Systems and methods for ensuring data security in the treatment of diseases and disorders using digital therapeutics
A method that includes receiving patient-generated event data over a network from a patient device associated with a patient having an active digital therapy prescription for treating an underlying disease or disorder. The patient-generated event data is encrypted by the patient device and includes at least one timestamped event related to the active digital therapy prescription. In response to receiving the patient-generated event data, the method includes decrypting, anonymizing, and storing the anonymized patient-generated event data on memory hardware. The method further includes receiving a patient record request over the network from a healthcare provider (HCP) system that requests the patient-generated event data and includes an authentication token. In response to receiving the patient record request, the method includes retrieving and encrypting the anonymized patient-generated event data from the memory hardware using the authentication token. The method also includes transmitting the encrypted patient-generated event data to the HCP system.
1 . A method for managing storage of data, comprising:
maintaining, by a server on a data storage, a plurality of records, each of the plurality of records identifying de-identified health information (DIHI) associated with one of a plurality of users provided with a digital therapeutic, the DIHI separated from any patient identifying information (PII);
storing, by the server on the data storage, a plurality of datasets, each of the plurality of datasets identifying a series of events associated with one of the plurality of users provided with the digital therapeutic via one of a plurality of user devices;
receiving, by the server, a request including an authentication token for a remote computing device to access the data storage;
identifying, by the server, from the data storage, a portion of the plurality of records and a corresponding portion of the plurality of datasets using the authentication token;
generating, by the server, data using the portion of the plurality of records and the corresponding portion of the plurality of datasets;
generating, by the server, analytics on the portion of the plurality of records and the corresponding portion of the plurality of datasets, the analytics indicating an effectiveness of the digital therapeutic on at least one of the plurality of users or adherence of at least one of the plurality of users with taking a medication to address a disease or disorder;
encrypting, by the server, the analytics generated from the portion of the plurality of records and the corresponding portion of the plurality of datasets to generate encrypted data; and
transmitting, by the server, the encrypted data to cause the remote computing device to present a notification,
wherein transmitting the encrypted data further comprises transmitting the analytics on the portion of the plurality of records and the corresponding portion of the plurality of datasets.
2 . The method of claim 1 , wherein storing the plurality of datasets further comprises decrypting a dataset identifying the series of events associated with the user interacting with the digital therapeutic from the user device.
3 . The method of claim 1 , wherein receiving the request further comprises receiving the request including the authentication token identifying a user of the plurality of users, and wherein identifying the portion of the plurality of records and the corresponding portion of the plurality of datasets further comprises selecting the portion of the plurality of records and the corresponding portion of the plurality of datasets associated with the user identified by the authentication token.
4 . The method of claim 1 , wherein storing the plurality of datasets further comprises modifying PII corresponding to the series of events for at least one of the plurality of datasets generated by at least one of the plurality of user devices.
5 . The method of claim 1 , further comprising generating, by the server, analytics as time series data associated with one of the plurality of users.
6 . The method of claim 1 , wherein storing the plurality of datasets further comprises storing at least one of the plurality of datasets comprising at least one of (i) lesson completion, (ii) lesson progress, (iii) interaction with an application, or (iv) user progress.
7 . The method of claim 1 , wherein transmitting the encrypted data further comprises transmitting the encrypted data to cause the remote computing device to present the notification related to at least one of the series of events in the portion of the plurality of datasets, wherein the notification includes at least one of an audible or visible alert.
8 . The method of claim 1 , wherein the digital therapeutic for the plurality of users further comprises therapy content including information related to a medication to address a disease or disorder of the plurality of users.
9 . A system for managing storage of data, comprising:
a server having one or more processors coupled with memory, configured to:
maintain, on a data storage, a plurality of records, each of the plurality of records identifying de-identified patient health information (DPHI) associated with one of a plurality of users provided with a digital therapeutic, the DPHI separated from any patient identifying information (PII);
store, on the data storage, a plurality of datasets, each of the plurality of datasets identifying a series of events associated with one of the plurality of users provided with the digital therapeutic via one of a plurality of user devices;
receive a request including an authentication token for a remote computing device to access the data storage;
identify, from the data storage, a portion of the plurality of records and a corresponding portion of the plurality of datasets using the authentication token;
generate data using the portion of the plurality of records and the corresponding portion of the plurality of datasets;
generate analytics on the portion of the plurality of records and the corresponding portion of the plurality of datasets, the analytics indicating an effectiveness of the digital therapeutic on at least one of the plurality of users or adherence of at least one of the plurality of users with taking a medication to address a disease or disorder;
encrypt the analytics generated from the portion of the plurality of records and the corresponding portion of the plurality of datasets to generate encrypted data; and
transmit the encrypted data to cause the remote computing device to present a notification,
wherein transmitting the encrypted data further comprises transmitting the analytics on the portion of the plurality of records and the corresponding portion of the plurality of datasets.
10 . The system of claim 9 , wherein the server is further configured to decrypt a dataset identifying the series of events associated with the user interacting with the digital therapeutic from the user device.
11 . The system of claim 9 , wherein the server is further configured to:
receive the request including the authentication token identifying a user of the plurality of users, and select the portion of the plurality of records and the corresponding portion of the plurality of datasets associated with the user identified by the authentication token.
12 . The system of claim 9 , wherein the server is further configured to modify PII corresponding to the series of events for at least one of the plurality of datasets generated by at least one of the plurality of user devices.
13 . The system of claim 9 , wherein the server is further configured to generate analytics as time series data associated with one of the plurality of users.
14 . The system of claim 9 , wherein the server is further configured to store at least one of the plurality of datasets comprising at least one of (i) lesson completion, (ii) lesson progress, (iii) interaction with an application, or (iv) user progress.
15 . The system of claim 9 , wherein the server is further configured to transmit the encrypted data to cause the remote computing device to present the notification related to at least one of the series of events in the portion of the plurality of datasets.
16 . The system of claim 9 , wherein the digital therapeutic for the plurality of users further comprises therapy content including information related to a medication to address a condition of the plurality of users.