# US 2020/0401727 A1 · Privacy preserving personal health record service ecosystem trials > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2020/0401727 A1 - Document ID: US20200401727A1 - Status: Published application - Kind: A1 - Application number: 16/904,636 - Filed: 2020-06-18 - Published: 2020-12-24 - Earliest claimed: 2019-06-21 - Assignees: Koninklijke Philips N.V. - Applicants: Koninklijke Philips N.V. - Inventors: MARK ANTHONY HENNESSY; MURTAZA BULUT; MARK THOMAS JOHNSON - Web page: https://patentgrep.com/patent/US20200401727A1 ## CPC - G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification} - G06F 21/33: using certificates - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G16H 10/60: for patient-specific data, e.g. for electronic patient records - H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - H04L 9/3247: {involving digital signatures} - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - H04L 2209/80: Wireless - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A user device comprises an app that stores and maintains exclusive control of user data, and causes one or more processors to send a request for services according to a trial period to a distributed ledger associated with service providers and anonymously interact with the service providers according to a set of rules maintained in the distributed ledger by passing along a token uniquely associated with the user during for the respective interaction with each service provider without the user data being shared with the service providers. ## Claims ### Claim 1 A user device, comprising: a communications interface configured to enable communications with service providers, the service providers providing trial period services comprising a trial period of a defined type; a memory comprising an app that provides exclusive control of access to data of a user stored therein; and one or more processors configured by the app to: cause a request for service indication to be provided to a distributed ledger associated with the service providers, the distributed ledger comprising a set of rules pertaining to the trial period services, the request comprising a unique token; and based on acceptance of the request, anonymously interact with the trial period services, an interaction with each trial period service accompanied with a transfer of a token and based on compliance at each of a plurality of monitored time instances of a set of rules during each of the trial period services, each interaction with the trial period services occurring while retaining exclusive storage of the data of the user in the memory, each of the trial period services associated with a respective one of the service providers. ### Claim 2 (depends on 1) The user device of claim 1, wherein the one or more processors are configured by the app to generate the token based on a combination of characteristics of the user device and a unique self-sovereign identity. ### Claim 3 (depends on 2) The user device of claim 2, wherein the one or more processors are configured by the app to configure the token in a cryptographic format and provide the request as a transaction acceptable to the distributed ledger. ### Claim 4 (depends on 1) The user device of claim 1, wherein the set of rules correspond to smart contract logic at the distributed ledger. ### Claim 5 (depends on 1) The user device of claim 1, wherein the set of rules correspond to a trial duration offer for each of the service providers. ### Claim 6 (depends on 1) The user device of claim 1, wherein the one or more processors are configured by the app to retrieve and store in the memory health data from one or more health data sources. ### Claim 7 (depends on 1) The user device of claim 1, wherein the one or more processors are further configured to receive any one or a combination of incentives associated with the trial period services. ### Claim 8 (depends on 7) The user device of claim 7, wherein the one or more processors are configured to receive the one or combination of incentives at one or more instances of time, the one or more instances of time including before the interaction, during the interaction, and after the interaction. ### Claim 9 (depends on 1) The user device of claim 1, further comprising a user interface, wherein the one or more processors are configured by the app to receive an indication from logic associated with the distributed ledger when each trial period service is completed. ### Claim 10 (depends on 1) The user device of claim 1, wherein the one or more processors are configured by the app to prevent a transfer of the token and interactions when the trial period services is terminated. ### Claim 11 (depends on 1) The user device of claim 1, wherein the one or more processors are further configured by the app to communicate a first subscription to one of the service providers after completion of the trial period services and a second subscription with another of the service providers after interacting with the one of the service providers according to the first subscription, the one or more processors further configured by the app to control sharing of the user data between the one of the service providers and the another of the service providers. ### Claim 12 (depends on 1) The user device of claim 1, wherein the one or more processors are configured by the app to switch among the plural trial period services before completing a prescribed trial period duration for each trial period service as long as a total duration prescribed for each of the trial period services has been met. ### Claim 13 (depends on 1) The user device of claim 1, wherein the trial period services collectively correspond to a trial period for a personal health record service. ### Claim 14 A system, comprising: plural service providers, each configured to provide a trial period service collectively comprising a trial period of a defined type; and a computing device comprising a distributed ledger communicatively coupled to the plural service providers, wherein the distributed ledger comprises a set of rules, the distributed ledger configured to: receive a transaction from a user device, the transaction providing an indication of an anonymous user associated with the user device of participating in the trial period, the transaction comprising a token uniquely associated with the user device; and transfer the token to a first service provider of the plural service providers and then subsequent service providers of the plural service providers based on, respectively, acceptance of the transaction and user interaction with the respective trial period services after the transaction, wherein the distributed ledger enforces compliance with, for each trial period service of a respective one of the plural service providers in possession of the token, a trial period service duration established according to the set of rules while maintaining anonymity of the user. ### Claim 15 (depends on 14) The system of claim 14, wherein the distributed ledger is further configured to record a receipt of the transaction using a time stamp. ### Claim 16 (depends on 14) The system of claim 14, further comprising a third party device comprising an oracle, wherein the oracle configures the set of rules based on one or more parameters, the oracle matching requirements of the user to requirements of the plural service providers in the set of rules, wherein the set of rules comprise a smart contract. ### Claim 17 (depends on 14) The system of claim 14, further comprising a third party device comprising an oracle, wherein the oracle is configured to perform one or any combination of the following: dynamically change selection of the plural service providers based on interactions of the user during the trial period with at least one of the service providers; optimize a number of trial period services based on a goal of the user; and iteratively interact with the user to determine user preferences. ### Claim 18 (depends on 14) The system of claim 14, further comprising a secure storage configured to securely store data of the user and prevent access by any of the plural service providers at least during each trial period service. ### Claim 19 (depends on 14) The system of claim 14, wherein the distributed ledger is configured to communicate an indication to the user device when a trial period service for one of the plural service providers is over, the distributed ledger further configured to automatically transfer the token to a subsequent service provider among the plural service providers to provide a next trial period service associated with the subsequent service provider. ### Claim 20 (depends on 14) The system of claim 14, further comprising a data structure that stores user data upon termination of the trial period according to compliance with the set of rules and subscription by the user with a service of the defined type provided by one of the plural service providers, wherein responsive to a user request to switch to another one of the service providers, the distributed ledger is further configured to determine whether the same or a different data structure is used and determine a state of data sharing based on user input.