Systems and methods for secure data sharing
Inventors
Boffa, Daniel • Fischer, Michael • Hochman, Jonathan
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-12380244-B2
Publication Date
2025-08-05
Expiration Date
Abstract
One aspect of the invention provides a method for secure sharing of data. The method includes: receiving, from a first computing device and by a security node for the first computing device, a hashed identifier for a data source; generating, in response to the receiving, a blinding function value dependent on the hashed identifier; and transmitting, to the first computing device, the blinding function value for storage of a set of data and linking the set of data to the data source.
Core Innovation
The invention provides a privacy-preserving secure medical data sharing scheme that uses cryptographic “blinding-completion pairs.” A healthcare provider hashes a data-source identifier and a first security node applies a blinding function to generate a first blinded value dependent on the hashed identifier. The blinded identifier is used to link provider data while preventing recovery of the original identifier.
The method receives the first blinded value at a second computing device together with a set of data of the data source. The second computing device transmits the first blinded value to a security node of the second computing device, which applies a completion function to generate a second blinded value. The second blinded value is stored with the set of data at the second computing device to link the set of data to the data source.
The system introduces trusted security nodes, optionally using HSMs, and supports rotating cryptographic parameters. It describes identifier layers including UID, LPID, and APID, enabling record linking across providers at a destination database without revealing PII, and it includes workflow and threat considerations including possible de-anonymization risk.
Claims Coverage
The document includes three independent claims for methods and a system that center on generating and transforming blinded values with a blinding function and a completion function so that linked data can be stored while maintaining privacy. Across the independent claims, the inventive features relate to hashed identifiers, blinding-completion transformation by separate security nodes, transmitting blinded values between computing devices and security nodes, and storing a second blinded value that links stored data to the data source.
Secure sharing using hashed identifier, blinding function, and completion function
providing, to a security node for a first computing device, a hashed identifier for a data source; applying a blinding function to the hashed identifier to generate a first blinded value; receiving, at a second computing device, the first blinded value and a set of data of the data source; transmitting the first blinded value from the second computing device to a security node of the second computing device; applying a completion function to generate a second blinded value for the set of data; and storing the set of data and the second blinded value at the second computing device, the second blinded value linking the set of data to the data source.
System with first and second computing devices and separate security nodes applying blinding and completion functions
a first computing device configured to transmit a hashed identifier for a data source, receive a first blinded value dependent on the hashed identifier, and transmit the first blinded value and a set of data for storage linking the set of data to the data source; a security node for the first computing device configured to receive the hashed identifier, generate the first blinded value, and transmit the first blinded value to the first computing device; a second computing device configured to receive from the first computing device the first blinded value and the set of data, transmit the first blinded value, receive a second blinded value in response, and store the set of data and the second blinded value; and a security node for the second computing device configured to receive the first blinded value from the second computing device, apply a completion function to generate the second blinded value, and transmit the second blinded value to the second computing device.
Secure sharing method where second security node applies completion function and second blinded value is stored for linking
receiving, from a first computing device and at a second computing device, a first blinded value for a set of data of a data source; transmitting the first blinded value from the second computing device to a security node for the second computing device; applying a completion function by the security node to the first blinded value to generate a second blinded value; and transmitting the second blinded value to the second computing device for storage of the set of data and linking the set of data to the data source.
Across the independent claims, the common inventive thrust is the creation of linked storage using a hashed identifier and a two-stage blinded transformation, where a first security node generates a first blinded value and a second security node applies a completion function to produce a second blinded value that is stored to link the set of data to the data source.
Stated Advantages
Enables record linking across providers at a destination database without revealing PII.
Prevents recovery of the original identifier while enabling linking using the blinded identifier.
Documented Applications
Providing secure medical data sharing with record linking across providers at a destination database using anonymous data identifiers (APID) and identifier layers (UID, LPID, APID).
Providing anonymous data to researchers using stored sets of data associated with second blinded values.
Interested in licensing this patent?