Processing-context-dependent pseudonymization of security-critical medical data via a network
AssigneeSiemens Aktiengesellschaft
InventorsHelmut König, Andreas Pfeiffer, Vladyslav Ukis
Life of this patent
Estimating the term…
Abstract
An apparatus, a method and a product for transferring security-critical medical data records via a public network are disclosed. In order to be able to transmit security-critical data sections in pseudonymized form, a pseudonymization function is adaptively applied to the data records. The pseudonymization function is in each case calculated dynamically on the basis of a processing context that has been read in and that takes account of the planned user role, the planned intended use of the data processing and an application context.
Claims19
An apparatus to transfer medical security-critical data records from a transmission station to at least one receiver station via a digital network, the apparatus comprising:
- an input data interface configured to capture a medical security-critical data record to be transferred;
- a context capture unit configured to capture a planned processing context for the medical security-critical data record;
- a processor including a rulebook machine, the rulebook machine configured to store a multiplicity of variable rules for dynamically calculating pseudonymization functions, the rulebook machine further configured to be dynamically updated based on the captured planned processing context during operation of the apparatus;
- wherein the processor is configured to execute computer-readable instructions to
- calculate a pseudonymization function based on the multiplicity of variable rules,
- apply the pseudonymization function to sections of the medical security-critical data record that are determined as critical to security, and
- produce a pseudonymized data record for transfer to the at least one receiver station;
- and
- wherein the captured planned processing context is indicative of a planned processing of the pseudonymized data record.
A method for transferring medical security-critical data records from a transmission station to at least one receiver station by a transfer apparatus via a digital network, the method comprising:
- capturing a medical security-critical data record to be transferred;
- capturing a planned processing context for the medical security-critical data record;
- dynamically updating, during operation of the transfer apparatus, a rulebook machine based on the captured planned processing context, the rulebook machine storing a multiplicity of variable rules for dynamically calculating pseudonymization functions;
- calculating a pseudonymization function based on the multiplicity of variable rules;
- and
- applying the pseudonymization function to sections of the medical security-critical data record that are determined as critical to security to produce a pseudonymized data record for transfer to the at least one receiver station;
- wherein
- the captured planned processing context is indicative of a planned processing of the pseudonymized data record.
Dependencies are inferred from the claim text.