# US 2021/0343379 A1 · Systems and Methods for Removing Personal Data from Digital Records

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0343379 A1
- Document ID: US20210343379A1
- Status: Published application
- Kind: A1
- Application number: 16/862,246
- Filed: 2020-04-29
- Published: 2021-11-04
- Earliest claimed: 2020-04-29
- Assignees: Fujifilm Medical Systems U.S.A., Inc.
- Applicants: Fujifilm Medical Systems U.S.A., Inc.
- Inventors: Dmitry Kakhovsky
- Web page: https://patentgrep.com/patent/US20210343379A1

## CPC

- G16H 10/60: for patient-specific data, e.g. for electronic patient records
- G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification}
- G16H 30/20: for handling medical images, e.g. DICOM, HL7 or PACS
- G16H 30/40: for processing medical images, e.g. editing
- G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Method for removing personal data from a medical record includes receiving a first digital medical record associated with a first patient, the first digital medical record including personal data and medical data; generating a first fingerprint by applying a cryptographic function to at least a portion of the personal data; transferring the first fingerprint to one or more computing devices; identifying a first alias associated with the first fingerprint, wherein identifying the first alias includes at least one of determining that the first fingerprint was previously stored along with the first alias, and generating the first alias and storing the first fingerprint and the first alias; transferring the first alias to the workstation of the first user; and generating a first clean digital medical record based on the first alias and the first digital medical record.

## Claims

### Claim 1

A method for removing personal data from a medical record, comprising:
receiving, at a client device of a first user, a first digital medical record associated with a first patient, the first digital medical record including personal data and medical data;
generating, at the client device of the first user, a first fingerprint by applying a cryptographic function to at least a portion of the personal data;
transferring the first fingerprint from the workstation of the first user to one or more computing devices;
identifying, at the one or more computing devices, a first alias associated with the first fingerprint, wherein identifying the first alias includes at least one of
determining that the first fingerprint was previously stored on the one or more computing devices along with the first alias, and
generating the first alias and storing the first fingerprint and the first alias on the one or more computing devices;
transferring the first alias from the one or more computing devices to the workstation of the first user; and
generating, at the workstation of the first user, a first clean digital medical record based on the first alias and the first digital medical record.

### Claim 2 (depends on 1)

The method of claim 1, wherein the first digital medical record comprises a first medical image record and the first clean digital medical record comprises a first clean medical image record.

### Claim 3 (depends on 2)

The method of claim 2, wherein the first medical image record comprises one or more Digital Imaging and Communications in Medicine (“DICOM”) Service-Object Pair (“SOP”) Instances, and the first clean medical image record comprises one or more DICOM SOP Instances.

### Claim 4 (depends on 1)

The method of claim 1, wherein the cryptographic function is a cryptographic hash function.

### Claim 5 (depends on 1)

The method of claim 1, wherein the personal data comprises personal health information.

### Claim 6 (depends on 1)

The method of claim 1, wherein the personal data comprises each of a patient name, a date of birth, and a procedure date.

### Claim 7 (depends on 6)

The method of claim 6, wherein the first alias comprises a false patient name and a time-shift variable.

### Claim 8 (depends on 7)

The method of claim 7, wherein the first clean digital medical record comprises each of
the false patient name;
a false date of birth, the false date of birth calculated using the date of birth and the time-shift variable; and
a false procedure date, the false procedure date calculated using the procedure date and the time-shift variable.

### Claim 9

One or more computer-readable non-transitory storage media embodying software that is operable when executed to:
receive, at a client device of a first user, a first digital medical record associated with a first patient, the first digital medical record including personal data and medical data;
generate, at the client device of the first user, a first fingerprint by applying a cryptographic function to at least a portion of the personal data;
transfer the first fingerprint from the workstation of the first user to one or more computing devices;
identify, at the one or more computing devices, a first alias associated with the first fingerprint, wherein to identify the first alias associated with the first fingerprint, the software is operable when executed to at least one of
determine that the first fingerprint was previously stored on the one or more computing devices along with the first alias, and
generate the first alias and store the first fingerprint and the first alias on the one or more computing devices;
transfer the first alias from the one or more computing devices to the workstation of the first user; and
generate, at the workstation of the first user, a first clean digital medical record based on the first alias and the first digital medical record.

### Claim 10 (depends on 9)

The media of claim 9, wherein the first digital medical record comprises a first medical image record and the first clean digital medical record comprises a first clean medical image record.

### Claim 11 (depends on 10)

The media of claim 10, wherein the first medical image record comprises one or more Digital Imaging and Communications in Medicine (“DICOM”) Service-Object Pair (“SOP”) Instances, and the first clean medical image record comprises one or more DICOM SOP Instances.

### Claim 12 (depends on 9)

The media of claim 9, wherein the cryptographic function is a cryptographic hash function.

### Claim 13 (depends on 9)

The media of claim 9, wherein the personal data comprises personal health information.

### Claim 14 (depends on 9)

The media of claim 9, wherein the personal data comprises each of a patient name, a date of birth, and a procedure date.

### Claim 15 (depends on 14)

The media of claim 14, wherein the first alias comprises a false patient name and a time-shift variable.

### Claim 16 (depends on 15)

The media of claim 15, wherein the first clean digital medical record comprises each of
the false patient name;
a false date of birth, the false date of birth calculated using the date of birth and the time-shift variable; and
a false a procedure date, the false procedure date calculated using the procedure date and the time-shift variable.

### Claim 17

A system comprising: one or more processors; and a memory coupled to the processors comprising instructions executable by the processors, the processors being operable when executing the instructions to:
receive, at a client device of a first user, a first digital medical record associated with a first patient, the first digital medical record including personal data and medical data;
generate, at the client device of the first user, a first fingerprint by applying a cryptographic function to at least a portion of the personal data;
transfer the first fingerprint from the workstation of the first user to one or more computing devices;
identify, at the one or more computing devices, a first alias associated with the first fingerprint, wherein to identify the first alias associated with the first fingerprint, the processors are operable when executing instructions to at least one of
determine that the first fingerprint was previously stored on the one or more computing devices along with the first alias, and
generate the first alias and store the first fingerprint and the first alias on the one or more computing devices;
transfer the first alias from the one or more computing devices to the workstation of the first user; and
generate, at the workstation of the first user, a first clean digital medical record based on the first alias and the first digital medical record.

### Claim 18 (depends on 17)

The system of claim 17, wherein the first digital medical record comprises a first medical image record and the first clean digital medical record comprises a first clean medical image record.

### Claim 19 (depends on 18)

The system of claim 18, wherein the first medical image record comprises one or more Digital Imaging and Communications in Medicine (“DICOM”) Service-Object Pair (“SOP”) Instances, and the first clean medical image record comprises one or more DICOM SOP Instances.

### Claim 20 (depends on 17)

The system of claim 17, wherein the cryptographic function is a cryptographic hash function.

### Claim 21 (depends on 17)

The system of claim 17, wherein the personal data comprises personal health information.

### Claim 22 (depends on 17)

The system of claim 17, wherein the personal data comprises each of a patient name, a date of birth, and a procedure date.

### Claim 23 (depends on 22)

The system of claim 22, wherein the first alias comprises a false patient name and a time-shift variable.

### Claim 24 (depends on 23)

The system of claim 23, wherein the first clean digital medical record comprises each of
the false patient name;
a false date of birth, the false date of birth calculated using the date of birth and the time-shift variable; and
a false procedure date, the false procedure date record calculated using the procedure date and the time-shift variable.