Homomorphic encryption in a healthcare network environment, system and methods
A system and method for homomorphic encryption in a healthcare network environment is provided and includes receiving digital data over the healthcare network at a data custodian server in a plurality of formats from various data sources, encrypting the data according to a homomorphic encryption scheme, receiving a query at the data custodian server from a data consumer device concerning a portion of the encrypted data, initiating a secure homomorphic work session between the data custodian server and the data consumer device, generating a homomorphic work space associated with the homomorphic work session, compiling, by the data custodian server, a results set satisfying the query, loading the results set into the homomorphic work space, and building an application programming interface (API) compatible with the results set, the API facilitating encrypted analysis on the results set in the homomorphic work space.
1. A method of supporting secure data analysis over a network, the method comprising:
storing, via a data custodian server, digital data in a database, the digital data originating from a plurality of data sources;
receiving, from a requesting device over the network, a query indicating requested digital data from among the digital data;
initiating a secure work session between the data custodian server and the requesting device;
generating a memory area associated with the secure work session, the memory area instantiated at least in part in at least one of the requesting device, the data custodian server, and an additional server;
loading the requested digital data into the memory area wherein at least a portion of the digital data is accessible to the requesting device via an application programming interface;
deriving a result vector from an operation performed by the requesting device on the requested digital data via the application programming interface; and
returning the result vector to the requesting device.
2. The method of claim 1 , wherein the database comprises a cloud network.
3. The method of claim 1 , wherein the method is performed in a clinical operating system implemented in a cloud network.
4. The method of claim 1 , further comprising authenticating the requesting device based on a secure key exchange with the requesting device.
5. The method of claim 1 , wherein the result vector is returned to the requesting device in encrypted format.
6. The method of claim 1 , wherein the result vector is returned to the requesting device encrypted using a security key associated with the secure work session.
7. The method of claim 6 , wherein the requesting device decrypts the encrypted result vector using a security key associated with the secure work session.
8. The method of claim 1 , wherein the requested digital data is associated with a patient; and
the result vector comprises a holistic health score for the patient.
9. The method of claim 1 , wherein the result vector comprises data associated with a predictive analytics model.
10. A system for supporting secure data analysis, the system comprising:
a data custodian server executing in a cloud network; and
a requesting device remotely located from the data custodian server and communicatively coupled to the data custodian server, wherein
the data custodian server stores digital data in a database, the digital data originating from a plurality of data sources;
the data custodian server receives, from the requesting device, a query indicating requested digital data from among the digital data;
the data custodian inserts the requested data into a memory area instantiated at least in part in at least one of the requesting device, the data custodian server, and an additional server, wherein at least a portion of the contents of the memory area is accessible to the requesting device via an application programming interface;
the data custodian server derives a result vector from an operation performed by the requesting device on the requested digital data via the application programming interface; and
the data custodian server returns the result vector to the requesting device.
11. The system of claim 10 , wherein the requested digital data is associated with a particular patient.
12. The system of claim 10 , wherein the result vector comprises data associated with a predictive analytics model.
13. A non-transitory medium with encoding instructions executable by a processor to perform operations comprising:
storing private digital data in a database, the private digital data originating from a plurality of data sources;
receiving, from a requesting device, a query indicating requested digital data from among the private digital data;
inserting the requested digital data into a memory area instantiated at least in part in at least one of the requesting device, the data custodian server, and an additional server, wherein at least a portion of the contents of the memory area is accessible to the requesting device via an application programming interface;
deriving result vector from an operation performed by the requesting device on the requested digital data via the application programming interface; and
returning the result vector to the requesting device.
14. The medium of claim 13 , wherein the database comprises a cloud network.
15. The medium of claim 13 , wherein the instructions are executable by the processor to perform operations further comprising authenticating the requesting device based on a secure key exchange with the requesting device.
16. The medium of claim 13 , wherein the requested digital data is associated with a patient; and
the result vector comprises a holistic health score for the patient.
17. The medium of claim 13 , wherein the result vector comprises data associated with a predictive analytics model.
18. The medium of claim 13 , wherein the operation is performed on the requested digital data during a secure session with the requesting device.
19. The method of claim 18 , wherein the result vector is returned to the requesting device encrypted using a security key associated with the secure session.