Authorization system that permits granular identification of, access to, and recruitment of individualized genomic data
Inventors
Powers, Rani K. • Glode, Christopher M. • Trunck, Ryan P. • Lescallett, Jennifer L.
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-11107556-B2
Publication Date
2021-08-31
Expiration Date
Abstract
Systems and methods are provided for controlling dissemination of genomic data. One embodiment is a system that stores genomic data. The genomic data for each individual lists genetic variants determined to exist within that individual. The system receives an access request for a segment of genomic data for an individual, analyzes an authentication token within the request, authenticates the request as belonging to an account for a user based on the authentication token, and reviews authorization directives for the individual that indicate how predefined portions of genomic data are shared. The system also transmits the segment of genomic data in response to determining that the authorization directives permit the account to access the segment of genomic data, and prevents transmission of the segment of genomic data in response to determining that the authorization directives do not permit the account to access the segment of genomic data.
Core Innovation
A genomic sharing system stores genomic data for multiple individuals as a listing of genetic variants determined to exist within each individual on an individual-by-individual basis. A genomic authorization server receives, via a computer network, an access request directed to a segment of genomic data selected from Single Nucleotide Polymorphisms (SNPs), genes, and genetic panels.
The server includes a controller that cryptographically compares an authentication token within the request with an authentication key to determine whether the request is authenticated as belonging to an account for a specific user. When the request is authenticated, the controller determines whether the account is authorized to access the segment of genomic data for each individual.
This authorization is determined by accessing a first gene code comprising genetic variants determined to exist within the specific user, and accessing a second gene code comprising a set of genetic variants determined to exist within the individual of the multiple individuals. The controller determines a degree of familial relationship by comparing the first gene code to the second gene code, and permits access only when authorization directives particularized for the individual permit the specific user to access by comparing the determined degree with a required degree of familial relationship indicated by the authorization directives.
For each individual, the controller transmits the requested segment of genomic data via the computer network if the authorization directives authorize the account to access, and prevents transmission if the authorization directives do not authorize the account. Access control is performed per individual and per requested genomic segment using cryptographic token/key comparison and individualized authorization directives tied to a required degree of familial relationship.
Claims Coverage
The independent claims cover three implementations: a genomic sharing system, a corresponding method, and a non-transitory computer readable medium. Across the independent claims, there are four core inventive features.
Per-individual genomic data storage and segment selection
A genomic data server stores genomic data for multiple individuals as a listing of genetic variants determined to exist within the multiple individuals on an individual-by-individual basis, and an access request is directed to a segment of genomic data selected from Single Nucleotide Polymorphisms (SNPs), genes, and genetic panels.
Cryptographic token-key authentication of access requests
A controller cryptographically compares an authentication token within the request with an authentication key to determine whether the request is authenticated as belonging to an account for a specific user.
Familial-relationship authorization using gene codes and required degree
For each individual, the controller determines whether the account is authorized to access the segment of genomic data by accessing a first gene code comprising genetic variants determined to exist within the specific user, accessing a second gene code comprising genetic variants determined to exist within the individual, determining a degree of familial relationship by comparing the first gene code to the second gene code, and determining whether authorization directives particularized for the individual permit the specific user to access the segment by comparing the determined degree of familial relationship with a required degree of familial relationship indicated by the authorization directives.
Conditional transmission or prevention based on individualized authorization directives
For each individual, the controller transmits the segment of genomic data via the computer network if the authorization directives authorize the account to access the segment, and prevents transmission if the authorization directives do not authorize the account.
The independent claims consistently require cryptographic authentication of an access request and authorization per individual determined by gene code comparison to compute a degree of familial relationship, evaluated against an individualized required degree of familial relationship in authorization directives, with transmission permitted only when authorized and prevented otherwise.
Stated Advantages
Documented Applications
No documented applications found
Interested in licensing this patent?