Access control for encrypted data in machine-readable identifiers

1. A computer-implemented method, comprising:

executing, by at least one client device comprising at least one hardware processor, a client application that presents an ingestion process comprising at least one user interface;

collecting, by the at least one client device, immunization data through the ingestion process and the at least one user interface, wherein the immunization data comprises a type of immunization given to an individual and a date that the immunization was provided to the individual;

compressing, by the at least one client device, the immunization data;

converting, by the at least one client device, the compressed immunization data as received into a numeric string, wherein the numeric string as converted comprises a payload portion and a mode indicator portion, the mode indicator portion being a subset of the numeric string and the mode indicator portion comprising a multi-bit numeric string, wherein the mode indicator portion denotes a mode used for bits of the numeric string;

generating, by the at least one client device, a two-dimensional machine-readable identifier using the numeric string such that, when the two-dimensional machine-readable identifier is read by a reader device, the numeric string is provided to the reader device;

reading, by at least one reader device comprising at least one hardware processor, the two-dimensional machine-readable identifier and accessing, by the at least one reader device, the numeric string based on an analysis of the two-dimensional machine-readable identifier;

decompressing, by at least one reader device comprising at least one hardware processor, at least a portion of the numeric string comprising the compressed immunization data;

converting, by at least one reader device comprising at least one hardware processor, the decompressed immunization data into a predetermined format; and

importing, by the at least one reader device, the decompressed immunization data in the predetermined format into an electronic health record (EHR).

2. The computer-implemented method of claim 1 , further comprising encrypting the payload portion using a cryptographic key.

3. The computer-implemented method of claim 2 , wherein the cryptographic key is a symmetric cryptographic key.

4. The computer-implemented method of claim 2 , wherein the cryptographic key is an asymmetric cryptographic key.

5. The computer-implemented method of claim 2 , further comprising decrypting the payload portion using a cryptographic key.

6. The computer-implemented method of claim 1 , wherein the mode indicator portion denotes the mode used for subsequent ones of the bits of the numeric string.

7. The computer-implemented method of claim 1 , wherein the reader device is one of a desktop computer, a laptop computer, a smartphone, or a barcode scanner.

8. The computer-implemented method of claim 1 , wherein the client device is one of a desktop computer, a laptop computer, a smartphone, or a barcode scanner.

9. The computer-implemented method of claim 1 , further comprising storing the decompressed immunization data or the electronic health record (EHR) in a secure database.

10. A system, comprising:

a client device comprising at least one hardware processor;

program instructions stored in memory of the client device and executable in the client device that, when executed, direct the client device to:

execute a client application that presents an ingestion process comprising at least one user interface;

collect immunization data through the ingestion process and the at least one user interface, wherein the immunization data comprises a type of immunization given to an individual and a date that the immunization was provided to the individual;

compress the immunization data;

convert the compressed immunization data as received into a numeric string, wherein the numeric string as converted comprises a payload portion and a mode indicator portion, the mode indicator portion being a subset of the numeric string and the mode indicator portion comprising a multi-bit numeric string, wherein the mode indicator portion denotes a mode used for bits of the numeric string;

generate a two-dimensional machine-readable identifier using the numeric string such that, when the two-dimensional machine-readable identifier is read by a reader device, the numeric string is provided to the reader device;

a reader device comprising at least one hardware processor;

program instructions stored in memory of the reader device and executable in the reader device that, when executed, direct the reader device to:

read the two-dimensional machine-readable identifier and access the numeric string based on an analysis of the two-dimensional machine-readable identifier;

decompress at least a portion of the numeric string comprising the compressed immunization data;

convert the decompressed immunization data into a predetermined format; and

import the decompressed immunization data in the predetermined format into an electronic health record (EHR).

11. The system of claim 10 , wherein the client device is further directed to encrypt the payload portion using a cryptographic key.

12. The system of claim 11 , wherein the cryptographic key is a symmetric cryptographic key.

13. The system of claim 11 , wherein the cryptographic key is an asymmetric cryptographic key.

14. The system of claim 11 , wherein the reader device is further directed to decrypt the payload portion using a cryptographic key.

15. The system of claim 10 , wherein the mode indicator portion denotes the mode used for subsequent ones of the bits of the numeric string.

16. The system of claim 10 , wherein the reader device is one of a desktop computer, a laptop computer, a smartphone, or a barcode scanner.

17. The system of claim 10 , wherein the client device is one of a desktop computer, a laptop computer, a smartphone, or a barcode scanner.

18. The system of claim 10 , further comprising storing the decompressed immunization data or the electronic health record (EHR) in a secure database.