Systems and methods for processing electronic images across regions
Systems and methods are disclosed for preserving patient privacy while transmitting health data from one geographic region to another geographic region for data analysis. One method includes receiving patient-specific health data including patient privacy information at a first region; removing the patient privacy information from the patient-specific health data to generate anonymous health data; storing the patient privacy information at the first region; and transmitting the anonymous health data to a second region for analysis.
1. A computer-implemented method of processing electronic images while transferring data across regions, the method comprising:
removing, using a processor physically located in a first region, first patient-identifiable information from patient-specific data to generate a first set of de-identified data, based on a first geographic region specific privacy standard;
storing, using the processor physically located in the first region, the first patient-identifiable information within the first region;
transmitting, using the processor physically located in the first region, the first set of de-identified data to a remote data analysis server physically located in a second region for a patient-specific computation based on the first set of de-identified data;
generating, using the remote data analysis server physically located within the second region, a model of a patient based on the first set of de-identified data and conducting the patient-specific computation through the generated model;
determining, using the remote data analysis server physically located within the second region, a patient-specific blood flow computation in the patient based on the generated model and a mass or a volume of a myocardial tissue of the patient;
receiving, by the processor physically located in the first region, analyzed de-identified data from the remote data analysis server physically located in the second region; and
identifying a patient associated with the generated model by determining, using the processor physically located in the first region, first patient-identifiable information associated with the analyzed de-identified data based on the first patient-identifiable information stored within the first region and the patient-specific blood flow computation stored in a permanent storage at the second geographic region, wherein the first patient privacy information is inaccessible within the second geographic region.
2. The computer-implemented method of claim 1 , wherein the second region is distinct from and outside the first region, and
wherein the first region and the second region are governed by different data anonymization regulations.
3. The computer-implemented method of claim 1 , further comprising:
generating, using the processor physically located in the first region, an identifier associated with the first set of de-identified data, wherein the first patient-identifiable information is absent from the identifier.
4. The computer-implemented method of claim 1 , wherein the analyzed de-identified data includes results of a patient-specific blood flow computation calculated at an earlier date and stored in the permanent storage.
5. The computer-implemented method of claim 1 , further comprising:
generating, using the processor physically located in the first region, an irreversible hash of the first patient-identifiable information.
6. The computer-implemented method of claim 1 , further comprising:
prompting refining of modeling techniques available at the second region, based on the analyzed de-identified data.
7. The computer-implemented method of claim 1 , further comprising:
determining, using the processor physically located in the first region, an identifier associated with the analyzed de-identified data from the second region;
determining, using the processor physically located in the first region, an association between the identifier and the first patient-identifiable information stored within the first region; and
determining, using the processor physically located in the first region, the first patient-identifiable information corresponding to the analyzed de-identified data based on the association between the identifier and the first patient-identifiable information stored within the first region.
8. The computer-implemented method of claim 1 , further comprising:
determining, using the processor physically located in the first region, a hash associated with the analyzed de-identified data or the first set of de-identified data; and
determining, using the processor physically located in the second region, previously analyzed data associated with either the analyzed de-identified data or the first set of de-identified data, based on a comparison of the hash to one or more stored hashes.
9. A system for processing electronic images while transferring data across regions, the system comprising:
at least one data storage device physically located within a first region and storing instructions for providing cross-border data transfer while preserving first data anonymization; and
at least one processor physically located within the first region and configured to execute the instructions to perform operations comprising:
removing, using a processor physically located in a first region, first patient-identifiable information from patient-specific data to generate a first set of de-identified data, based on a first geographic region specific privacy standard;
storing, using the processor physically located in the first region, the first patient-identifiable information within the first region;
transmitting, using the processor physically located in the first region, the first set of de-identified data to a remote data analysis server physically located in a second region for a patient-specific computation based on the first set of de-identified data;
generating, using the remote data analysis server physically located within the second region, a model of a patient based on the first set of de-identified data and conducting the patient-specific computation through the generated model;
determining, using the remote data analysis server physically located within the second region, a patient-specific blood flow computation in the patient based on the generated model and a mass or a volume of a myocardial tissue of the patient;
receiving, by the processor physically located in the first region, analyzed de-identified data from the remote data analysis server physically located in the second region; and
identifying a patient associated with the generated model by determining, using the processor physically located in the first region, first patient-identifiable information associated with the analyzed de-identified data based on the first patient-identifiable information stored within the first region and the patient-specific blood flow computation stored in a permanent storage at the second geographic region, wherein the first patient privacy information is inaccessible within the second geographic region.
