Granted Patent B2

US 12,154,665 · App. 17/461,190 · Granted Nov 26, 2024

Inventors: Christopher Blum (Wynnewood, PA); Geoff Wall (Newtown, PA); John Giannouris (Flemington, NJ)

Assignee: IQVIA Inc.

G16H10/60G06F21/6254G06Q2220/00

Abstract

Claims (83)

1. A method comprising:

receiving, from a healthcare related source, one or more hashed tokens, each hashed token based on a record of healthcare data;

comparing the received one or more hashed tokens to one or more other tokens contained in corresponding de-identified healthcare records pertaining to a respective person;

in response to determining that one or more matches exist between the received one or more hashed tokens and a subset of the one or more other tokens, identifying the corresponding de-identified health records for the subset of the one or more other tokens and an indexing tag associated with the corresponding de-identified health records;

generating, for each identified indexing tag, a source-specific, persistent patient identifier by encrypting the corresponding indexing tag with a computing rule specific to the healthcare related source that provided the received one or more hashed tokens, wherein the computing rule is based on patient identifying information (PII) extracted from the record of healthcare data; and

transmitting each of the source-specific, persistent patient identifiers to the healthcare related source of the received one or more hashed tokens.

2. The method of claim 1 , wherein receiving the one or more hashed tokens comprises:

accessing, by the healthcare related source, a record of healthcare data, wherein the record comprises patient identifying information (PII) associated with one or more persons to whom the healthcare data pertains;

extracting, by the healthcare related source, portions of PII in the accessed record of healthcare data;

encrypting, by the healthcare related source, the extracted portions of PII;

generating, by the healthcare related source, the one or more hashed tokens to the extracted portions of PII; and

transmitting, by the healthcare related source, the one or more hashed tokens to a collection-side system.

3. The method of claim 1 , wherein comparing the received one or more hashed tokens to the one or more other tokens contained in de-identified healthcare records pertaining to the person further comprises:

obtaining one or more previously received hashed tokens;

comparing the received one or more hashed tokens to the one or more previously received hashed tokens; and

determining that a match exists between the received one or more hashed tokens to at least one of the one or more previously received hashed tokens, wherein the match indicates a link between tokens indicative of the person.

4. The method of claim 3 , wherein in response to determining that the match does exist between the received one or more hashed tokens and de-identified health records, retrieving the indexing tag associated with the matched de-identified health records further comprises:

retrieving the de-identified health records corresponding to the matched previously received hashed tokens; and

retrieving the indexing tag associated with the matched de-identified health records associated with the matched previously received hashed tokens.

5. The method of claim 1 , wherein generating the source-specific, persistent patient identifier by encrypting indexing tag to a source of the received one or more hashed tokens further comprises:

encrypting the indexing tag to the source of the received one or more hashed tokens, wherein the source of the received one or more hashed tokens corresponds to a healthcare related source such that the encrypted indexing tag is inaccessible to other healthcare related sources.

6. The method of claim 1 , wherein transmitting the source-specific, persistent patient identifier to the healthcare related source of the received one or more hashed tokens further comprises:

generating a message that comprises (i) the source-specific, persistent patient identifier, (ii) an indication that the source-specific, persistent patient identifier is associated with the received one or more hashed tokens, and (iii) an identifier of the healthcare related source; and

transmitting the message to the healthcare related source.

7. The method of claim 1 , comprising:

determining health care data previously processed at a collection-side system does not match to data for a healthcare record received from a source-side system;

generating a new indexing tag to anonymously identify a patient that corresponds to the data for the healthcare record; and

storing the data for the healthcare record in association with the new indexing tag.

8. A system comprising:

one or more computers and one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising:

receiving, from a healthcare related source, one or more hashed tokens, each hashed token based on a record of healthcare data;

comparing the received one or more hashed tokens to one or more other tokens contained in corresponding de-identified healthcare records pertaining to a respective person;

in response to determining that one or more matches exist between the received one or more hashed tokens and a subset of the one or more other tokens, identifying the corresponding de-identified health records for the subset of the one or more other tokens and an indexing tag associated with the corresponding de-identified health records;

generating, for each identified indexing tag, a source-specific, persistent patient identifier by encrypting the corresponding indexing tag with a computing rule specific to the healthcare related source that provided the received one or more hashed tokens, wherein the computing rule is based on patient identifying information (PII) extracted from the record of healthcare data; and

transmitting each of the source-specific, persistent patient identifiers to the healthcare related source of the received one or more hashed tokens.

9. The system of claim 8 , wherein receiving the one or more hashed tokens comprises:

accessing, by the healthcare related source, a record of healthcare data, wherein the record comprises patient identifying information (PII) associated with one or more persons to whom the healthcare data pertains;

extracting, by the healthcare related source, portions of PII in the accessed record of healthcare data;

encrypting, by the healthcare related source, the extracted portions of PII;

generating, by the healthcare related source, the one or more hashed tokens to the extracted portions of PII; and

transmitting, by the healthcare related source, the one or more hashed tokens to a collection-side system.

10. The system of claim 8 , wherein comparing the received one or more hashed tokens to the one or more other tokens contained in de-identified healthcare records pertaining to the person further comprises:

obtaining one or more previously received hashed tokens;

comparing the received one or more hashed tokens to the one or more previously received hashed tokens; and

determining that a match exists between the received one or more hashed tokens to at least one of the one or more previously received hashed tokens, wherein the match indicates a link between tokens indicative of the person.

