Granted Patent B2

US 12,750,228 · App. 18/816,997 · Granted Sep 29, 2026

Inventors: Amer Haider (Saratoga, CA); Ali Ahmed (Saratoga, CA)

Assignee: Masimo Corporation

H04L9/3221G06F16/951G06F21/14G06F21/6218G06F21/6227H04L9/0825H04L9/14H04L63/0428H04L63/06H04L67/10H04L2463/062

Abstract

Claims (23)

1 . A system comprising one or more hardware processors configured to:

receive encrypted patient data over a network from a remote computing system, wherein said encrypted patient data is encrypted with a first key, wherein said remote computing system does not have a decryption key to decrypt the encrypted patient data; and

decrypt the encrypted patient data with a second key that is different than the first key at a computing device associated with a caregiver;

wherein the second key is a private key, and wherein the private key is obtained by decrypting an encrypted private key (EPK) that was stored as part of a key hierarchy structure (KHS).

2 . The system of claim 1 , wherein the first key is a public key.

3 . The system of claim 1 , wherein the first and the second keys are generated at a time of registration of the patient as a new user.

4 . The system of claim 1 , wherein another KHS is created based on a request to generate shared data.

5 . The system of claim 1 , wherein names of entries of the KHS are obfuscated.

6 . A system for communicating patient data, the system comprising a computing system including a memory configured to store data associated with a plurality of patients for a healthcare provider, wherein the computing system is configured to:

store encrypted patient data associated with a patient in the memory of the computing system without the computing system having access to any decryption keys to decrypt the encrypted patient data, wherein the encrypted patient data is encrypted with a first key; and

transmit the encrypted patient data based on a request for stored patient data, wherein the encrypted patient data is decrypted with a second key that is different than the first key and wherein the second key is a private key.

7 . The system of claim 6 , wherein the first key is a public key.

8 . The system of claim 6 , wherein the first and the second keys are generated at a time of registration of the patient as a new user.

9 . The system of claim 6 , wherein the private key is obtained by decrypting an encrypted private key (EPK) that was stored as part of a key hierarchy structure (KHS).

10 . The system of claim 9 , wherein names of entries of the KHS are obfuscated.

11 . A method for communicating patient data, the method comprising:

receiving encrypted patient data over a network from a remote computing system, wherein said encrypted patient data is encrypted with a first key, wherein said remote computing system does not have a decryption key to decrypt the encrypted patient data; and

decrypting the encrypted patient data with a second key that is different than the first key at a computing device associated with a caregiver;

wherein the second key is a private key, and wherein the private key is obtained by decrypting an encrypted private key (EPK) that was stored as part of a key hierarchy structure (KHS).

12 . The method of claim 11 , wherein the first key is a public key.

13 . The method of claim 11 , wherein the first and the second keys are generated at a time of registration of the patient as a new user.

14 . The method of claim 11 , wherein the private key is obtained by decrypting an encrypted private key (EPK) that was stored as part of a key hierarchy structure (KHS).

15 . The method of claim 14 , wherein names of entries of the KHS are obfuscated.

Assignments (1)

Continuity (6)

References Cited (400)