Secure database management system for confidential records using separately encrypted identifier and access request
Patent 6148342 Issued on November 14, 2000. Estimated Expiration Date: January 13, 2019. Estimated Expiration Date is calculated based on simple USPTO term provisions. It does not account for terminal disclaimers, term adjustments, failure to pay maintenance fees, or other factors which might affect the term of a patent.
A system for managing sensitive data is described. The system prevents a system administrator from accessing sensitive data by storing data and identifier information on different computer systems. Each query is encrypted using two codes, the first code readable only by an identifier database and a second code readable only by a data access database. By routing the data path from a source terminal to the identifier database which substitutes an internal ID, then to the data access database and back to the source terminal, data security is significantly improved.
Other References
Halamka, M.D., et al., A WWW Implementation of National Recommendations for Protecting Electronic Health Information, JAMIA, 1997; 4:458-464
Biskup, et al., Crytographic Protection of Health Information: Cost and Benefit, International Journal of Bio-Medical Computing 43 (1966) 61-67
Kilsdonk, et al., The Nucleus Integrated Electronic Patient Dossier Breakthrough & Concepts of an Open Solution, Int'l. Journal of Bio-Medical Computing 42 (1996) 79-89
R.L. Rivest, Chaffing & Winnowing: Confidentiality Without Encryption, MIT Lab for Computer Science Mar. 18, 1998, (rev. Apr. 24, 1998)
J.J. Cimino, M.D., Beyond the Superhighway: Exploiting the Internet with Medical Informatics, 1996 AMIA Annual Fall Symposium, Oct. 26-30, 1996
K. Pommerening, Pseudonyms for Cancer Registries, Meth. Inform. Med. 1996; 35: 112-21
C.Quantin, et al., Irreversible Encryption Method by Generation of Polynomials, Med. Inform. (1996), vol. 21, No. 2, 113-121
The Seismed Consortium, Data Security for Health Care, vol. II: Technical Guidelines, Studies in Health Technology and Informatics, 1996
Swamy, Database Security: An Introduction, Mar. 199