11. The system of claim 10 , wherein in response to determining that the match does exist between the received one or more hashed tokens and de-identified health records, retrieving the indexing tag associated with the matched de-identified health records further comprises:

retrieving the de-identified health records corresponding to the matched previously received hashed tokens; and

retrieving the indexing tag associated with the matched de-identified health records associated with the matched previously received hashed tokens.

12. The system of claim 8 , wherein generating the source-specific, persistent patient identifier by encrypting the indexing tag to a source of the received one or more hashed tokens further comprises:

encrypting the indexing tag to the source of the received one or more hashed tokens, wherein the source of the received one or more hashed tokens corresponds to a healthcare related source such that the encrypted indexing tag is inaccessible to other healthcare related sources.

13. The system of claim 8 , wherein transmitting the source-specific, persistent patient identifier to the healthcare related source of the received one or more hashed tokens further comprises:

generating a message that comprises (i) the source-specific, persistent patient identifier, (ii) an indication that the source-specific, persistent patient identifier is associated with the received one or more hashed tokens, and (iii) an identifier of the healthcare related source; and

transmitting the message to the healthcare related source.

14. The system of claim 8 , comprising:

determining health care data previously processed at a collection-side system does not match to data for a healthcare record received from a source-side system;

generating a new indexing tag to anonymously identify a patient that corresponds to the data for the healthcare record; and

storing the data for the healthcare record in association with the new indexing tag.

15. A non-transitory computer-readable medium storing software comprising instructions executable by one or more computers which, upon such execution, cause the one or more computers to perform operations comprising:

receiving, from a healthcare related source, one or more hashed tokens, each hashed token based on a record of healthcare data;

comparing the received one or more hashed tokens to one or more other tokens contained in corresponding de-identified healthcare records pertaining to a respective person;

in response to determining that one or more matches exist between the received one or more hashed tokens and a subset of the one or more other tokens, identifying the corresponding de-identified health records for the subset of the one or more other tokens and an indexing tag associated with the corresponding de-identified health records;

generating, for each identified indexing tag, a source-specific, persistent patient identifier by encrypting the corresponding indexing tag with a computing rule specific to the healthcare related source that provided the received one or more hashed tokens, wherein the computing rule is based on patient identifying information (PII) extracted from the record of healthcare data; and

transmitting each of the source-specific, persistent patient identifiers to the healthcare related source of the received one or more hashed tokens.

16. The non-transitory computer-readable medium of claim 15 , wherein receiving the one or more hashed tokens comprises:

accessing, by the healthcare related source, a record of healthcare data, wherein the record comprises patient identifying information (PII) associated with one or more persons to whom the healthcare data pertains;

extracting, by the healthcare related source, portions of PII in the accessed record of healthcare data;

encrypting, by the healthcare related source, the extracted portions of PII;

generating, by the healthcare related source, the one or more hashed tokens to the extracted portions of PII; and

transmitting, by the healthcare related source, the one or more hashed tokens to a collection-side system.

17. The non-transitory computer-readable medium of claim 15 , wherein comparing the received one or more hashed tokens to the one or more other tokens contained in de-identified healthcare records pertaining to the person further comprises:

obtaining one or more previously received hashed tokens;

comparing the received one or more hashed tokens to the one or more previously received hashed tokens; and

determining that a match exists between the received one or more hashed tokens to at least one of the one or more previously received hashed tokens, wherein the match indicates a link between tokens indicative of the person.

18. The non-transitory computer-readable medium of claim 17 , wherein in response to determining that the match does exist between the received hashed token and de-identified health records, retrieving the indexing tag associated with the matched de-identified health records further comprises:

retrieving the de-identified health records corresponding to the matched previously received hashed tokens; and

retrieving the indexing tag associated with the matched de-identified health records associated with the matched previously received hashed tokens.

19. The non-transitory computer-readable medium of claim 15 , wherein generating the source-specific, persistent patient identifier by encrypting the indexing tag to a source of the received one or more hashed tokens further comprises:

encrypting the indexing tag to the source of the received one or more hashed tokens, wherein the source of the received one or more hashed tokens corresponds to a healthcare related source such that the encrypted indexing tag is inaccessible to other healthcare related sources.

20. The non-transitory computer-readable medium of claim 15 , wherein transmitting the source-specific, persistent patient identifier to the healthcare related source of the received one or more hashed tokens further comprises:

generating a message that comprises (i) the source-specific, persistent patient identifier, (ii) an indication that the source-specific, persistent patient identifier is associated with the received one or more hashed tokens, and (iii) an identifier of the healthcare related source; and

transmitting the message to the healthcare related source.

21. The method of claim 1 , wherein receiving, from the healthcare related source, the one or more hashed tokens comprises receiving, from the healthcare related source, the one or more hashed tokens and data indicating types of patient identifying information (PII) in each of the one or more hashed tokens.

22. The method of claim 21 , wherein comparing the received one or more hashed tokens to one or more other hashed tokens comprises comparing, using the data indicating the types of PII, the received one or more hashed tokens to the one or more other tokens contained in the corresponding de-identified healthcare records pertaining to the respective person.

Assignments (9)

Cited By (1)

US 12,530,498