System and method of electronic health record permissioning and monetization
A system and method for electronic health record permissioning and monetization that can grant or deny access to patient data and pay one or more entities for access to the data is presented. The present disclosure provides for a system configured to provide a patient the ability to: ‘grant,’ ‘deny,’ ‘update,’ and ‘revoke’ the permission to read data for a specific entity, and specific properties within that entity, from their personal data records (e.g., an electronic health record, a Global Patient Record (GPR), pharmaceutical records, demographic records, financial records, criminal records, or other suitable personal information). A Data-Read-Permission request can be a ‘Property Collection’ (PC) containing specific properties that describe the read permission rights and an amount the Data-Client is willing to offer for the Data-Read-Permission rights. This PC can be written as part of a blockchain transaction (TX1), which can be issued by the Data-Client.
1 . An electronic health record data read system, comprising:
a blockchain configured to store a plurality of transactions and personal data;
a blockchain reader configured to read blocks from the blockchain;
a personal data records database having encrypted and unencrypted personal data; and
a decrypt server configured to receive a data request from a data client and verify read permission by querying the database to identify the personal data covered by a preexisting and valid read permission contract, wherein the decrypt server decrypts the encrypted personal data stored in the database, wherein the encrypted personal data is decrypted using the private key of a node where it was stored in the blockchain, wherein the decrypt server can receive a read request generated by the data client, wherein the personal data is loaded into the database if the blockchain transaction contains personal data, and wherein an authorization determination is performed by checking a digital signature provided with the read request.
2 . The system of claim 1 , wherein the read request is a message identifying personal data to be queried and returned.
3 . The system of claim 1 , wherein the decrypt server can transmit a read response to the data client.
4 . The system of claim 3 , wherein the read response is a message including the requested personal data.
5 . The system of claim 1 , wherein the blockchain reader processes each blockchain transaction within a block and determines if a blockchain transaction contains personal data.
6 . The system of claim 1 , wherein the personal data includes a plurality of electronic health records, Global Patient Records (GPR), pharmaceutical records, demographic records, financial records, or criminal records.
7 . The system of claim 1 , wherein the decrypt server determines if the data client is authorized to transmit the data request.
8 . A method of reading electronic health record data, comprising:
storing a plurality of transactions and patient data on a blockchain;
reading blocks from the blockchain via a blockchain reader;
storing encrypted and unencrypted personal data in a personal records database; and
receiving, via a decrypt server, a data request from a data client and verifying read permission by querying the database to identify the personal data covered by a preexisting and valid read permission contract, wherein the decrypt server decrypts the encrypted personal data stored in the database, wherein the encrypted personal data is decrypted using the private key of a node where it was stored in the blockchain, wherein the decrypt server can receive a read request generated by the data client, wherein the personal data is loaded into the database if the blockchain transaction contains personal data, and wherein an authorization determination is performed by checking a digital signature provided with the read request.
9 . The method of claim 8 , wherein the read request is a message identifying personal data to be queried and returned.
10 . The method of claim 8 , wherein the decrypt server can transmit a read response to the data client.
11 . The method of claim 10 , wherein the read response is a message including the requested personal data.
12 . The method of claim 8 , wherein the blockchain reader processes each blockchain transaction within a block and determines if a blockchain transaction contains personal data.
13 . The method of claim 8 , wherein the personal data includes a plurality of electronic health records, Global Patient Records (GPR), pharmaceutical records, demographic records, financial records, or criminal records.
14 . The method of claim 8 , wherein the decrypt server determines if the data client is authorized to transmit the data request.