10. The system of claim 9 , wherein the second region is distinct from and outside the first region, and
wherein the first region and the second region are governed by different data anonymization regulations.
11. The system of claim 9 , wherein the operations at the remote data analysis server physically located within the first region further comprise:
generating an identifier associated with the first set of de-identified data, wherein the first patient-identifiable information is absent from the identifier.
12. The system of claim 9 , further comprising:
transmitting the first set of de-identified data to the second region with the generated identifier.
13. The system of claim 9 , wherein the operations at the remote data analysis server physically located within the first region further comprise:
generating an irreversible hash of the first patient-identifiable information.
14. The system of claim 9 , the operations further comprising:
prompting refining of blood flow modeling techniques available at the second region, based on the analyzed de-identified data.
15. The system of claim 14 , wherein the operations at the remote data analysis server physically located within the first region further comprise:
determining an identifier associated with the de-identified analyzed data from the second region;
determining an association between the identifier and the first patient-identifiable information stored within the first region; and
determining the first patient-identifiable information corresponding to the de-identified analyzed data based on the association between the identifier and the first patient-identifiable information stored within the first region.
16. The system of claim 14 , the operations further comprising:
determining, at the remote data analysis server physically located within the first region, a hash associated with the de-identified analyzed data or the de-identified data; and
determining, at the remote data analysis server physically located within the second region, previously analyzed data associated with either the de-identified analyzed data or the de-identified data, based on a comparison of the hash to one or more stored hashes.
17. A non-transitory computer readable medium for use on a computer system containing computer-executable programming instructions that execute operations for processing electronic images while transferring data across regions, the operations comprising:
removing, using a processor physically located in a first region, first patient-identifiable information from patient-specific data to generate a first set of de-identified data, based on a first geographic region specific privacy standard;
storing, using the processor physically located in the first region, the first patient-identifiable information within the first region;
transmitting, using the processor physically located in the first region, the first set of de-identified data to a remote data analysis server physically located in a second region for a patient-specific computation based on the first set of de-identified data;
generating, using the remote data analysis server physically located within the second region, a model of a patient based on the first set of de-identified data and conducting the patient-specific computation through the generated model;
determining, using the remote data analysis server physically located within the second region, a patient-specific blood flow computation in the patient based on the generated model and a mass or a volume of a myocardial tissue of the patient;
receiving, by the processor physically located in the first region, analyzed de-identified data from the remote data analysis server physically located in the second region; and
identifying a patient associated with the generated model by determining, using the processor physically located in the first region, first patient-identifiable information associated with the analyzed de-identified data based on the first patient-identifiable information stored within the first region and the patient-specific blood flow computation stored in a permanent storage at the second geographic region, wherein the first patient privacy information is inaccessible within the second geographic region.
18. The non-transitory computer readable medium of claim 17 , wherein the second region is distinct from and outside the first region, and
wherein the first region and the second region are governed by different data anonymization regulations.
19. The non-transitory computer readable medium of claim 17 , the operations further comprising:
generating, using a processor physically located in the first region, an identifier associated with the first set of de-identified data, wherein the first patient-identifiable information is absent from the identifier.
20. The non-transitory computer readable medium of claim 17 , the operations further comprising:
generating, using a processor physically located in the first region, an irreversible hash of the first patient-identifiable information.