Medical data encryption for communication over a vulnerable system

1. A system for communicating a medical record of a patient to a mobile device in compliance with HIPAA and HITECH regulations, comprising:

a console comprising a processor coupled to a network;

a mobile device; and

a server coupled to the network,

wherein the console processor is configured with processor-executable instructions to perform operations comprising:

receiving a diagnostic image for the patient;

accessing the medical record of the patient;

receiving an operator input selecting a portion of the medical record and the diagnostic image for transmission to the mobile device;

separating the selected portion of the medical record and the diagnostic image into a plurality of layers including a demographic layer comprising demographic information selected from the medical record and a data layer comprising medical data and the selected first portion of the diagnostic image;

encrypting the demographic layer using a first encryption key;

encrypting the data layer using a second encryption key, wherein the second encryption key is different from the first encryption key; and

sending the encrypted demographic layer and data layer to the server, wherein the server is configured to perform operations comprising:

decrypting the data layer;

performing an operation on the data layer;

re-encrypting the data layer; and

sending the encrypted demographic layer and re-encrypted data layer to the mobile device via a wireless network.

2. The system of claim 1 , wherein the server is configured with server-executable instructions to perform operations such that the re-encrypting the data layer comprises re-encrypting the data layer with a third encryption key different from the first and second encryption keys.

3. The system of claim 1 , further comprising a prescription server,

wherein the server is configured with server-executable instructions to perform operations further comprising:

encrypting a prescription layer within the data layer using a fourth encryption key;

sending the encrypted demographic layer, data layer and prescription layer to the prescription server,

wherein the prescription server is configured with server-executable instructions to perform operations comprising:

decrypting the prescription layer but not either of the encrypted demographic layer and the data layer; and

performing a prescription operation on data within the prescription layer.

4. The system of claim 1 , wherein the server is configured with server-executable instructions to perform operations such that performing an operation on the data layer comprises:

selecting a portion of the diagnostic image; and

formatting the selected portion of the diagnostic image to match display parameters of the mobile device,

wherein re-encrypting the data layer comprises re-encrypting the processed selected second portion of the diagnostic image.

5. The system of claim 1 , further comprising a mobile device, wherein the server is configured with server-executable instructions to perform operations further comprising:

receiving from the mobile device a request for retransmission of a selected portion of the diagnostic image;

formatting the selected portion of the diagnostic image to match a display size and display parameters of the mobile device;

re-encrypting the formatted the selected portion of the diagnostic image; and

sending the re-encrypted formatted selected portion of the diagnostic image to the mobile device via the wireless network.

6. The system of claim 1 , wherein the server is configured with server-executable instructions to perform operations further comprising:

analyzing an EKG trace within the data layer to recognize a diagnostically significant pattern;

selecting a diagnostically significant portion of the EKG trace;

re-encrypting the selected diagnostically significant portion of the EKG trace; and

sending the re-encrypted selected diagnostically significant portion of the EKG trace to the mobile device via the wireless network.

7. The system of claim 1 , wherein the server is configured with server-executable instructions to perform operations further comprising:

receiving a data selection criteria from the mobile device;

using the received data selection criteria to select a portion of the medical record of the patient from the data layer;

re-encrypting the selected portion of the medical record of the patient; and

sending the re-encrypted selected portion of the medical record of the patient to the mobile device via the wireless network.

8. The system of claim 5 , wherein the mobile device comprises:

a processor;

a display coupled to the processor; and

a wireless transceiver coupled to the processor and configured to communicate via the wireless network,

wherein the processor is configured with processor-executable instructions to perform operations comprising:

receiving the encrypted demographic layer and data layer via the wireless network;

decrypting the encrypted demographic layer using a first decryption key;

decrypting the data layer using a second decryption key different from the first decryption key; and

displaying on the display at least a portion of the decrypted demographic layer and at least a portion of the diagnostic image.

9. The system of claim 8 , wherein the processor is configured with processor-executable instructions to perform operations further comprising:

receiving a user input indicating a selected portion of the displayed diagnostic image;

generating a request for retransmission of the diagnostic image indicating the user selected portion of the diagnostic image to be retransmitted;

sending the request for retransmission of the diagnostic image to the server via the wireless network;

receiving the encrypted formatted selected portion of the diagnostic image from the server via the wireless network;

decrypting the received encrypted formatted selected portion of the diagnostic image; and

displaying the selected portion of the diagnostic image on the display.