Access control for encrypted data in machine-readable identifiers

1. A computer-implemented method, comprising:

executing, by a client device, a client application that presents an ingestion process comprising at least one user interface; obtaining, by the at least one client device, medical data through the ingestion process presented by the at least one user interface;

obtaining, by the at least one client device, a cryptographic key made only available to the client device and a particular reader device to encrypt the medical data based on an identifier associated with the particular reader device for which the medical data is intended;

encrypting, by the at least one client device, the payload portion with the cryptographic key by using an initialization vector (IV) or a starting variable (SV) associated with an Advanced Encryption Standard (AES) encryption algorithm;

compressing, by the at least one client device, the medical data;

converting, by the at least one client device, the compressed medical data as received into a numeric string, wherein the numeric string as converted comprises a payload portion and a mode indicator portion, the mode indicator portion being a subset of the numeric string and the mode indicator portion comprising a multi-bit numeric string, wherein the mode indicator portion denotes a mode used for bits of the numeric string; and

generating, by the at least one client device, a two-dimensional machine-readable identifier using the numeric string such that, when the two-dimensional machine-readable identifier is read by the particular reader device, the numeric string is provided to the particular reader device.

2. The computer-implemented method of claim 1 , wherein the cryptographic key is an asymmetric cryptographic key.

3. The computer-implemented method of claim 1 , further comprising:

reading, by at least one particular reader device, the two-dimensional machine-readable identifier and accessing, by the at least one particular reader device, the numeric string based on an analysis of the two-dimensional machine-readable identifier;

decompressing, by the at least one reader particular device, at least a portion of the numeric string comprising the compressed medical data; and

importing, by the at least one particular reader device, the decompressed medical data into an electronic health record (EHR).

4. The computer-implemented method of claim 3 , further comprising:

encrypting, by the at least one client device, the payload portion using a first cryptographic key; and

decrypting, by the at least one particular reader device, the payload portion using a second cryptographic key.

5. The computer-implemented method of claim 4 , wherein the first cryptographic key and the second cryptographic key make a symmetric cryptographic key pair.

6. The computer-implemented method of claim 3 , wherein the particular reader device is one of a desktop computer, a laptop computer, a tablet, a smartphone, or a barcode scanner.

7. The computer-implemented method of claim 3 , further comprising storing the decompressed medical data or the electronic health record (EHR) in a secure database.

8. The computer-implemented method of claim 1 , wherein the medical data is medication data comprising a medication name, a dosage, and a frequency of administration for the medication.

9. The computer-implemented method of claim 1 , wherein the client device is one of a desktop computer, a laptop computer, a tablet, or a smartphone.

10. A system, comprising:

a client device comprising at least one hardware processor; and

program instructions stored in memory of the client device and executable in the client device that, when executed, direct the client device to:

executing, by a client device, a client application that presents an ingestion process comprising at least one user interface; obtaining, by the at least one client device, medical data through the ingestion process presented by the at least one user interface;

obtaining, by the at least one client device, a cryptographic key made only available to the client device and a particular reader device to encrypt the medical data based on an identifier associated with the particular reader device for which the medical data is intended;

encrypting, by the at least one client device, the payload portion with the cryptographic key by using an initialization vector (IV) or a starting variable (SV) associated with an Advanced Encryption Standard (AES) encryption algorithm;

compressing, by the at least one client device, the medical data;

converting, by the at least one client device, the compressed medical data as received into a numeric string, wherein the numeric string as converted comprises a payload portion and a mode indicator portion, the mode indicator portion being a subset of the numeric string and the mode indicator portion comprising a multi-bit numeric string, wherein the mode indicator portion denotes a mode used for bits of the numeric string; and

generating, by the at least one client device, a two-dimensional machine-readable identifier using the numeric string such that, when the two-dimensional machine-readable identifier is read by the particular reader device, the numeric string is provided to the particular reader device.

11. The system of claim 10 , wherein the cryptographic key is an asymmetric cryptographic key.

12. The system of claim 10 , further comprising:

the particular reader device comprising at least one hardware processor; and

program instructions stored in memory of the particular reader device and executable in the particular reader device that, when executed, direct the particular reader device to:

read the two-dimensional machine-readable identifier and access the numeric string based on an analysis of the two-dimensional machine-readable identifier;

decompress at least a portion of the numeric string comprising the compressed medical data; and

import the decompressed medical data into an electronic health record (EHR).

13. The system of claim 12 , wherein the programming instructions of the client device further direct the client device to encrypt the payload portion using a first cryptographic key, and wherein the programming instructions of the particular reader device further direct the particular reader device to decrypt the payload portion using a second cryptographic key.

14. The system of claim 13 , wherein the first cryptographic key and the second cryptographic key make a symmetric cryptographic key pair.

15. The system of claim 12 , wherein the particular reader device is one of a desktop computer, a laptop computer, a tablet, a smartphone, or a barcode scanner.

16. The system of claim 12 , further comprising storing the decompressed medical data or the electronic health record (EHR) in a secure database.

17. The system of claim 10 , wherein the medical data is medication data comprising a medication name, a dosage, and a frequency of administration for the medication.

18. The system of claim 10 , wherein the client device is one of a desktop computer, a laptop computer, a tablet, or a smartphone.