secure sharing of the personal health data.
Dependencies are inferred from the claim text.