De-identifying medical history information for medical underwriting
A computer-implemented method includes producing information that characterizes a group of individuals from a set of private data representing characteristics of the individuals. The identity of the individuals is unattainable from the produced information. The method also includes providing the produced information to report the characteristics of the group.
1. A user computing device-implemented method comprising:
producing, by a processor of the user computing device, an encrypted request message for healthcare information that characterizes a group composed of multiple individuals, the encrypted request message including a unique token produced by the user device for each individual included in the group;
sending the encrypted request message to a server to produce the healthcare information, the server is configured to compare the unique request tokens to unique tokens associated with healthcare data to find matching tokens, the unique tokens associated with healthcare data are absent identities of individuals, the healthcare information being produced based on a minimum number of matched tokens and the identity of the individuals being unattainable from the produced healthcare information; and
receiving, at the user computing device, the produced healthcare information to report the characteristics of the group absent authorization from the individuals in the group.
2. The user computing device implemented method of claim 1 , wherein the provided healthcare information is in conformity with the Health Insurance Portability and Accountability Act (HIPAA).
3. The user computing device implemented method of claim 1 , in which to produce the requested healthcare information, the server encrypts respective data that identifies each individual.
4. The user computing device implemented method of claim 1 , in which the unique tokens associated with healthcare data and the unique request tokens are similarly encrypted.
5. The user computing device implemented method of claim 1 , in which the healthcare data includes data that represents medical related information associated with the individuals of the group.
6. The user computing device implemented method of claim 1 , wherein the server removes the identities of the individuals from the healthcare data.
7. A system comprising:
a user computing device that produces an encrypted request message for healthcare information that characterizes a group composed of multiple individuals, the encrypted request message including a unique token produced by the user device for each individual included in the group, wherein the user computing device is configured to send the encrypted request message to a server to produce the healthcare information, the server is configured to compare the unique request tokens to unique tokens associated with healthcare data to find matching tokens, the unique tokens associated with healthcare data are absent identities of individuals, the healthcare information being produced based on a minimum number of matched tokens and the identity of the individuals being unattainable from the produced healthcare information, wherein the user computing device is further configured to receive the produced healthcare information to report the characteristics of the group absent authorization from the individuals in the group.
8. The system of claim 7 , wherein the provided healthcare information is in conformity with the Health Insurance Portability and Accountability Act (HIPAA).
9. The system of claim 7 , in which the healthcare data that identifies each individual is encrypted.
10. The system of claim 7 , in which the unique tokens associated with the healthcare data and the unique request tokens are similarly encrypted.
11. The system of claim 7 , in which the server provides the requested healthcare information if the group includes at least minimum number of individuals.
12. The system of claim 7 , in which the healthcare data includes data that represents medical related information associated with the individuals of the group.
13. The system of claim 7 , wherein the server removes the identities of the individuals from the healthcare data.
14. One or more computer readable storage devices storing instructions that are executable by one or more processors, and upon such execution cause the one or more processors to perform operations comprising:
producing, at a user computing device, an encrypted request message for healthcare information that characterizes a group composed of multiple individuals, the encrypted request message including a unique token produced by the user device for each individual included in the group;
sending the encrypted request message to a server to produce the healthcare information, the server is configured to compare the unique request tokens to unique tokens associated with healthcare data to find matching tokens, the unique tokens associated with healthcare data are absent identities of individuals, the healthcare information being produced based on a minimum number of matched tokens and the identity of the individuals being unattainable from the produced healthcare information; and
receiving, at the user computing device, the produced healthcare information to report the characteristics of the group absent authorization from the individuals in the group.
15. The computer readable storage devices of claim 14 , wherein the provided healthcare information is in conformity with the Health Insurance Portability and Accountability Act (HIPAA).
16. The computer readable storage devices of claim 14 , in which to produce the requested healthcare information, the server encrypts respective healthcare data that identifies each individual.
17. The computer readable storage devices of claim 14 , in which the unique tokens associated with the healthcare data and the unique request tokens are similarly encrypted.
18. The computer readable storage devices of claim 14 , in which the healthcare data includes data that represents medical related information associated with the individuals of the group.
19. The computer readable storage devices of claim 14 , in which to produce the requested healthcare information, the server determines if the group includes at least a minimum number of individuals.
20. The computer readable storage devices of claim 14 , wherein the server removes the identities of the individuals from the healthcare data.