Homomorphic encryption in a healthcare network environment, system and methods
View Patent ↗A system and method for homomorphic encryption in a healthcare network environment is provided and includes receiving digital data over the healthcare network at a data custodian server in a plurality of formats from various data sources, encrypting the data according to a homomorphic encryption scheme, receiving a query at the data custodian server from a data consumer device concerning a portion of the encrypted data, initiating a secure homomorphic work session between the data custodian server and the data consumer device, generating a homomorphic work space associated with the homomorphic work session, compiling, by the data custodian server, a results set satisfying the query, loading the results set into the homomorphic work space, and building an application programming interface (API) compatible with the results set, the API facilitating encrypted analysis on the results set in the homomorphic work space.
1. A method of supporting secure data analysis over a network, the method comprising:
initiating a secure work session over a network between a data custodian server and a requesting device;
allocating a homomorphic encryption memory area to be used by the secure work session, the homomorphic encryption memory area being located at least in part at one or more of the requesting device, the data custodian server, and an additional computing device;
loading requested digital data into the homomorphic encryption memory area wherein at least a portion of the digital data is accessible to the requesting device via an application programming interface;
determining a result from an operation performed by the requesting device on the requested digital data in the homomorphic encryption memory area via the application programming interface; and
without giving the requesting device the capability to decrypt the requested digital data, providing the result to the requesting device in an encrypted format decryptable by the requesting device to provide the requesting device with access to the result but not the underlying requested data.
2. The method of claim 1 , wherein the digital data is stored in a cloud network.
3. The method of claim 1 , wherein the method is performed in a clinical operating system implemented in a cloud network.
4. The method of claim 1 , further comprising authenticating the requesting device based on a secure key exchange with the requesting device.
5. The method of claim 1 , wherein the result is provided to the requesting device encrypted using a security key associated with the secure work session.
6. The method of claim 5 , wherein the requesting device decrypts the encrypted result using a security key associated with the secure work session.
7. The method of claim 1 , wherein the requested digital data is associated with a patient; and
the result comprises a holistic health score for the patient.
8. The method of claim 1 , wherein the result comprises data associated with a predictive analytics model.
9. The method of claim 1 , wherein the additional computing device comprises a server.
10. The method of claim 1 , wherein the result comprises a results set.
11. The method of claim 10 , wherein the results set comprises a results vector.
12. A system for supporting secure data analysis, the system comprising:
a data custodian server executing in a cloud network; and
a requesting device remotely located from the data custodian server and communicatively coupled to the data custodian server, wherein
the data custodian server inserts requested digital data into a homomorphic encryption memory area located at least in part at one or more of the requesting device, the data custodian server, and an additional computing device, wherein at least a portion of the contents of the homomorphic encryption memory area is accessible to the requesting device via an application programming interface;
the data custodian server determines a result from an operation performed by the requesting device on the requested digital data in the homomorphic encryption memory area via the application programming interface and, without giving the requesting device the capability to decrypt the requested digital data, provides the result to the requesting device in an encrypted format decryptable by the requesting device to provide the requesting device with access to the result but not the underlying requested data; and
the requesting device decrypts the encrypted result to access the result in an unencrypted format without ever having access to the requested digital data in an unencrypted format.
13. The system of claim 12 , wherein the requested digital data is associated with a particular patient.
14. The system of claim 12 , wherein the result comprises data associated with a predictive analytics model.
15. A non-transitory medium with encoding instructions executable by a processor of a data custodian server to perform operations comprising:
inserting digital data requested by a requesting device into a homomorphic encryption memory area located at least in part at one or more of the requesting device, the data custodian server, and an additional computing device, wherein at least a portion of the contents of the homomorphic encryption memory area is accessible to the requesting device via an application programming interface;
determining a result from an operation performed by the requesting device on the requested digital data in the homomorphic encryption memory area via the application programming interface; and
without giving the requesting device the capability to decrypt the requested digital data, providing the result to the requesting device in an encrypted format decryptable by the requesting device to provide the requesting device with access to the result but not the underlying requested data.
16. The medium of claim 15 , wherein the digital data is stored in a cloud network.
17. The medium of claim 15 , wherein the instructions are executable by the processor to perform operations further comprising authenticating the requesting device based on a secure key exchange with the requesting device.
18. The medium of claim 15 , wherein the requested digital data is associated with a patient; and
the result comprises a holistic health score for the patient.
19. The medium of claim 15 , wherein the result comprises data associated with a predictive analytics model.
20. The medium of claim 15 , wherein the operation is performed on the requested digital data during a secure session with the requesting device.
21. The method medium of claim 20 , wherein the result is provided to the requesting device encrypted using a security key associated with the secure session.