Controlling access to data in a health network
Some methods may involve receiving, at a first node of the health network, encrypted sensor data from one or more sensors. The first node may be in a data communication path between the one or more sensors and other nodes of the health network. The method may involve decrypting, by the first node of the health network, only a portion of the encrypted sensor data, and transmitting the encrypted sensor data from the first node of the health network to a second node of the health network. The first node may be a gateway device. In some examples, the second node may be able to decrypt more of the encrypted sensor data than the first node.
1. A method of controlling access to data in a health network, the method comprising:
receiving, at a first node of the health network, a series of encrypted sensor data transmissions from one or more sensors configured to provide physiological data of a user, the first node being in a data communication path between the one or more sensors and other nodes of the health network;
decrypting, by the first node of the health network, a portion of the encrypted sensor data transmissions to generate unencrypted clear, plain data, wherein the portion is less than the entire received encrypted sensor data transmissions;
displaying, in response to decrypting the portion of the encrypted sensor data transmissions, on a graphical user interface of the first node, one or more images corresponding to the unencrypted data including at least a portion of the provided physiological data of the user; and
transmitting the encrypted sensor data transmissions from the first node of the health network to a second node of the health network.
2. The method of claim 1 , wherein the first node of the health network is a gateway device.
3. The method of claim 1 , further comprising:
providing, via a speaker of the first node, audio corresponding to the decrypted portion of the encrypted sensor data transmissions.
4. The method of claim 1 , wherein the second node of the health network is a node of a health service provider system.
5. The method of claim 1 , wherein the method involves providing a plurality of levels of access, by nodes in the data communication path, to the encrypted sensor data transmissions from the one or more sensors.
6. The method of claim 5 , wherein the first node has a different level of access than the second node.
7. The method of claim 6 , wherein the second node has a higher level of access than the first node.
8. The method of claim 5 , wherein a group encryption key for top-level access (KG i ) is computed via a one-way hash of a root encryption key.
9. The method of claim 8 , wherein a group encryption key KG i for an i th level of access is computed via a one-way hash of a group encryption key KG i−1 for an (i−1) th level of access.
10. The method of claim 9 , wherein the group encryption key KG i , and the group encryption key KG i−1 are symmetrical encryption keys.
11. The method of claim 1 , wherein the encrypted sensor data transmissions from the one or more sensors includes a first portion encrypted at a first level and a second portion encrypted at a second level that is different from the first level.
12. The method of claim 1 , wherein the first node decrypts at least a portion of every Nth encrypted sensor data transmission and does not decrypt any of a first through (N−1) th encrypted sensor data transmissions of the series of encrypted sensor data transmissions.
13. The method of claim 1 , wherein the first node decrypts at least a portion of an encrypted sensor data transmission received after a time interval has elapsed but does not decrypt other encrypted sensor data transmissions of the series of encrypted sensor data transmissions received before the time interval has elapsed.
14. The method of claim 1 , wherein the first node decrypts a portion of each encrypted sensor data transmission of the series of encrypted sensor data transmissions.
15. An apparatus configured to function as a first node of a health network, the first node being in a data communication path between a one or more sensors configured to provide physiological data of a user and other nodes of the health network, the apparatus comprising:
an interface system configured for receiving a series of encrypted sensor data transmissions from the one or more sensors; and
a control system configured to:
receive, from the interface system, the series of encrypted sensor data transmissions;
decrypt a portion of the encrypted sensor data transmissions to generate unencrypted clear, plain data, wherein the portion is less than the entire received encrypted sensor data transmissions;
provide, to a display of the apparatus, in response to decrypting the portion of the encrypted sensor data transmissions, one or more images corresponding to the unencrypted data including at least a portion of the provided physiological data of the user; and
cause the interface system to transmit the encrypted sensor data transmissions to a second node of the health network.
16. The apparatus of claim 15 , wherein the apparatus is a gateway device of the health network.
17. The apparatus of claim 15 , wherein the control system is further configured to provide, to a speaker of the apparatus, audio corresponding to the decrypted portion of the encrypted sensor data transmissions.
18. The apparatus of claim 15 , wherein the second node of the health network is a node of a health service provider system.
19. The apparatus of claim 15 , wherein the control system is configured to decrypt at least a portion of every Nth encrypted sensor data transmission, and wherein the control system is configured not to decrypt any of a first through (N−1) th encrypted sensor data transmissions of the series of encrypted sensor data transmissions.
20. The apparatus of claim 15 , wherein the control system is configured to decrypt at least a portion of an encrypted sensor data transmission received after a time interval has elapsed, and wherein the control system is configured not to decrypt other encrypted sensor data transmissions of the series of encrypted sensor data transmissions received before the time interval has elapsed.
21. The apparatus of claim 15 , wherein the control system is configured to decrypt a portion of each encrypted sensor data transmission of the series of encrypted sensor data transmissions.
22. A non-transitory medium having instructions for controlling a first node of a health network to perform a method stored thereon, the first node being in a data communication path between one or more sensors configured to provide physiological data of a user and other nodes of the health network, the method comprising:
receiving, at the first node of the health network, a series of encrypted sensor data transmissions from the one or more sensors;
decrypting, by the first node of the health network, a portion of the encrypted sensor data transmissions to generate unencrypted clear, plain data, wherein the portion is less than the entire received encrypted sensor data transmissions;
displaying, in response to decrypting the portion of the encrypted sensor data transmissions, on a graphical user interface of the first node, one or more images corresponding to the unencrypted data including at least a portion of the provided physiological data of the user; and
transmitting the encrypted sensor data transmissions from the first node of the health network to a second node of the health network.
23. The non-transitory medium of claim 22 , wherein the first node of the health network is a gateway device.
24. The non-transitory medium of claim 22 , further comprising:
providing, via a speaker of the first node, audio corresponding to the decrypted portion of the encrypted sensor data transmissions.
25. The non-transitory medium of claim 22 , wherein the method involves providing a plurality of levels of access, by nodes in the data communication path, to the encrypted sensor data transmissions from the one or more sensors.
26. The non-transitory medium of claim 22 , wherein the first node decrypts at least a portion of every Nth encrypted sensor data transmission and does not decrypt any of a first through (N−1) th encrypted sensor data transmissions of the series of encrypted sensor data transmissions.
27. The non-transitory medium of claim 22 , wherein the first node decrypts at least a portion of an encrypted sensor data transmission received after a time interval has elapsed but does not decrypt other encrypted sensor data transmissions of the series of encrypted sensor data transmissions received before the time interval has elapsed.
28. The non-transitory medium of claim 22 , wherein the first node decrypts a portion of each encrypted sensor data transmission of the series of encrypted sensor data transmissions.
29. An apparatus configured to function as a first node of a health network, the first node being in a data communication path between a one or more sensors configured to provide physiological data of a user and other nodes of the health network, the apparatus comprising:
means for receiving, at the first node of the health network, a series of encrypted sensor data transmissions from the one or more sensors;
means for decrypting, by the first node of the health network, a portion of the encrypted sensor data transmissions to generate unencrypted clear, plain data, wherein the portion is less than the entire received encrypted sensor data transmissions;
means for displaying, in response to decrypting the portion of the encrypted sensor data transmissions, one or more images corresponding to the unencrypted data including of at least a portion of the provided physiological data of the user, and
means for transmitting the encrypted sensor data transmissions from the first node of the health network to a second node of the health network.
30. The apparatus of claim 29 , further comprising:
means for providing audio corresponding to the decrypted portion of the encrypted sensor data transmissions.