IP Library › Granted Patent US 10,257,174
Granted Patent B2
US 10,257,174 · App. 15/361,319 · Granted Apr 9, 2019

Methods and systems for providing secure and auditable transfer of encrypted data between remote locations

Inventors: Michael Rosenberg (Raleigh, NC); Malcolm Benitz (Raleigh, NC); Chase Ballard (Raleigh, NC); Jason Suttles (Raleigh, NC); Chris Woodlief (Raleigh, NC)
Assignee: MEDICOM TECHNOLOGIES, INC.
H04L63/0492G06F19/30H04L51/36H04L63/0485H04L63/061H04L63/0876H04L67/06H04L67/42
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,257,174
App. No.
15/361,319
Granted
Apr 9, 2019
Kind
B2
Abstract

Methods and systems for directly and securely transferring encrypted medical data between two remote locations, such as an imaging site and a diagnostic site, without storing the medical data on an intermediary server, and only storing audit information on the intermediary server, thereby allowing a direct transfer of medical data between the two remote sites, and without relying on the intermediary server for storage of the medical data.

Claims (58)

1. A system for transferring data in a secure manner, comprising:

a web socket server coupled to a communication network;

a computing device coupled to the communication network, the computing device configured to request data from the web socket server;

a first endpoint device coupled to the communication network, and configured to transmit a first endpoint characteristic to the web socket server; and

a second endpoint device coupled to the communication network, and configured to transmit a second endpoint characteristic to the web socket server,

wherein the web socket server is configured to perform a comparison of the first endpoint characteristic and the second endpoint characteristic,

wherein, in a case where the web socket server determines that the first endpoint device provides a lower latency than the second endpoint device based on the comparison, the web socket server initiates a communication channel between the computing device and the first endpoint device to transfer the data,

wherein, in a case where the web socket server determines that the second endpoint device provides a lower latency that the first endpoint device based on the comparison, the web socket server initiates a communication channel between the computing device and the second endpoint device to transfer the data, and

wherein the web socket server is further configured to periodically close and subsequently open the communication channel, wherein the communication channel does not need to be re-initiated after being closed,

wherein the first endpoint device is configured to transmit a first encryption key to the second device,

wherein the second endpoint device is configured to transmit a second encryption key to the first device after the second device receives the first encryption key,

wherein the first endpoint device is configured to encrypt the data after receiving the second encryption key, and

wherein the web socket server is configured to store a first audit data related to the first endpoint device and a second audit data related to the second endpoint device, wherein neither the first endpoint device, the second endpoint device, or the web socket server can access the first audit data and the second audit data without a third encryption key.

2. The system of claim 1 , wherein the first endpoint device and the second endpoint device are configured to store medical images.

3. The system of claim 1 , wherein the computing device is configured to display medical images.

4. The system of claim 1 , wherein the first endpoint device and the second endpoint device include a picture archiving and communication system (PACS).

5. The system of claim 1 , wherein the computing device includes a digital imaging and communication in medicine (DICOM) viewer.

6. The system of claim 1 , wherein the web socket server is configured to periodically close and subsequently open the communication channel on with a random frequency.

7. The system of claim 1 , where the data is encrypted using a hash.

8. A system of securely transmitting medical data directly between two remote locations, comprising:

a web socket server coupled to a communication network;

a medical provider device coupled to the communication network, the medical provider device configured to request a data package from the web socket server;

a first picture archiving and communication system (PACS) coupled to the communication network, and configured to transmit a first PACS characteristic to the web socket server; and

a second PACS coupled to the communication network, and configured to transmit a second PACS characteristic to the web socket server,

wherein the first PACS and second PACS include mirrored data,

wherein the web socket server is configured to perform a comparison of the first PACS characteristic and the second PACS characteristic,

wherein, in a case where the web socket server determines that the first PACS device provides a higher throughput than the second PACS device based on the comparison, the web socket server initiates a communication channel between the medical provider device and the first PACS device to transfer the data package,

