Granted Patent B2

US 12,499,273 · App. 18/467,118 · Granted Dec 16, 2025

Inventors: Milan Wutte (St. Kanzian am Klopeiner See, AT); Thomas Gossler (Erlangen, DE); Christian Spitzner (Forchheim, DE); Ute Rosenbaum (Kempten, DE); Felix Kupsch (Spardorf, DE); Markus Metz (Aurachtal, DE); Anthony Jay (Erlangen, DE); Marco Krenkel (Hallerndorf ot Schlammersdorf, DE)

Assignee: SIEMENS HEALTHINEERS AG

G06F21/6254G16H10/60H04L63/20

Abstract

Claims (56)

1 . A method for transmission of medical datasets, comprising:

providing a medical dataset from an internal data memory, the medical dataset including data elements, each data element of the data elements having a data type;

providing a security profile, the security profile including rules for a degree of a data anonymization of data elements of a respective data type;

creating an anonymized medical dataset based on the medical dataset and the security profile, the data elements of the medical dataset are each anonymized based on the respective data type and the security profile, the anonymized medical dataset includes the anonymized data elements;

providing reference data by the internal data memory, the reference data describing a relationship between at least two medical datasets;

providing a reference security profile from a plurality of reference security profiles;

creating transmission reference data based on the provided reference data and the provided reference security profile, the reference data is anonymized for the transmission reference data if a highest reference security profile is provided as the provided reference security profile and the reference data remains unanonymized in the transmission reference data if the provided reference security profile deviates from the highest reference security profile; and

transmitting the anonymized medical dataset and the transmission reference data to an external data memory.

2 . The method of claim 1 , wherein data elements of the medical dataset with a data type not regulated by the security profile are at least one of not assigned to the anonymized medical dataset or not included in the anonymized medical dataset.

3 . The method of claim 2 , further comprising:

receiving a request for transmission of the medical dataset from the internal data memory to the external data memory; and

selecting the medical dataset belonging to the request, wherein the providing the medical dataset provides the selected medical dataset.

4 . The method of claim 3 , further comprising:

monitoring, at an internal data memory side, data transmission between the internal data memory and the external data memory, wherein a transmission of at least one of non-anonymized medical datasets or of medical datasets not requested is suppressed.

5 . The method of claim 4 , wherein

the security profile forms a standard security profile,

the standard security profile includes a rule of an anonymization of direct identifiers in data elements, and

the creating includes anonymizing the anonymized medical dataset the data elements with data types belonging to the standard security profile by anonymization of direct identifiers.

6 . The method of claim 4 , wherein

the security profile forms a medium security profile,

the medium security profile includes a rule of an anonymization of indirect identifiers in the data elements, and

the creating includes anonymizing the anonymized medical dataset the data elements with data types belonging to the medium security profile by anonymization of indirect identifiers.

7 . The method of claim 4 , wherein

the security profile comprises a high security profile,

the high security profile includes a rule of an anonymization of statistical identifiers in data elements, and

the creating includes anonymizing the anonymized medical dataset the data elements with data types belonging to the high security profile by anonymization of statistical identifiers.

8 . The method of claim 4 , wherein the providing the medical dataset provides a Fast Healthcare Interoperability Resources (FHIR) file as the medical dataset.

9 . The method of claim 1 , further comprising:

receiving a request for transmission of the medical dataset from the internal data memory to the external data memory; and

selecting the medical dataset belonging to the request, wherein the providing the medical dataset provides the selected medical dataset.

10 . The method of claim 1 , further comprising:

monitoring, at an internal data memory side, data transmission between the internal data memory and the external data memory, wherein a transmission of at least one of non-anonymized medical datasets or of medical datasets not requested is suppressed.

11 . The method of claim 1 , wherein

the security profile forms a standard security profile,

the standard security profile includes a rule of an anonymization of direct identifiers in data elements, and

the creating includes anonymizing the anonymized medical dataset the data elements with data types belonging to the standard security profile by anonymization of direct identifiers.

12 . The method of claim 1 , wherein

the security profile forms a medium security profile,

the medium security profile includes a rule of an anonymization of indirect identifiers in the data elements, and

the creating includes anonymizing the anonymized medical dataset the data elements with data types belonging to the medium security profile by anonymization of indirect identifiers.

13 . The method of claim 1 , wherein

the security profile comprises a high security profile,

the high security profile includes a rule of an anonymization of statistical identifiers in data elements, and

the creating includes anonymizing the anonymized medical dataset the data elements with data types belonging to the high security profile by anonymization of statistical identifiers.

14 . The method of claim 1 , wherein the providing the medical dataset provides an Fast Healthcare Interoperability Resources (FHIR) file as the medical dataset.

15 . An apparatus for transmission of medical datasets, comprising:

an internal data memory; and

an external data memory, wherein the internal data memory is configured to,

provide a medical dataset and a security profile,

create an anonymized medical dataset based on the security profile and the provided medical dataset, the anonymized medical dataset is created by anonymizing data elements of the medical dataset based on an associated data type for each data element and the security profile,

provide reference data by the internal data memory, the reference data describing a relationship between at least two medical datasets,

provide a reference security profile from a plurality of reference security profiles,

create transmission reference data based on the reference data and the reference security profile, the reference data is anonymized for the transmission reference data if a highest security profile is provided as the reference security profile and the reference data remains unanonymized in the transmission reference data if the reference security profile deviates from the highest security profile, and

transmit the anonymized medical dataset and the transmission reference data to the external data memory.

16 . A non-transitory computer-readable memory medium including instructions, when executed by a computer of an apparatus for transmission of medical datasets, cause the apparatus to perform the method of claim 1 .

17 . The non-transitory computer-readable memory medium of claim 16 , wherein data elements of the medical dataset with a data type not regulated by the security profile are at least one of not assigned to the anonymized medical dataset or not included in the anonymized medical dataset.

Assignments (9)

Priority Claims (1)

Continuity (1)

References Cited (14)