wherein, in a case where the web socket server determines that the second PACS device provides a higher throughput that the first PACS device based on the comparison, the web socket server initiates a communication channel between the medical provider device and the second PACS device to transfer the data package, and

wherein the web socket server is further configured to periodically close and subsequently open the communication channel, wherein the communication channel does not need to be re-initiated after being closed,

wherein the first PACS is configured to encrypt a data package using encryption keys to generate an encrypted data package,

wherein the second PACS is configured to receive the encrypted data package from the first PACS, the second PACS further configured to decrypt the encrypted data package using the encryption keys, and

wherein the web socket server is configured to store a first audit data related to the first PACS and a second audit data related to the second PACS, wherein neither the first PACS, the second PACS, or the web socket server can access the first audit data and the second audit data without an audit data encryption key.

9. The system of claim 8 , wherein the data package includes at least one of a medical image and a medical record.

10. The system of claim 8 , wherein the first PACS is located at a medical imaging site.

11. The system of claim 8 , wherein the web socket server is configured to periodically close and subsequently open the communication channel on with a pre-determined frequency.

12. The system of claim 8 , wherein the first PACS device and the second PACS device are located remotely from each other.

13. The system of claim 8 , wherein the web socket server includes a MySQL relational database.

14. A system of securely transmitting data directly between two remote locations, comprising:

a web socket server coupled to a communication network;

a medical provider device coupled to the communication network, the medical provider device configured to request an encrypted data package from the web socket server;

a first picture archiving and communication system (PACS) coupled to the communication network, and configured to transmit a first PACS characteristic to the web socket server; and

a second PACS coupled to the communication network, and configured to transmit a second PACS characteristic to the web socket server,

wherein the first PACS and second PACS include mirrored data,

wherein the web socket server is configured to perform a comparison of the first PACS characteristic and the second PACS characteristic,

wherein, in a case where the web socket server determines that the first PACS device provides a higher latency or a higher throughput than the second PACS device based on the comparison, the web socket server initiates a communication channel between the medical provider device and the first PACS device to transfer the encrypted data package,

wherein, in a case where the web socket server determines that the second PACS device provides a higher latency or higher throughput that the first PACS device based on the comparison, the web socket server initiates a communication channel between the medical provider device and the second PACS device to transfer the encrypted data package,

wherein the web socket server is further configured to periodically close and subsequently open the communication channel, wherein the communication channel does not need to be re-initiated after being closed,

wherein the web socket server is configured to periodically close and subsequently open the communication channel on with a random frequency,

wherein the first PACS is further configured to generate a first encryption key and transmit the first encryption key to the second PACS, and

wherein the second PACS is further configured to generate a second encryption key and transmit the second encryption key to the first PACS,

wherein the second PACS is further configured to decrypt the encrypted data package using the first encryption key and the second encryption key, and

wherein the web socket server is configured to store a first audit data related to the first PACS and a second audit data related to the second PACS, wherein neither the first PACS, the second PACS, or the web socket server can access the first audit data and the second audit data without a third encryption key.

15. The system of claim 14 , wherein the encrypted data package includes at least one of a medical image and a medical record.

16. The system of claim 14 , wherein the encrypted data package includes at least one of a video, audio, multimedia, military, or gaming data.

17. The system of claim 14 , wherein the encrypted data package includes fmancial data.

18. The system of claim 14 , wherein the encrypted data package includes personally identifiable information.

19. The system of claim 14 , wherein the encrypted data package is encrypted using a hash.

20. The system of claim 19 , wherein the audit trail is partitioned into a plurality of databases on the web socket server, and wherein personally identifiable information is stored on a different database than non-personally identifiable information.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 21, 2019
From: ROSENBERG, MICHAEL; ROSENBERG, MALCOLM; BALLARD, CHASE; SUTTLES, JASON; WOODLIEF, CHRIS
To: MEDICOM TECHNOLOGIES INC.
Reel/Frame 048390/0921 →
Continuity (2)
Provisional Application 62280865 · Jan 20, 2016
Related Publication 20170208047A1 · Jul 20, 2017
Cited By (1)
US 12,191,891